last executing test programs: 5m23.638259798s ago: executing program 32 (id=1238): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readahead(r0, 0x4, 0x25) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff490db0a0950563789078000000000000000000001a000000000000000050b8687dc5a2b2007b39e2e7ea6a35f81508761d406e8d0243cdc35ac851221beb"], 0x0) 4m54.127770911s ago: executing program 2 (id=1806): bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xc, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x3234564e, 0x4, 0x81, 0x6, 0x5, 0x20000f9b, 0x0, 0x4, 0x0, 0x5}}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r2, 0x0, 0x0, 0x20048880, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r4, 0x1, 0xff1f, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r6, 0x1, 0xffffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x9}]}, 0x64}, 0x1, 0x620b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 4000\t'], 0x2a, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40103d0b, &(0x7f0000002000)={0x9, 0x9}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r9, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r10, 0x0, 0x102, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001009d2743af1ad9d86b629f4567", @ANYRES32=r7, @ANYBLOB="240404000300000034001280110001006272696467655f736c617665000000001c000580080022"], 0x54}, 0x1, 0x0, 0x0, 0x200444c1}, 0x2404c884) 4m54.014282106s ago: executing program 2 (id=1807): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) (async) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) (async) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000340)=@ccm_128={{0x303}, "8f53db9cff57dc2a", "2e504471a51eff51834f69cd7334bef4", 's7FG', "4bede1e94ff746d9"}, 0x28) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r8, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r8, &(0x7f0000000040)={0x20, 0x0, r9, {0x7, 0x0, 0x9, 0xf}}, 0x20) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (rerun: 32) inotify_init1(0x80000) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r5) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xc4}}, 0x20050894) 4m54.013692849s ago: executing program 2 (id=1808): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000400)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 4m53.819994604s ago: executing program 2 (id=1811): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000300000007030000f1feffff720a06fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba1"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) flock(r0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b00)={'wg0\x00'}) fstat(r0, &(0x7f0000000b40)) sendmsg$nl_xfrm(r0, &(0x7f0000000e80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000bc0)=@newspdinfo={0x4c, 0x24, 0x8, 0x70bd2c, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x4c}}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000009400589f12dcd7583cf6865a3db7006e6400000000"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="300000001a00011000000000000000008100800000000000000000001400fb687bbdd09f472f27252ce09b7f11010000000000000000000000ffff00000000228b5be6d0d344a25586bf2469c87865"], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6004, 0x1) 4m53.777155155s ago: executing program 2 (id=1812): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='gfs2meta\x00', 0xa08000, 0x0) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x4080) pread64(r0, &(0x7f0000000100)=""/142, 0x8e, 0x60) 4m53.694461597s ago: executing program 2 (id=1814): syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="a2aaaaaaaaaaaaaaaaaaaabb86dd6064f9ff00003c0020010000000000000000000000000002ff020000000000000000000000000001"], 0x0) 4m53.645348903s ago: executing program 33 (id=1814): syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="a2aaaaaaaaaaaaaaaaaaaabb86dd6064f9ff00003c0020010000000000000000000000000002ff020000000000000000000000000001"], 0x0) 4m15.007801256s ago: executing program 4 (id=2487): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x0, 'batadv_slave_1\x00', {0x4}, 0xbfa}) 4m15.007043355s ago: executing program 4 (id=2488): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x7, 0x8, 0x0, 0x0, {0x43, 0x3, 0x6, 0xffff, 0x1000, 0x80000000000000ff, 0x0, 0x0, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000080)={0x4ae, 0x1, 0x80000005, 0x3, 0x5, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r4, 0x8b32, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m14.869386665s ago: executing program 4 (id=2489): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x105081, 0x0) 4m14.868830624s ago: executing program 4 (id=2491): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x5, 0x80000001, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xe000, 0x0, 0x3, 0x8, 0x0, 0x0, 0x2, 0x0, 0x9, 0x6, 0x40}, {0xffff1000, 0x58000, 0xc, 0xff, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x4000, 0x1000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0xfe, 0x48, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0x9, 0xff, 0x8, 0x0, 0x4}, {0xdddd0000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x4000, 0x0, 0x0, 0x78, 0x5, 0x43, 0x2, 0x0, 0x0, 0xff, 0x5}, {0xeeef0000, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000}, 0xfdfcfffb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r3, 0x4) listen(r3, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 4m14.452124247s ago: executing program 4 (id=2496): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x100000000000000, 0x2) 4m13.473100074s ago: executing program 4 (id=2500): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344], 0xfce) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r0, &(0x7f0000002200)=ANY=[], 0xfffffcd9) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) write(0xffffffffffffffff, &(0x7f0000000140)="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", 0x148) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x4000, 0x0, 0x9, 0x5}, {0x7, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20044084) sendmsg$nl_route_sched(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x60, 0x24, 0xd0f, 0x74bd26, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x53e7e5a6a3739329}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x34, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x8}, @TCA_PIE_ALPHA={0x8, 0x4, 0x13}, @TCA_PIE_TARGET={0x8, 0x1, 0x5}, @TCA_PIE_BETA={0x8, 0x5, 0x19}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x80000000}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80015}, 0xc004) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)=0x9) mremap(&(0x7f0000998000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) 4m13.437082388s ago: executing program 34 (id=2500): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344], 0xfce) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r0, &(0x7f0000002200)=ANY=[], 0xfffffcd9) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) write(0xffffffffffffffff, &(0x7f0000000140)="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", 0x148) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x4000, 0x0, 0x9, 0x5}, {0x7, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20044084) sendmsg$nl_route_sched(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x60, 0x24, 0xd0f, 0x74bd26, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x53e7e5a6a3739329}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x34, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x8}, @TCA_PIE_ALPHA={0x8, 0x4, 0x13}, @TCA_PIE_TARGET={0x8, 0x1, 0x5}, @TCA_PIE_BETA={0x8, 0x5, 0x19}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x80000000}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80015}, 0xc004) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)=0x9) mremap(&(0x7f0000998000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) 3m9.101440611s ago: executing program 0 (id=3480): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt(r0, 0x9, 0x6, &(0x7f0000000000)="a27f3825576a596959ea11604691ce598581cfe4b1805e8d6f05d9762b8de012614ec54cfffdd1385ac5f2aec16a9489568180a0b919406cfe856c7a5f22a7c162ec1ff9c797d620a19a42dcd8f819b2a552ba0006ea2fd0c472458899e33ed92e6bad6656c678134f6b147f09d069859e4658f7ad0aca964aac19322f18483691749d34b75bf69b8c9fa7", 0x8b) (async) setsockopt(r0, 0x9, 0x6, &(0x7f0000000000)="a27f3825576a596959ea11604691ce598581cfe4b1805e8d6f05d9762b8de012614ec54cfffdd1385ac5f2aec16a9489568180a0b919406cfe856c7a5f22a7c162ec1ff9c797d620a19a42dcd8f819b2a552ba0006ea2fd0c472458899e33ed92e6bad6656c678134f6b147f09d069859e4658f7ad0aca964aac19322f18483691749d34b75bf69b8c9fa7", 0x8b) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x4, 0x80980) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100)={0x7, [0x4, 0x5, 0x7, 0x9, 0xe, 0x0, 0x8000]}, 0x12) r2 = dup3(r1, r1, 0x80000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/reserved_size', 0x401200, 0x189) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/reserved_size', 0x401200, 0x189) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x3d, 0x3, 0x8, 0x6, 0x17ae], 0x4, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) read$char_usb(r2, &(0x7f0000000340)=""/191, 0xbf) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) (async) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000400)=0x0) connect$nfc_raw(r2, &(0x7f0000000440)={0x27, r4, 0x0, 0x3}, 0x10) (async) connect$nfc_raw(r2, &(0x7f0000000440)={0x27, r4, 0x0, 0x3}, 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000480)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000480)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000500)=0x7, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000540)={0x0, 0x87}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000005c0)={r6, 0x101}, 0x8) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x90801, 0x0) r7 = accept4$phonet_pipe(r3, &(0x7f0000000680), &(0x7f00000006c0)=0x10, 0x800) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x4010, r7}, 0x18) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000740), 0x40101, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0x8, 0x0, &(0x7f0000000780)=[@enter_looper, @enter_looper], 0xd6, 0x0, &(0x7f00000007c0)="93199038c1273848f24b8bc8af4f0a923d555dfd866caa88a274841ac244bd3ed4d45864c90a043d17439ddd4db00bd9f5d20e9bd124fcd4ce3c69da9e3994769f54a19121b63cd46aa20edcca3f22a185d4b3b0ba68c1694c9232f275b2ad7a8cf4e61b2b5a68cfac0424bbef8c4ef0ccb86125ca50f45965a57410241d9281635f361bd47b420219ea28aebe8fb173ba955e11d8f2edb8de62f5458fd38c0bee3d39670a3effbe1f235fdd834c163b20166e2a9750fbf1d91866514293dd33e05045a22ca8687c78bea7901e90a476f144f794273e"}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0x8, 0x0, &(0x7f0000000780)=[@enter_looper, @enter_looper], 0xd6, 0x0, &(0x7f00000007c0)="93199038c1273848f24b8bc8af4f0a923d555dfd866caa88a274841ac244bd3ed4d45864c90a043d17439ddd4db00bd9f5d20e9bd124fcd4ce3c69da9e3994769f54a19121b63cd46aa20edcca3f22a185d4b3b0ba68c1694c9232f275b2ad7a8cf4e61b2b5a68cfac0424bbef8c4ef0ccb86125ca50f45965a57410241d9281635f361bd47b420219ea28aebe8fb173ba955e11d8f2edb8de62f5458fd38c0bee3d39670a3effbe1f235fdd834c163b20166e2a9750fbf1d91866514293dd33e05045a22ca8687c78bea7901e90a476f144f794273e"}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80984120, &(0x7f0000000900)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000a00)={0xfc}, 0x8) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000a00)={0xfc, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)={@map=r9, r3, 0x1f, 0x20, 0x0, @void, @void, @void, @value=r10}, 0x20) r11 = syz_open_dev$usbfs(&(0x7f0000000a40), 0xfffffffffffffff1, 0x3c1000) ioctl$USBDEVFS_SETINTERFACE(r11, 0x80085504, &(0x7f0000000a80)={0xdc5, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r8, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000ac0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000b80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000dc0)={r12}, 0x4) 3m9.038797867s ago: executing program 0 (id=3483): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1100000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000000000ffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) (async) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) creat(&(0x7f00000002c0)='./file3\x00', 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x4, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x7) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x2) (async) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file8\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x3, 0xfffffffffffffd51, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r3, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4000804) 3m8.972527746s ago: executing program 0 (id=3488): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x101, 0x20080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000008f40), 0x181a00, 0x0) ioctl$IOMMU_DESTROY$stdev(r4, 0x3b80, &(0x7f0000009000)={0x8}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075c, 0xfffffffb}}]}, 0xc4}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) (async) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3m8.684081209s ago: executing program 0 (id=3494): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)={'trans=virtio,', {[{@aname={'aname', 0x3d, ')@)'}}]}}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c19000/0x3000)=nil, 0x3000, 0x9) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)={'trans=virtio,', {[{@aname={'aname', 0x3d, ')@)'}}]}}) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) (async) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000c19000/0x3000)=nil, 0x3000, 0x9) (async) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') (async) 3m8.622780358s ago: executing program 0 (id=3496): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c0000180037801300030071722834"], 0x2c}}, 0xc0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @local, @void, {@arp={0x806, @generic={0x324, 0x7, 0x6, 0x6, 0x8, @remote, "ac681b21a86d", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, "4d3fbfa52393275728c4"}}}}, &(0x7f0000000140)={0x1, 0x3, [0x8e9, 0x286, 0x639, 0x748]}) 3m8.30552503s ago: executing program 0 (id=3506): r0 = socket$igmp6(0xa, 0x3, 0x2) clock_gettime(0x7, &(0x7f00000003c0)) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, 0x3ff, 0x4, 0x0, 0x0, 0x80, 0x40000101}) 3m8.207515373s ago: executing program 35 (id=3506): r0 = socket$igmp6(0xa, 0x3, 0x2) clock_gettime(0x7, &(0x7f00000003c0)) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, 0x3ff, 0x4, 0x0, 0x0, 0x80, 0x40000101}) 2m49.804001719s ago: executing program 5 (id=3849): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x121800, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r2], 0x1}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x9, 0xa5, 0x1200000000000000, 0xaa, 0x87, 0x1}, {0x4, 0xc554, 0xe, 0x2400000000000, 0x2, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 2m49.717667787s ago: executing program 5 (id=3853): fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) (async) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2, 0x1000020}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x82) (async) r1 = fsmount(r0, 0x0, 0x82) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000280)={0x0, r3}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) (async) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x12, 0xffffffffffffffff, 0x26a42000) fchdir(r1) (async) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) (async) fchown(r4, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(r4, &(0x7f00000000c0)='./file1\x00', 0x92c00, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_usb_connect(0x6, 0x106d, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/4205], &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x4, 0x4, 0xcd, 0x10, 0xc}, 0x10, &(0x7f0000000240)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x78, 0x5, 0xff, 0x9, 0x8}]}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="52035c5946f5c65a31d9c62c673b7769ea840b26257032f61e2fa740f59f0e9404b3ace08f954fde6e26199d8a94bbb513119263ce7eb980c0f3d1439e55c6"]}]}) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x1}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x17, 0x15, 0x1, 0x80}, 0x18}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2m49.116059365s ago: executing program 5 (id=3863): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x58) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) accept4(r0, &(0x7f0000000080)=@x25={0x9, @remote}, 0x0, 0x80800) 2m49.049274611s ago: executing program 5 (id=3864): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 64) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) (async, rerun: 32) r1 = socket$kcm(0x23, 0x2, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000940)) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 64) setxattr(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\xb0\x00\xaa\xe0k\x81=\xc3\xfc\x17j\xd4\x10\xe5\x99\xd7l\xc0SiZ\x92\xa8\xdb\xa2\xb4Q\xcer\xe0\xfd\xc8\x94D\xb1\x85G\xa6\xc9\x01\x00\x00\'=2\xc1\xc2\xef\x05\x05\x83]\'\xdd\x84\xfc\x97\xca\xff\x9d\v\x8e;\x19;\xfc|@\xb2\x92\fE\xb1c\x92\xf2\x83\x8f\xf6\xa7gY\xd2', 0x59, 0x0) (rerun: 64) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) open$dir(&(0x7f0000001100)='./file0\x00', 0x20000, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0) 2m48.93430178s ago: executing program 5 (id=3866): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) unshare(0x6020400) (async, rerun: 64) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time\x00') (rerun: 64) setns(r4, 0x80) (async) fsmount(r3, 0x0, 0x88) (async, rerun: 32) syz_clone(0x53065000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 2m48.595157345s ago: executing program 5 (id=3872): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0xc, 0x0, 0x0, 0x20000, 0x8000000000403}) 2m48.487180868s ago: executing program 36 (id=3872): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0xc, 0x0, 0x0, 0x20000, 0x8000000000403}) 2m39.777038145s ago: executing program 8 (id=4064): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='target '], 0x15) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xa}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000022c0)='\x00', 0x1}], 0x1}}], 0x1, 0x40800) sendmsg$inet6(r2, &(0x7f0000000940)={&(0x7f00000001c0)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000240)="de08", 0x2}], 0x1}, 0x4000) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f00000041c0)=""/4112, &(0x7f0000000d00)=0x1010) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000080)={0x3, 0x1, 0x3, 0x3}) 2m39.776648399s ago: executing program 8 (id=4065): r0 = userfaultfd(0x801) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000180)={0x81, 0x8, '\x00', 0x1, &(0x7f0000000000)=[0x0]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x40, 0x3, 0x2}}, 0x14) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4cb0, 0x4) (async) write$binfmt_script(r2, &(0x7f00000000c0), 0x28) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0x98}}, 0x811) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0xa0}}, 0x20040040) (async) r4 = syz_socket_connect_nvme_tcp() syz_open_dev$vbi(&(0x7f0000000200), 0x3, 0x2) (async) connect(r4, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x2, 0x1, {0xa, 0x4e20, 0x9915, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}}, 0x80) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2m39.704072564s ago: executing program 8 (id=4066): rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f0000000440)=0x800000001, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x4000001, @local}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) sendto(r0, &(0x7f0000000100)="4a14ba4af4417c16058a496133f738d7c58296974b7ad0476e698ea01ce9160d7ca49fa817a05a4d218e16029f7cdc20e66c1d8dfc998e84058e8328ea4520aeec131624e14855da5b730924f1c96c496319b0d38a8b0f9e5b431b8452ca51471decfd319f94f9d120c42a50dbbfa36290e450e530f2b24a1cf1564202cd51c42ec62e61760fcdd6b9afc6de7cde08c4a25a4f85765effd42f924bffccca04e327d956e6d4527bb9b816f675eca45254b45a04091ca22a9cf3bb1d0fb58d81fb2fb9cb0ead41a19fdbd2b8d1d4dd6992f74fb5ca6d9630ff5c78aa7e0d6b124a8d701fe84a7f265afb", 0xe9, 0x40, &(0x7f0000000280)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @mcast1, 0x3}}, 0x80) 2m39.703755691s ago: executing program 8 (id=4067): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) lseek(r0, 0x10001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) (async) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) (async) lseek(r0, 0x10001, 0x0) (async) 2m39.628512428s ago: executing program 8 (id=4068): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x294, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x264, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0xbaa, 0x8, 0xa, 0xb988, 0x0, 0x1, 0xe149, 0xa, 0x8, 0xa, 0x1c, 0xf, 0x0, 0x9, 0x32}}]}}]}, 0x294}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x94) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0xfec3, r1, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x10}, 0x94) 2m39.356333943s ago: executing program 8 (id=4074): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="240012800b000100627269646765000014000280aab629d49945f8218c84d605000700060000000600270000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2m39.263478012s ago: executing program 37 (id=4074): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="240012800b000100627269646765000014000280aab629d49945f8218c84d605000700060000000600270000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1m26.401613531s ago: executing program 6 (id=4673): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4], 0x4c}}, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0xaa00, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000080)) 1m25.03315047s ago: executing program 6 (id=4676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x70bd25, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040084}, 0x0) 1m24.301416527s ago: executing program 6 (id=4681): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) read(r1, &(0x7f0000000f00)=""/43, 0x2b) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="3500000010008188e6b62aa10372cc9f1ba1f848110000005e140e02000000000e002aee8e64000036365ba0121f71", 0x2f}, {&(0x7f0000000080)="00629b8810e11a2e712d183d1a072e5b8f641fc330aada78fa6199eec1b7b3f705e8efb36ea31eaf973736d0c39e693dd2c58176731cc68f36504b57209bd2f4cae189ce4dab68aec31a7273dda16e655ef61f96826a1d56bc671d49f35b4149df2c229d89c5aa9c8db4aedcaa2c150aa29f1c5f3f919e48b243d30f8dff06e0ea875c8b1c0aa79463936278053c91", 0x8f}, {&(0x7f0000000000)="39f52cd922656a094de559e79cba18d2a44f28fc11c35bca96175add5012e3a95cc6adc9", 0x24}, {&(0x7f0000000140)}], 0x4}, 0x41) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 1m22.928226385s ago: executing program 6 (id=4685): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x44) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x800, 0xf, 0x59455247, 0x6, 0x1, 0x2, 0xb, 0x3, 0x0, 0x4, 0x0, 0x7}}) 1m22.927999531s ago: executing program 6 (id=4686): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x200088c0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff81", 0x17}], 0x1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xa}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x200400d0) mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f000009dfc0)={[{@dyn}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40012004, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006180)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x101, {0x5, 0x2, 0x0, 0xfffffffffffffffd, 0x4, 0x3a1b, {0x40, 0x3, 0xa, 0x10000, 0x1001, 0x7, 0x800, 0x81, 0x120, 0x2000, 0x0, r3, 0x0, 0x440, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000009b80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x29, 0x800002, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0xfffffffe, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0) r7 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r7, 0x0, 0x0, 0x79f, 0x0, 0x1, r7}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0xfffe, r7, 0x0, 0x0, 0x7, 0x0, 0x3, r7}]) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000002"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, &(0x7f0000000540)={0xffffffffffffffff}) 1m21.77000145s ago: executing program 6 (id=4694): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd25, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x1, 0x9, 0x0, 0x0, 0x3, 0x10013}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x34}}, 0x40800) socket$pppoe(0x18, 0x1, 0x0) 1m21.473194836s ago: executing program 38 (id=4694): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd25, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x1, 0x9, 0x0, 0x0, 0x3, 0x10013}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x34}}, 0x40800) socket$pppoe(0x18, 0x1, 0x0) 3.625239981s ago: executing program 1 (id=5187): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x19fb4633b98db6b3, @void}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x1c, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, @tail_call, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ldst={0x0, 0x1, 0x0, 0xb, 0x8, 0xfffffffffffffff4}], &(0x7f0000000300)='GPL\x00', 0x9, 0x80, &(0x7f0000000340)=""/128, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xa, 0x35fcd2c3, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[0x1], 0x0, 0x10, 0xa7a7}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1, 0x9, 0x4317d336) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r0, r2, 0x4, r3}, 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x4000, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x481, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000190095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 3.436263397s ago: executing program 1 (id=5191): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @broadcast}, 0x2, 0x0, 0x1}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x2, {0xa, 0x4e23, 0x7fffffff, @loopback, 0x10}}}, 0x3a) r4 = timerfd_create(0x0, 0x80000) timerfd_settime(r4, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) getpeername(r3, 0x0, &(0x7f0000000540)) r5 = socket$caif_seqpacket(0x25, 0x5, 0x1) fcntl$dupfd(r5, 0x406, r2) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @broadcast}, 0x2, 0x0, 0x1}}, 0x2e) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x2, {0xa, 0x4e23, 0x7fffffff, @loopback, 0x10}}}, 0x3a) (async) timerfd_create(0x0, 0x80000) (async) timerfd_settime(r4, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r4, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) (async) getpeername(r3, 0x0, &(0x7f0000000540)) (async) socket$caif_seqpacket(0x25, 0x5, 0x1) (async) fcntl$dupfd(r5, 0x406, r2) (async) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) (async) 3.195051224s ago: executing program 1 (id=5194): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x106, 0x1, @buffer={0x0, 0xa3, &(0x7f0000000840)=""/163}, &(0x7f0000000180)="851666ce20db96ab0c7d83e114e7c41762249711e34f4ce12c6afeb7e6d77bd3b97644edd8e3a3b71fcd006b6237766e151f344afb2306455034ea7a31b1a48724e372a5a8a9ca040f5831f2eb11842a4b8ec9064fa439440f374355d9af754314ce445ac9bea7fac19c3ac58a131895c378ec497ffdf9a82032d9fa225397b92d2e2193de6fe2f6b6c0bd0f80de3dc72890b6900c5b86752639bf37ab325c16dc2f1c4d01b4c3b71ebbfd6fc9b316f76a07144538506a68ae00df22f2fa9cbb0c9fa73c1dcf3eb2eb4fe3534fcee01e9ca0c66f27b8e05e7545cbc3511b3d086f51d58f9acd52eab032468cc8075451bcd5c081a8db84ff509a2f874daf6b3ddff977834d87", 0x0, 0x10, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@map_fd, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x106, 0x1, @buffer={0x0, 0xa3, &(0x7f0000000840)=""/163}, &(0x7f0000000180)="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", 0x0, 0x10, 0x0, 0x0, 0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@map_fd, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) 2.485484184s ago: executing program 9 (id=5206): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {0x0, 0x0, 0xffff}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) 2.485302421s ago: executing program 9 (id=5207): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9b, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000000)=0xe1df) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x4, 0x8, &(0x7f0000000000)={0x17, "e922604a455494c905fd8208ff08000000000000000000000000080800"}}) 2.400034038s ago: executing program 9 (id=5208): getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xc5, "3dc8a7d5fc916f05319bdb531b5438bc51dadf799bce77846fd8e54dfe9e6b3ff6575bb7ee8b3fe944ac8e0e17f80bf02052d75672634f72828affa09dc7f49843c27f603efcf1909443285dc27739f23c339ce142a43284a04fb89cf081f6703e76a5fcfcab13e75fed0bc34e8f7c1cb5b2112c6ebe1dadadbb090adb23240c140e6579b80cef9f69fe98e68ca5ce9c7939be0eb28a356b566532a9b44e2d3cf4892a8946a1b50be837d07d517918ff6218fbf40703df8cb820b01727c952bf9193348bce"}, &(0x7f00000001c0)=0xcd) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={r0, @in6={{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x1}}, 0x8, 0x0, 0x6, 0x3, 0x24, 0x1, 0x4}, &(0x7f00000002c0)=0x9c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r3, @ANYRES8=r1, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRES64=r2], 0x20}}, 0x4000080) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.39941267s ago: executing program 7 (id=5210): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xb) r2 = fanotify_init(0x81, 0x40000) fanotify_mark(r2, 0x105, 0x800101b, r0, 0x0) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x5}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x34, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x1}, @request_death, @decrefs, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 2.118293064s ago: executing program 1 (id=5212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r4, 0x0, r3}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x61}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8858}, 0x4884) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r10, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x2b, '\x00', @data=0xc42}]}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r3}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r4, 0x0, r3}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x61}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8858}, 0x4884) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) ioctl$FE_SET_PROPERTY(r10, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x2b, '\x00', @data=0xc42}]}) (async) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)) (async) 1.844778512s ago: executing program 7 (id=5213): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x8}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x6, &(0x7f0000000180)={0x7f, 0x80}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00020000000000000c0002000100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="3c11d8d304210063f319cd5da85b4e3ea1e2623db50613de13d382ebdd0826f9ec587ebc053b83ec873a4f291876017ba489746a867d24730c19b64531177b7d05a774f16cf998a979fa10ceb3289ff577da28e577c8ab6dab257c4d9b34502df855a6068425dfbc4e8ca4472ea4a2169e31d83cfc6eb4e8bf3d588d"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000004780)={0x2020}, 0x2020) 1.804508769s ago: executing program 9 (id=5215): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x1000, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x2}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e13"], 0x16) 1.533211255s ago: executing program 7 (id=5218): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x44, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r1, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40044085}, 0x10) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$CDROMPLAYMSF(r2, 0x5303, &(0x7f0000002380)={0xc, 0x0, 0x5, 0x3, 0xaf, 0xff}) 1.386814562s ago: executing program 7 (id=5219): r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cc0000000000000012"]) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000140)='xfs\x00', 0x800, 0x0) 1.378478594s ago: executing program 1 (id=5220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', &(0x7f0000000340)='^@-!#:,(&\x00', 0xa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './bus\x00'}) (rerun: 64) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[], [{@fowner_eq={'fowner', 0x3d, r6}}, {@obj_type={'obj_type', 0x3d, '++(#--('}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, 'PPPPPP'}}, {@euid_lt={'euid<', r6}}, {@pcr={'pcr', 0x3d, 0x16}}]}) (async, rerun: 32) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000400ea5c31c4c17918cea258b669e0786461a6", @ANYRES16=r4, @ANYBLOB="030304000000fddbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x38, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xf02}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) creat(&(0x7f0000000100)='./bus\x00', 0x100) (async) mount(&(0x7f0000000340)=@filename='\x00', &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r8, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}}, 0x0) (async, rerun: 32) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) (async, rerun: 64) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={{{}, {}, @device_b}, @ntf_ch_w={0x7, 0x0, 0x1}}}]}, 0x3c}}, 0x0) 1.243757104s ago: executing program 3 (id=5221): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) r1 = socket$isdn(0x22, 0x3, 0x23) r2 = socket$inet_icmp(0x2, 0x2, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=0x0) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f00000009c0), 0x16201, 0x0) r12 = syz_open_dev$cec(&(0x7f0000000a00), 0x0, 0x80) r13 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x88000, 0x0) r14 = getpgid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001dc0)={0x0, 0x0}, &(0x7f0000001e00)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001e40)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001e80)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000001f80)=0xe8) r18 = getgid() ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000047c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffd}}, './file0\x00'}) r20 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004800)={0xffffffffffffffff}) r22 = socket$unix(0x1, 0x1, 0x0) r23 = userfaultfd(0x80800) r24 = syz_io_uring_complete(0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000004840)={'\x00', 0x4, 0x1, 0x3, 0x8001, 0x8, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000048c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './file0\x00'}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000004900)=0x0) r28 = getuid() sendmmsg$unix(r0, &(0x7f000000fc40)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000140)="ca7bca867f81f7c2f42421e2da355d68b7a59473286770cd1fca92be", 0x1c}, {&(0x7f0000000180)="f834d3da3d951633b17da71b7f95d97b97f335a5e47d5dc92a5eacd92022ea62bd0f4530e47c94f7216e07de2bfa0a613663993f01884bd39216cdcefa8f7eb5636c26e67ccc9a1b2ba5d6c2bd9f96fb7d0cc09529c51746a03c134519fd857374fcf0e5fd90f098c3d71335ecacd3a23bf02bac2854872af49d9f32f7c7e6d304ad1f0663", 0x85}, {&(0x7f0000000240)="18da1072959aeaa2003ce7d096c387d1194fc185abb68b6832a062f2ff4a02628c92b5ad2b248769efaf4645b9a8a2f9f4a53614de2cd3c7ed0d2f959fbfb6df25aedcd18ba349055f528e47c2105040d574f74c79ef5eff66a12a7b630ddc29de9b50b90902729276bf3730cf24799e87177c362acf85bd272d160d43401395cbc4a55d02700c3be5def44b270fd4eff6a771ffa2d4a31e51fe070672072ca7839feb1c6c5b7d05c84bad4ab01200f115c5f35cd1b21d2d212748ad4c56834af228ce3a7931", 0xc6}, {&(0x7f0000000340)="0b99e0461692e6b18cce9fc74ab4437ab52cb2603d81f5d98017dcefb633c5fcd5edab33316e48bd0aeef33edbf0d5b11792ed11dcf7462a1367f927661fde21bdbbf2e237cc5c9a8afa616d2f0c9a13b15d08dc7e5c7d68d1779322549b61c23c68d5e9a6ce52e36d4e4de198c0b68578926aeb4e47c8379d665268dca669d128f0", 0x82}, {&(0x7f0000000400)="a3ab9cd0e820f951f548", 0xa}], 0x5, &(0x7f0000000780)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00, r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x78, 0x4}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x4002080}}, {{&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000940)="bd07ac53855a37feda18f1d44106d128c7288fb7c5e919ee483d26394a5694755db0895df7e26289a51c824b48a438", 0x2f}], 0x1, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [r10, r11, r12, 0xffffffffffffffff, 0xffffffffffffffff, r13, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000b40)="fac8b2d4ba29a1fec1aeea3ca7fb2eb4675c2b862294b4e84d578a775edb06ff99c01060e3f0fd530b5b196efb03905cc2425a693a7c8207153942d77274f470b4580774e55744d090da617011a4bcc437b3fbd4fffce9489215101abefcdfe49c20d1a10de64a4c41ebd6574a22d8bf174a3fb5cd185c658a4b3fa2c7937cdfe13c818cb6e428b93d55aa22bbcc0c765e4d81f8a2eaf9a8a2b22b315b93d44e9e8ee5", 0xa3}, {&(0x7f0000000c00)="51630484d0101402b547a440d486a7c44fe89f7dd2570647c56dc4e64b5e5597d522fc9c18eae216ea8aec13399d3698b6baa350ced1f7c5392cd268d3e3118b03416b47800fb0acc77f06a8e2aaef", 0x4f}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="12a94c42290819a67acdaa68709e9e20377f020621d3488765d93ab306094d5de6bcbb3243b1ee2383e9d86e4e3edea1bb0af87bef16a32b836f7784da2d62869948ece35419da0affde5b49c64962e668ccc9e441b40ce519eeb17e7bf7f2f1d16d466cb2ddbcfe1a2b42d7750b65f8d6e19ca289a3c29f4c0ddaebfc2bf65f8553e6af94b9a794360d1a72e2ce48318852a301e12dc77146697ce0d1bd418c6e4bbb240bad89d907798e2ed437897354feb29cd91496b6b7f51e800740bf91cbacb4", 0xc3}], 0x4, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r14, r15, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}], 0x40, 0x40000}}, {{&(0x7f0000002000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000002080)="6acbad4b501e274906b3b1febd6329629adea3beda7acab8f7163880c1eaf5ef4116ee630cf0b205ab997117581660aaf001f6c63c661e68af871e534fd57092b92bd5df3fb31868a71431e1f829e7fe169d1b40ec85faf8d4b9adf6522d669f03203bea4065ba4fcacc5a826fe6a50d00b45bf19a08a49ef0e1f18a3b01b8ba56161f5d893b2cbe1f90bf7c8a3ceb275382f88dd6249131f0dedee6c6b1365175f2ef8ee300054f1012b7611209adcc8e568f0395c39109dd390c84845e90722111254b74979d5328305759543e50ed90d7e207767138745f1512cfa3a3d91b3fba1882311842eb178d21621dab36e46a4d46409442317df59a79c5dc53cea28435cd7d98ecbd276aa6f02d3c768f5c1454942123d735c547925c6f8f474b59821182533b1a7f245d81945f9be4b85623ebc2ac00d7070a4ce0850ebe9ab9396299793a050078c8b4f2b1266df64f3e3d229b737e60eb986aae360529808ec038c9a4248d4a6cb7b407fd5ee576b05077716e7ac9e120c44846bc70259a6a1484848e885321a1ed8bd3350a6445019716a0dc68c070a3f98803d173897055dad9d1fef080c8f5fe785d91bca3c5cc61934c67faf3dbd6e6ebb39c5a24b255baa67a53bbfaf549e5ef8dcec62b19959d8c93f4f494a51ff0f629128420c685b96a71a9a04803df84308321c0597daa52aa6e8f4f0ca56c419db46636f9d4632b03ea5586ff250edd32717abe8db36edbf549f04a5efb3ddddcad06460236a032fae7e46075df4d55b02f2a32e131f1aa889c937a52e78c6ebcccd54aca151ae1054beb525e5a2af9d332724e826e65e6501aa5320786fd0091b0910e0f6138b909ea6eec92a5a9f14b1badf36853e2289fdb877e9f570263cded88be48da66f16665d47b6a7be6cc5eba5e158685455a167a4bcaee71895175a92785dfd5d8bac2eb801c1cd9d94b0dbae4c99c706e6c77f411eb767ac1cab82553e3e90964cf82ce37a75fad2ba1b346350c41c9bf566f016bedc39e9339c6e11709c7e4d3ecb4abf17d2fc0643f80b5a69dc00bedd83c63ff80c4d934cf630f6ae8718fce204499fc724f11f47c5455157940a6a0f18293eeeb4a912feb173ff5fe1d1e258fed1a9564e2fb4f650e33065b845323310adcee5bd1ae54ad6ac3ffced6bb4c3164a01ec49294d3a4fbde2ff3f601fa842f4b8c7f958fd820934df84ea25110ea1c1d973e1ec5ad68a682ddce849ebd4d0e9d0c92c3c76bf184a88b3d3bb4ac643a222fc2991e7b5fe4624c23a3003189dd2911d552728633ace3c91cb040bea8f38fb451ca67393e4326cf947c2e1315dd5d5fff7c077144fa44bf0e492b31a6351b199f36e23275d1b58439599a59dc41f1480089807274e870b65ba7abde43dafd8abe0f658c1f0cfceb7c4fc87be98c9014b1eed3baec425229300d16e5c7aa3b537f48bad7ad2cf4cb0dad3ef1616dac94f04d26f8e030f0b03a2b9660466bd54fe8e094771f78e5052117b2bbb123e20f290a02ec458f20b826220a0c8ea2b47c375eb03285318b83584b810df79ff4f02a6afed57058621428c7592dfe6f84d28ba5a36d0b910e0b8501112d06330c68f5395ba28a15adc8e00425d1b735f3fd8171111c1b21afda6d6e2d5f3501cd9c81aa258d382cbaac1639bde236d5c87b70307d6b59651e314b8a16270ec298c1bbd7c867cbeed435dff5b5e81c004b49f1a526f9bc60a73728612c53d082bd9ab9f63846ff625974cc14c08cbf41166db37c6f4cd02f46863de0ec05f4bd26c8783099b601c83382cb5128833dd40dad318ac71fc8a6271cc6a07c825dbcbb27c9f90a8490d380d8b417120e7430a553f49d79c8ac2665fcf103ebeccf48d7c3128774cd3d0090efcd06eb9e705d145f3eea6e416dfb36bd783210e249f1a1344110938096949b73f4e819a252909c66403c5e7b2ac66ddc55ce674baf915d6f1d1dd48e844a870c29a327a01a20c8714af188c1b1be1b094d332856db94234ecf2fc6be87df207db128bb5ec4d520922f167dc989165cada2183342118261471000089dffa75d6dd49c9b00432c5ad7e08085310e4dcca3ba7db202f7ba0cdd0db910177e64ece473dd0e918ef3b27f33d772982b61af7d18cd454969e952ebc02503a3f8b3f863367d9f94f984727793e06ad7f92898c8fef9643d609b330c2938fb0c190c663666f1d223b878d55b5dac2b7f564657b9324f70ee4f6678a6dd750feeb01cdcc1a39ce22ec7cdd295d2781393da39ec0c3f9681d42b0072c54e12a45a83c02566cb8f18d78c8444207dfbe840ac8b5fa92132da7b0fff258cb467343eab1a76a708eb2faeb685e04650b194f3076950a924dc5fd9c3fc30f17b4cdece51d176422b573fb6f990115aac7f624bef136279c93236b2feb8c64afc2decee21ec2b8574fb4531b19654edecb36d142f0eb3e36fe5c9a133509450103c230f46bb16aca7df4e6a37eab88e4f1ed62c382d3f5953a03c43925b8f342a5965aac5e50ec6b6d6af7c1f3165c31b3d915c0817e544ee4ca5ae5692462e4e5c4835c6ce5d77bdb3e2813eace425b15032b86cc1448e979345a3a575138e5195f22be2b0ba23cef2db303066d32b234dc1df1df7a31aa190a2d7eced964bc66c2e145c0dbbb75e6719bfa939aea35016316c01abdcec074712759348ab0e1a878078132d6314c034404fabb5521a2a2d2fe164111767abf3d7fef78d48f3cdc47ed2f398591eaf0f7acf36d85c6fdbea8d4bca878fef753b3a89a79ac4526b3ffff9e08b865662e2d489439b1e06875ba916b48fc88053dc46f4c30f06720ac142f15fb61adc869686e4c2fbc1df4299fdd4ce62c463dfcf362afe5b3987bd15dd5d0b59abf0820fff0019b2eebe4aa722eec12192b0deea18c1fe807875c324db91036684b9e0894ce8dab16926afd48d5683927118f470b6da3c4b8af1dec267b01d58a6b86ba624d39658f54666c42e1d8d922ed3f1133c44198252935026f0ba93165ad99841249b5b5f64292c3043283df4d6bab1c3a57a5add46d7dc4b224b7867e143ddd96acaee69a308ba4607d6be6be79563312390b5235c2f8f3a1be0fe41d2bb048e229fcbca231b6be158580cdfa498b431e4a6d0a89daa817f45110bf0ed5a7e8e13c70decba414d5480ac843f35a8893c5de4886927d26dbc9954312a37d06c838bfd79a45556239fb44a5bb0603eb8e56f49e1f2ed3d2c20684ea644a5f0bb1f852fba10b6e5072061cd706dd27423b9c1feb8dffdeaec379644daeda606ac231cca57536e652930390a9fb74af39faa2b80386f017962d2e3d411993f19f743daeec4f4d9d90fb5efa0de5db2f959a8e9b62f268c1fa0cc6ef3029b58e5a9a08f5b757e466ed1e183f9d1785a48263def7b2da18db38674650af69a6b936e9344e3263f02f7280e048e0cbdf679d6237d104001f8f59eac72ea87798fb5883f6153f6884f7f7d511a39d8a15c744ba6650f8c6115e9879af6b466c79703ffcef18ddf7e4cedc1b2ec46bde8dcf5a29104a610b9fbd5c9cdcc94dae754f5dcca8b0999db8352ff9d9dfe654992e3c44481828bc297231ba271a8e2b4ce0f4e33b5a6223e62c927ba6b32d635331a2bf6a82dca7e62222507194158f7c43457f7420599d6e58545954e4ad4a36dfae3f217dfd95dc579266c2298c1b993d08a258fee7cfa4e431360a6b236d6fc1ee82e6dd94afd7c97efed13fbf9894e350858a802691de5d7c7c2ba3015944c36cfc1628edceef40993ac72876056323bd27326c92c96c83c8714cae89c68b26003246d812eb030e1ba8fbf21e7b375621ffbf7136835485fb9cdcaff7cb54d80c8c4837ad6491ca0a66d0bad4f327af5b57042c06ef08b4219cbc233a93c8248c6a4484c6a25562839e3fd65ae9e2cbace0d5bf210b4c2b51bd0a48bffc17db826005b412df60b128c1b7e9b4038049671e6e34d4caede030474fa7d88874c824132d9854fbfe9e3496ccb7722c390b2a83ebdb51985c0b076a5b49d818da04e71b5dbcb6ec1a95341dfea7f750c73da7d6ef091842fb4e918dbb77d4821f84bb6f96f70e169377a637baf4df6dbc6b83d6e5e27ea00e384b851ba8468ccfe71eeca5761e16708d10e5d07951dbc9bf859ec8bb9e24a531e3accb6123eaa4ad1e6fef35e382e102b0f6be8dc82dc81aaa3de133275088a4097a9309d7e9aacce0a08b12639f555e82b28c1cc9bd49af621581ff9f91cb7ed822966dd26aa7ba032a4eb7062fca412b67fd5b8ce14d0f0dc0b876f8b6d1d7e363d720a22a41703dd4b1e9cf408a961628eba2b058e7605f7885352ca7c768863a754563c9cac503dd6f56faf6298659dfa2861451f8a4b5033bfb9049badaa9635b3885ffeb83244ade5ce6f155a897e43398e85d5837d19fdbe75a6f113a8f1dfde50c807ef371efff07b541b52d08b8a8499321731467f6ca091af43325e34cfae85822af6f2aee59b28a64d23098bd192127b2d01556831cff038c7ec4d675da8dc388bb77eea71cc6517a8c37a8a5c6578cbd17ad4f675ec6f598671238bb61d1eb37ffa6ad910b85d30f29f7a2daaa42a27cccfb527b30b1b441ecc1dabe658d661e70a6ab883e7fce7ed254a9af5b1c63358e64d13596e18072b382b26816872218175d415498cb620bb4fd80ef55f59bd980737fed55f87d23d67632e2c8d36e0520f3fca7b022a9be61d1cf56f54a488b79262c0809764603ba4b1305f2ed19ec86851ef997f2adf5ac4e78d949b61278cb987409fa0f58332cb765a23cf384f028daa7d753eeb6bb104a0c46f7a1e88cd9e601e014d3d29321f574486080d217e99737958f2ef5098277bcb0046d04912dd9f316c9bb5ad66fd99ae3f6f14a01c7c720a44fc3eb2e11b2d2d51dc1de8ac6535ecdb025095cc91db5641daad99c41d31ce65e6ced89001d59f3b0313fa7a3738d83838a25e147657cbe82e0df7253ebe807e14ed824cf0db7ab37b7693fcdf6356443dc9463b0c5f165107ef707d29cc4b07b8a647175647960e5dea4ea32c19b3287c02bfaafce6813f93def46a661140affb997c2826928cf0f9290a7b493098ea74fc4653d49f465c4d7a4f0358c406acf0fa60044d5a310618fce66eb8445c77080a98fdd9fb25009ebd063f8f97d35e3c94fd2d932d04144ed5c7c6088432d1c70868e139684719c5b7bb341edc371471fc9fc297bd526ce84d2caccaeaa63912f68bfe43bdb17e88a6cf0245214c163b0bca08f07cdce8cdf4e92499966fc8b9a230c58a0c0d0ba1a525d7e48434dd56566ce79c1c66dadb0cc4cb0b9d9d6ef695110bef35a54dc1853ef06ce61e7460deef811d01295efbaa3bf87aa6f0506e4cb56e9a5838228fb4024a7bcad422a9547109b696bc7bc9d3c1eb5220423876112db93be2feb32d116a480d05296b86acf45e252a902669baabc4208ec54bca40b84945d278e4c75a1015e501b47fe65cea6c9d6e95f72280d335516c1e74c5f725982f74dc99783a7d5c43ce8ee92e28c6e7d5e7f084595c560d768d6c33e50ed26590c25a924b2f27d606d20035fb63ee85fd2fd89cbd4e6f4d96de5ccf78d1384473c81c803e861594fdba832563f2514fe5d0514ce0b032898a85c1ec0cbe3d957e4a9fab211df777cf160baeb4245434664e7b88292a73c3380285811a80898b3fe0a36ee7fc8a5e3e84f58f5e472e3887ba35ec1e0b981b8f9e52ba2a0e45ed1bcb4199729bc6b86a84eaed8e212ed09cc7a915407760677f67a5d7733e20", 0x1000}, {&(0x7f0000003080)="d896296397df1d208529064fa1", 0xd}, {&(0x7f00000030c0)="1d01c7288ba181e53d620ee5c06bb6f012bf3461dfe983a10cda384d8ca925c085f45b5a56f0783c45f1492c98f6ccb4bf9ce793fefd029c73d61b0c0f7be0c6833984c6dda975f6f60aebedd3c2ce572784624ec6bc1fb63c67cc6236f9f71cb253bb56ab71079ebc743242b6c325448b25170c52c7129d8b4dcad8d6869ea5cf357c25f5ced95a318c2ffbef2a4a0ad0f009e7efc1205de4fd810aebd1c3835fee80e9e3fffc01e7d2b61d068e9dae67413fe55f919f7016f67eb9422148914d8bbc14a85549e4bd0886ea4671f63839be92ee0dde3cdcb58dc5f516366af8b40f8d5cc05f4eda4da490bfe7b8dda9d24bbb654f44ebb445fc2edf26bc1f4be8b4a3ee2ea37cba8f7cbf185b90643428df870519f8879f5a9e41fe67dd6de04f0d6970595a9073f17b27edbb26015ee315a85da4d1ba4d5fef45ba364e8d89308970a97f511d44d5e9e749c64b5ede7ab04bee0feaaf9f627db7e04cf8ec5e7e903e0e12e74be40207a885ac7bcb700179adcb6b9073bb1da2d01cae5431bb3baea6eb42a33330125144f07106fa7a3f476ffa81389c674360b5f5e3c5123b8f2a4c60f4664e8c91ca0b536f7b941e15ab1ea8bfe9d2fc37e236a5a204bd754b258faf33f670fc408ec8b6fdb6ea65128c11d2a9a60fcd0a21fad7392c4248841a6fc5779763fec8c14b038b958009a3d52c85d38f76598802c9e4f44d065931fc752e29874771355f7cb76b669dc2bacfb02e4d6d27724aedc4ed51e24b9a2047ea1f20a996da5984ac87eb83a9ae79c1a93028c4de7b61809c55be58eeab73238d09c524396025d22e66bd1b5b661f5aec07889d71a36ddb39897855277be041d9d69090cfec017063784b03e9fe1eb2f11ef7958857bf3a55342ed13b51645dd404bce4ccb8ac66cf68127b08f1572342a5e84440a6062d5e546c51cc7db4c40d4ca3f62f93712f4d88b8b11c39bff279131d141d8bf45d2c424d66984672d001c91ac7888f706924ec68c848489a6232e2764593fc490a669f3c9c5bb99b8fb107a182004159391dea02843713388e015e8797f548fb49cb36d44e18e0f824be1085cf915d2c3e1fcf7291fc6e9a71e2d4bfc8f85d68b419bed9b4f7ea4d76e459839651e57bd1d80a5f471a8559b335f8fd5d854b671e79c3bd557b5ebe071d6990769e2c1ff13f830d9b01c0f62e88dc4db1d87e5c54b15523dd67431ac2481baa055700202cf39419dd89505b6746f2cf182f298b436ecb56b8e3380b88224b78870979d2e628105b2f2f1e660dbb79d676322ba8f22105b7a004387ac7ccc2f606881590ee7724a0ca30462e00b31d3652969111290f9a81a5109bcafe008bfa68f91f939ce3d8bd18d799c0209c6d5a8d82a6324186d3409a8384f7414d7486a976a54d8efad7a537179b000a89333f3dea44a10f2f00af15c0c63e85eef6c4d6238612079d3bb2686d2d8b17cd7efa57ccc84063e4c2d3300747932a2015ca30c438ec306b1774c3190a765f498eff92635b0775a81237a18f9e9fc879ac90615b4d0db32104593e5f1f34eb8cf1f906d0272fe8d634d114f433bd6c5db16494230eded80c1dbbc0a02213cbf19588d277a2eee51a44766577aa974586679b65f288ae37ca5a4e00675cf9b5b84b0f57026bfa6f3be66949dba342f416809d10d657fed758df211306249367cf545f67a9f6f1c977ef79c746108807d743ad063f970175a15b9d6aa32e4dbc1df72182bfb859e9d111aaf96a3bf79524585227462e0d01aa994e498bdba739e636b8c6507dd3ace2672972b4cc5f0e572d2a6ed15c73ef98e8b1cc4f80b9b7990b0ae16217e43f49eaa24aafdffe8de1e74582e73d32644f4c8b1c78a2aac60c975b5e2c0d4353d0a8b4d07cb5992866ea1100d4bd952460ab966eb5c82ca127014386a95797d9eaf653711e5843f3fb12c18a63fd654eb748c5cd828fa59f411d7a5df28bc3f797e5d1b3abee99f825742cdab8f373c6f07a8c91ead15ecc3d84c520b159a727fb88b0c95e2564171e49c2ae84225c3af249826a0ad1d2cbd06432768f33acb02c7cbc895621e7db827a5ab768ca23e45e91cc0317a178cefaa65bdc30cadb7040f71480a2afb77008957f2bfc929e81f92d41d918d149b20efbcf8453ee212e076139538206a373fbdc3c41dce06b4ad083315ab9e3cc122b8e80c0ffe285838a198dc1671a7eb94394730400f6b3c817070379e470ff9afa3b75c828197eb83890e70ea06fe3f73a9240d1047a9b3e2b75dfcb6b7dbf225ba627fb4476cdc5240fc15634f34e1b97ecd7660dbc5e35149c5fc09faa6f1171f56a8d53a3604a108b78cd1416bac6b40c4d3f95debc2e0f0ca8ebbd224ee28625079036bf691cd9271b1c2f8a99d778cee6216ebf0dc92b54c60fe89210f109174f92d5b30a326ec35d779ec73e2f7c35f955846d0bb8cde73d5dac6aecd8710b4dd25957af3e29d5f644aeaee6ff36950c4d65de02a5ca8ef77bdd9c6470bb17ec8296f701da6863771c7c5bc56033ac0ba6dc51c67a0e29744077156d72c85a44e538ceaae33a4a4b776b41eaa355d895bf58015727de278430f0b4d79bb1651633bc5adf85dac1016eb5db0524f34c63bbf6351b285187d972ea47a9c92df359914ed7267ea555e79498cb8b17508615f957b86665add5db10d6edaae826a2cd397ef2fba720b6e70e9f9d3751f9b77851ca8508b0969ba7f16fbedcc65d0f6a794dd9328cd7c3dc24a0564ab4cd9725db4ecce3c9c86f95d1e55c2bc0d8bc548f780698f7bf7ec6e5682c850c03caa2b3903b01c27b3491e00643677f4cf792ebe14865a39d9e9ae84b4562124c9de505c5cd1e9fb8b566e1150c7b2483fcb6bda70c06fe2d7a5856a142b483b97dc571a4f331f423ebcd81ee4f2696c465229ad98801f2f6cab3cb615ef0efed2211acb05bb30974074e6218e310e44ab1b5c58a3371971ef2a827e0a725df31309013c55bdcd9b21b9b1a3ffe8e141fc2d1b6aa1864228a8bda5c788dbaa4a66a353672ba22f702d6afa17765ddb7a5d04615dbdd3bf07f3a97422b55a7ee7c9aa6ce3032ba13af2430cc7f9f38318d6e7fa06a493e41407eaa486153b617599ee16ef3e9175d02b78e48a16079a65bf4936a511b9108d889c6cac43377c3acb023614cd63bad931f3f668fd73df7026d58f556f085124ef401a5f6c0091b8b9a3628ca9e7674af4589580a9928e937532e1cc52ee9f7c6d4d1966bafe4f4f3691d257cb4d63253f48a40e8b233bd9b08109b24af269fb880626c492d7ea3cbbebba707e541ced933285f354e3662fb3af46b035f99dcde6b4bfc11ffe2477a56ff1aa48dd93c26166e86c44517e1f71eb2270ac735453c29381875055fc1c02a69ad087092724cfecb5171e60083ffea506d051c9d5c424d4d1ae2620833903a909f1633041917036b87f702f1585393cd63290fb794d5b092e5a885c32c7ef02976d6857290c81af0948f0a1de40bb32f30461a68bcb2ea4b27132d77c92c70eeeb22b7803fdeb49a9db86f1c9e667aeaa153477e5b647b2edf04c72836ae7abf237b5fa11cadf5e67164d387672bf6138401fc2a4e378c6a29af554ef5815d2f7ce8a9f7b2665ca5b6f39770bcb047f9952b15ab95b01adaf26d6ebf36883dbba0d62571a1d4496169b0b1accb9a5ea99def6c88de6d741c74a598618300e040b93822ff5192454c61088d2466433014a627ab8c07b77e6c0fc878c8d05fbd8f571b3bbb59300aab26679b9b2326e3c442360962883d00ca2daf62d6eea5109700c9b826126390b066fef34652e445001bd288cb230cc02b4c2e1de22389e4a693be06e86aaf70cbd2e43699e2ef4fa7d48e3aa8fc1ba27669224aafc34e41eaa1ea68116a92618bc38cf1e51d9a7285cac85da7ff7a75f6c5f25f5d98380c491ad40d5a2e7f9447ad7e3df9b5a42e1b296cbaa0e29a583d47c51bebe1050d64076d18592d05c6d50c8928fba9ea14c781977ab1d03b2d266aea6b5b1d6dd3a8456b66c23fb5f0806acaaa65c1a4e03312915b38bf96d6ef572abacc3865d186743b66e03724f6cd270dcd8198d62efc06e72219c52564dcb811ec8117d06056915bfddddffb41bf55c2fb3664d97058b30641db73d99276f554e63e67e1e28bcc2777d83cbc655fff7ce6c4d129997b9b5f6394057daf8cc166e13ac1a9e360a5a8abc5f23a7a46ef9146fed9413c0cb15af44b2593e88940d743f75a0c58fdaf4420adf4fbe7f4e85022cdaeae9eaeefbe88c553b7e07c6e25952475582a119cfdcc77bf03e5fdeec8e4b8b12b0670732a8ba130df127aef32416977a6cea5f1afde4a69fc8beccd52e2fff695343dab21d5d40c1751ede93a01f22719d8ffe93817b98f84d5caded90609c1975775fc8ceac226bae3cf8531f3e1143b6303af723378e6b57d47542bb221f82f7955877066b517c48f207c7c5cc203f506aae5afdfd48021cb1bcf5081a9315fc9f581a607938ef9d5342cc38132bea195112fd978e3b0bd3bfb27a601b1d9c68b7f7b38b05646b1d9d90598dd69c5b26953b4bd5eb4264bca11954f8a477df2bd89885134b27c71a78a0f685a175e97d09327ed164d7b2f3f0ff0db73671e3dd19a34b9a7a9eaf4c515a34b261072be459e78a7e59a29e367477a616ce808bb5845e425c8f083802f322c0baa074195d1992e7913f651a0aae45e26cb2458c74da2332c57db660b73f40f1702a64e3880d62813333f676ea21479da1f1e8d9a9fa2c847e01733057b9bbd3e379f42cee172490ae71841ba02904dc22aa98543578d6f691215123ef3c50c6f169326059481c3a0ca93badd999caaa57805ad17bd87415f61af10ad4835053bab9f1705080f61e86946487e7a3ffed72942d69fd5a7a38a11387a86ad9225e1733917aa4cffbbe119e87b3d7e00e7d2197640f3ae703ad6d624da8b27832282d0a217dd484fe5852e14aebe30fc4c0a9fbff0ceef849a68c98a270da63463d61adb4901c99dc2ab91e3665054c5928910f7390c3ae0fedb3cea18d87029ad5b9b2d91ec1cfeee90eabb2afdc71ec4720984487da183f322c438893a29eabba21e2531b1c4fce654da4cd64eff5c4431e5b054ece67094b1d886f748ea10390efe9476b7ac3b9f95bea01b19026963a1f6e8ca483e549cd5ac17f75334f2c38f2ca24f54e8483c4eb47c129d2bc117ef6e0d295b433fa39875d7ab0ccb82d6ab98a01f8517a7c05919f133e577260e0c446d376e7a049c4baa8f012b4dff71f1b83e7e3aa28419d603f7eef7cd01bed7026b699100d470219631ac0a5dfb7d43951c6c469e942019ab5746a5a6f7d3a42c0101e1d2c9f5ec19bc0d84f25dc0ce3d5e6085df1e5e124c79476209cdda6488f3a1d48144d67302d8953f2a595d70f3d5aaa35fef9d5d8f6335e2ea057838a3181f4f76a44f2243672cd188d6871e89681b1911c97009704067c9491ac62f093d63034cf8b58efec5409c64a3a76b42576f998b5f17794b016a5e8f6571a6f60750cffd9161688542214a4c2e740da9377d9ce16dceafcbfdb8a13893188eb485699cf61c7593291a8786923ad91995bc45aa316c52d6d8dd454d20445df5ca253abf27dfeea0714df6ae80356445ab863c18e1c40e8364ec4a03bc9bc19c9a3e81d5c712ed2ceb1536e1bcda70d56b2971fd13c4753bb5510f46a708a0f549423429cee0f381c8bb058edaab327f4343070af034b25e32623a88c4f035ea1114fd362c82a96f4ac6fff4f42fae4e9e", 0x1000}], 0x3, 0x0, 0x0, 0x4090}}, {{&(0x7f0000004100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004700)=[{&(0x7f0000004180)="36f1255dced5e126dd79360b9eac323993974d0efdacf1e00a523e2ca00fa4477165159561f62db7637c64a97a8a3a546464dadb883dc00dd388f36cceeb214c24b040e86910a17e92f2b51f1fd49092e85538e28cf33536b4e5362e99dd704fdf006987e2d76cbecae9a92c1ac61d2b5dcf262f5e5a535b8a40dce7fbc7", 0x7e}, {&(0x7f0000004200)="8c67f917e3d75b2e76cf7a6d7e9aba9b5c3f7ff57f2bed3eea936a1e0461a2a8fdb361a3d3c9dee29584b53cb75dea13605ddac87db3389569c84cd08e390c72fc", 0x41}, {&(0x7f0000004280)="e9b877ed7bb2820e8c805cee338e888735e2ee288f4e9fba4658ac6738bdcdf5b307b1b907329fc2455dbc220888730fbe55c294537a66ec34b471ccc80f945439b1b44adc9cc8319347443a447518bb8fa31e843eff162afcbe7eb2dbf957dbd81079d4ab27bf707782a71f07a540efbf67208c0d20c39818e8cab79946c4e100756425f3d769111d0d64b35082c8bef02f2ae6ad0bc7e88fde00d2501e81fd52233f7418e882274f6b6f15209ccd2b8942af1639", 0xb5}, {&(0x7f0000004340)="323f692dc82eb694d0004963da0fda785c30faef62d7b3278cf18092ac12b0e83c2d66b854fe77130e0ee072a786898694978abd3083459c7ced5e9b283fb5218f8e35c758ae7e1f25727e5ed028f02bbf2fab5969aa21b21a2f64fe299393461d10e44839374a2449d17c2caa6516b2a87244c29d1a79a8668873da2b0546633781120e314e2f7bafb49f", 0x8b}, {&(0x7f0000004400)="4847e0b57d2dd157ea4087b9f5f751e68cfce3f27aa675cc3908f079b43282752c99d46b0944b1d0ee868926af1a739afbfb9668dd25351be5521b364e545566345e5e8c6a34a6f7acd16949501f1b5b75c43b9b4455d9ad509d9f170ca41db9a9731ac87297205e1c2eee322d91b2458991cc96ddd42ab6fdc45841", 0x7c}, {&(0x7f0000004480)="e3fdbfc686a4cd08a3b6f355ddd4d15647ddc599a854aa2f4a40c3c90b837248cb318578ce16bcf0378a6b4945c2c6a9d62067f7e4778b26b7661d083ab7484455597b3ebbec05ed870dd97281fdbe3bb723b7a06c7038c062c20589755ddacda40111e1d8ab4188b92dca50370f66c015841a134b1b4176ffbd", 0x7a}, {&(0x7f0000004500)="6b085ee142fdc02294736c0b17ad2fe84908cd154dd680ed2879ce4e0dd4f9ffa670a9d4f5187c40e1ae34fe546feadea24481223072f281d342027fc5a18e3ae0b64d12", 0x44}, {&(0x7f0000004580)="538ae5aea82aa4a8ddcba2cebc536812d05833443b4ce5831d942cbbe38d090c7fd688cbf168df40bd9c4ba434e3a631987b4d907839f53f6807d9b871b5011373b6e4796aa5bd2c79ceb34b3e7c15a7903e3e13cd84b768ba", 0x59}, {&(0x7f0000004600)="bf58fbd3fe5ca52cf80931f2f4f2317e0fb3c16379a166db7234dc8f88b9dbae2bfd6fd366f99827f4e3f060b750f1cb7ae18bbba8e9b433a31cdedabce4d8ce15307fe89a5cd30f738a4ff6090809ed7d8c3d3f4790003f00cc3bd830aab7ed499b19b29e084bc5bb9b393bd0e093481402d18bf6e9ec21ea2b3d20ad471a31bd410c062c469224f00027035dfdcf043d1b132861881ae57f229e40670b4daa97d4d8e53643715c7c", 0xa9}, {&(0x7f00000046c0)="01140cbb937694c26c61bb34de24da5847e2941e1703331e8ffd2a8b2f7bd39f7815e61347e071fc86", 0x29}], 0xa, &(0x7f0000006f40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r19, r20, 0xffffffffffffffff, r21, r22, r23, r24]}}, @cred={{0x1c, 0x1, 0x2, {r25, 0xee00, r26}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108, 0x8000}}, {{&(0x7f0000007080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007280)=[{&(0x7f0000007100)="3bffecdf8b1696d2ddd63ad13cbc95b58ff4e2e6b5ffb92f0950dee137509e89bfdda2ff2cbf7737fb78a8adc884e27184278129474cabfa6088e0667faebcdff46ba6fb9d3a76a57f8a7d84faf7c25124e61c395bc4e3e59fca2e4be9772c307b910c9e59a3f63a9703d45d7cd54a747b7e35ec93a56a254800448e447cd5e211a04f21a28008bc15fe4864872c4c3d750b54046a51285287f0cf1c2ea04401b8", 0xa1}, {&(0x7f00000071c0)="010abc816cea79f4b067d82cbb79c006d2d015eefcd51b89bf3af81ad96d48b44c4349e40a15c928f67c56da5cd410498e130860630365b83202b00b26b8055cac81533cb4e3a0063ea925d1389b55449a207cf8dbe222231739baf6242115b6cb57050b0d1185e0f0443242203ac208cd0e910a874b23a5c2d5a896144cb5d6618423d3afa52b81f4fc35d3495dcba4b806dd9a557f0c3fc51cb935ee19d0cb29e05d9523e3566a3c9071", 0xab}], 0x2, &(0x7f0000009d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x120, 0x80}}, {{&(0x7f0000009e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000c080)=[{&(0x7f0000009f00)="1af8b79776c26da12759685b5f010702bb8eb67f2ab2e8d28702a2a352e644cb41285d5911cf90bed067e961fff7ba2f255d71", 0x33}, {&(0x7f0000009f40)="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", 0x1000}, {&(0x7f000000af40)="b615522c96f4b78abb5c1dfeee27ad2620aaaa5adb88d4230903c5f9f9360cd9834fccb3b03ac969232704fab594c51f2d443c124e8ac3445061fcb66b77f51da924304de6354d3c514569ac7a2804795c00f012c50d09dcd1cfd72fc66580ad77a7dfbc77c1ac11c9e407fddb02df8ef934196554", 0x75}, {&(0x7f000000afc0)="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", 0x1000}, {&(0x7f000000bfc0)="5d9abc88edc924c76bd649dfce405e9e773d", 0x12}, {&(0x7f000000c000)="03bdcf2861aaee5fc13f6778bd507d61a54702328b9de517df89cd3ca07df854d2c36ff0e67ffaa6d6c7ec64de0f1affdbcb", 0x32}, {&(0x7f000000c040)="49485744de50db3192eaf8b3b3ea17e1a423c387fd02effe49a94e4a5f16fb876d8c61cb2513b9f83e", 0x29}], 0x7, &(0x7f000000fac0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158, 0x48091}}], 0x8, 0x0) 1.242300907s ago: executing program 3 (id=5222): r0 = dup(0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x14, 0x6, {0x8000000000000000, @usage=0x9, 0x0, 0x2, 0x8, 0x7, 0x40, 0x6, 0x9a, @struct={0x8, 0x400}, 0x80000000, 0x9, [0x4, 0x0, 0xec3d, 0x535a, 0x9, 0x7fe000000000000]}, {0x80, @usage=0x9, 0x0, 0x6, 0x3, 0x1, 0x7, 0x10001, 0x41, @usage=0x1, 0x6, 0x8, [0x1e6c000, 0xffffffffffffff96, 0x5, 0x5, 0x1000, 0x2]}, {0x6, @struct={0x2, 0x9}, 0x0, 0x1000, 0x100000000, 0x90b4, 0x2, 0x4, 0x8, @struct={0x9, 0x1}, 0xffffffff, 0xf2, [0x3, 0x176, 0xfffffffffffffff8, 0xd, 0x8]}, {0x3, 0x0, 0x1000}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x14, 0x6, {0x8000000000000000, @usage=0x9, 0x0, 0x2, 0x8, 0x7, 0x40, 0x6, 0x9a, @struct={0x8, 0x400}, 0x80000000, 0x9, [0x4, 0x0, 0xec3d, 0x535a, 0x9, 0x7fe000000000000]}, {0x80, @usage=0x9, 0x0, 0x6, 0x3, 0x1, 0x7, 0x10001, 0x41, @usage=0x1, 0x6, 0x8, [0x1e6c000, 0xffffffffffffff96, 0x5, 0x5, 0x1000, 0x2]}, {0x6, @struct={0x2, 0x9}, 0x0, 0x1000, 0x100000000, 0x90b4, 0x2, 0x4, 0x8, @struct={0x9, 0x1}, 0xffffffff, 0xf2, [0x3, 0x176, 0xfffffffffffffff8, 0xd, 0x8]}, {0x3, 0x0, 0x1000}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000400)={r1, 0x2fae, 0x1, [0x400, 0xf, 0xf9, 0x8001, 0x18c], [0x9, 0x767, 0x6, 0x3, 0x7fffffff, 0x5, 0x6, 0x2, 0x7, 0x10000000, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x4, 0x7, 0x720, 0x4, 0x6, 0x100, 0xc, 0x6, 0x1, 0x1, 0x1, 0x755f79, 0x47b, 0x1, 0x6, 0x2, 0x8, 0xffffffffffffdbda, 0x8, 0x100, 0x8000000000000000, 0x1, 0x3000000000000, 0xa, 0x800, 0x6, 0x4, 0x701e, 0x5, 0x3, 0x7, 0x7, 0x0, 0x3e, 0x5, 0x3, 0xc, 0x7ff, 0x8, 0x4, 0xfffffffffffffffa, 0x0, 0x5dff, 0x3, 0x186, 0x1, 0x7fff, 0x4, 0x1000, 0x7fffffff, 0x3ff, 0x1eb, 0x5, 0x8, 0x100, 0x71c2d2f8, 0x1, 0x838000000000, 0x9, 0x8000000000000000, 0x7fffffff, 0x7, 0xff, 0x5, 0x1, 0xffff, 0x5c0000000000, 0x857, 0xfffffffffffffffa, 0x7, 0x100000000, 0xf5f, 0x0, 0x3, 0x8, 0x9, 0x1, 0x8000000000000001, 0x1ff, 0x5, 0xf3, 0x400, 0xb, 0x0, 0x6, 0x9, 0x4, 0x1, 0x5, 0x6, 0x3, 0x1ff, 0x2, 0x6, 0x3f80, 0x6, 0x89d, 0x9, 0x6, 0x6, 0x8000, 0x0, 0x2, 0x8, 0x7fffffffffffffff, 0x6, 0x3, 0x7]}) fchdir(r0) (async) fchdir(r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r2, 0x2, 0x70bd29, 0x1, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x101}, 0x4044000) r3 = memfd_secret(0x80000) preadv(r3, &(0x7f0000002d80)=[{&(0x7f0000000980)=""/243, 0xf3}, {&(0x7f0000000a80)=""/207, 0xcf}, {&(0x7f0000000b80)=""/247, 0xf7}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/106, 0x6a}, {&(0x7f0000001d00)=""/119, 0x77}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x7, 0xa, 0x101) write$P9_RWRITE(r0, &(0x7f0000002e00)={0xb, 0x77, 0x2, 0x3e}, 0xb) (async) write$P9_RWRITE(r0, &(0x7f0000002e00)={0xb, 0x77, 0x2, 0x3e}, 0xb) syz_genetlink_get_family_id$ipvs(&(0x7f0000002e80), r0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002e80), r0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000002fc0)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f80)={&(0x7f0000002ec0)={0xb8, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) (async) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000002fc0)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f80)={&(0x7f0000002ec0)={0xb8, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) ioctl$RTC_WIE_OFF(r3, 0x7010) io_uring_setup(0x5a0, &(0x7f0000003000)={0x0, 0xf05b, 0x1000, 0x3, 0x1ef, 0x0, r3}) (async) r5 = io_uring_setup(0x5a0, &(0x7f0000003000)={0x0, 0xf05b, 0x1000, 0x3, 0x1ef, 0x0, r3}) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000003080)) io_setup(0x335d, &(0x7f00000030c0)=0x0) io_cancel(r6, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x5, 0x7fff, r3, &(0x7f0000003100)="53f31c07826f2bd7022202c00888e028959da0220bbefa2886b144ad40037ea76f3b741885342dee3015e042321050c82a15802979cd2cd09556c25df2efb1882dba1608e6d0862e16102d8f0cf0af474a82c6f00a04c2b8608aec731dd1b8dafe3f6eb8d969016bc19f794150e663d5", 0x70, 0xb, 0x0, 0x3}, &(0x7f00000031c0)) ioctl$KVM_TDX_INIT_VM(r0, 0xc008aeba, &(0x7f0000003380)={0x1, 0x0, &(0x7f0000003200)={0x1, 0x200, [0x0, 0xc, 0x80000000, 0x4, 0x2, 0x1], [0x8, 0x9, 0xa3f6, 0x4c000000, 0x0, 0xffffffff], [0xffffffff80000001, 0x7fff, 0x5, 0xffffffff, 0x2, 0x3], '\x00', {0x3, 0x0, [{0x80000001, 0x6, 0x0, 0x4, 0x3, 0x80}, {0x140000009, 0x10001, 0x4, 0x3, 0x1000, 0xc19, 0x2}, {0x80000019, 0x8, 0x1, 0x6, 0x4, 0x5, 0xb}]}}}) (async) ioctl$KVM_TDX_INIT_VM(r0, 0xc008aeba, &(0x7f0000003380)={0x1, 0x0, &(0x7f0000003200)={0x1, 0x200, [0x0, 0xc, 0x80000000, 0x4, 0x2, 0x1], [0x8, 0x9, 0xa3f6, 0x4c000000, 0x0, 0xffffffff], [0xffffffff80000001, 0x7fff, 0x5, 0xffffffff, 0x2, 0x3], '\x00', {0x3, 0x0, [{0x80000001, 0x6, 0x0, 0x4, 0x3, 0x80}, {0x140000009, 0x10001, 0x4, 0x3, 0x1000, 0xc19, 0x2}, {0x80000019, 0x8, 0x1, 0x6, 0x4, 0x5, 0xb}]}}}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) bind$inet(r3, &(0x7f00000033c0)={0x2, 0x441, @loopback}, 0x10) ioctl$mixer_OSS_GETVERSION(r3, 0x80044d76, &(0x7f0000003400)) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000003440)=""/12) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000003480)=0x10) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000003480)=0x10) write$P9_RWRITE(r0, &(0x7f00000034c0)={0xb, 0x77, 0x3, 0x6}, 0xb) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000003500)="03c7f637ce77c737443d2163b4a2519aac3cb91e90916c5efbb19bb87e847eb3792cd02cb42ebe3d9aedfe41e960c4ffc5b8d93a7a3a492ca723", 0x3a) (async) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000003500)="03c7f637ce77c737443d2163b4a2519aac3cb91e90916c5efbb19bb87e847eb3792cd02cb42ebe3d9aedfe41e960c4ffc5b8d93a7a3a492ca723", 0x3a) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000003580), 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000035c0)=@o_path={&(0x7f0000003540)='./file0\x00', 0x0, 0x4000, r7}, 0x18) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000003600)={0x9282, r7}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000003680), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000037c0)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003780)={&(0x7f00000036c0)={0xb0, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd5}, {0x6, 0x16, 0xfffd}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0xbc8c}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000037c0)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003780)={&(0x7f00000036c0)={0xb0, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd5}, {0x6, 0x16, 0xfffd}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0xbc8c}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000003800)={r7, 0x9, {0x0, 0x0, 0x0, 0xffffffffffffff95, 0xfffffffffffffff9, 0x0, 0x2, 0x15, 0x3d, "d5efb230513902614ea727d152a966680582ba65305ee9d7053b8ba6a876a2292e7384519fd2bb5668f7145035967f30baf015a64dab5853e645e65ce8332ee2", "1758a4bf4c0f67373fd8c4311a5f0d184fd58c8785248fb5c410f3f2fb54ea38d8c4634ad81465d2064f1db72c2e6e4075f93ab590b344636b7f2c969f0566d3", "695f54a4b634342b3cef9f2ef6eaeaf592567b1478447e8b18f0add1242d85a6", [0xffffffffffffffff, 0x802]}}) 1.241544909s ago: executing program 7 (id=5223): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@newsa={0xf0, 0x10, 0x200, 0x70bd2a, 0x25dfdbfe, {{@in=@loopback, @in6=@empty, 0x4e21, 0x9, 0x4e22, 0x97, 0x2, 0x0, 0xa0, 0x16}, {@in=@loopback, 0x4d6, 0xff}, @in6=@loopback, {0x4, 0x9, 0x0, 0x1, 0x4d7, 0x7ff, 0x2, 0x10001}, {0x7f, 0x80000004, 0x10001, 0x1}, {0xffff, 0x9, 0xf}, 0x70bd2b, 0x3504, 0x2, 0x4, 0x10}}, 0xf0}}, 0x4040) 955.891769ms ago: executing program 1 (id=5224): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac1(0x2, 0xf0, &(0x7f0000000cc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x3, 0x1, 0x5, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x6}, [@feature_unit={0x11, 0x24, 0x6, 0x4, 0x4, 0x5, [0xd, 0x9, 0x3, 0x9, 0xd], 0x3}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0x6, "bf"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x5, 0xff, "05"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x5, 0x400, 0xf7, "b32617"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2b, 0x1, 0x5, 0x6, "", "d05aaf"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x51, 0x2, 0x0, 0x40, "0a17"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0x7ff, 0x1, "9384a91c684194"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0x7, "f8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x38, 0x6f, 0xed, {0x7, 0x25, 0x1, 0x82, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x72, 0x2, 0x6, 0x63, "d3f2b8871f84"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x2, 0x2, 0x40, "506ecec23ef6c1"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x9, 0x40, "", 'Z'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x8, 0xca, {0x7, 0x25, 0x1, 0x0, 0x0, 0x8}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x9, 0x1, 0x9, 0x20, 0x9}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x7c, &(0x7f0000000300)=@string={0x7c, 0x3, "48501b8016941a5d2956940afbd4987a731875bcca510408ab3d160ba1a900f78bd6dfbc244409a7e198d984c82f541db70ad0ad3a326d3d1181e2597050b15b6c9a6f901ebf36a0b90efd3b9f586b8228b52e813c2aa0ff282dd36ecc6168aaf6a57c9aa7537892e9ce5285c24b68289fe5b81dc323c5a4c87d"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x95, &(0x7f00000003c0)=@string={0x95, 0x3, "06535496305042319bd0daebf82d553a43b96601dba7eb2318fce177d719274a6f46a69448aacca437ed33ef23ddf9d39f7ae3603b40fd357c5e275c949643823787181f5b86096173f028f0a8225c79d4615590de74e8015609c54979c2e81d59ffb627221c4c7ff54d76884c910cbfcf711156963ec585ff4143559d8d53f0545cbcfb0eb4c0fb0598b681ff43ee38fa6b98"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io(r1, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x40, 0x7, 0x19, {0x19, 0x21, "c80ba7db9a7e084a2679c4f05af539cbc4b549888afa8a"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, &(0x7f0000000600)={0x0, 0xf, 0xf3, {0x5, 0xf, 0xf3, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0xee, 0x0, 0xd549, 0xf000, 0x4}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa, 0x0, 0x9, 0xc6f, 0xff}, @generic={0xca, 0x10, 0xa, "057795ac55857c7817a91f488cacab421a1991263744c4368a53414884417ff73919cb7d7aa3af9d82805fc67dd60d7123ee9ed9ee29884a05c55f67928c6f0b02aba2d675e504f24effe50f054dd24875d962df3e83928dc4622b4ccbdbd35af50269995a6c1e2d2490d6549319045d502bc93d51b201c134d847483dd3c043887612c43cef7e06fa71a5fc09cd36cb97880e83673bc82a19d5e05c59f96c1ffb2442a81548b83afb6c7a57c86dc75866a790580bb71e905fcfb11e20046ea31e3d40b9453157"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x4, 0x1}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x2, 0x39, "de634333", "b481497e"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x9, 0xff, 0xd, 0x4, 0x9}}}, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)={0x20, 0xe, 0x3c, "cad0736e1ec141df69a6975571f2486abd8fd19786ed18ff282bcc1b1553463f79c390c240c153a95f7116dc2c8a81b8b6f3288e9881fe443b3b61d7"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000880)={0x0, 0x8, 0x1}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1, 0x7}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x140, 0x2}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "c8b1"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a80)={0x40, 0x17, 0x6}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "dd79"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x9a}}) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 955.13675ms ago: executing program 9 (id=5225): syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000080)) (async) r0 = syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) r3 = eventfd(0x401) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) (async) r5 = openat$cgroup_procs(r4, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) r6 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000100)) fsetxattr$security_selinux(r0, &(0x7f0000000200), &(0x7f0000000300)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x2) write$cgroup_int(r6, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd_index=0x5, 0x4, 0x6, 0xe, 0x14, 0x1, {0x1}}) io_uring_enter(r0, 0x627, 0x60e0, 0x16, 0x0, 0x0) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r7, &(0x7f0000001940)={0xa, 0x0, 0x0, @private2, 0x9}, 0x1c) (async) connect$inet6(r7, &(0x7f0000001940)={0xa, 0x0, 0x0, @private2, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000075bd0016", 0xfe60) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f00000000c0)='\x00', 0x8000, &(0x7f0000000100)={@align=0x4, {0xfffc, 0x6, 0xbc, 0x1}}, 0x3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x3}, {[0xfd197ad, 0xff0, 0x8, 0x9]}, 0xfffffff0, 0x0, &(0x7f0000000200)}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f00000000c0)='\x00', 0x8000, &(0x7f0000000100)={@align=0x4, {0xfffc, 0x6, 0xbc, 0x1}}, 0x3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x3}, {[0xfd197ad, 0xff0, 0x8, 0x9]}, 0xfffffff0, 0x0, &(0x7f0000000200)}) inotify_init() (async) inotify_init() ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f00000002c0)) 734.720012ms ago: executing program 3 (id=5226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb, 0x20}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) 566.038524ms ago: executing program 7 (id=5227): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x40000003, 0x0, 0x2], [0x0, 0x3ff, 0xfffffffd, 0xffffff7f, 0x0, 0x0, 0x7], [0x0, 0x20000232, 0x200006, 0x0, 0x6, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x5}, {0xffffffff}, {0x0, 0x1}, {0x400000}, {}, {0x4, 0x4}, {0x1}, {0x0, 0x9}, {0x0, 0x7fffffff}, {0x8}, {0x804000}]}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x21) recvmsg$unix(r3, &(0x7f00000007c0)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f00000003c0)=""/28, 0x1c}, {&(0x7f0000000500)=""/38, 0x26}, {&(0x7f0000000540)}, {&(0x7f0000000880)=""/129, 0x81}], 0x9, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b40)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1, 0xc}, {0x2, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xdf}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x7ff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x4b}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x4}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x2}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x101}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4008}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 458.071951ms ago: executing program 3 (id=5228): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r3, &(0x7f0000001600), 0x0}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x68, r6, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xf5, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0xd}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c4, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x4}, {0x0, 0x2}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x498, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_ACT={0x480, 0x7, [@m_sample={0x40, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffffb}]}, {0xb, 0x6, "e478cd58fb5be1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x98, 0x18, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1f7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0xfff, 0x5, 0x0, 0xfffffffc}, 0x1}}]}, {0x3e, 0x6, "52086e6f44e2e446ae7f0e3361b723b1d91ee37938cf4ff588ba26050a8303912607013276ffe3bc45b5614cec54804ca5a24ea161e92ce476c6"}, {0xc}, {0xc, 0x8, {0x0, 0x4}}}}, @m_xt={0x164, 0x1, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x73c}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xe79e}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8}]}, {0xdd, 0x6, "9eac568f216b4138a0b643b145da5137c1a0422b251da94b69f2ad8d396155f9e1d576eb26863050b0dc7e02ff53d92c0d9911f220e22bd66c57eea91159e9fa8d38077ae527e99af97acd872eef494d299e9a83e863371ba1bd9afea0218e86efcf82fb1d4f3e4336ce2ce4be5eab3d0d74b13f195f2c8957623d1a5f369733d30608ad10412224646fd94ecaa215e3baccb1b8d641587356ca3e047c6fd810974ccd3602e4ca9b84abaff02f279ce4e1984448f0284c26111dd72394b39bc201a65f95b71bb30b6c56b7790ec99c3eeba9c469db12e44101"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x168, 0x15, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xd548, 0x10000005, 0x4, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xa3ab, 0x6, 0x5, 0x100}}, @TCA_DEF_DATA={0x8, 0x3, 'u32\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x56ab, 0x7, 0xfff, 0x9}}, @TCA_DEF_DATA={0xc, 0x3, 'nl80211\x00'}]}, {0xe0, 0x6, "e4729493fdc99db697908d7a35fbfebe4977db30c642e702babd93b51c40ce973d578dcfd440385b07aa384010c3eb31042229d740053c37d30af4ef91d475d51cf214f9fb6ca2016b0a8b56a7738a3b56e907b0e2994841bb0c9fcdb75dca0e529f389518e927b88790a3490c4ce0b24edfede6bb78df45a3fb4291f0083be34188d9cdf1d863c78ac4c73dcfc0e85c88d61191247d6cfd5de3bd2654a6cbd3002e6f075cd817858f496dbb0948047a76ad2702209e7ecd5a5825831e1e57d58e17415d7e5e3cf62184ce685ef97f83bf024929aed03e2d8c7f7697"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0xd8, 0x8, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9e400000, 0x1, 0x10000000, 0x8, 0xe}, @multicast2, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x10000, 0x2, 0x0, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff}}]}, {0x5d, 0x6, "72aec81e50f06b59429b0f52cfa7c57c25f1499aad23e8a0437ac94eaa32c018a51fc4d9cc22be1a258ad8a89bebd2835baa5e2e35a7483f31776ab49b37341e420abfaaf3d9e26fbd5986776c8eb845d0737c76aad7685c40"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 344.396035ms ago: executing program 3 (id=5229): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004"], 0x200) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x11, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x28}}, 0x8800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000070000000000000002900000004000000040a00000000000007080000000100099f000740000000010e7a01800500000000000000090000000000000004000000000000000600000000000000040000000000000000040000000000000b0000000000000005020a7e00010005020bf400600100000000000029000000360000003a28000000000000000100c910fe80000000000000000000000000001304c5e7bc471d1f4b81f875c4135b0112e3f11d8d9cec19d57d94dc4735e4b04fa3dbaa5a7ab7e078480db77c55814f0d03fb763cd7d9c0fa7b6d472ec65b1b31ab6abccf7ed6f8f8c627657cab83aa09c920084817a84c29cf77cf8b38bad4293aa21d949aea4e60236248c1be6ea66aff5159c957be6b6fd6a9a675cfb9f012f418ea189749d1bfd7f51b351ef32e5fd3174012989d4efce42302202446003316dfd13853f010fccca92f0e4818342e0f517e1832ea2c8cc06ea81dd213609f6eb1dab23a2d4b010100c20400000006c91000000000000000000000ffff0a0101010103000000c20400000005c204000007ff0738000000010c0905000900000000000000000000000600000039be000000000000ff0f000000000000b5080000000000000000000000000000000000000000180000000000000029000000390000000000000000000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff020000000000000000000000000001a76cad192de3bd3742733ad518fd8bfee2060269fb36f181ace957adf3bd45c8f9c951317163a46a12c15877cfa5975c7425fbb034d57b5bc8f8c9fd5849d16bbc788a381e28aa485ef9ec802e89ea1df37cba6208f0d0afedf740912fb4a942d3b7ad2496443344b4c1eadbd13c34121d2c45a914449fecd5bb26a957f29f0bff93d29c74eb1e84abec8152cc700e8224e6c43d1a87071f68234a117054a969d7b6c0b668aa101f13c8e16472d0892a8a44a258c30efbeebc0ce3f86b994a933aaebe62fd0e8c25e4"], 0x250}}], 0x1, 0x810) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001e00995e00000000000000000c00000000000000000001"], 0x1c}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x4) getdents(r7, &(0x7f0000000fc0)=""/4096, 0x1000) ioctl$CDROMREADTOCHDR(r7, 0x5305, &(0x7f0000000340)={0x6, 0x6}) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0, 0xfffffffffffffe78}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000540)={0x4a00000000000000, 0xb000, 0x8, 0x0, 0x1a}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 225.804097ms ago: executing program 9 (id=5230): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) recvfrom$inet(r0, &(0x7f0000000100)=""/171, 0xab, 0xa2, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40186f40, &(0x7f0000000000)={0xffffffff, 0x0, 0x9, 0x8, 'syz0\x00', 0x210002}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x3, 0xc8, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x8}}]}, 0x30}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x40}}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x2, 0x0, &(0x7f0000000040)) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f00000006c0)={0xdbb0, 0x0, r2}) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000000040)=[{0x27, '\x00', @st={0x4, [{0x2, @svalue=0x8000000000000001}, {0x2, @uvalue=0xfff}, {0x1, @svalue=0xdf03}, {0x1, @uvalue=0x7c31}]}, 0x3}]}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x25dfdbfd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x81, 0xffffadf3, 0x1, 0x3, 0x10000}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 0s ago: executing program 3 (id=5231): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010029bd8c00fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="331900000300000014001680100001800c0009000180000000000000050021"], 0x3c}}, 0x4000000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0xfffffffe, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x20040000) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c0900"], 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000040000000000000000000bfef9004af9a20eaf3"], 0x78) recvmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): dv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.693540][T24903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.697846][T24903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.700165][T24903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.710526][T24903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.746019][T24903] hsr_slave_0: entered promiscuous mode [ 375.748860][T24903] hsr_slave_1: entered promiscuous mode [ 375.751019][T24903] debugfs: 'hsr0' already exists in 'hsr' [ 375.752835][T24903] Cannot create hsr debugfs directory [ 375.966381][T25379] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4695'. [ 376.011668][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.106590][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.129125][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.160182][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.184094][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.263325][T25402] ptrace attach of "/syz-executor exec"[19456] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 376.591904][T25408] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4697'. [ 376.683755][ T46] hsr_slave_0: left promiscuous mode [ 376.694501][ T46] hsr_slave_1: left promiscuous mode [ 376.699741][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.713079][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.798783][T25436] netfs: Couldn't get user pages (rc=-14) [ 377.320464][ C2] net_ratelimit: 69082 callbacks suppressed [ 377.320479][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.320508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.322421][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.326302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.329708][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.333396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.336879][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.340678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.344417][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.348449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 377.379695][T25385] xfrm0 speed is unknown, defaulting to 1000 [ 377.518806][T25470] bond7: (slave bond_slave_1): Device is not our slave [ 377.521121][T25470] bond7: option active_slave: invalid value (bond_slave_1) [ 377.596799][T25470] bond7 (unregistering): Released all slaves [ 377.704414][ T5938] Bluetooth: hci4: command tx timeout [ 378.028076][T25547] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4701'. [ 378.386433][ T5938] Bluetooth: hci0: command tx timeout [ 379.254455][T25385] chnl_net:caif_netlink_parms(): no params data found [ 379.301180][ T5938] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 379.620939][T25385] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.633183][T25385] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.638230][T25385] bridge_slave_0: entered allmulticast mode [ 379.647306][T25385] bridge_slave_0: entered promiscuous mode [ 379.654058][T25385] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.659194][T25385] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.663679][T25385] bridge_slave_1: entered allmulticast mode [ 379.667381][T25385] bridge_slave_1: entered promiscuous mode [ 379.701633][T25385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.706380][T25385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.728425][T25385] team0: Port device team_slave_0 added [ 379.732289][T25385] team0: Port device team_slave_1 added [ 379.766848][T25385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.777940][T25385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.787732][T25385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.796533][T25385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.799123][T25385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.811548][T25385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.884179][T25385] hsr_slave_0: entered promiscuous mode [ 379.887050][T25385] hsr_slave_1: entered promiscuous mode [ 379.890060][T25385] debugfs: 'hsr0' already exists in 'hsr' [ 379.891994][T25385] Cannot create hsr debugfs directory [ 379.927095][ T5938] Bluetooth: hci4: command tx timeout [ 380.155144][ T40] kauditd_printk_skb: 108 callbacks suppressed [ 380.155159][ T40] audit: type=1400 audit(2000000006.689:32717): avc: denied { bpf } for pid=25704 comm="syz.9.4705" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 380.177598][T25706] Bluetooth: MGMT ver 1.23 [ 380.191508][ T40] audit: type=1400 audit(2000000006.717:32718): avc: denied { prog_load } for pid=25704 comm="syz.9.4705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 380.210862][ T40] audit: type=1400 audit(2000000006.726:32719): avc: denied { perfmon } for pid=25704 comm="syz.9.4705" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 380.217159][ T40] audit: type=1400 audit(2000000006.783:32720): avc: denied { prog_run } for pid=25704 comm="syz.9.4705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 380.241266][ T40] audit: type=1400 audit(2000000006.792:32721): avc: denied { read } for pid=25704 comm="syz.9.4705" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 380.248237][ T40] audit: type=1400 audit(2000000006.792:32722): avc: denied { open } for pid=25704 comm="syz.9.4705" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 380.273077][ T40] audit: type=1400 audit(2000000006.792:32723): avc: denied { read } for pid=25704 comm="syz.9.4705" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 380.292939][T25811] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4706'. [ 380.298194][ T40] audit: type=1400 audit(2000000006.792:32724): avc: denied { open } for pid=25704 comm="syz.9.4705" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 380.319224][ T40] audit: type=1400 audit(2000000006.792:32725): avc: denied { map_create } for pid=25704 comm="syz.9.4705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 380.347559][ T40] audit: type=1400 audit(2000000006.792:32726): avc: denied { read } for pid=25704 comm="syz.9.4705" dev="nsfs" ino=4026534083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 380.469793][T25810] bond1: (slave bond_slave_1): Device is not our slave [ 380.471783][T25810] bond1: option active_slave: invalid value (bond_slave_1) [ 380.493422][T25810] bond1 (unregistering): Released all slaves [ 380.595451][ T46] bridge_slave_1: left allmulticast mode [ 380.597743][ T46] bridge_slave_1: left promiscuous mode [ 380.599744][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.603411][ T5938] Bluetooth: hci0: command tx timeout [ 380.753733][ T46] x9: left allmulticast mode [ 380.755867][ T46] x9: left promiscuous mode [ 380.758023][ T46] bridge0: port 1(1x9) entered disabled state [ 380.783400][ T46] vlan0: left promiscuous mode [ 380.787958][ T46] bridge7: port 2(vlan0) entered disabled state [ 380.809980][ T46] veth1: left promiscuous mode [ 380.812359][ T46] bridge7: port 1(veth1) entered disabled state [ 381.033496][ T46] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 381.218949][T25891] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4710'. [ 381.230559][T25891] netlink: 'syz.7.4710': attribute type 2 has an invalid length. [ 381.233429][T25891] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4710'. [ 381.253413][ T46] bond1 (unregistering): (slave bridge3): Releasing active interface [ 381.625983][ T46] bond6 (unregistering): (slave bridge10): Releasing active interface [ 381.765255][ T46] bond4 (unregistering): (slave bond0): Releasing active interface [ 381.777007][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.789127][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.795603][ T46] bond0 (unregistering): Released all slaves [ 381.805764][ T46] bond1 (unregistering): Released all slaves [ 381.822853][ T46] bond2 (unregistering): (slave bond3): Releasing backup interface [ 381.830196][ T46] bond2 (unregistering): Released all slaves [ 381.846370][ T46] bond3 (unregistering): Released all slaves [ 381.858032][ T46] bond4 (unregistering): Released all slaves [ 381.902474][ T46] bond5 (unregistering): Released all slaves [ 381.922411][ T46] bond6 (unregistering): Released all slaves [ 382.012409][T24903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 382.166961][T25906] overlayfs: missing 'workdir' [ 382.285654][T24903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 382.307564][T24903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 382.346431][ T46] : left promiscuous mode [ 382.429116][T24903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 382.440016][ T46] !: left promiscuous mode [ 382.660479][ C1] net_ratelimit: 71611 callbacks suppressed [ 382.660491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 382.660522][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.662356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.666151][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.669484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.673230][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.676584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.680303][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.683742][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.687429][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.802036][ T46] IPVS: stopping master sync thread 14597 ... [ 382.820454][ T5938] Bluetooth: hci0: command tx timeout [ 383.004361][T25385] bond0: (slave netdevsim0): Releasing backup interface [ 383.037064][T24903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.152757][T24903] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.160153][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.162769][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.181895][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.184326][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.275765][T24903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.369398][T25954] netlink: 'syz.9.4718': attribute type 3 has an invalid length. [ 383.371990][T25954] netlink: 'syz.9.4718': attribute type 3 has an invalid length. [ 383.557152][T25956] bond7: (slave bond_slave_1): Device is not our slave [ 383.559828][T25956] bond7: option active_slave: invalid value (bond_slave_1) [ 383.628559][T25956] bond7 (unregistering): Released all slaves [ 383.792813][ T46] hsr_slave_0: left promiscuous mode [ 383.872959][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.882101][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.953463][T26037] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4721'. [ 383.992148][T26039] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4721'. [ 384.008028][T26036] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4721'. [ 384.113907][ T46] team0 (unregistering): Port device team_slave_1 removed [ 384.311849][T25385] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 384.376977][T25385] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 384.405746][T25385] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 384.428465][T25385] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 384.459612][T24903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.634247][T24903] veth0_vlan: entered promiscuous mode [ 384.667289][T24903] veth1_vlan: entered promiscuous mode [ 384.689355][T25385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.708718][T25385] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.715630][T24903] veth0_macvtap: entered promiscuous mode [ 384.722098][ T6827] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.724404][ T6827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.733902][T24903] veth1_macvtap: entered promiscuous mode [ 384.746761][ T6827] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.749057][ T6827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.758110][T24903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.770437][T25385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.777381][T25385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.796563][T24903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.807668][ T6823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.810618][ T6823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.823651][ T6823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.849175][ T6823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.982233][T26074] netlink: 'syz.9.4725': attribute type 3 has an invalid length. [ 384.986285][T26074] netlink: 'syz.9.4725': attribute type 3 has an invalid length. [ 385.040692][ T5938] Bluetooth: hci0: command tx timeout [ 385.111157][T25385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.196820][ T6825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.199859][ T6825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.217482][T25385] veth0_vlan: entered promiscuous mode [ 385.237567][T25385] veth1_vlan: entered promiscuous mode [ 385.252708][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.255237][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.274972][T25385] veth0_macvtap: entered promiscuous mode [ 385.284413][T25385] veth1_macvtap: entered promiscuous mode [ 385.293012][T25385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.310326][T25385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.317915][ T6825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.321401][ T6825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.328513][ T6825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.415518][ T6825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.514737][ T6829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.528581][ T6829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.603076][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 385.603088][ T40] audit: type=1400 audit(2000000011.886:32819): avc: denied { create } for pid=26109 comm="syz.3.4729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 385.609993][T26105] netlink: 'syz.7.4728': attribute type 4 has an invalid length. [ 385.615730][ T6829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.615743][ T6829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.619195][ T40] audit: type=1400 audit(2000000011.896:32820): avc: denied { bind } for pid=26109 comm="syz.3.4729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 385.619543][ T40] audit: type=1400 audit(2000000011.896:32821): avc: denied { setopt } for pid=26109 comm="syz.3.4729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 385.619751][ T40] audit: type=1400 audit(2000000011.896:32822): avc: denied { accept } for pid=26109 comm="syz.3.4729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 385.627765][ T40] audit: type=1400 audit(2000000011.896:32823): avc: denied { mount } for pid=25385 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 385.628998][T26105] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4728'. [ 385.656118][ T40] audit: type=1400 audit(2000000011.896:32824): avc: denied { mounton } for pid=25385 comm="syz-executor" path="/syzkaller.Jd1ZE7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 385.713854][ T40] audit: type=1400 audit(2000000011.905:32825): avc: denied { write } for pid=26109 comm="syz.3.4729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 385.751002][ T40] audit: type=1400 audit(2000000011.905:32826): avc: denied { read } for pid=26109 comm="syz.3.4729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 385.779939][ T40] audit: type=1400 audit(2000000011.905:32827): avc: denied { ioctl } for pid=26109 comm="syz.3.4729" path="socket:[101568]" dev="sockfs" ino=101568 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.799202][ T40] audit: type=1400 audit(2000000011.924:32828): avc: denied { unmount } for pid=25385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 385.822760][T26123] netlink: 'syz.1.4700': attribute type 1 has an invalid length. [ 385.840721][T26123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4700'. [ 385.843588][T26123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4700'. [ 386.133623][T26133] overlayfs: missing 'lowerdir' [ 386.359762][T26144] FAULT_INJECTION: forcing a failure. [ 386.359762][T26144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.363935][T26144] CPU: 0 UID: 0 PID: 26144 Comm: syz.9.4736 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.363952][T26144] Tainted: [L]=SOFTLOCKUP [ 386.363956][T26144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.363963][T26144] Call Trace: [ 386.363968][T26144] [ 386.363972][T26144] dump_stack_lvl+0x100/0x190 [ 386.363994][T26144] should_fail_ex.cold+0x5/0xa [ 386.364008][T26144] _copy_from_user+0x2e/0xd0 [ 386.364022][T26144] kstrtouint_from_user+0xd6/0x1d0 [ 386.364039][T26144] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 386.364055][T26144] ? __lock_acquire+0x4a5/0x2630 [ 386.364074][T26144] ? lock_acquire+0x1cf/0x380 [ 386.364093][T26144] proc_fail_nth_write+0x83/0x220 [ 386.364107][T26144] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 386.364124][T26144] vfs_write+0x2aa/0x1070 [ 386.364140][T26144] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 386.364154][T26144] ? __pfx_vfs_write+0x10/0x10 [ 386.364168][T26144] ? __fget_files+0x215/0x3d0 [ 386.364187][T26144] ? __fget_files+0x21f/0x3d0 [ 386.364207][T26144] ksys_write+0x12a/0x250 [ 386.364221][T26144] ? __pfx_ksys_write+0x10/0x10 [ 386.364244][T26144] do_syscall_64+0x106/0xf80 [ 386.364259][T26144] ? clear_bhb_loop+0x40/0x90 [ 386.364273][T26144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.364284][T26144] RIP: 0033:0x7f9a8015c84e [ 386.364293][T26144] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 386.364303][T26144] RSP: 002b:00007f9a81027fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 386.364314][T26144] RAX: ffffffffffffffda RBX: 00007f9a810286c0 RCX: 00007f9a8015c84e [ 386.364321][T26144] RDX: 0000000000000001 RSI: 00007f9a810280a0 RDI: 0000000000000004 [ 386.364327][T26144] RBP: 00007f9a81028090 R08: 0000000000000000 R09: 0000000000000000 [ 386.364333][T26144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.364339][T26144] R13: 00007f9a80416038 R14: 00007f9a80415fa0 R15: 00007ffc30726e08 [ 386.364354][T26144] [ 386.534652][T26151] netlink: 'syz.7.4732': attribute type 10 has an invalid length. [ 386.545928][T26151] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 386.549603][T26151] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 386.556971][T26151] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 386.635039][T26159] netlink: 'syz.7.4740': attribute type 29 has an invalid length. [ 386.690682][T26157] netlink: 'syz.9.4738': attribute type 3 has an invalid length. [ 386.713046][T26157] netlink: 'syz.9.4738': attribute type 3 has an invalid length. [ 386.767173][T26161] netlink: 'syz.7.4740': attribute type 29 has an invalid length. [ 388.000456][ C1] net_ratelimit: 68245 callbacks suppressed [ 388.000469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.000506][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.002691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 388.006298][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.010236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.013873][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.017600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.021306][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.025073][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 388.028715][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.553379][T26210] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 388.561932][T26210] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 389.463339][T26235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4755'. [ 389.558247][T26235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.665650][T26283] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4760'. [ 389.668423][T26283] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4760'. [ 389.680180][ T6825] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.683067][ T6825] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.686370][ T6825] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.691026][T26283] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4760'. [ 389.693903][T26283] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4760'. [ 389.696848][ T6825] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.751594][T26288] netlink: 'syz.9.4761': attribute type 3 has an invalid length. [ 389.755704][T26288] netlink: 'syz.9.4761': attribute type 3 has an invalid length. [ 389.855066][ C1] sched: DL replenish lagged too much [ 390.226542][T26310] netlink: 'syz.3.4766': attribute type 10 has an invalid length. [ 390.238439][T26310] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.242386][T26310] bridge_slave_1: left allmulticast mode [ 390.248302][T26310] bridge_slave_1: left promiscuous mode [ 390.254286][T26310] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.292232][T26310] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 390.417189][T26320] bond1: (slave bond_slave_1): Device is not our slave [ 390.419432][T26320] bond1: option active_slave: invalid value (bond_slave_1) [ 391.680739][T26320] bond1 (unregistering): Released all slaves [ 391.711103][T26359] netlink: 'syz.9.4770': attribute type 3 has an invalid length. [ 391.714068][T26359] netlink: 'syz.9.4770': attribute type 3 has an invalid length. [ 391.840835][ T40] kauditd_printk_skb: 104 callbacks suppressed [ 391.840848][ T40] audit: type=1400 audit(2000000017.741:32933): avc: denied { mounton } for pid=26397 comm="syz.9.4773" path="/171/file0" dev="tmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 391.851024][ T40] audit: type=1400 audit(2000000017.741:32934): avc: denied { read } for pid=26398 comm="syz.1.4772" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 391.858156][ T40] audit: type=1400 audit(2000000017.750:32935): avc: denied { open } for pid=26398 comm="syz.1.4772" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 391.885142][ T40] audit: type=1400 audit(2000000017.778:32936): avc: denied { mount } for pid=26397 comm="syz.9.4773" name="/" dev="9p" ino=76808287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 391.911682][ T40] audit: type=1400 audit(2000000017.788:32937): avc: denied { unlink } for pid=26397 comm="syz.9.4773" name="#66" dev="tmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 391.924204][ T40] audit: type=1400 audit(2000000017.788:32938): avc: denied { ioctl } for pid=26398 comm="syz.1.4772" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 391.928850][T26399] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 391.950473][ T40] audit: type=1400 audit(2000000017.797:32939): avc: denied { getattr } for pid=26397 comm="syz.9.4773" name="/" dev="9p" ino=76808287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 391.965945][ T40] audit: type=1400 audit(2000000017.835:32940): avc: denied { read write } for pid=25385 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 391.990898][T26404] 9pnet_virtio: no channels available for device syz [ 391.993030][ T40] audit: type=1400 audit(2000000017.835:32941): avc: denied { open } for pid=25385 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.022999][ T40] audit: type=1400 audit(2000000017.835:32942): avc: denied { ioctl } for pid=25385 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.213741][T26413] loop6: detected capacity change from 0 to 8 [ 392.222894][T26410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4775'. [ 392.225706][T26410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4775'. [ 392.362899][T26413] loop6: detected capacity change from 8 to 7 [ 392.368798][ C0] blk_print_req_error: 10 callbacks suppressed [ 392.368809][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 392.377903][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 392.380858][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.390303][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 392.393277][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.396416][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 392.399350][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.402285][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 392.405273][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.408633][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 392.411550][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.447737][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 392.451847][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 392.454833][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.457376][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 392.460374][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 392.462800][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 392.465714][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 392.468113][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 392.470588][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 393.081545][T26440] all: renamed from bridge_slave_0 (while UP) [ 393.340464][ C2] net_ratelimit: 69551 callbacks suppressed [ 393.340477][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.340556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 393.342485][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.346090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.349755][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.353403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.356973][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.360530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.364362][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.367989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.497199][ T5938] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 393.597368][T26459] bond2: (slave bond_slave_1): Device is not our slave [ 393.601597][T26459] bond2: option active_slave: invalid value (bond_slave_1) [ 393.827290][T26459] bond2 (unregistering): Released all slaves [ 394.107220][T26535] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 394.119216][T26497] ceph: No source [ 394.140700][T26497] ptrace attach of "/syz-executor exec"[19456] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 394.450935][T26547] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4789'. [ 394.624585][T26547] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26547 comm=syz.7.4789 [ 394.912644][T26622] x_tables: duplicate underflow at hook 1 [ 395.734311][T26650] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 395.746199][T26642] bond1: (slave bond_slave_1): Device is not our slave [ 395.748402][T26642] bond1: option active_slave: invalid value (bond_slave_1) [ 396.978994][T26642] bond1 (unregistering): Released all slaves [ 397.025181][T26686] netlink: 'syz.7.4800': attribute type 3 has an invalid length. [ 397.027715][T26686] netlink: 'syz.7.4800': attribute type 3 has an invalid length. [ 397.327331][T26726] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 397.480686][ T40] kauditd_printk_skb: 122 callbacks suppressed [ 397.480697][ T40] audit: type=1400 audit(2000000023.032:33065): avc: denied { create } for pid=26728 comm="syz.1.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 397.495337][ T40] audit: type=1400 audit(2000000023.042:33066): avc: denied { write } for pid=26728 comm="syz.1.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 397.512960][ T40] audit: type=1400 audit(2000000023.051:33067): avc: denied { nlmsg_write } for pid=26728 comm="syz.1.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 397.536876][ T40] audit: type=1400 audit(2000000023.051:33068): avc: denied { create } for pid=26728 comm="syz.1.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 397.559093][ T40] audit: type=1400 audit(2000000023.051:33069): avc: denied { write } for pid=26728 comm="syz.1.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 397.577929][T26732] netlink: 'syz.1.4805': attribute type 23 has an invalid length. [ 397.581692][ T40] audit: type=1400 audit(2000000023.079:33070): avc: denied { read write } for pid=25385 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.609669][ T40] audit: type=1400 audit(2000000023.079:33071): avc: denied { open } for pid=25385 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.635987][ T40] audit: type=1400 audit(2000000023.079:33072): avc: denied { ioctl } for pid=25385 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.661464][ T40] audit: type=1400 audit(2000000023.117:33073): avc: denied { read write } for pid=26730 comm="syz.1.4805" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 397.676147][ T40] audit: type=1400 audit(2000000023.117:33074): avc: denied { open } for pid=26730 comm="syz.1.4805" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 397.787682][T26738] netlink: 'syz.1.4806': attribute type 3 has an invalid length. [ 397.792698][T26738] netlink: 'syz.1.4806': attribute type 3 has an invalid length. [ 398.680521][ C1] net_ratelimit: 69554 callbacks suppressed [ 398.680534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.680588][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.682640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 398.686246][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.689810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.693505][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.697085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 398.701095][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.704779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.708519][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.735830][T26740] syz.1.4807 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 399.740286][T26740] CPU: 0 UID: 0 PID: 26740 Comm: syz.1.4807 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.740307][T26740] Tainted: [L]=SOFTLOCKUP [ 399.740311][T26740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 399.740318][T26740] Call Trace: [ 399.740322][T26740] [ 399.740328][T26740] dump_stack_lvl+0x100/0x190 [ 399.740361][T26740] dump_header+0xfb/0x606 [ 399.740374][T26740] oom_kill_process.cold+0xd/0x330 [ 399.740387][T26740] out_of_memory+0x340/0x14f0 [ 399.740403][T26740] ? __pfx_out_of_memory+0x10/0x10 [ 399.740421][T26740] mem_cgroup_out_of_memory+0xc6/0x130 [ 399.740434][T26740] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 399.740445][T26740] ? find_held_lock+0x2b/0x80 [ 399.740461][T26740] ? do_raw_spin_unlock+0x145/0x1e0 [ 399.740473][T26740] ? _raw_spin_unlock+0x28/0x50 [ 399.740499][T26740] try_charge_memcg+0x652/0xc90 [ 399.740518][T26740] ? __pfx_try_charge_memcg+0x10/0x10 [ 399.740533][T26740] ? rcu_read_unlock+0x17/0x60 [ 399.740549][T26740] ? rcu_read_unlock+0x17/0x60 [ 399.740568][T26740] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 399.740583][T26740] obj_cgroup_charge_account+0x33d/0x640 [ 399.740602][T26740] __memcg_slab_post_alloc_hook+0x2e3/0x9a0 [ 399.740622][T26740] ? kasan_save_track+0x14/0x30 [ 399.740637][T26740] kmem_cache_alloc_noprof+0x58a/0x6e0 [ 399.740651][T26740] ? alloc_buffer_head+0x21/0x140 [ 399.740665][T26740] alloc_buffer_head+0x21/0x140 [ 399.740677][T26740] folio_alloc_buffers+0x2a0/0x8f0 [ 399.740693][T26740] create_empty_buffers+0x3a/0x660 [ 399.740707][T26740] ? filemap_get_entry+0x1a7/0x3b0 [ 399.740723][T26740] folio_create_buffers+0x13b/0x1a0 [ 399.740738][T26740] __block_write_begin_int+0x393/0x19c0 [ 399.740757][T26740] ? folio_mapping+0x11a/0x250 [ 399.740774][T26740] ? __pfx___block_write_begin_int+0x10/0x10 [ 399.740793][T26740] iomap_write_begin+0x1664/0x2340 [ 399.740817][T26740] ? __pfx_iomap_write_begin+0x10/0x10 [ 399.740834][T26740] ? I_BDEV+0xd/0x20 [ 399.740856][T26740] ? rcu_is_watching+0x12/0xc0 [ 399.740868][T26740] ? I_BDEV+0xd/0x20 [ 399.740878][T26740] ? inode_to_bdi+0x9e/0x160 [ 399.740893][T26740] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 399.740913][T26740] iomap_file_buffered_write+0x48b/0xac0 [ 399.740936][T26740] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 399.740957][T26740] ? inode_set_ctime_current+0x283/0x8a0 [ 399.740978][T26740] ? __mark_inode_dirty+0x55c/0x1790 [ 399.740992][T26740] ? __pfx_down_read+0x10/0x10 [ 399.741008][T26740] ? preempt_count_add+0x76/0x150 [ 399.741019][T26740] ? mnt_put_write_access_file+0x4e/0x100 [ 399.741036][T26740] ? file_update_time_flags+0x373/0x500 [ 399.741051][T26740] blkdev_write_iter+0x575/0xd70 [ 399.741075][T26740] iter_file_splice_write+0x82b/0x10a0 [ 399.741099][T26740] ? __pfx_iter_file_splice_write+0x10/0x10 [ 399.741127][T26740] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 399.741142][T26740] ? __pfx_iter_file_splice_write+0x10/0x10 [ 399.741160][T26740] direct_splice_actor+0x192/0x6c0 [ 399.741179][T26740] splice_direct_to_actor+0x345/0xa30 [ 399.741196][T26740] ? __pfx_direct_splice_actor+0x10/0x10 [ 399.741215][T26740] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 399.741236][T26740] do_splice_direct+0x174/0x240 [ 399.741253][T26740] ? __pfx_do_splice_direct+0x10/0x10 [ 399.741268][T26740] ? avc_policy_seqno+0x9/0x20 [ 399.741282][T26740] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 399.741299][T26740] ? bpf_lsm_file_permission+0x9/0x10 [ 399.741313][T26740] ? security_file_permission+0x76/0x210 [ 399.741325][T26740] ? rw_verify_area+0xce/0x6d0 [ 399.741340][T26740] do_sendfile+0xadc/0xe20 [ 399.741357][T26740] ? __pfx_do_sendfile+0x10/0x10 [ 399.741370][T26740] ? __sys_sendmsg+0x18f/0x220 [ 399.741386][T26740] ? __x64_sys_futex+0x34f/0x4d0 [ 399.741402][T26740] ? __x64_sys_futex+0x358/0x4d0 [ 399.741420][T26740] __x64_sys_sendfile64+0x1d8/0x220 [ 399.741438][T26740] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 399.741459][T26740] do_syscall_64+0x106/0xf80 [ 399.741474][T26740] ? clear_bhb_loop+0x40/0x90 [ 399.741487][T26740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.741498][T26740] RIP: 0033:0x7fe813f9bf79 [ 399.741509][T26740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.741519][T26740] RSP: 002b:00007fe814e2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 399.741530][T26740] RAX: ffffffffffffffda RBX: 00007fe814215fa0 RCX: 00007fe813f9bf79 [ 399.741537][T26740] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 399.741543][T26740] RBP: 00007fe8140327e0 R08: 0000000000000000 R09: 0000000000000000 [ 399.741550][T26740] R10: 040000000000b946 R11: 0000000000000246 R12: 0000000000000000 [ 399.741556][T26740] R13: 00007fe814216038 R14: 00007fe814215fa0 R15: 00007ffc438e9f98 [ 399.741570][T26740] [ 399.741574][T26740] memory: usage 307200kB, limit 307200kB, failcnt 357 [ 399.750536][T26748] netlink: 'syz.3.4801': attribute type 4 has an invalid length. [ 399.750647][T26740] memory+swap: usage 307356kB, limit 9007199254740988kB, failcnt 0 [ 399.898655][T26740] kmem: usage 21108kB, limit 9007199254740988kB, failcnt 0 [ 399.900889][T26740] Memory cgroup stats for /syz1: [ 399.901090][T26740] cache 292904960 [ 399.903870][T26740] rss 40960 [ 399.904898][T26740] rss_huge 0 [ 399.905983][T26740] shmem 0 [ 399.907036][T26740] mapped_file 8192 [ 399.908224][T26740] dirty 290856960 [ 399.909399][T26740] writeback 1703936 [ 399.910642][T26740] workingset_refault_anon 93 [ 399.912114][T26740] workingset_refault_file 719 [ 399.913629][T26740] swap 159744 [ 399.914735][T26740] swapcached 7634944 [ 399.915999][T26740] pgpgin 79291 [ 399.917275][T26740] pgpgout 76952 [ 399.918471][T26740] pgfault 72839 [ 399.919600][T26740] pgmajfault 220 [ 399.920740][T26740] inactive_anon 12288 [ 399.922000][T26740] active_anon 0 [ 399.923170][T26740] inactive_file 292560896 [ 399.924536][T26740] active_file 0 [ 399.925635][T26740] unevictable 0 [ 399.926774][T26740] hierarchical_memory_limit 314572800 [ 399.928525][T26740] hierarchical_memsw_limit 9223372036854771712 [ 399.930479][T26740] total_cache 292904960 [ 399.931804][T26740] total_rss 40960 [ 399.932958][T26740] total_rss_huge 0 [ 399.934182][T26740] total_shmem 0 [ 399.935312][T26740] total_mapped_file 8192 [ 399.936666][T26740] total_dirty 290856960 [ 399.938021][T26740] total_writeback 1703936 [ 399.941028][T26740] total_workingset_refault_anon 93 [ 399.942691][T26740] total_workingset_refault_file 719 [ 399.944314][T26740] total_swap 159744 [ 399.945525][T26740] total_swapcached 7634944 [ 399.946962][T26740] total_pgpgin 79291 [ 399.948195][T26740] total_pgpgout 76952 [ 399.950656][T26740] total_pgfault 72839 [ 399.951909][T26740] total_pgmajfault 220 [ 399.953212][T26740] total_inactive_anon 12288 [ 399.954662][T26740] total_active_anon 0 [ 399.955929][T26740] total_inactive_file 292560896 [ 399.957464][T26740] total_active_file 0 [ 399.958895][T26740] total_unevictable 0 [ 399.960386][T26740] anon_cost 0 [ 399.961450][T26740] file_cost 0 [ 399.962499][T26740] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4807,pid=26739,uid=0 [ 399.968986][T26740] Memory cgroup out of memory: Killed process 26739 (syz.1.4807) total-vm:102220kB, anon-rss:1268kB, file-rss:23500kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 400.138681][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.140870][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.309391][T26744] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 400.503914][T26771] overlayfs: failed to clone upperpath [ 400.722211][T26782] bond1: (slave bond_slave_1): Device is not our slave [ 400.728453][T26782] bond1: option active_slave: invalid value (bond_slave_1) [ 400.856296][T26782] bond1 (unregistering): Released all slaves [ 402.445212][ T103] wlan1: Trigger new scan to find an IBSS to join [ 402.919203][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 402.919216][ T40] audit: type=1400 audit(2000000028.117:33125): avc: denied { create } for pid=26852 comm="syz.7.4813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 402.937936][ T40] audit: type=1400 audit(2000000028.136:33126): avc: denied { read } for pid=26852 comm="syz.7.4813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 402.960046][ T40] audit: type=1400 audit(2000000028.164:33127): avc: denied { create } for pid=26854 comm="syz.9.4814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 402.980138][ T40] audit: type=1400 audit(2000000028.192:33128): avc: denied { setopt } for pid=26854 comm="syz.9.4814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 403.020432][T26855] netlink: 'syz.9.4814': attribute type 4 has an invalid length. [ 403.023538][T26855] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4814'. [ 403.076126][T26855] .`: renamed from bond0 (while UP) [ 403.088606][T26858] netlink: 'syz.3.4815': attribute type 3 has an invalid length. [ 403.101828][T26858] netlink: 'syz.3.4815': attribute type 3 has an invalid length. [ 403.229224][T26863] netlink: 'syz.9.4817': attribute type 3 has an invalid length. [ 403.232055][T26863] netlink: 'syz.9.4817': attribute type 3 has an invalid length. [ 403.327145][T26866] netlink: 'syz.3.4818': attribute type 4 has an invalid length. [ 403.521728][ T40] audit: type=1400 audit(2000000028.690:33129): avc: denied { read } for pid=26869 comm="syz.9.4819" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 403.552828][ T40] audit: type=1400 audit(2000000028.690:33130): avc: denied { open } for pid=26869 comm="syz.9.4819" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 403.572821][ T40] audit: type=1400 audit(2000000028.699:33131): avc: denied { map } for pid=26869 comm="syz.9.4819" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 403.629024][ T40] audit: type=1400 audit(2000000028.699:33132): avc: denied { ioctl } for pid=26869 comm="syz.9.4819" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 403.640774][T26878] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4816'. [ 403.651343][T26878] netlink: 7 bytes leftover after parsing attributes in process `syz.7.4816'. [ 403.656612][ T40] audit: type=1400 audit(2000000028.718:33133): avc: denied { module_request } for pid=26874 comm="syz.7.4816" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 403.684500][ T40] audit: type=1400 audit(2000000028.802:33134): avc: denied { create } for pid=26874 comm="syz.7.4816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 403.745243][T26883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4820'. [ 403.857175][T26886] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 404.020571][ C2] net_ratelimit: 61104 callbacks suppressed [ 404.020584][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.020608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.022664][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.024035][T26895] nft_compat: unsupported protocol 0 [ 404.026336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 404.030083][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.033769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.035444][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.039051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 404.042679][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.046513][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.168889][T26903] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4827'. [ 404.172726][T26903] netlink: 6 bytes leftover after parsing attributes in process `syz.7.4827'. [ 404.251525][T26904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4827'. [ 404.257841][T26904] netlink: 6 bytes leftover after parsing attributes in process `syz.7.4827'. [ 404.370461][T26910] netlink: 'syz.7.4828': attribute type 2 has an invalid length. [ 405.454815][T26871] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 405.587617][ T5938] Bluetooth: hci0: command 0x0c1a tx timeout [ 405.683682][ T6825] wlan1: Trigger new scan to find an IBSS to join [ 406.645632][T26957] overlayfs: failed to clone upperpath [ 406.663344][T26948] netlink: 'syz.3.4823': attribute type 29 has an invalid length. [ 406.670378][T26948] netlink: 'syz.3.4823': attribute type 3 has an invalid length. [ 406.672809][T26948] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4823'. [ 406.720700][T26964] 9pnet_virtio: no channels available for device syz [ 406.727672][T26964] FAULT_INJECTION: forcing a failure. [ 406.727672][T26964] name failslab, interval 1, probability 0, space 0, times 0 [ 406.734085][T26964] CPU: 0 UID: 0 PID: 26964 Comm: syz.1.4840 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.734103][T26964] Tainted: [L]=SOFTLOCKUP [ 406.734107][T26964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 406.734114][T26964] Call Trace: [ 406.734118][T26964] [ 406.734122][T26964] dump_stack_lvl+0x100/0x190 [ 406.734153][T26964] should_fail_ex.cold+0x5/0xa [ 406.734168][T26964] should_failslab+0xc2/0x120 [ 406.734184][T26964] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 406.734198][T26964] ? do_getname+0x35/0x390 [ 406.734209][T26964] ? find_held_lock+0x2b/0x80 [ 406.734225][T26964] do_getname+0x35/0x390 [ 406.734237][T26964] do_sys_openat2+0xc5/0x1e0 [ 406.734249][T26964] ? __pfx_do_sys_openat2+0x10/0x10 [ 406.734259][T26964] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 406.734289][T26964] ? __fget_files+0x21f/0x3d0 [ 406.734307][T26964] __x64_sys_openat+0x12d/0x210 [ 406.734319][T26964] ? __pfx___x64_sys_openat+0x10/0x10 [ 406.734330][T26964] ? ksys_write+0x1ac/0x250 [ 406.734348][T26964] do_syscall_64+0x106/0xf80 [ 406.734363][T26964] ? clear_bhb_loop+0x40/0x90 [ 406.734376][T26964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.734387][T26964] RIP: 0033:0x7fe813f9bf79 [ 406.734397][T26964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.734408][T26964] RSP: 002b:00007fe814e2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 406.734419][T26964] RAX: ffffffffffffffda RBX: 00007fe814215fa0 RCX: 00007fe813f9bf79 [ 406.734426][T26964] RDX: 0000000000000401 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 406.734432][T26964] RBP: 00007fe814e2a090 R08: 0000000000000000 R09: 0000000000000000 [ 406.734439][T26964] R10: 000000000000010b R11: 0000000000000246 R12: 0000000000000001 [ 406.734445][T26964] R13: 00007fe814216038 R14: 00007fe814215fa0 R15: 00007ffc438e9f98 [ 406.734458][T26964] [ 406.949033][T26970] tmpfs: Cannot change global quota limit on remount [ 407.301313][T26976] ptrace attach of "/syz-executor exec"[19456] was attempted by "/syz-executor exec"[26976] [ 407.530039][T26971] bond2: (slave bond_slave_1): Device is not our slave [ 407.532241][T26971] bond2: option active_slave: invalid value (bond_slave_1) [ 407.562491][T26971] bond2 (unregistering): Released all slaves [ 407.598300][T27008] netlink: 'syz.7.4845': attribute type 3 has an invalid length. [ 407.752365][T27066] 9pnet_fd: p9_fd_create_unix (27066): problem connecting socket: ./file0: -111 [ 408.833355][ T46] wlan1: Creating new IBSS network, BSSID 4e:88:10:f4:05:17 [ 408.969456][ T40] kauditd_printk_skb: 109 callbacks suppressed [ 408.969467][ T40] audit: type=1400 audit(2000000033.812:33244): avc: denied { create } for pid=27092 comm="syz.3.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 408.980727][ T40] audit: type=1400 audit(2000000033.822:33245): avc: denied { read } for pid=27092 comm="syz.3.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 408.987179][ T40] audit: type=1400 audit(2000000033.822:33246): avc: denied { ioctl } for pid=27092 comm="syz.3.4855" path="socket:[105571]" dev="sockfs" ino=105571 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 409.040730][T27098] validate_nla: 1 callbacks suppressed [ 409.040743][T27098] netlink: 'syz.3.4857': attribute type 3 has an invalid length. [ 409.045368][T27098] netlink: 'syz.3.4857': attribute type 3 has an invalid length. [ 409.094904][ T40] audit: type=1400 audit(2000000033.925:33247): avc: denied { mounton } for pid=27087 comm="syz.1.4854" path="/26/file0" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 409.094924][T27103] fuse: Bad value for 'fd' [ 409.119328][ T40] audit: type=1400 audit(2000000033.953:33248): avc: denied { name_bind } for pid=27104 comm="syz.3.4859" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 409.157254][ T40] audit: type=1400 audit(2000000033.953:33249): avc: denied { node_bind } for pid=27104 comm="syz.3.4859" saddr=::ffff:0.0.0.0 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 409.163608][T27096] FAULT_INJECTION: forcing a failure. [ 409.163608][T27096] name failslab, interval 1, probability 0, space 0, times 0 [ 409.165121][ T40] audit: type=1400 audit(2000000033.962:33250): avc: denied { shutdown } for pid=27104 comm="syz.3.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 409.165145][ T40] audit: type=1400 audit(2000000033.962:33251): avc: denied { write } for pid=27104 comm="syz.3.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 409.165168][ T40] audit: type=1400 audit(2000000033.962:33252): avc: denied { mount } for pid=27087 comm="syz.1.4854" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 409.165192][ T40] audit: type=1400 audit(2000000033.962:33253): avc: denied { mount } for pid=27091 comm="syz.9.4856" name="/" dev="9p" ino=76808287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 409.310603][T27096] CPU: 2 UID: 0 PID: 27096 Comm: syz.9.4856 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.310622][T27096] Tainted: [L]=SOFTLOCKUP [ 409.310626][T27096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 409.310633][T27096] Call Trace: [ 409.310637][T27096] [ 409.310641][T27096] dump_stack_lvl+0x100/0x190 [ 409.310674][T27096] should_fail_ex.cold+0x5/0xa [ 409.310689][T27096] should_failslab+0xc2/0x120 [ 409.310705][T27096] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 409.310718][T27096] ? alloc_empty_file+0x55/0x1c0 [ 409.310729][T27096] ? __pfx_stack_trace_save+0x10/0x10 [ 409.310746][T27096] alloc_empty_file+0x55/0x1c0 [ 409.310757][T27096] path_openat+0xe8/0x31a0 [ 409.310773][T27096] ? kasan_save_stack+0x3f/0x50 [ 409.310785][T27096] ? kasan_save_stack+0x30/0x50 [ 409.310798][T27096] ? kasan_save_track+0x14/0x30 [ 409.310811][T27096] ? __kasan_slab_alloc+0x89/0x90 [ 409.310825][T27096] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 409.310837][T27096] ? do_getname+0x35/0x390 [ 409.310847][T27096] ? do_sys_openat2+0xc5/0x1e0 [ 409.310858][T27096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.310871][T27096] ? __pfx_path_openat+0x10/0x10 [ 409.310892][T27096] do_file_open+0x20e/0x430 [ 409.310909][T27096] ? __pfx_do_file_open+0x10/0x10 [ 409.310934][T27096] ? alloc_fd+0x476/0x790 [ 409.310952][T27096] ? do_getname+0x191/0x390 [ 409.310965][T27096] do_sys_openat2+0x10d/0x1e0 [ 409.310976][T27096] ? __pfx_do_sys_openat2+0x10/0x10 [ 409.310986][T27096] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 409.311015][T27096] ? __fget_files+0x21f/0x3d0 [ 409.311033][T27096] __x64_sys_openat+0x12d/0x210 [ 409.311045][T27096] ? __pfx___x64_sys_openat+0x10/0x10 [ 409.311056][T27096] ? ksys_write+0x1ac/0x250 [ 409.311079][T27096] do_syscall_64+0x106/0xf80 [ 409.311094][T27096] ? clear_bhb_loop+0x40/0x90 [ 409.311106][T27096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.311118][T27096] RIP: 0033:0x7f9a8019bf79 [ 409.311127][T27096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.311137][T27096] RSP: 002b:00007f9a81028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 409.311149][T27096] RAX: ffffffffffffffda RBX: 00007f9a80415fa0 RCX: 00007f9a8019bf79 [ 409.311156][T27096] RDX: 0000000000000401 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 409.311162][T27096] RBP: 00007f9a81028090 R08: 0000000000000000 R09: 0000000000000000 [ 409.311169][T27096] R10: 000000000000010b R11: 0000000000000246 R12: 0000000000000001 [ 409.311175][T27096] R13: 00007f9a80416038 R14: 00007f9a80415fa0 R15: 00007ffc30726e08 [ 409.311188][T27096] [ 409.371291][ C1] net_ratelimit: 71250 callbacks suppressed [ 409.371304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.371729][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.373364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 409.374882][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.376941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.378172][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.384595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 409.387069][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.389570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.392118][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.842381][T27140] bond7: (slave bond_slave_1): Device is not our slave [ 409.844994][T27140] bond7: option active_slave: invalid value (bond_slave_1) [ 410.846897][T27140] bond7 (unregistering): Released all slaves [ 411.438363][T27226] Bluetooth: MGMT ver 1.23 [ 411.730505][T27247] overlayfs: failed to clone upperpath [ 412.136992][T27256] bond2: (slave bond_slave_1): Device is not our slave [ 412.142525][T27256] bond2: option active_slave: invalid value (bond_slave_1) [ 412.162353][T27259] tmpfs: Bad value for 'mpol' [ 412.886545][T27316] ufs: You didn't specify the type of your ufs filesystem [ 412.886545][T27316] [ 412.886545][T27316] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 412.886545][T27316] [ 412.886545][T27316] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 413.006497][T27320] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 413.092197][T27320] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4887'. [ 413.235337][T27342] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 413.237294][T27342] PKCS7: Only support pkcs7_signedData type [ 413.241000][T27342] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4892'. [ 413.251795][T27341] overlayfs: failed to clone upperpath [ 413.310542][T27256] bond2 (unregistering): Released all slaves [ 413.337540][T27327] netlink: 'syz.3.4889': attribute type 3 has an invalid length. [ 413.340205][T27327] netlink: 'syz.3.4889': attribute type 3 has an invalid length. [ 413.440327][T27383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4894'. [ 413.699533][ T5938] Bluetooth: hci0: unexpected event 0x07 length: 308 > 255 [ 413.790991][T27437] FAULT_INJECTION: forcing a failure. [ 413.790991][T27437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.797620][T27437] CPU: 0 UID: 0 PID: 27437 Comm: syz.1.4902 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.797638][T27437] Tainted: [L]=SOFTLOCKUP [ 413.797642][T27437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 413.797649][T27437] Call Trace: [ 413.797654][T27437] [ 413.797659][T27437] dump_stack_lvl+0x100/0x190 [ 413.797690][T27437] should_fail_ex.cold+0x5/0xa [ 413.797704][T27437] _copy_from_user+0x2e/0xd0 [ 413.797727][T27437] copy_msghdr_from_user+0x9f/0x4f0 [ 413.797750][T27437] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 413.797767][T27437] ___sys_sendmsg+0x106/0x1e0 [ 413.797779][T27437] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.797805][T27437] __sys_sendmsg+0x170/0x220 [ 413.797820][T27437] ? __pfx___sys_sendmsg+0x10/0x10 [ 413.797842][T27437] do_syscall_64+0x106/0xf80 [ 413.797858][T27437] ? clear_bhb_loop+0x40/0x90 [ 413.797871][T27437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.797882][T27437] RIP: 0033:0x7fe813f9bf79 [ 413.797892][T27437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.797902][T27437] RSP: 002b:00007fe814e2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.797913][T27437] RAX: ffffffffffffffda RBX: 00007fe814215fa0 RCX: 00007fe813f9bf79 [ 413.797920][T27437] RDX: 0000000000000840 RSI: 0000200000000100 RDI: 0000000000000003 [ 413.797927][T27437] RBP: 00007fe814e2a090 R08: 0000000000000000 R09: 0000000000000000 [ 413.797933][T27437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.797956][T27437] R13: 00007fe814216038 R14: 00007fe814215fa0 R15: 00007ffc438e9f98 [ 413.797970][T27437] [ 413.951736][T27443] netlink: 'syz.1.4905': attribute type 3 has an invalid length. [ 413.963173][T27443] netlink: 'syz.1.4905': attribute type 3 has an invalid length. [ 414.102946][T27447] bond3: (slave bond_slave_1): Device is not our slave [ 414.124024][T27447] bond3: option active_slave: invalid value (bond_slave_1) [ 414.220572][T27447] bond3 (unregistering): Released all slaves [ 414.300004][T27515] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4896'. [ 414.312999][T27515] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4896'. [ 414.319625][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 414.319634][ T40] audit: type=1400 audit(2000000038.832:33334): avc: denied { sys_module } for pid=27514 comm="syz.9.4896" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 414.333523][T27515] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4896'. [ 414.340142][T27515] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4896'. [ 414.544574][ T40] audit: type=1400 audit(2000000039.038:33335): avc: denied { execute } for pid=27529 comm="syz.9.4909" name="file0" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 414.560164][T27530] hpfs: Bad magic ... probably not HPFS [ 414.562133][ T40] audit: type=1400 audit(2000000039.047:33336): avc: denied { execute_no_trans } for pid=27529 comm="syz.9.4909" path="/203/file0" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 414.569431][ T40] audit: type=1400 audit(2000000039.057:33337): avc: denied { read write } for pid=27521 comm="syz.1.4908" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 414.582831][T27530] hpfs: Bad magic ... probably not HPFS [ 414.593528][ T40] audit: type=1400 audit(2000000039.066:33338): avc: denied { open } for pid=27521 comm="syz.1.4908" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 414.620924][T27522] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 414.624956][ T40] audit: type=1400 audit(2000000039.076:33339): avc: denied { ioctl } for pid=27521 comm="syz.1.4908" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 414.652419][ T40] audit: type=1400 audit(2000000039.085:33340): avc: denied { unlink } for pid=27521 comm="syz.1.4908" name="#74" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 414.672027][ T40] audit: type=1400 audit(2000000039.094:33341): avc: denied { getattr } for pid=27521 comm="syz.1.4908" name="/" dev="9p" ino=76808287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 414.707337][ T40] audit: type=1400 audit(2000000039.141:33342): avc: denied { create } for pid=27533 comm="syz.9.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 414.711186][ C1] net_ratelimit: 71431 callbacks suppressed [ 414.711197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.711234][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.711377][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.711518][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.711655][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.711791][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.711937][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.712080][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.712217][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.712358][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.734783][ T40] audit: type=1400 audit(2000000039.141:33343): avc: denied { write } for pid=27533 comm="syz.9.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 414.952887][T27547] netlink: 'syz.9.4914': attribute type 3 has an invalid length. [ 414.955462][T27547] netlink: 'syz.9.4914': attribute type 3 has an invalid length. [ 414.963256][T27548] netlink: 'syz.3.4915': attribute type 3 has an invalid length. [ 414.966449][T27548] netlink: 'syz.3.4915': attribute type 3 has an invalid length. [ 415.092986][T27556] netlink: 'syz.9.4919': attribute type 1 has an invalid length. [ 415.197332][T27567] bridge0: port 2(syz_tun) entered blocking state [ 415.199983][T27567] bridge0: port 2(syz_tun) entered disabled state [ 415.203378][T27567] syz_tun: entered allmulticast mode [ 415.206567][T27567] syz_tun: entered promiscuous mode [ 415.208827][T27567] bridge0: port 2(syz_tun) entered blocking state [ 415.211392][T27567] bridge0: port 2(syz_tun) entered forwarding state [ 415.332454][T27578] lo: entered allmulticast mode [ 415.387797][T27585] bond3: (slave bond_slave_1): Device is not our slave [ 415.390545][T27585] bond3: option active_slave: invalid value (bond_slave_1) [ 415.443098][T27585] bond3 (unregistering): Released all slaves [ 415.618899][T27660] netlink: 'syz.7.4925': attribute type 1 has an invalid length. [ 415.688004][T27666] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 415.818030][T27678] netlink: 'syz.3.4930': attribute type 3 has an invalid length. [ 415.826671][T27678] netlink: 'syz.3.4930': attribute type 3 has an invalid length. [ 415.832145][T27675] xt_hashlimit: size too large, truncated to 1048576 [ 416.272899][T27694] cgroup: release_agent respecified [ 417.058509][T27729] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 417.081593][T27729] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4938'. [ 417.256454][T27736] netlink: 'syz.3.4940': attribute type 3 has an invalid length. [ 417.259247][T27736] netlink: 'syz.3.4940': attribute type 3 has an invalid length. [ 417.394952][T27745] Invalid source name [ 417.396299][T27745] UBIFS error (pid: 27745): cannot open "./file0", error -22 [ 417.599763][T27757] bond7: (slave bond_slave_1): Device is not our slave [ 417.610361][T27757] bond7: option active_slave: invalid value (bond_slave_1) [ 417.642868][ T9] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 417.823554][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 417.826585][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 417.828945][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 417.832597][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 417.836386][ T9] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.840157][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.844872][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 417.848141][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 417.852289][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 417.867770][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 417.871324][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 417.874846][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 417.881728][ T9] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.885464][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.898111][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 417.903042][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 417.914113][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 417.920040][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 417.922424][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 417.927138][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 417.936744][ T9] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.940396][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.957107][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 417.961200][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 417.968270][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 417.976433][T27794] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 417.982749][ T9] usb 8-1: string descriptor 0 read error: -22 [ 417.985735][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 417.988727][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.010825][ T9] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 418.530006][T27757] bond7 (unregistering): Released all slaves [ 418.669926][T27793] bridge0: entered promiscuous mode [ 418.675095][T27793] macsec1: entered promiscuous mode [ 418.692536][ T9] usb 8-1: USB disconnect, device number 35 [ 418.781620][T27849] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4946'. [ 418.871811][T27835] program syz.9.4945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.469238][T27892] kvm: kvm [27890]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 420.051239][ C1] net_ratelimit: 70291 callbacks suppressed [ 420.051252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 420.051274][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.053346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.057136][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.060865][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.064654][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.068381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 420.072064][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.075956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.079506][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.356997][ T40] kauditd_printk_skb: 131 callbacks suppressed [ 420.357008][ T40] audit: type=1400 audit(2000000044.489:33475): avc: denied { append } for pid=27907 comm="syz.3.4952" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 420.368822][ T40] audit: type=1400 audit(2000000044.498:33476): avc: denied { open } for pid=27907 comm="syz.3.4952" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 420.449167][T27914] bond1: (slave bond_slave_1): Device is not our slave [ 420.456846][T27914] bond1: option active_slave: invalid value (bond_slave_1) [ 420.539360][T27911] xt_SECMARK: invalid mode: 2 [ 420.546253][ T40] audit: type=1400 audit(2000000044.583:33477): avc: denied { create } for pid=27909 comm="syz.1.4953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 420.557239][ T40] audit: type=1400 audit(2000000044.620:33478): avc: denied { listen } for pid=27909 comm="syz.1.4953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 420.577549][ T40] audit: type=1400 audit(2000000044.658:33479): avc: denied { create } for pid=27909 comm="syz.1.4953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 420.582177][T27914] bond1 (unregistering): Released all slaves [ 420.618735][ T40] audit: type=1400 audit(2000000044.658:33480): avc: denied { create } for pid=27909 comm="syz.1.4953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 420.624963][ T40] audit: type=1400 audit(2000000044.658:33481): avc: denied { allowed } for pid=27909 comm="syz.1.4953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 420.661382][ T40] audit: type=1400 audit(2000000044.658:33482): avc: denied { prog_load } for pid=27909 comm="syz.1.4953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 420.662428][T27983] vivid-003: ================= START STATUS ================= [ 420.681105][T27983] vivid-003: Radio HW Seek Mode: Bounded [ 420.684164][T27983] vivid-003: Radio Programmable HW Seek: false [ 420.688501][T27983] vivid-003: RDS Rx I/O Mode: Block I/O [ 420.694904][T27983] vivid-003: Generate RBDS Instead of RDS: false [ 420.699167][T27983] vivid-003: RDS Reception: true [ 420.705685][T27983] vivid-003: RDS Program Type: 0 inactive [ 420.711338][T27983] vivid-003: RDS PS Name: inactive [ 420.713683][T27983] vivid-003: RDS Radio Text: inactive [ 420.754841][T27983] vivid-003: RDS Traffic Announcement: false inactive [ 420.757148][T27983] vivid-003: RDS Traffic Program: false inactive [ 420.759342][T27983] vivid-003: RDS Music: false inactive [ 420.762394][T27983] vivid-003: ================== END STATUS ================== [ 420.952347][ T40] audit: type=1400 audit(2000000044.658:33483): avc: denied { bpf } for pid=27909 comm="syz.1.4953" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 420.982198][ T40] audit: type=1400 audit(2000000044.658:33484): avc: denied { perfmon } for pid=27909 comm="syz.1.4953" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 421.022780][T28039] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4961'. [ 421.188332][T28041] netlink: 45 bytes leftover after parsing attributes in process `syz.3.4959'. [ 421.652462][T28073] bond8: (slave bond_slave_1): Device is not our slave [ 421.657002][T28073] bond8: option active_slave: invalid value (bond_slave_1) [ 421.743734][T28073] bond8 (unregistering): Released all slaves [ 422.249965][T28152] sctp: [Deprecated]: syz.7.4974 (pid 28152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.249965][T28152] Use struct sctp_sack_info instead [ 422.536084][T28171] bond3: (slave bond_slave_1): Device is not our slave [ 422.538350][T28171] bond3: option active_slave: invalid value (bond_slave_1) [ 422.681948][T28171] bond3 (unregistering): Released all slaves [ 422.823524][T28229] ceph: No source [ 423.957659][T28292] No control pipe specified [ 423.967313][T28292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4990'. [ 424.282796][T28308] overlayfs: workdir and upperdir must reside under the same mount [ 425.323734][T28338] xfrm0 speed is unknown, defaulting to 1000 [ 425.391198][ C2] net_ratelimit: 70484 callbacks suppressed [ 425.391211][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.391263][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 425.393384][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.397094][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.400809][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.404527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 425.408712][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.412116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.415916][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.419578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 425.575780][T28376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.595957][T28382] overlayfs: failed to clone upperpath [ 425.608652][T28376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.817608][ T9] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 425.825641][ T40] kauditd_printk_skb: 135 callbacks suppressed [ 425.825651][ T40] audit: type=1400 audit(2000000049.621:33620): avc: denied { name_bind } for pid=28356 comm="syz.3.5004" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 425.852261][T28376] x_tables: duplicate underflow at hook 1 [ 425.854432][ T40] audit: type=1400 audit(2000000049.649:33621): avc: denied { read } for pid=28356 comm="syz.3.5004" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 425.873100][ T40] audit: type=1400 audit(2000000049.658:33622): avc: denied { open } for pid=28356 comm="syz.3.5004" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 425.988163][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 425.992187][ T9] usb 8-1: device descriptor read/all, error -61 [ 426.137437][ T9] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 426.144095][ T40] audit: type=1400 audit(2000000049.921:33623): avc: denied { map } for pid=28387 comm="syz.1.5007" path="/65" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 426.275896][ T9] usb 8-1: device descriptor read/64, error -71 [ 426.282762][ T40] audit: type=1400 audit(2000000050.052:33624): avc: denied { read } for pid=28396 comm="syz.1.5008" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 426.295923][ T40] audit: type=1400 audit(2000000050.052:33625): avc: denied { open } for pid=28396 comm="syz.1.5008" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 426.305189][ T40] audit: type=1400 audit(2000000050.062:33626): avc: denied { ioctl } for pid=28396 comm="syz.1.5008" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x6445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 426.321987][ T40] audit: type=1400 audit(2000000050.062:33627): avc: denied { write } for pid=28396 comm="syz.1.5008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 426.388450][ T40] audit: type=1400 audit(2000000050.146:33628): avc: denied { sys_module } for pid=28399 comm="syz.7.5009" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 426.396202][ T9] usb usb8-port1: attempt power cycle [ 426.427509][T28401] netlink: 'syz.7.5009': attribute type 2 has an invalid length. [ 426.473561][ T40] audit: type=1400 audit(2000000050.231:33629): avc: denied { watch watch_reads } for pid=28408 comm="syz.1.5012" path="pipe:[107212]" dev="pipefs" ino=107212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 426.484948][T28400] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5009'. [ 426.743359][T28419] bond0: (slave bond_slave_1): Device is not our slave [ 426.745741][T28419] bond0: option active_slave: invalid value (bond_slave_1) [ 426.776894][ T9] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 426.787363][T28454] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5014'. [ 426.798665][ T9] usb 8-1: device descriptor read/8, error -71 [ 427.054269][ T9] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 427.097461][ T9] usb 8-1: device descriptor read/8, error -71 [ 427.216901][ T9] usb usb8-port1: unable to enumerate USB device [ 428.000669][T28419] bond0 (unregistering): Released all slaves [ 428.605347][T28376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 428.638443][T28376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 428.641729][T28376] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 428.676485][T28376] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 428.679047][T28376] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 428.691876][T28376] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 428.695776][ T5927] Bluetooth: hci2: command 0x0c1a tx timeout [ 428.705046][T28376] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 428.707431][T28376] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 428.732881][T28376] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 428.905495][T28513] ieee802154 phy0 wpan0: encryption failed: -22 [ 428.951349][T28521] overlayfs: failed to clone upperpath [ 429.014930][T28522] netlink: 'syz.3.5020': attribute type 21 has an invalid length. [ 429.136479][T28534] bond1: (slave bond_slave_1): Device is not our slave [ 429.138773][T28534] bond1: option active_slave: invalid value (bond_slave_1) [ 429.166018][T28534] bond1 (unregistering): Released all slaves [ 429.390914][T28609] netlink: 'syz.9.5015': attribute type 1 has an invalid length. [ 430.061434][T28629] 9p: Bad value for 'rfdno' [ 430.731199][ C1] net_ratelimit: 71602 callbacks suppressed [ 430.731212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.731311][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.733329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.737047][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.740786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.744549][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.748269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 430.751995][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.755739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.759459][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.827519][ T5927] Bluetooth: hci4: command 0x0c1a tx timeout [ 430.829525][ T5927] Bluetooth: hci3: command 0x0406 tx timeout [ 430.912507][ T5927] Bluetooth: hci0: command 0x0c1a tx timeout [ 433.017158][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 433.017170][ T40] audit: type=1400 audit(2000000056.367:33683): avc: denied { create } for pid=28635 comm="syz.7.5032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 433.031516][T28637] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5032'. [ 433.034505][ T40] audit: type=1400 audit(2000000056.376:33684): avc: denied { connect } for pid=28635 comm="syz.7.5032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 433.036219][T28636] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5031'. [ 433.054623][ T40] audit: type=1400 audit(2000000056.376:33685): avc: denied { write } for pid=28635 comm="syz.7.5032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 433.061592][ T5927] Bluetooth: hci4: command 0x0c1a tx timeout [ 433.063490][ T5927] Bluetooth: hci3: command 0x0406 tx timeout [ 433.077486][ T40] audit: type=1400 audit(2000000056.376:33686): avc: denied { create } for pid=28635 comm="syz.7.5032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 433.087031][ T40] audit: type=1400 audit(2000000056.376:33687): avc: denied { bind } for pid=28635 comm="syz.7.5032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 433.100449][ T40] audit: type=1400 audit(2000000056.376:33688): avc: denied { getopt } for pid=28635 comm="syz.7.5032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 433.130345][ T5932] Bluetooth: hci0: command 0x0c1a tx timeout [ 433.138081][ T40] audit: type=1400 audit(2000000056.385:33689): avc: denied { write } for pid=28638 comm="syz.1.5033" name="vbi5" dev="devtmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 433.157988][ T40] audit: type=1400 audit(2000000056.395:33690): avc: denied { unlink } for pid=28638 comm="syz.1.5033" name="#7d" dev="tmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 433.186904][ T40] audit: type=1400 audit(2000000056.404:33691): avc: denied { mount } for pid=28638 comm="syz.1.5033" name="/" dev="overlay" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 433.210015][ T40] audit: type=1400 audit(2000000056.470:33692): avc: denied { getopt } for pid=28641 comm="syz.7.5034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 433.228535][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0413 [ 433.321394][ T3250] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 433.340229][T28666] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5039'. [ 433.344233][T28666] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5039'. [ 433.373691][T28671] overlayfs: failed to resolve './file0': -2 [ 433.442688][T28676] netlink: 'syz.7.5041': attribute type 14 has an invalid length. [ 433.448179][T28676] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5041'. [ 433.502585][ T3250] usb 8-1: Using ep0 maxpacket: 32 [ 433.520168][ T3250] usb 8-1: config 0 has an invalid interface number: 212 but max is 0 [ 433.538010][ T3250] usb 8-1: config 0 has no interface number 0 [ 433.541520][ T3250] usb 8-1: too many endpoints for config 0 interface 212 altsetting 60: 228, using maximum allowed: 30 [ 433.577348][ T3250] usb 8-1: config 0 interface 212 altsetting 60 has 0 endpoint descriptors, different from the interface descriptor's value: 228 [ 433.595581][ T3250] usb 8-1: config 0 interface 212 has no altsetting 0 [ 433.598213][ T3250] usb 8-1: New USB device found, idVendor=0b89, idProduct=ffe5, bcdDevice=ef.64 [ 433.606128][ T3250] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.620105][ T3250] usb 8-1: config 0 descriptor?? [ 433.838081][ T3250] usb 8-1: string descriptor 0 read error: -71 [ 433.851933][ T3250] usb 8-1: USB disconnect, device number 40 [ 433.992413][T28688] bond0: (slave bond_slave_1): Device is not our slave [ 433.997275][T28688] bond0: option active_slave: invalid value (bond_slave_1) [ 434.029959][T28688] bond0 (unregistering): Released all slaves [ 434.173729][T28775] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 434.419259][ T3250] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 434.555206][T28788] netlink: 'syz.9.5048': attribute type 30 has an invalid length. [ 434.579039][ T3250] usb 6-1: Using ep0 maxpacket: 32 [ 434.587256][ T3250] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.596064][ T3250] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.606981][ T3250] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 434.609899][ T3250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.616342][ T3250] usb 6-1: config 0 descriptor?? [ 434.919928][T28832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=28832 comm=syz.3.5052 [ 435.086546][ T3250] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 435.274364][ T5932] Bluetooth: hci4: command 0x0c1a tx timeout [ 435.277592][ T3250] usb 6-1: USB disconnect, device number 12 [ 435.359259][ T5932] Bluetooth: hci0: command 0x0c1a tx timeout [ 435.526312][T28877] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5054'. [ 435.530123][T28878] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5054'. [ 435.533982][T28766] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 435.620862][T28878] bond8: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 435.628450][T28850] fido_id[28850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 435.664584][T28877] bond8: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 436.071354][ C2] net_ratelimit: 57921 callbacks suppressed [ 436.071368][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.071582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 436.073510][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.078211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 436.080911][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.084883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 436.088527][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.092558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 436.096115][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.100386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 436.176108][ T5932] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 436.812316][T28973] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5070'. [ 437.042447][T28980] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5072'. [ 437.566284][ T5932] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 437.572083][ T5932] Bluetooth: hci2: Injecting HCI hardware error event [ 437.581789][ T5932] Bluetooth: hci2: hardware error 0x00 [ 439.366035][T28950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.675982][ T40] kauditd_printk_skb: 149 callbacks suppressed [ 439.675994][ T40] audit: type=1400 audit(2000000062.615:33842): avc: denied { mounton } for pid=29003 comm="syz.9.5078" path="/247/file0" dev="tmpfs" ino=1381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 439.691474][ T40] audit: type=1400 audit(2000000062.624:33843): avc: denied { mount } for pid=29003 comm="syz.9.5078" name="/" dev="9p" ino=76808287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 439.702390][ T40] audit: type=1400 audit(2000000062.643:33844): avc: denied { unlink } for pid=29003 comm="syz.9.5078" name="#7f" dev="tmpfs" ino=1387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 439.709640][T29005] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 439.716543][ T40] audit: type=1400 audit(2000000062.643:33845): avc: denied { getattr } for pid=29003 comm="syz.9.5078" name="/" dev="9p" ino=76808287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 439.725505][ T40] audit: type=1400 audit(2000000062.652:33846): avc: denied { mount } for pid=29003 comm="syz.9.5078" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 439.732898][ T40] audit: type=1400 audit(2000000062.652:33847): avc: denied { ioctl } for pid=29003 comm="syz.9.5078" path="socket:[108080]" dev="sockfs" ino=108080 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 439.741638][ T40] audit: type=1400 audit(2000000062.662:33848): avc: denied { read } for pid=29003 comm="syz.9.5078" name="file0" dev="overlay" ino=76808355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 439.753239][ T40] audit: type=1400 audit(2000000062.662:33849): avc: denied { read } for pid=29003 comm="syz.9.5078" name="file0" dev="9p" ino=76808355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 439.794256][ T5932] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 440.186619][ T40] audit: type=1400 audit(2000000063.103:33850): avc: denied { unmount } for pid=19456 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 440.233215][ T40] audit: type=1400 audit(2000000063.140:33851): avc: denied { create } for pid=29010 comm="syz.7.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 440.312204][T29017] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5083'. [ 440.450790][T29022] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5080'. [ 440.455858][T29022] netlink: 'syz.3.5080': attribute type 1 has an invalid length. [ 440.458469][T29022] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5080'. [ 440.463325][T29022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5080'. [ 440.537360][T29026] binder: 29024:29026 ioctl c0306201 200000000480 returned -22 [ 440.749077][T29038] 9pnet_virtio: no channels available for device syz [ 440.787608][T29041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5089'. [ 440.932185][T29049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5090'. [ 440.938873][T29052] netlink: 'syz.9.5091': attribute type 1 has an invalid length. [ 441.161199][T29036] uprobe: syz.3.5088:29036 failed to unregister, leaking uprobe [ 441.411256][ C2] net_ratelimit: 48702 callbacks suppressed [ 441.411269][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.411278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 441.413289][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.417912][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 441.421217][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.426038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 441.429030][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.433588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 441.437615][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.441899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 441.510047][T29049] team0 (unregistering): Port device team_slave_0 removed [ 441.523591][T29049] team0 (unregistering): Port device team_slave_1 removed [ 441.642291][T29076] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.674734][T29052] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 441.675966][T29076] netlink: 13 bytes leftover after parsing attributes in process `syz.1.5095'. [ 442.001562][T29101] netlink: 'syz.1.5102': attribute type 3 has an invalid length. [ 442.008290][T29101] netlink: 'syz.1.5102': attribute type 3 has an invalid length. [ 442.173904][T29106] bond3: (slave bond_slave_1): Device is not our slave [ 442.176106][T29106] bond3: option active_slave: invalid value (bond_slave_1) [ 442.776738][T29106] bond3 (unregistering): Released all slaves [ 442.961991][T29186] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 443.117983][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 444.033588][T29199] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5111'. [ 444.121418][T29207] netlink: 'syz.9.5112': attribute type 3 has an invalid length. [ 444.140844][T29207] netlink: 'syz.9.5112': attribute type 3 has an invalid length. [ 444.583706][T29212] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5113'. [ 444.636801][T29212] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 444.736126][T29212] romfs: unable to set blocksize [ 444.736126][T29212] [ 445.073240][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 445.073252][ T40] audit: type=1400 audit(2000000067.681:33931): avc: denied { mounton } for pid=29218 comm="syz.1.5116" path="/93/file0" dev="tmpfs" ino=548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 445.228084][ T5932] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 445.396907][T29224] bond1: (slave bond_slave_1): Device is not our slave [ 445.408259][T29224] bond1: option active_slave: invalid value (bond_slave_1) [ 445.488355][ T40] audit: type=1400 audit(2000000068.066:33932): avc: denied { mount } for pid=29218 comm="syz.1.5116" name="/" dev="9p" ino=76808287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 445.611441][ T40] audit: type=1400 audit(2000000068.132:33933): avc: denied { unmount } for pid=25385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 445.739018][ T40] audit: type=1400 audit(2000000068.310:33934): avc: denied { write } for pid=29181 comm="syz.7.5107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 445.750687][ T40] audit: type=1400 audit(2000000068.310:33935): avc: denied { connect } for pid=29181 comm="syz.7.5107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 445.762323][ T40] audit: type=1400 audit(2000000068.310:33936): avc: denied { name_connect } for pid=29181 comm="syz.7.5107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 445.879694][ T40] audit: type=1400 audit(2000000068.441:33937): avc: denied { setopt } for pid=29262 comm="syz.7.5119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 445.893726][ T40] audit: type=1400 audit(2000000068.441:33938): avc: denied { read } for pid=29262 comm="syz.7.5119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 445.927809][ T40] audit: type=1400 audit(2000000068.479:33939): avc: denied { create } for pid=29264 comm="syz.7.5120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 445.949053][ T40] audit: type=1400 audit(2000000068.497:33940): avc: denied { setopt } for pid=29264 comm="syz.7.5120" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 446.082111][T29266] 9pnet_virtio: no channels available for device syz [ 446.358872][T29224] bond1 (unregistering): Released all slaves [ 446.390741][T29212] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 446.596458][T29270] xfrm0 speed is unknown, defaulting to 1000 [ 446.751323][ C2] net_ratelimit: 46023 callbacks suppressed [ 446.751336][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.751644][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 446.753404][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.759207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 446.761660][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.766862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 446.769884][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.775157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 446.778046][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.782824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 446.854344][T29341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5125'. [ 446.880597][T29342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5124'. [ 446.883529][T29342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5124'. [ 447.034391][T29351] input: syz1 as /devices/virtual/input/input45 [ 447.049236][T29351] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5127'. [ 447.170020][T29358] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29358 comm=syz.3.5127 [ 447.183135][T29336] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 447.223095][T29336] bond3 (unregistering): Released all slaves [ 447.261383][T29330] netlink: 'syz.9.5122': attribute type 3 has an invalid length. [ 447.288041][T29330] netlink: 'syz.9.5122': attribute type 3 has an invalid length. [ 447.655684][T29441] tipc: Started in network mode [ 447.657472][T29441] tipc: Node identity 8eea495c5be, cluster identity 4711 [ 447.669604][T29441] tipc: Enabled bearer , priority 0 [ 447.682610][T29441] tipc: Resetting bearer [ 447.851233][T29440] tipc: Disabling bearer [ 447.968271][T29470] cgroup: subsys name conflicts with all [ 448.026822][T29472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16246 sclass=netlink_route_socket pid=29472 comm=syz.7.5140 [ 448.130111][T29475] bond3: (slave bond_slave_1): Device is not our slave [ 448.132307][T29475] bond3: option active_slave: invalid value (bond_slave_1) [ 448.412380][T29475] bond3 (unregistering): Released all slaves [ 448.812161][T29553] netlink: 'syz.9.5139': attribute type 3 has an invalid length. [ 448.841904][T29553] netlink: 'syz.9.5139': attribute type 3 has an invalid length. [ 448.908227][T29562] bond3: Removing last arp target with arp_interval on [ 449.166440][T29606] fuse: Unknown parameter 'fҰ' [ 449.199441][T29611] bad cache= option: nonw [ 449.199441][T29611] [ 449.201853][T29611] CIFS: VFS: bad cache= option: nonw [ 449.207298][T29611] CIFS mount error: No usable UNC path provided in device string! [ 449.207298][T29611] [ 449.214112][T29611] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 449.348822][T29618] bond4: (slave bond_slave_1): Device is not our slave [ 449.356502][T29618] bond4: option active_slave: invalid value (bond_slave_1) [ 450.254144][T29662] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5156'. [ 450.259466][T29662] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5156'. [ 450.684981][T29618] bond4 (unregistering): Released all slaves [ 450.830173][T29662] erspan2: entered promiscuous mode [ 450.839147][T29662] erspan2: entered allmulticast mode [ 450.893743][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 450.893756][ T40] audit: type=1400 audit(430.979:34020): avc: denied { create } for pid=29704 comm="syz.7.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 450.906826][ T40] audit: type=1400 audit(430.988:34021): avc: denied { prog_run } for pid=29704 comm="syz.7.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 450.918409][ T40] audit: type=1400 audit(430.998:34022): avc: denied { write } for pid=29704 comm="syz.7.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 450.953743][T29701] netlink: 'syz.3.5157': attribute type 3 has an invalid length. [ 450.977949][T29701] netlink: 'syz.3.5157': attribute type 3 has an invalid length. [ 451.119299][ T40] audit: type=1400 audit(431.195:34023): avc: denied { map_create } for pid=29717 comm="syz.7.5164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 451.137855][ T40] audit: type=1400 audit(431.204:34024): avc: denied { map_read map_write } for pid=29717 comm="syz.7.5164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 451.170375][ T40] audit: type=1400 audit(431.204:34025): avc: denied { mounton } for pid=29717 comm="syz.7.5164" path="/519/file0" dev="tmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 451.204756][ T40] audit: type=1400 audit(431.214:34026): avc: denied { mount } for pid=29717 comm="syz.7.5164" name="/" dev="9p" ino=76808287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 451.262624][ T40] audit: type=1400 audit(431.336:34027): avc: denied { read write } for pid=29728 comm="syz.9.5167" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 451.281211][ T40] audit: type=1400 audit(431.345:34028): avc: denied { open } for pid=29728 comm="syz.9.5167" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 451.305362][ T40] audit: type=1400 audit(431.345:34029): avc: denied { ioctl } for pid=29728 comm="syz.9.5167" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 451.700801][T29738] bond4: (slave bond_slave_1): Device is not our slave [ 451.703600][T29738] bond4: option active_slave: invalid value (bond_slave_1) [ 451.931519][T29778] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 451.966801][T29738] bond4 (unregistering): Released all slaves [ 452.091281][ C2] net_ratelimit: 45568 callbacks suppressed [ 452.091294][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.091728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 452.093338][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.097126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 452.100662][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.104493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 452.108063][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.112355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 452.115515][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.119436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 452.305920][T29819] tap0: tun_chr_ioctl cmd 1074025675 [ 452.311119][T29819] tap0: persist enabled [ 452.341457][T29827] tap0: tun_chr_ioctl cmd 1074025675 [ 452.343204][T29827] tap0: persist enabled [ 452.362012][T29815] tap0: tun_chr_ioctl cmd 1074025675 [ 452.363771][T29815] tap0: persist enabled [ 452.388868][T29829] netlink: 'syz.1.5175': attribute type 3 has an invalid length. [ 452.410731][T29829] netlink: 'syz.1.5175': attribute type 3 has an invalid length. [ 452.473257][T29835] netlink: 'syz.1.5177': attribute type 16 has an invalid length. [ 452.479464][T29835] netlink: 'syz.1.5177': attribute type 17 has an invalid length. [ 453.025906][T29867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.029908][T29867] bond0: (slave bond1): Enslaving as an active interface with an up link [ 453.268042][T29906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29906 comm=syz.3.5184 [ 453.281937][T29903] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 453.288148][T29903] batman_adv: batadv0: Adding interface: gretap1 [ 453.290573][T29903] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.303318][T29903] batman_adv: batadv0: Interface activated: gretap1 [ 453.588035][T29913] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5186'. [ 453.774211][T29928] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5190'. [ 453.968775][T29938] ufs: You didn't specify the type of your ufs filesystem [ 453.968775][T29938] [ 453.968775][T29938] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 453.968775][T29938] [ 453.968775][T29938] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 454.007621][T29938] tipc: Enabling of bearer rejected, failed to enable media [ 454.228121][T21237] IPVS: starting estimator thread 0... [ 454.413975][T29966] netlink: 'syz.3.5201': attribute type 64 has an invalid length. [ 454.425526][T29966] netlink: 'syz.3.5201': attribute type 4 has an invalid length. [ 454.427922][T29966] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5201'. [ 454.470800][T29949] IPVS: using max 46 ests per chain, 110400 per kthread [ 454.489948][T29966] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5201'. [ 454.656811][T29981] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 454.688902][T29985] netlink: 'syz.9.5206': attribute type 3 has an invalid length. [ 454.695734][T29985] netlink: 'syz.9.5206': attribute type 3 has an invalid length. [ 454.970791][T30009] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 455.056537][T30009] i2c i2c-1: dvb_frontend_start: failed to start kthread (-4) [ 455.736067][T30044] overlayfs: failed to clone upperpath [ 455.855119][T30046] /dev/nullb0: Can't lookup blockdev [ 456.487839][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 456.489912][ T1115] ata1: failed to read log page 10h (errno=-5) [ 456.491794][ T1115] ata1.00: exception Emask 0x1 SAct 0x800 SErr 0x0 action 0x0 [ 456.500012][ T1115] ata1.00: irq_stat 0x40000000 [ 456.501530][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 456.509263][ T1115] ata1.00: cmd 61/18:58:96:14:10/00:00:00:00:00/40 tag 11 ncq dma 12288 out [ 456.509263][ T1115] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 456.534591][ T1115] ata1.00: status: { DRDY } [ 456.536360][ T1115] ata1.00: error: { ABRT } [ 456.538605][ T1115] ata1.00: configured for UDMA/100 [ 456.540454][ T1115] ata1: EH complete [ 456.564533][ T40] kauditd_printk_skb: 125 callbacks suppressed [ 456.564543][ T40] audit: type=1400 audit(436.299:34155): avc: denied { create } for pid=30063 comm="syz.7.5223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 456.575442][ T40] audit: type=1400 audit(436.308:34156): avc: denied { write } for pid=30063 comm="syz.7.5223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 456.614769][ T40] audit: type=1400 audit(436.355:34157): avc: denied { read } for pid=30060 comm="syz.9.5225" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 456.625823][ T40] audit: type=1400 audit(436.364:34158): avc: denied { read } for pid=30061 comm="syz.1.5224" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 456.635626][ T40] audit: type=1400 audit(436.364:34159): avc: denied { open } for pid=30061 comm="syz.1.5224" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 456.644170][ T40] audit: type=1400 audit(436.364:34160): avc: denied { open } for pid=30060 comm="syz.9.5225" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 456.845420][ T5932] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 456.852170][ T40] audit: type=1400 audit(436.571:34161): avc: denied { write } for pid=30061 comm="syz.1.5224" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 456.886627][ T40] audit: type=1400 audit(436.599:34162): avc: denied { create } for pid=30078 comm="syz.3.5229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 456.900052][ T40] audit: type=1400 audit(436.599:34163): avc: denied { bind } for pid=30078 comm="syz.3.5229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 456.916098][ T40] audit: type=1400 audit(436.599:34164): avc: denied { setopt } for pid=30078 comm="syz.3.5229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 457.041605][T30087] ubi0: attaching mtd0 [ 457.043424][T30087] ubi0 error: ubi_attach_mtd_dev: bad VID header (9) or data offsets (73) [ 457.093298][T30087] netlink: 'syz.9.5230': attribute type 6 has an invalid length. [ 457.115420][ T3250] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 457.264041][T30088] ================================================================== [ 457.266491][T30088] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 457.268869][T30088] Read of size 8 at addr ffff88802e16dc18 by task syz.9.5230/30088 [ 457.272118][T30088] [ 457.273414][T30088] CPU: 2 UID: 0 PID: 30088 Comm: syz.9.5230 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.273432][T30088] Tainted: [L]=SOFTLOCKUP [ 457.273437][T30088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 457.273445][T30088] Call Trace: [ 457.273450][T30088] [ 457.273455][T30088] dump_stack_lvl+0x100/0x190 [ 457.273474][T30088] print_report+0x156/0x4c9 [ 457.273490][T30088] ? __virt_addr_valid+0x81/0x620 [ 457.273508][T30088] ? __phys_addr+0xe8/0x180 [ 457.273524][T30088] ? dvb_device_open+0x33f/0x3b0 [ 457.273540][T30088] kasan_report+0xdf/0x1e0 [ 457.273575][T30088] ? dvb_device_open+0x33f/0x3b0 [ 457.273593][T30088] ? __pfx_dvb_device_open+0x10/0x10 [ 457.273610][T30088] dvb_device_open+0x33f/0x3b0 [ 457.273632][T30088] ? __pfx_dvb_device_open+0x10/0x10 [ 457.273648][T30088] chrdev_open+0x234/0x6a0 [ 457.273664][T30088] ? __pfx_chrdev_open+0x10/0x10 [ 457.273681][T30088] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 457.273701][T30088] do_dentry_open+0x6d8/0x1660 [ 457.273717][T30088] ? __pfx_chrdev_open+0x10/0x10 [ 457.273735][T30088] vfs_open+0x82/0x3f0 [ 457.273747][T30088] path_openat+0x208c/0x31a0 [ 457.273765][T30088] ? __pfx_path_openat+0x10/0x10 [ 457.273784][T30088] do_file_open+0x20e/0x430 [ 457.273800][T30088] ? __pfx_do_file_open+0x10/0x10 [ 457.273821][T30088] ? alloc_fd+0x476/0x790 [ 457.273837][T30088] ? do_getname+0x191/0x390 [ 457.273849][T30088] do_sys_openat2+0x10d/0x1e0 [ 457.273860][T30088] ? __pfx_do_sys_openat2+0x10/0x10 [ 457.273873][T30088] __x64_sys_openat+0x12d/0x210 [ 457.273885][T30088] ? __pfx___x64_sys_openat+0x10/0x10 [ 457.273897][T30088] ? do_user_addr_fault+0x8d6/0x12f0 [ 457.273911][T30088] do_syscall_64+0x106/0xf80 [ 457.273940][T30088] ? clear_bhb_loop+0x40/0x90 [ 457.273953][T30088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.273965][T30088] RIP: 0033:0x7f9a8015c84e [ 457.273975][T30088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 457.273987][T30088] RSP: 002b:00007f9a81006b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 457.274000][T30088] RAX: ffffffffffffffda RBX: 00007f9a810076c0 RCX: 00007f9a8015c84e [ 457.274007][T30088] RDX: 0000000000141000 RSI: 00007f9a81006c00 RDI: ffffffffffffff9c [ 457.274014][T30088] RBP: 00007f9a81006c00 R08: 0000000000000000 R09: 0000000000000000 [ 457.274021][T30088] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 457.274028][T30088] R13: 00007f9a80416128 R14: 00007f9a80416090 R15: 00007ffc30726e08 [ 457.274039][T30088] [ 457.274043][T30088] [ 457.311085][ T5932] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 457.312154][T30088] Allocated by task 1: [ 457.312163][T30088] kasan_save_stack+0x30/0x50 [ 457.312180][T30088] kasan_save_track+0x14/0x30 [ 457.328950][ T3250] usb 6-1: not running at top speed; connect to a high speed hub [ 457.329141][T30088] __kasan_kmalloc+0xaa/0xb0 [ 457.331740][ T3250] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.336408][T30088] dvb_register_device+0x1d6/0x1e60 [ 457.336431][T30088] dvb_register_frontend+0x5a8/0x8a0 [ 457.336445][T30088] vidtv_bridge_probe+0x44b/0xa30 [ 457.336457][T30088] platform_probe+0x106/0x1d0 [ 457.336472][T30088] really_probe+0x241/0xa60 [ 457.346369][ T3250] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 457.346635][T30088] __driver_probe_device+0x1de/0x400 [ 457.346654][T30088] driver_probe_device+0x4c/0x1b0 [ 457.346664][T30088] __driver_attach+0x2f4/0x6a0 [ 457.355764][ T3250] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.356855][T30088] bus_for_each_dev+0x13e/0x1d0 [ 457.356877][T30088] bus_add_driver+0x305/0x5b0 [ 457.356892][T30088] driver_register+0x1e2/0x360 [ 457.356903][T30088] vidtv_bridge_init+0x38/0x70 [ 457.358837][ T3250] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.359858][T30088] do_one_initcall+0x11d/0x760 [ 457.359875][T30088] kernel_init_freeable+0x6e5/0x7a0 [ 457.359890][T30088] kernel_init+0x1f/0x1e0 [ 457.364821][ T3250] usb 6-1: Product:  [ 457.366949][T30088] ret_from_fork+0x754/0xd80 [ 457.366963][T30088] ret_from_fork_asm+0x1a/0x30 [ 457.366975][T30088] [ 457.366978][T30088] Freed by task 30009: [ 457.366984][T30088] kasan_save_stack+0x30/0x50 [ 457.373489][ T3250] usb 6-1: Manufacturer: 偈耛鐖崚嘩ઔ퓻窘ᡳ뱵凊ࠄ㶫ଖꦡ횋볟䐤꜉飡蓙⿈ᵔષ귐㈺㵭脑姢偰宱马遯뼞ꀶູ㯽墟艫딨脮⨼ᅠ⴨滓懌ꩨꗶ驼厧鉸컩蕒䯂⡨ᶸ⏃꓅緈 [ 457.373601][T30088] kasan_save_track+0x14/0x30 [ 457.413536][T30088] kasan_save_free_info+0x3b/0x70 [ 457.415086][T30088] __kasan_slab_free+0x5f/0x80 [ 457.416503][T30088] kfree+0x1f6/0x6b0 [ 457.417717][T30088] dvb_device_put.part.0+0x57/0x90 [ 457.419302][T30088] dvb_device_open+0x2ba/0x3b0 [ 457.420778][T30088] chrdev_open+0x234/0x6a0 [ 457.422168][T30088] do_dentry_open+0x6d8/0x1660 [ 457.423655][T30088] vfs_open+0x82/0x3f0 [ 457.424890][T30088] path_openat+0x208c/0x31a0 [ 457.426347][T30088] do_file_open+0x20e/0x430 [ 457.427746][T30088] do_sys_openat2+0x10d/0x1e0 [ 457.429234][T30088] __x64_sys_openat+0x12d/0x210 [ 457.430765][T30088] do_syscall_64+0x106/0xf80 [ 457.431898][ C1] net_ratelimit: 44721 callbacks suppressed [ 457.431915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 457.432208][T30088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.435326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 457.438172][T30088] [ 457.438180][T30088] The buggy address belongs to the object at ffff88802e16dc00 [ 457.438180][T30088] which belongs to the cache kmalloc-256 of size 256 [ 457.441337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 457.444130][T30088] The buggy address is located 24 bytes inside of [ 457.444130][T30088] freed 256-byte region [ffff88802e16dc00, ffff88802e16dd00) [ 457.444146][T30088] [ 457.444149][T30088] The buggy address belongs to the physical page: [ 457.444156][T30088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802e16dc00 pfn:0x2e16c [ 457.444166][T30088] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 457.444175][T30088] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 457.444186][T30088] page_type: f5(slab) [ 457.444195][T30088] raw: 00fff00000000240 ffff88801b842b40 ffffea0000ed9b10 ffffea0000e43c90 [ 457.445758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 457.449344][T30088] raw: ffff88802e16dc00 000000000010000c 00000000f5000000 0000000000000000 [ 457.454543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 457.458166][T30088] head: 00fff00000000240 ffff88801b842b40 ffffea0000ed9b10 ffffea0000e43c90 [ 457.460491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 457.461129][T30088] head: ffff88802e16dc00 000000000010000c 00000000f5000000 0000000000000000 [ 457.465940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 457.467708][T30088] head: 00fff00000000001 ffffea0000b85b01 00000000ffffffff 00000000ffffffff [ 457.471836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 457.472228][T30088] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 457.476076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 457.479188][T30088] page dumped because: kasan: bad access detected [ 457.482140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:18:d0:92:b5:cf, vlan:0) [ 457.485434][T30088] page_owner tracks the page as allocated [ 457.485442][T30088] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18937922618, free_ts 0 [ 457.485464][T30088] post_alloc_hook+0x153/0x170 [ 457.524731][T30088] get_page_from_freelist+0x111d/0x3140 [ 457.526445][T30088] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 457.528224][T30088] new_slab+0xa6/0x6d0 [ 457.529465][T30088] refill_objects+0x26b/0x400 [ 457.530877][T30088] __pcs_replace_empty_main+0x19f/0x600 [ 457.532556][T30088] __kmalloc_cache_noprof+0x493/0x6f0 [ 457.534283][T30088] bus_add_driver+0x92/0x5b0 [ 457.535766][T30088] driver_register+0x1e2/0x360 [ 457.537291][T30088] usb_register_driver+0x21c/0x3e0 [ 457.538927][T30088] do_one_initcall+0x11d/0x760 [ 457.540385][T30088] kernel_init_freeable+0x6e5/0x7a0 [ 457.541985][T30088] kernel_init+0x1f/0x1e0 [ 457.543307][T30088] ret_from_fork+0x754/0xd80 [ 457.544713][T30088] ret_from_fork_asm+0x1a/0x30 [ 457.546188][T30088] page_owner free stack trace missing [ 457.547814][T30088] [ 457.548557][T30088] Memory state around the buggy address: [ 457.550248][T30088] ffff88802e16db00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 457.552684][T30088] ffff88802e16db80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 457.555143][T30088] >ffff88802e16dc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 457.557596][T30088] ^ [ 457.559090][T30088] ffff88802e16dc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 457.561526][T30088] ffff88802e16dd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 457.563954][T30088] ================================================================== [ 457.566460][ T3250] usb 6-1: SerialNumber: 匆陔倰ㅂ킛ⷸ㩕륃Ŧꟛ⏫ﰘ矡᧗䨧䙯钦ꩈ꓌폹窟惣䀻㗽幼尧隔艃蜷Ἐ虛愉⊨祜懔違瓞Ǩॖ䧅쉹ᷨy➶ᰢ罌䷵衶酌뼌燏嘑㺖藅䇿啃趝屔﮼됎﯀項膶䏿㣮毺 [ 457.647911][T30088] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 457.650897][T30088] CPU: 3 UID: 0 PID: 30088 Comm: syz.9.5230 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.655020][T30088] Tainted: [L]=SOFTLOCKUP [ 457.656702][T30088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 457.660611][T30088] Call Trace: [ 457.661944][T30088] [ 457.663134][T30088] dump_stack_lvl+0x100/0x190 [ 457.665005][T30088] vpanic+0x552/0x970 [ 457.666571][T30088] ? __pfx_vpanic+0x10/0x10 [ 457.668268][T30088] ? dvb_device_open+0x33f/0x3b0 [ 457.670208][T30088] panic+0xd1/0xe0 [ 457.671671][T30088] ? __pfx_panic+0x10/0x10 [ 457.673468][T30088] ? dvb_device_open+0x33f/0x3b0 [ 457.675431][T30088] ? preempt_schedule_common+0x42/0xc0 [ 457.677131][T30088] check_panic_on_warn.cold+0x19/0x34 [ 457.678829][T30088] end_report.part.0+0x3a/0x90 [ 457.680332][T30088] kasan_report.cold+0xe/0x18 [ 457.682124][T30088] ? dvb_device_open+0x33f/0x3b0 [ 457.684129][T30088] ? __pfx_dvb_device_open+0x10/0x10 [ 457.686278][T30088] dvb_device_open+0x33f/0x3b0 [ 457.688165][T30088] ? __pfx_dvb_device_open+0x10/0x10 [ 457.690223][T30088] chrdev_open+0x234/0x6a0 [ 457.691978][T30088] ? __pfx_chrdev_open+0x10/0x10 [ 457.693955][T30088] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 457.696404][T30088] do_dentry_open+0x6d8/0x1660 [ 457.698289][T30088] ? __pfx_chrdev_open+0x10/0x10 [ 457.700235][T30088] vfs_open+0x82/0x3f0 [ 457.701866][T30088] path_openat+0x208c/0x31a0 [ 457.703711][T30088] ? __pfx_path_openat+0x10/0x10 [ 457.705684][T30088] do_file_open+0x20e/0x430 [ 457.707476][T30088] ? __pfx_do_file_open+0x10/0x10 [ 457.709490][T30088] ? alloc_fd+0x476/0x790 [ 457.711203][T30088] ? do_getname+0x191/0x390 [ 457.713007][T30088] do_sys_openat2+0x10d/0x1e0 [ 457.714872][T30088] ? __pfx_do_sys_openat2+0x10/0x10 [ 457.716888][T30088] __x64_sys_openat+0x12d/0x210 [ 457.718809][T30088] ? __pfx___x64_sys_openat+0x10/0x10 [ 457.720893][T30088] ? do_user_addr_fault+0x8d6/0x12f0 [ 457.723024][T30088] do_syscall_64+0x106/0xf80 [ 457.724574][T30088] ? clear_bhb_loop+0x40/0x90 [ 457.726422][T30088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.728703][T30088] RIP: 0033:0x7f9a8015c84e [ 457.730623][T30088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 457.738152][T30088] RSP: 002b:00007f9a81006b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 457.741412][T30088] RAX: ffffffffffffffda RBX: 00007f9a810076c0 RCX: 00007f9a8015c84e [ 457.744598][T30088] RDX: 0000000000141000 RSI: 00007f9a81006c00 RDI: ffffffffffffff9c [ 457.747660][T30088] RBP: 00007f9a81006c00 R08: 0000000000000000 R09: 0000000000000000 [ 457.750818][T30088] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 457.753925][T30088] R13: 00007f9a80416128 R14: 00007f9a80416090 R15: 00007ffc30726e08 [ 457.757007][T30088] [ 457.759008][T30088] Kernel Offset: disabled [ 457.760679][T30088] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:03:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=1ffff92001883eb6 RCX=ffffffff827fe95b RDX=1ffff110025909d6 RSI=ffffffff827fe971 RDI=ffff888012c84900 RBP=ffff888012c84900 RSP=ffffc9000c41f5b0 R8 =0000000000000005 R9 =0000000000000000 R10=00000000051c020a R11=0000000000000000 R12=00000000051c020a R13=ffffc9000c41f5d0 R14=0000000000002000 R15=ffff888012c84eb0 RIP=ffffffff827fe995 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d634d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f57fc212e9c CR3=000000005d41c000 CR4=00352ef0 DR0=0000000000000006 DR1=ffffffffffffff00 DR2=000000007ffffffd DR3=0000800000000005 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000306d 697376656474656e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7accbcb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7accbcb6 00007fff7accbcbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad08232e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad08232e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad08232fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad08232e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad083ea4a0 00007fad083ea480 00007fad083ea488 00007fad083ea4b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad083ea498 00007fad083ea468 00007fad083ea4a0 00007fad083ea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88801f285490 RCX=0000000000000003 RDX=0000000000000001 RSI=ffff88801f285440 RDI=0000000000000000 RBP=ffff88801f284900 RSP=ffffc90000676538 R8 =0000000000000000 R9 =0000000000000020 R10=0000000000000003 R11=0000000000000000 R12=0000000000000000 R13=0000000000000007 R14=0000000000020000 R15=0000000000000000 RIP=ffffffff81e49b40 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d644d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556e4b09e8 CR3=0000000044b38000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f8d4d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3b8ab156 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3b8ab156 00007ffe3b8ab15c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f8032e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f8032e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f8032fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f8032e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f81ea4a0 00007f46f81ea480 00007f46f81ea488 00007f46f81ea4b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f8d4d020 00007f46f81ea460 00007f46f81ea470 00007f46f81ea4b0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f81ea498 00007f46f81ea468 00007f46f81ea4a0 00007f46f81ea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85789ee5 RDI=ffffffff9b498940 RBP=ffffffff9b498900 RSP=ffffc9000c6ef2e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000037 R14=0000000000000010 R15=ffffffff85789e80 RIP=ffffffff85789f0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9a810076c0 ffffffff 00c00000 GS =0000 ffff8880d654d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9a80185640 CR3=000000004430e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc307272f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc307272f6 00007ffc307272fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a80232e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a80232e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a80232fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a80232e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a803ea498 00007f9a803ea468 00007f9a803ea4a0 00007f9a803ea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000001906c0 0000000000007268 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffff88801f2b5490 RCX=0000000000000003 RDX=0000000000000008 RSI=ffff88801f2b5490 RDI=ffff88801f2b4900 RBP=ffffc900006ce760 RSP=ffffc900006ce740 R8 =0000000000000000 R9 =0000000000000007 R10=0000000000000003 R11=0000000000000000 R12=0000000000000000 R13=ffff88801f2b4900 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff81e48c5f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d664d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9a802ccc00 CR3=000000004430e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a80f4d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc307272f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc307272f6 00007ffc307272fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a80232e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a80232e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a80232fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a80232e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a803ea4a0 00007f9a803ea480 00007f9a803ea488 00007f9a803ea4b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a803ea498 00007f9a803ea468 00007f9a803ea4a0 00007f9a803ea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000001906c0 0000000000007268 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000