last executing test programs: 2m22.832000318s ago: executing program 0 (id=41): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000180)='./file0\x00', 0x0) read$FUSE(r3, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000000080)={0x20, 0x0, r4, {0x7, 0x4, 0x2, 0x9}}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) 2m19.812993051s ago: executing program 0 (id=92): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) r1 = socket(0x2b, 0x1, 0x1) accept$packet(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x406, 0x5, 0x5, 0x276, 0x4}, 0x0, 0x0, 0x200, 0x8, 0xfffffff3, 0x3, 0x1d, 0x1e, 0x4, 0xe98, {0x7, 0xfffffff8, 0x6, 0x9, 0x95d0, 0x40}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@deltclass={0x30, 0x29, 0x20, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff9, 0x8}, {0x6, 0xfff1}, {0x5, 0x5}}, [@tclass_kind_options=@c_multiq={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x45) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8000002}, 0x34) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x2a, 0xc, 0xf, {0xb, @usr_ip4_spec={@rand_addr=0x64010100, @local, 0x4, 0x5, 0x1, 0x9}, {0x0, @broadcast, 0xec, 0xec, [0x5, 0xdf]}, @usr_ip6_spec={@mcast1, @local, 0x4, 0x80, 0x8}, {0x0, @local, 0x0, 0x2, [0xfffffffd, 0x6]}, 0x90d, 0x81}, 0x6, [0x7, 0x0, 0xfffffff8, 0x6, 0x2, 0x9f]}}) 2m19.690590746s ago: executing program 0 (id=97): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r2 = socket(0x2, 0x80805, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe7, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f00000003c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) (async) io_uring_enter(r0, 0xcc3, 0x9046, 0x12, &(0x7f00000002c0)={[0x2]}, 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000740)=@urb_type_interrupt={0x1, {0xd}, 0x6f36b000, 0x21, &(0x7f0000000540)="d613bd60e019011a33aacb9bf9df0bc603d7873b952d98a9e3bf54cc6586d93b1e61f6808b41d04bf8866d67c89868aa70e1ed3c01b5c88c3d188802792c17819daf07f35be8f8d1c039a323360853d2590ca507a2e84060ae76a7141b38cba7", 0x60, 0xfa39, 0x8, 0x0, 0x3, 0x7, &(0x7f00000004c0)="ea44bcb03ed8cf3e76c90fba75d05a1e1a5fdc117beeec9410d7ee01"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 2m18.792614331s ago: executing program 0 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_emit_ethernet(0x8f, &(0x7f0000000700)=ANY=[@ANYRESHEX], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000003c0)={0x0, @aes128, 0x0, @desc2}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000100)='./file0\x00', 0x109102, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') lstat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000280)) r4 = fcntl$getown(r0, 0x9) r5 = syz_clone(0x2400, &(0x7f0000000400)="ce405fbb61096e6396e9658af36f3e71ddd62d0b3b65f14c808c24e432cd8a071d33eced19ce7ad740883269001a5ae099ea90bb32ecce30017b4b1c1fc2aa01d2da7de4a33f8247ae14e703bac86ae18eeaa3f7db83bec3cff485b61aff618d24a48126d4a3d74df0bbb818cfef99f4923521e3fa17a476f7dbe9adf3cb0b5c36624730ad61b98fe6287eed25101a4a88325bd17589bd51b8b6db085a229c08c753d4be2f0dc286df5cf92041239a584850750aa9262cdff1beb4d3ebe5aa8b956e403c1b7abefdb6ea4cd6ae396244c5a3b56c04856a599227bde320b8006751cab190c3caddd3e146c7cf778f66", 0xef, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000600)="74854488eac60ded17364a8fd88c1433fe60b7faa1f2d5ad590da438be38ed3d7d6b5fa920fde028dcf4dd5a964b1a7370ca99bb18ba7b7f3fcc9f0507812a4abbb86235abb2c11ced3a3c0c4b8f24c822460f7e44d8a01bd80903c06f6ee6955518ed4e0d77ba227c15edc28bc3a79a0887fe1cf3d33f6d7442836521c8438230619782e5bbbc8a9aaa8bf7c95750c35c468947b175cffbacf2897c3e0266880444b5a0235de22097e48cb556f5f724dbb715df405625854a63c325efe99d07b196bda664ce0449e1e7f1c5") setpgid(r4, r5) recvmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000740), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)=""/80, 0x50}, {&(0x7f0000000900)=""/84, 0x54}], 0x2}, 0x100) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) accept$unix(r1, &(0x7f0000000180), &(0x7f0000000040)=0x6e) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) write(r3, &(0x7f0000002080)="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", 0x1000) 2m18.652980158s ago: executing program 0 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x180) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000400)='./file0\x00') fanotify_init(0x200, 0x0) (async) r0 = fanotify_init(0x200, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x40001019, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x1e0, 0x1e0, 0x1e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3f}, 0xff, 0x0, 'veth0_vlan\x00', 'veth0_macvtap\x00', {0xff}, {0xff}, 0x67, 0x1, 0x6a}, 0x0, 0x70, 0xb0, 0x0, {0x122}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x6e, {0x6}}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x25}, 0xff000000, 0x0, 'pimreg1\x00', 'pimreg1\x00', {0xff}, {}, 0x84, 0x2, 0x26}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800030000000000000000019078ac1e0001ac1414aa04009078e00000e0450000000000000000110000ac1414aaac1e0001341517c1b7df60c7"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800030000000000000000019078ac1e0001ac1414aa04009078e00000e0450000000000000000110000ac1414aaac1e0001341517c1b7df60c7"], 0x0) 2m18.269674185s ago: executing program 0 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYBLOB="110200000000fcdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="05002d000100000005002900007a0d655bc4000000"], 0x2c}, 0x1, 0x100000000000000, 0x0, 0x4044059}, 0x40090) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="bc0000002b00010000faffffffffffffa9000080"], 0xbc}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ipvlan0\x00', 0x2}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = gettid() sendmsg$netlink(r7, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="10000044bab0c5002d003cff000229bd70000000"], 0x10}], 0x1, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee01}}}], 0x20}, 0x0) write$tun(r5, &(0x7f0000002300)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYRESDEC=r3, @ANYRES64=r0, @ANYRES32=r4, @ANYRESHEX=r8, @ANYRES16=r5, @ANYRESOCT=r7], 0x4) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 2m18.178631455s ago: executing program 32 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYBLOB="110200000000fcdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="05002d000100000005002900007a0d655bc4000000"], 0x2c}, 0x1, 0x100000000000000, 0x0, 0x4044059}, 0x40090) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="bc0000002b00010000faffffffffffffa9000080"], 0xbc}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ipvlan0\x00', 0x2}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = gettid() sendmsg$netlink(r7, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="10000044bab0c5002d003cff000229bd70000000"], 0x10}], 0x1, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee01}}}], 0x20}, 0x0) write$tun(r5, &(0x7f0000002300)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYRESDEC=r3, @ANYRES64=r0, @ANYRES32=r4, @ANYRESHEX=r8, @ANYRES16=r5, @ANYRESOCT=r7], 0x4) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 1m12.902797885s ago: executing program 2 (id=871): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x3ffe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1, 0x16, 0x20000000, 0x4, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404c451}, 0x8000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) (async) fcntl$setstatus(r3, 0x4, 0x2000) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x5, 0x12f00, 0x10000004, 0x5, 0xcc7, 0xfff, 0x0, 0x5, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xfffffff8]}) sendmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x24000001) (async) sendmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x24000001) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) ioctl$CDROMVOLCTRL(r0, 0x2282, &(0x7f0000000040)={0x7, 0x8c, 0xfe}) 1m12.792513615s ago: executing program 2 (id=872): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f0000001400)={0x2020}, 0x2020) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000326bd7000fbc8df25250000000800030001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x90) 1m12.562784455s ago: executing program 2 (id=873): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) 1m12.562247639s ago: executing program 2 (id=874): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00001a0400000003000000000000110000000000000000"], 0x0, 0x28, 0x0, 0x1}, 0x20) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0xd, 0xfffffffffffffffa, 0xbf, 0x8}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') gettid() r3 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x1) ioctl$SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = io_uring_setup(0xdac, &(0x7f0000000180)={0x0, 0x4091, 0x20000, 0x2, 0x30e, 0x0, r3}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x400040, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0xffffffffffffffda, 0x4, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56018}], 0x1) close(r5) close_range(r4, 0xffffffffffffffff, 0x0) 1m12.342583356s ago: executing program 2 (id=876): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x1, 0x40, 0x9, 0x9, {{0x5, 0x4, 0x2, 0x10, 0x14, 0x68, 0x0, 0x10, 0x2f, 0x0, @empty, @multicast2}}}}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) r2 = fsopen(&(0x7f0000000180)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') r4 = openat2(r3, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x8}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pB \x00'}, 0x20) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) open_by_handle_at(r9, &(0x7f0000000080)=@xfs_parent={0x1c, 0x82, {0x40, 0xb, 0x3, 0x7}}, 0x8082) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x7, &(0x7f0000000600)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0xd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000740)='GPL\x00', 0x100001, 0x0, 0x0, 0x40f00, 0x40, '\x00', r0, 0x0, r4, 0x8, &(0x7f0000000780)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x6, 0x1fc8, 0x5}, 0x10, 0x16f10, r4, 0x8, &(0x7f0000000940)=[r5, r7, r9, r7, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, r9], &(0x7f0000000a00)=[{0x2, 0x100005, 0x6, 0x4}, {0x4, 0x2, 0x2, 0x5}, {0x0, 0x4, 0xc, 0xa}, {0x0, 0x3, 0x4, 0x7}, {0x3, 0x1, 0x1, 0x3}, {0x3, 0x5, 0x10, 0x6}, {0x3, 0x1, 0xd, 0x2}, {0x5, 0x2, 0x9, 0xc}], 0x10, 0x3ff}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000400)="9a0200800066b89d6d00000f23d80f21f86635400000000f23f8660f38813e8400b883008ed066b8010000000f01d90f20c06635000004000f22c064f00fb032f40fbb52d50f22d4", 0x48}], 0x1, 0x33, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008b80)=[{{&(0x7f0000000640)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000880)="52a9ba3a1d62c6fdd5b459e6119655275dc8472b37a2d3882674fa75a227f6fcffd7c2cd6417fb6cb73f6a9928d3fcb7ca34148513f413b60a5c4967428147b303b0d7d09c1dfb6a460e7b9dc8f38fc058e214a587e2188f50d5b56c219dbe0e774df57ae742c151bc1e1ec06e49ac8e6f1b023065b02d89272133dbb1389c45500f901cf09bc509fcd2ead867d29047cec26f6f377497bbb9f231", 0x9b}, {&(0x7f00000006c0)="56f457", 0x3}], 0x2, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000b40)="ed69fcf9c035d20b0c346deec13c68bc68fa1a537e53f454f0a574c46d97b79277f9aa17f895251953f96e327abe0b589ba8c29335e3ac5d2d8beb5409a0638ccf99dd3cf7732db7f4dc4503ac143495aa45eb018ec661dced068dc76d044703d0ee0aeca7147ebb587a7d5c4a8f395e8117d619990f765e50880ca14d410c80e43bd77c95fc0515991a137f", 0x8c}, {&(0x7f0000000c00)="c42070718088e2e54e1bb9f263db355fed48fc328f7e45ce358e3a0e7b1664f6a766158a26c0a89633cfb8c88bc6e5dcb685eb8f07138d95963b13935a4fe9d33d823def3c25e09eea57eda2b286a2fd34e712dca286b98c8a680b8a24df2cf77020c181faf933c2f9be3409921205da477071e9be6b46cf811ac611d4e7960e6c8c2b94156aa82f815cab16c237f1bba095544b6bff4355edc9361e4bac8b8846ea3a771d170340cf7895e9d477feb8d396dca18d679c07f1e8dfe8", 0xbc}, {&(0x7f0000000980)="9011904c0015ead97748a28edbb1749f5ed46a9a3e2e8c94d9ca7800d48ea462dc7fb6659003da5a", 0x28}, {&(0x7f0000000cc0)="d8704d4510eea1887c824adf4a52ed074a4130d4f76b5f9150e3effa971a8e060535c4e681bcac93934ec2a7ce64a3b342d70624c47d3d899ba6edc99ba8953263ee686227fa4ccec3ded151f84b6abbf62cc301690cd2b284c352d578a49102f253fef478bcd0f44d7103c239d4b2a1624aec1ac92345e7ebc3b37222d688f5ae1905c2a81f863178a4959f8016db890e0abefe34a2", 0x96}, {0xfffffffffffffffd}, {&(0x7f0000000d80)="39528891d2d7e42f9556e0bbfbfc479746cf585d0b83cc4a9de92a57e5e563db88f0df1af6c6090924135e188eb8fce78d4f77d88a31871ac254020fc8ed59c752611718a476c30b22a5b57d7b8c46c04bbde4837c0f7d9ceedd5cc6cf85edbd8181e8ca70edc542255cf45379607c89980073c625050aea0c5068894a4a0fb82e8ca88078f29f4ad037833af86f8dda63284f0e6b4c08e2d81b1667f27e95dd8809aa52a9400a440a6cc84e2b94884e014756000fb0c038f79b867c64a4dd78e1c8579bf2c79779040de9f00d8901594fda8d3eab157287fdb13ddd4165", 0xde}, {&(0x7f0000000e80)="a887f06b93c525217ab66c421a7a41f8405864c2032a3069b94f859cbb9e653e36b3e693519ad0a3daeb2784e5f0d26ccee9c3a566323418689363f8eb396c78e5bab04bad3653ed9b1d116ac288e995147b472681ebe9351b837eda10b3f61b5049350c94c39a1f9c9b7280b1acc50d22e232deb54aaba1301241a910a2b0687a3e402f93d1b48da97ef11a1af1ed00d66eb2008f3971cdada2df8df17e938cd8cfeb5b0eda82e8c424ff66ebd87654357d915f60dacb7360491387f88477b4db70f19d46fd7d8137f0810131ac227162d423527eceaea6e7eb7eb3bc9763a87473edd97f", 0xe5}, {&(0x7f0000000f80)="e53d0ef8e6efbcc233b55ee634f76b716f6c7a41f079fbf169699443e1da5809b95dd0718f2876c8494b3a324399eaea9fb74008e80744dca1d68ac8b06b8d5864051d497b8cf05d8aa06fdcbf149c39b0ac9dac4737c54b105febb6f86527add53987b169eefba54d975b129599501c10e005fd2d75fb0c6b9c70f63f87ad9155a2b5f67ea65376312bd2441753c2cfc235f25a3f8fe51896b3b509c3e5e00182eb0e3ef0a7e880c1d749c4fcde6f9db70063d77ef679dee0f1657809985d852bc630988ad80ce203b05a1ce3289dd6ead4ecedc0b22ad86b4d2207236bfd7129ddc4a0cdb9cf34985eed001ae2eb5adefdbf06efee2ea4592c441118c1f40b9b3a65df30452f631b3a98f3e3690a55b16f8758089e1d496bb42d51857ec8a2f4aa64e9cecadc234078d4e04cc3b2732021504f066db07f739cf57a3d88a456b2eee3d49036088b33a1e53b88e96329dee169c227f36db8b4259336733919aa23a1ba27ada1869fd84f0b01287f62d8ebb27aed7f63d3a32d3d03efd8babacad37d231f776e6e3c64d05f742170f066e1db3f7095e3e4892a17be24dfe7f79dbae9b9d74a12fbb3015a581b3bf8fe4995e5e4f9775d20ce3b7122f7fa4fcb0abbc96a2660688b8d5a2817e763f3ce7809aaa1414b80f35c2c39bdefdf7d483a725d549e9985c04dbb9e2cd752ce0d2e836b87d4427e214973d98e80d2cf7094d8d018daf7ddef05120c2cd34a8a8ea2ad7bc8565dc3d207330696a6ce6651cf7ab1d673317ff352c6fc148e2b51f228eb08325d6e467fb79432161bddc945e964a12281fc29de125397ee7349ec2e8b4231a29f6bf3de7dff217a65398e324966ecd950b1e4b6a16d130cc72edeaa89169de2aaa1a992f0086c93ecdb81881c36bc230a15f52b1def67704689c2a5598213850b27bc4b0f12ef9910e0aec8556cff25bbfc85416e2999f47e397b21a74a5896010f105d0c13ec10508062a5d4821c964de773026d659783b7904b6cdbebc1c7989b5b74f72acb1e576e1085241bbea01fe79ff72587fe7ed442a24d0a6f64b7942e7e9d560070a7efbd32d0901992a9777c2bfee221bd9e8a5f416d28953ca796d070bbcff67884366ca80fba68de13532f69a6d5b88e2379cf6b3c3ca3679e96255c575fa0e90337fa28c21b06b0a800163d7b1816813230fec92423e723a8126f2acd383f98a807353ef7cac6a710d2e59a57fab897155ece43e4e3b8ed45e2efce2d21569b649146f6819f337b87b1757dccd369dd4ddfaf8ef5a83d870b2a77c6759eb9e4e2aecf2d18574865e715422f487fb1f82a21f943d7a636d6c14cae6a3ef694bcd067b852254448048043a296b0355c1eee38d0e33b9186fd0a16b1bb172fab69865b724b163f590ee03f070997d9c78a3f3fc75f7766ff5a2f3603cc28213d46235dbc393f07f4293c02a62a329fb0598ce3e8bb7b6575fe8b20d49cf93a5343b498da2a4c28f2006207fe5cfe16f70e5fe7293b20196509205fd323c6d20f767d03f718a6af99f805371ce6a912fdccc05506075646878d84eb7e3887eef1a50205006e5efdf3fffe9fef5e2fe0446b6cf391c4e0a5468ffd6e96b7a28a004e3ee3c520135e958e607661e221f31e6a2a8fe3391f6da766d9f5f7f43561057ff82ba9f578594a6008075356d9c835a8582c9afdb95b89ea05520921ac47a02c5d64b02c8d3e9210267330650cab09a083ff4663db3ce22baf21ed3586b9a2ef0ac9b959ff724daa081f0cdcd906971cb00f1e17a59852de1a07fb5218a9c9619b1fee90b4e46624152bbb453b51bb32c55cd9dee0895f8a2b4c130336458bc1aa0c458d8ffe820c4b7394d7095fd1d7fb45e3460537e9b998fe63735329e11666cdf8ae5f3cd8062907ffcb484dd18d4bc0a544231514518c33b6b93ca983a4bc7e88d69770d8300500177d1aa8ac8f2f61476d97f3399b96ce10ab2e2658c9a2d89ba07f48845ae22dd83c8d5b1924c80d4f025db6c6332586d2b841c2dc21a124b8a655251d5066f033720c4ce238b0f6f4cd185f7cf2737732218e1860deaf8d6a92c880029abceaed601b65deb58a2ca89410452bd8f216425d8762476d32caf6c8020fb869dc249fba08f096f0cfba58ae013df958d480e5817a93eb79ca7f3d366fedfd3af45c3743d2c9a1f4829563c636ebba2770c496fa3bcf0e8c997dafff22298de0cecee2c339936379f97aef811f16fb8c22fc2fab07b5c857336e91f9865f46caf89f07fa4c1bb420552e2c70155e96073c2dd327ec8694f4eb07f9e44c183f5154335ee859ed030f87a439033b0d6e6451d99c10b76eec61280a8b939689f39ca3952b0fc22634b8b0cc13bcbae452a4bab6509e0f9cd19727bf26f5b1f6aecb6b416c7bcb3e8e9d77a72c0feddcb3a23ce428ba61fef1e53db06552ca0c5f7a9163d66101d384ccd141514a370e0f000852a28feb1cb31c99504cbbf3a5d48c4f53f86351a5cc71fd16031535aa75925fd319d41b0d6f8f1b79afd0074c9d016028d6bf49b03c43a6657df791f9d7038dfe7de48a72f5ff5833c1f004c9fbe19aa029a3a54470928ce0e08a3c04543c01bb03697cdc826e43b3d4eff36cc004ab2ed908b29ed1796751853692d93d60d2f4f220a4157c4f4044bee1547b82ac33f8720e79a8b85951c4e5da6daba26a9d6736952de5aead1ccd32c902bd19bad8e5b1a6708846e7a60b5191cb80438c9b06087e39a33c9b86a97b72f892ea7cabb98199ece1291c57cc04490ac6473bff21fba9254fe34b1b007dc480c60cb8a3536243630d8e2147841efc4604a7f649a20f05875a9c26a56de2d093bc69f22de18f2fea05407c2ae852a972b9d8fa13210c3a262ec76e96b6bc583b53fbdb8292452621fe4620850f47c830843e1179924a65d7aa8eecd110f74678949393ee7a5e99496828802b00c7d13630a1eef7ddfeb106edb1a35c82a8e39af46e3061a0750c5913cc52299b62d62cecc5958491af549c9d189bf8a588f524901332bc0a37c4e94609ffe4a40af4cc0fa3f370c9f2adde873552d601c40803fb8c7138802a7028915ea8280c4e51e0fe493cb70791b85c38e079553705d7f0114a3c2ca2015599edc492c9b21a90d18f9a26a97fe06e1f80d6142450b1506149179b6e5d0a5497295f6aef5504b8d1ef2a5e9140641ab14f6eb72cd217b4863aa14b8b74b2d12bbc134df2b8299cb4e66023a87d809eccbc9c683b51dd03a02184443b809dd878b5cb3f15c2c5a934eef637c0aa4da72513e383d1ea6212d590ffd0744ff44c385b77602d235b2f5588949ce690094ab5fd85c2d078bcba760bbcf042ef404f56d25fafb95f98dd8d0f86cd047b75901ac9a2e7cbd86c6a22caee26be5a50f904d8e0be01769c1aeefb93a0303aeec137df456232a5940ebec7f03e949a6d98f24f1ac132b78b000d57378d2d3be9a74cab00a25cfcfb41bea002f56b911043562db248cbdb6e97b02e711d301fc2a66b163d04d688946f0c533bcd1f1c8d5917d8da28d90a2a1efc04b4b403a5f2383945d67b37221f0676ebaa034342e7d4a3f83715c27d64e234c9c73c5194f3eb74675899f76e2b222f9f620bdc2a166c80f5d9f334409ae8cae85c84663629c3285b00e73f9386466f41a6998b23edb0b4b3352a08efe7a9167d86497283557ca6d4821ccd0ff3eeebbe7ac27d75c0f44ff679b0aa23212f734f05cf124e29677d1e41f56575b8d43188eb08604aa1968f60ea28f712a19cef60db67b808bf28a492c4b2cff8bc14ae828f811a8fd3382a60607163fa77cb3e5fb6e81b924b7385a4f27643da9a26f57c88992da34843ba19fd293ebed2282e833686871ae5ade06ec9abed53d19227c4602d2867e3acec751521a9e07d607eb047ac9711c96ce14c2bb1299e132d198876ec342e151bc998eeff878674ff04bf28620ad5fa430d83728c4dc85555f47f05f3df53ea8dd939f9214c11fefcb1c9c60c8bbd9936ed560afd44e690fc32e184cbe2708bc1ec87c6f03d434c58359a9f38d9f03d9fff236a62fd20a36de3b8c812be25548038ba2175d5f7aba8d54be12340fe148cb0ec5eb5018727c250f8944050b027a21c495d57b72b1fecc327c0acb3adf1c6aa72e4bb135a24762cee3050b7ad54f7831bf2f1d52a28119d431e751124d98936b02230e920b4eed6fb50f8d75ce1a246e453abd6dcb828367b4a8c14a234620d5c00c902aa29f4f21ca9f4e1d814e985c12dca21896dc08ebb64916817291b8c32d748c73def3b286feedb4604aabbbbfb0d5d68b59e20855115a3281ed562c6ca3a4bfb83c832a007b493f31b185171bfcb3d68bb600684659d3612a2f955a3163ed0aae0800b50ed96e5291916b00fc87ee4086f048d01e6968771d5a8c407c302fe125d4ac244df9de37bc0c4e09736382ddf6103d837aaf51aa6b110c9e8915318e3011ada483857be4d576b948289e093f69c70f1aaad7dfa777a734ffe1c309cea3e718f2d6ac14ccfa05da57ae09decabfa033bf3b337a3d30c29fbcc0638c001c91913cf17069bebd219297faf60cc530b4f283edccb624601c35ec087dab8218eb1eab02184aad6b539c3c2f784f8dca3471855ce8462fda100b87c4a73fcc3dd9e1c421e3c7f203b4f537beca33a423e092d9ade570a6e92772f5fad72513803db939c0dea43467061907bc4f37909ceacf6b6d78e3baed8c8f8c03a6ab890394e88cae493c59df64ee6cab938e7b12741ffbb98992df6f285f8fc3a79a7821b9d1e1577d2cab587f0725df5c28a84865d4e826c41a8b87604d16409c385f635b7f7573d9ed56d903fe903e2b2a02ae2fecba40e44e37be68e58ea8d8725798698a2d22e795f6b023b60d6c40d6ee03796a729cda29b3c0c3f5dc8e5429a0d4f68e7f4bcc5f6c8288d62b5ee7b0eb7ac72ee5fb13a4699ff5fc916dd6561547bcd9f20d21d1b126ea4dfa81dde91e3407b741271cd3758c77ce435a6b39752011a7307861e3c0f519884d46f3c4927ebef3c6060934ea4f9c486049e1d8c5bf72ce028ebd62f664f34bd14b358482ef12b110fe79afee67ad26fec7c8df52333c39f135fcc6f13c2c24ebaee058c42fef9dc432f76fbdcc711da18a101ff25a0626a6faa73df32a1ae40f30a98e15c203c226f2b1bfbe98ae9b63d9740be0e4cb9fe5636ff35c3d0c775912f472c41573b3b5cf473b07767e6e2ff41b25d80abed4fb93af36dfc91969d20697290947e149a8868b5ea3414c74223d9c21fcb2af9da87c7b01e5c00edd794011322fc10279f92ead66ca7d9f275f308065e0fd187ba26b76f889d0493e253f6715bfdc46c784c9dcd949586bea2fcd9bac9d055cfa9ded3bd9dd8b56df7c4d2935e92563d0e263f2af248394d658a0c2f3d1240ffbf5367fc7f20bd234435646a7197aa1f6abcf34d1d312aaef545ef6b79d7dfdbdc32939170b4203d946671756a996b4b186d98c2c910147b3e992eeac969e11b3cfa7faf96362c1b8dc7bcdc443e2ecefd48c6b4e172a9d00eee665bd0e538b4d9305a6f626b4b1a657a30114a8cba436fd5e472ad0d8cc988b0fce8d86690df0520f0ba11a7c64db09c37286384c2aba9e75268ea60818a93d89a11f4ac329c29115b336b7124872437e66447a629797b47c86f699460d251e158870957b3087edc30bf44fce6c3f557a6a931400e9d2bc86b9aea6f2b5d7e70da1bebe296673ea6c5fd3897d0e7946709479a0066fcf976806ff9aa181336dc066da0adfa3d32caec", 0x1000}, {&(0x7f0000001f80)="d59b0253051ae7ea842e5f708ead967e808739229bc6bfec6549", 0x1a}], 0x9, &(0x7f0000004240)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x40, 0x80}}, {{&(0x7f00000042c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004680)=[{&(0x7f0000004340)="ea402b002e61d5a22347bd7fcac488d2fcf0d5bc6b7bd5b234de71dd4d747f2f683d016cecf4110ec5da425c71287708b04eafefa899921b3048240acbcab9d1820556ef309cc16f13ce7d716be6d313c15ac861da257c298bbd1055e3873ce96cfb9f764aee8723d808d884a859ca5e555f7bfba5ecf08e6b1cdf471b156060f57018936c760fee4bb33507d108930ac679eef663ae07879346e42057c79e0bbcde580516c8245598f9dacbb07d2b45d41bffaa9f27bd551d3c2bc501b7344076ae0f6e0c0675bb339a75546dd4687e94ff6fe99d3535c16e34aea7c53443dfec20517543f4", 0xe6}, {&(0x7f0000004440)="b4e57aa23d2510c370c65bcec5a95abafd097850881123c4e9342cfad774d865fbc6dd0d4a38812a37e0d52365495692b2e87dc16f5661eaf39b49ff16107d8a52374de9ea9d1074cb982c2ec2415bdae9f514042ade5d668aada1c2879c18bbdf4578b7a682fda4185867b000a1fd8444b6da15d09d22869295fbe7f9e1004affb13d50b869358a4ecb5a7041759cb6067279c28442bc4ba40c75011fdedb4cefecb1c1b53d47d3e5d410a619bf1d91f3624e051ca4db150dce5b6fa5b3e95abaf8ddceebb569b936664fa14786839675a66a7b", 0xd4}, {&(0x7f0000004540)="732825c59c7d337e311a92a9dae0185bac3895bc2856853af4fb317651de03a1ded5eb27aeab330d4fa53fee99bdbcb62a36ccccb773ee183507e347f0f68baf5df4c3e64897ccf8ee2e871e1688cf575c0ead424444856bffa7ac0cb5ef91f5e4fce12bf3a8cc28b169d0ea5202e571cf7cf1106565c6de5e7f84e6e0e32628c295894fd94f990f527d165480e96527ea9e7aefa1bda08cc164da4362c48d6c3ecf1986c886a3c44542c4809f9ea299125c4f0077bdab15dfbcddffb1d0e7d1738bbbb84f81503b76f962e4a23a8cf20afb94b40e94", 0xd6}, {&(0x7f0000004640)="71fab77b7b87bf4c2ad404ad6788d2ec0e64cd34d8306536de6fa880eccf3ea76a10dc", 0x23}], 0x4, &(0x7f0000008a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r9, r1, 0xffffffffffffffff, r8, r1, r5, r11, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8, 0x88c1}}], 0x3, 0x40) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r12, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_int(r12, 0x1, 0x1, &(0x7f0000000300)=0x101, 0x4) r13 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r10, 0x801c581f, &(0x7f0000000080)={0x4, 0x1, 0x10000, 0x6, 0x400}) ioctl$KVM_RUN(r13, 0xae80, 0x0) 1m11.832425541s ago: executing program 2 (id=880): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x54, 0x29, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xa, 0xc}, {0xfff1, 0xfff1}, {0xc, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x72, 0xf7}}, @tclass_kind_options=@c_sfb={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0xc010) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x4) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 1m11.767254494s ago: executing program 33 (id=880): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x54, 0x29, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xa, 0xc}, {0xfff1, 0xfff1}, {0xc, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x72, 0xf7}}, @tclass_kind_options=@c_sfb={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0xc010) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x4) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 42.481295821s ago: executing program 3 (id=1312): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7f, 0x4}) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, 0xfffffffffffffffc, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000080)) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) (async) close(r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x8, 0x80, 0xbe02, 0x8000, {{0x9, 0x4, 0x3, 0x32, 0x24, 0x66, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x6, 0x3, 0x8, [{@empty, 0x6}]}, @timestamp_addr={0x44, 0x4, 0x59, 0x1, 0x2}]}}}}}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000070000000c000000ff"], 0x50) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) mq_timedreceive(r1, &(0x7f0000000700)=""/168, 0xa8, 0x7fff, &(0x7f0000000600)={0x0, 0x3938700}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r3], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) writev(r7, &(0x7f0000000d40)=[{&(0x7f0000000800)="2c2e7dceb0f17b00b132bde75326708d106c3cca25e05abcc86110944cf758c5c3638ba1ceeeaafe447113e34eab8cd706f9584226b38862f5883868aff49197017ac0546f6256fab8a3e3a8d0a0d3fa92658c5f308b9f73b62a1fd7e839", 0x5e}, {&(0x7f0000000880)="23299b80d8a54004db0e299107b47851f5f2a7866498f1439d4a4c0a06f4b8e3bbfd5e42ec0c26f35e41463dcefd513fa03f93e1f043c03323094c85e677e80bddfed08253ef9afd46545097b10305317efff2a4330393657866364f4d875d31e70f1de3373a3e67d86276faafbe3e8b45bd829dcf8dccc3e70f8af051672cc9ecb82f03b4", 0x85}, {&(0x7f0000000940)="7af3bc7a81b41d1cb23bc1f9a0425785ed93e2b0a1940f5d21adab144280ebc3df43aed7faa7dd4f9f438fbc2967105e07b717997fa9d88cfdeb2686e08e110cbb31ccca560199df1613032d234d13d036d260c7c09d914d757a01d0ba4612ad43eeac9d6e7201684478dbe2c42453bff7623653284e985d0f29159792bc3a56c7debdbebf2989a8a336bfc7a1bd79471b7f014235344cf67f0bc70ae03b164e1c13f6c072defaea6c5f3a43ac0160b6a25b5d5be3519d0fcd3225e8997c1472f23f08ed54a8e257cf4c405a8c77891c4ec7afbd51ecd199a6f0d44d78699e6753f89bc4141f1ec80ef3e2eac961bfb80d", 0xf1}, {&(0x7f0000000a40)="d3583a9ea65fe3106ae9e49655ef2f8f67122a09bed48826e45b82668baf9b096875a79186db0337b9a688b1c3d5cf60a2d2297aa328ada3ce26cbc537b693c31a41d0598b7031b117aacc9503f83c3aaced18e3eb9f8f8f638585a184baa7f7c7fce2833c27836e2641b3dc7e0b5aed5cb9c2622c3fcf030aa45540691693e7a0cd9f2fe51328cc5dc5d5867ddeb65dc4b65f0599da4ff5f24f849c665c2bb41784ecec344505ad71a002ea5affceadce0c3a464ec1317a9242309e8685c3eb510ae075abc1cf9d9aa7b903994a2cfd2fdee3039c", 0xd5}, {&(0x7f00000031c0)="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", 0x1000}, {&(0x7f0000000b40)="6a32de165e93b7d4a36e87eeaae6d4b333f8905272dca196b5e7cfeb1048924a3a3a3e87bc99c637eb40ac14de0fb065bfa7d032fed27f154cb1fa69a3ec213203a3675a316499d58a628465a7a9e6d18f713af6789a63faefaaf289ced6bea02dc5a4f0f9dcacf32e1b1575192355fde85040009e165c3d175f09d433df13888d03ba2e47fc2a7a769c799e11523eff6743", 0x92}, {&(0x7f0000000c40)="2e43bb3e2606c57441088d7f82f68d74d8300c746e9e79f3f97dc39d7c650a2822f3dab82bc270c84de75a1b43f0e1274300f3ed1883bd264d7fd6a25840adb76d86aff810d263eb940aad38358e483796b65c6155d21b2e5a9b1523c1b981b916e541d747fddfae131c72d5d80f006af5d23d6e91c6e5a7c70ef0432c31546993de8668b4a680a54316a70fb16cbd99738db702407a26796a1e2f29f0188d296a4f020bc42d85cdc5fefe428c8f3472b496c211f1c020ae9c5dc3bab2f1e477f74f", 0xc2}], 0x7) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x80041285, &(0x7f0000001080)) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/70, 0x46, 0x0, &(0x7f0000000340)=""/129, 0x81}}, 0x10) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f00000000c0), 0x1) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async) sendto$inet6(r8, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x100387df16a2bfab) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000c00)='net/wireless\x00') read$FUSE(r9, &(0x7f0000001180)={0x2020}, 0x2020) 42.401853379s ago: executing program 3 (id=1313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = socket(0x1, 0x803, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r2], 0x1c}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0xb, 0x7, 0x0, 0x1c, 0x5, 0x3, 0x4d, 0x2, 0xf9, 0x3, 0x80, 0x9, 0x8000000000000000}, {0x6, 0x80, 0x4, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0xf9, 0x0, 0x7d}, {0xe2a5, 0xd, 0x1, 0x9, 0x2, 0xe, 0xd, 0x6, 0xff, 0x6, 0x56, 0x7}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 42.051766789s ago: executing program 3 (id=1314): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) landlock_create_ruleset(0xffffffffffffffff, 0x6c, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a0000000000000000000000000000000000000049e6fa2e209626133f5cce37606e61b60e951d46d2243b9044289b26b4da7f4a0b463d39c0672bd60a2c556d5ec5f246f8cbed9b8eea6270ae3474b6d8285c205e5f93d50d74178a833ab36f8b1a7ba6eeef3202d94823e5a240453a44b46a6079b8805d72d26201a9e64c0ba3b63393d94172d09a96becd44d87eea73818f549c0863eb027f82a9f781483da9fc2946153427a7a757712376ff9648cdd28dab2e521af29fc3096fe80dda0ab16c76464ea37e7c68bdef2008524609", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknod$loop(0x0, 0x8fff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRES64=r6, @ANYRES16=r8, @ANYRES64=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd70df2505000000200001800d0001007564703a73797a32000000000c0002b008000400f2430000000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r6, @ANYRES32=r1, @ANYBLOB="010800d28704ae38a56a0abb352ee2739447", @ANYRES32=r5, @ANYBLOB="0a0006"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000001513562400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000017b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000000)={0xb0000000}) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r13, 0x8943, &(0x7f0000000400)={'netdevsim0\x00', @ifru_settings={0xb21, 0x0, @te1=0x0}}) socket$xdp(0x2c, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 41.942379798s ago: executing program 3 (id=1315): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r1, &(0x7f00000019c0)="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", &(0x7f0000000700)=""/8}, 0x20) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x40014) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @remote}, &(0x7f0000000200)=0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7b, 0x7b, 0xa, [@volatile={0x7}, @datasec={0x9, 0x5, 0x0, 0xf, 0x3, [{0x2eb2, 0x4, 0x9}, {0x5, 0x60ba, 0x3}, {0x2, 0xf, 0xfffffffe}, {0x5, 0x2, 0x8601}, {0x5, 0x0, 0x1}], "1df72e"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf}, {0x2, 0x1}, {0x5, 0x1}]}]}, {0x0, [0x30, 0x61, 0x0, 0x5f, 0x5f, 0x30, 0x0, 0x61]}}, &(0x7f00000009c0)=""/4096, 0x9e, 0x1000, 0x0, 0xb5ad, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r3, r4, 0x1}, 0x50) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x31}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0xfffffffb, 0xe4, &(0x7f00000000c0)=""/228, 0x40f00, 0x22, '\x00', r3, @fallback=0x38, r5, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xf, 0x0, 0x7}, 0x10, 0x0, r0, 0x2, &(0x7f0000000440)=[r1, r0, r0], &(0x7f0000000480)=[{0x0, 0x3, 0x3, 0x3}, {0x2, 0x4, 0x8a7, 0x3}], 0x10, 0x4}, 0x94) 41.878088335s ago: executing program 3 (id=1316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800200001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001820000013bbf419f247265a6290046ce5d519c821e85b2a8423b99374c0fa02316a5b82e6f659b80049be64f7e7eb44eb91950b198318b5b17b59dae1df1a55d88d3f765d8342b3c99e401cd6062fccfd6cfb42fe9272756baf41d18aa5c358ae9b498507c37669eaa42d2674ed25c362b6bb422669f781fd314aff6751005306176e3b23a32d7595fca1854468225b9ad14970b6b1a6da1469a5c236dda04f0cf73b2a898bfb", @ANYRES32=r2, @ANYBLOB="00000000000000019500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x5}, 0x94) clock_nanosleep(0x2, 0x0, &(0x7f0000000380)={0x0, 0x3938700}, 0xfffffffffffffffc) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='.'], 0x20) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r4, &(0x7f0000000300)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x2, 0x0, {0x37}}, 0x14}}, 0x0) set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x0) 41.021809088s ago: executing program 3 (id=1328): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x24000, 0x60) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) (async) open(&(0x7f0000000440)='./file0\x00', 0x24000, 0x60) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) 26.576665216s ago: executing program 1 (id=1491): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x2, @pix={0x0, 0xa, 0x4f424752, 0x2, 0x0, 0x1a18e3f7, 0x8, 0x81, 0x0, 0x0, 0x1, 0x61d03986f8975690}}) mremap(&(0x7f000017a000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000239000/0x2000)=nil) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f00003aa000/0x4000)=nil, 0x20003, 0x0, 0x0, 0xc, 0x16, 0x0, 0x0, 0x3c}) 26.576300579s ago: executing program 1 (id=1492): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5fffe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5272}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) (async, rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000540)=0xc) setresuid(r4, r4, r4) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=@report={0xd4, 0x20, 0xf23, 0x70bd2b, 0x25dfdbfc, {0x6c, {@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x4, 0x4e22, 0x1ff, 0x8, 0x20, 0xa0, 0x0, 0x0, 0xee01}}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xd21}, @lastused={0xc, 0xf, 0x3}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0xa}}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010100, @in=@empty, 0x0, 0x2}}, @etimer_thresh={0x8, 0xc, 0xff}, @lastused={0xc}, @XFRMA_IF_ID={0x8, 0x1f, 0xc}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x8040) (async) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0cb46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a", 0x59, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d00090028bd7000fcdbdf25040000b208"], 0x1c}, 0x1, 0x0, 0x0, 0x4008090}, 0x200c0084) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r5, 0x2e}, 0x20) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) (async, rerun: 32) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=r4, @ANYBLOB="270e6ad34b918b000000000000000407020b"], 0x14}, 0x1, 0x40030000000000}, 0x0) 26.499269509s ago: executing program 1 (id=1494): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, 0x0, 0x30, 0x1d, @void}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)=0x28) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x2, 0x9, 0x4, 0xfe, 0x0, 0xfeff, 0x0}) 26.410154343s ago: executing program 1 (id=1496): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = gettid() kcmp(r1, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) (async) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5819}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) 26.351981733s ago: executing program 1 (id=1497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x8000, 0x7, 0x3, 0x9, {{0x2a, 0x4, 0x2, 0x3d, 0xa8, 0x68, 0x0, 0x0, 0x4, 0x0, @multicast1, @empty, {[@cipso={0x86, 0x34, 0x3, [{0x0, 0xa, "c524ece13aed6fdc"}, {0x7, 0x12, "c34780f3221967cc4cc856bb64ef0bd4"}, {0x7, 0x12, "b6e701832316335f6da5d838e7a05e5b"}]}, @timestamp_prespec={0x44, 0x3c, 0xc3, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x20}, 0x93}, {@rand_addr=0x64010102, 0x9}, {@broadcast, 0x7}, {@multicast2, 0xfffffff9}, {@remote, 0xfffffff8}, {@remote, 0x6}, {@rand_addr=0x64010102, 0x8}]}, @rr={0x7, 0x23, 0x9d, [@dev={0xac, 0x14, 0x14, 0x2e}, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010101, @remote, @multicast2]}]}}}}}) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)="18e7774441d16e76c80ca195fabd40f9ff86a474f04351a74c3f5f7d370d9a11e50a0bf6cdd479a510089e26b0f624cae9726227f490685970f9f412fa810681809d65a1722f941b022114e9e01674f89318888531b91d564a191002fc44dcae273bac5c6c57ff2b2307378809587a1e475fa23fce1949216dfdfded57d3db8154dff7bf4cc4a22c297cbd411fb5b908479613937358a4ae931d6f619efa72a775f513966f131fb015a69e3ebc8569e91c0ce50b8e93b1ecbb3435ef7e306092b5a850303358522226477787e705725b9be8fb5244b1c60d7c28f0a0e0bfdbb8bc7e1c751c6d1d14c9a0ae", 0xeb}, {&(0x7f0000000140)="518d7c873f0aa8f72293427b8daf10461871bd01d8c839059593e4b6af50f39a8b274a06c0caeb890e4674f7443dec41a3859989921becff907c9e5b171988dc0e4f3e26229161b57a3fa39b70732dda357ae8a176ed8de27402271c7a35f4cb647ad404948df0ed7895c1db1f1d7bb9feab1771e980840ecfe4e6111bc8bdd50626d707c58ad71e", 0x88}, {&(0x7f0000000200)="568e7945c6122f8941c56ca16d4bdc4f2bca6e19982dd89b521c8e20296e0dbd080d2b444edbf451df0f16a8f316fe784ad5e3854ab768f7584981e642a349a8fcdb9f5550ae39aae429cda988f3f117b1485ff27af28983f148bef246df170fa8ab7060935720aca8386041d8104b9c270dd3ca9077c734f4b329b28199242e1843cfd35eee84a7f2ee4e7b811f6985777d168770f536c20dbe9ac78e763e29c330d6b18652e6a149d91244d562dc2d6f", 0xb1}, {&(0x7f00000002c0)="fee33af9b180c788b9dc8bd340dac03c5a0ee98a111c2dc94ef772e22d2a9ae615e65a6ee76eb8369f5777fcbdf00d2bc0b77d624b48d65e5e6341a263711adabbb2fd31bbe6d9c4d6b51c23458f52d657e7eb31e2fe925e51c46e0d4f7c3f6f6990fba1ec69b9fd09c7bbd5433ec5f0201aae7600f38ebeb544702ed1f1ed41b9466e0dd96540d0c54a6117884cd22862f9dfa4a4b4b6d8e66ec750e085e4f7d06ef6984c24f8e6f3a961ee149fa032cdfc47687bb0948295720894cce9ca26199c9fb7bf3babb8e687a4690c89accd3d38ec", 0xd3}], 0x4, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x78, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x9f, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x26}, @remote]}, @lsrr={0x83, 0xb, 0xe, [@multicast2, @private=0xa010102]}, @ssrr={0x89, 0x7, 0xea, [@private=0xa010100]}, @timestamp={0x44, 0x2c, 0x9e, 0x0, 0x3, [0x6, 0x3, 0x0, 0xb248, 0x1000, 0x80000000, 0x4, 0x7ff, 0x7, 0x2]}, @lsrr={0x83, 0x13, 0x82, [@multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x34}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_retopts={{0x68, 0x0, 0x7, {[@noop, @cipso={0x86, 0x28, 0x3, [{0x6, 0x11, "47d2fd3afbe1ed42e078ed69be68ca"}, {0x6, 0x11, "1fc004bccd76028526618f1abbb2e5"}]}, @end, @noop, @ssrr={0x89, 0x7, 0x60, [@rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x14, 0xe4, 0x1, 0x0, [{@multicast1, 0x86}, {@rand_addr=0x64010100, 0xffffffff}]}, @timestamp={0x44, 0x8, 0xed, 0x0, 0xf, [0x427f]}, @ra={0x94, 0x4, 0x4}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x148}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 26.212259287s ago: executing program 1 (id=1498): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002080)={&(0x7f0000002140)="26ed5286dcedf17446dcb6170a96b4f3673de8fc86b7a605930c15673faa93fbd5262e6b33eb3154f4ece7f66c74c7af1bb790c28008dd8fba4bfbb02b0bb88a4dec08de8614df5c6f92fb06326a8b3fa59ff9a9ec195ed20c3b810530cb128736f271aa36e3ebfb6f496dd38a51cf1ebc6b3875caf0356b5659ff944b553d346ebb1ff38b818de49f241c141d9f19d7913a4046f54d9125628febb5d473d6a99fb7c129d78f8226bcfa0c8d7c19c47e9153d459c86836aefa114c0e4168d8caab522e23df", &(0x7f0000002240)=""/170, &(0x7f0000002300)="f7a0ffeeda11b17e19a749bc6e5c93f8f7c45b9b4508c16d590a380eff4251fa071ff235ffc74186cea80f6a23f0966d3b3532707c4dc18c8351e51c6fdffc3757f6e04c17513d4d4bc2ca7ad55a3cfea5adb1407cfff4a4fcbce2c540ff7a2b0f4d7a1c6b4c8a06d28528c4dbefa629693c0f22f6e753ace6d29a03a0561e706109c2de141e201cf51b139164c1779510630ec4b86019e39430d975e81a42eba4a86693567c8aab1abfff3ae1c6c28ef935b11624999958b1b56bdbe01ae9e94637adc98f614f3f7cc29e2c70b3e4d3f19f006718d617980925f0b96f0fd4bed96db56ab8952ddbf979e2e00df1ffef65", &(0x7f0000002400)="6faa62c7f4e71658f3f35e6027ade7e9c051ac4309ec9f6bbae83147d505c6ec951d055b5e627b54fcdc01c5ee7935f58e8a60a5cbfa07f645d8d6a8c03ad82db84663b98bc482879be8b8b443e79df34016d325198050e3ed92a19f829d172847d43fa976ecd737d0a6e3d695d242eb172f4ad4d1651a342a8796a8ccb25b4656856b6f47d44b8f98d57ab3a49d66642f11f1f55a3b09bf85c0f50d89ff1b88040271a6f8e20c88d841788f9fa618022cf548156a4bd7df08f530aa2a4f3b62697daaf5df06f1542fcdaeb9fb6dfd6031db295cd9ba93fb952b159a1551ef37167b692ec5", 0x53, r0, 0x4}, 0x38) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0xa86, 0x5, 0x2, 0x85}, 'syz0\x00', 0x52}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.129582056s ago: executing program 34 (id=1498): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002080)={&(0x7f0000002140)="26ed5286dcedf17446dcb6170a96b4f3673de8fc86b7a605930c15673faa93fbd5262e6b33eb3154f4ece7f66c74c7af1bb790c28008dd8fba4bfbb02b0bb88a4dec08de8614df5c6f92fb06326a8b3fa59ff9a9ec195ed20c3b810530cb128736f271aa36e3ebfb6f496dd38a51cf1ebc6b3875caf0356b5659ff944b553d346ebb1ff38b818de49f241c141d9f19d7913a4046f54d9125628febb5d473d6a99fb7c129d78f8226bcfa0c8d7c19c47e9153d459c86836aefa114c0e4168d8caab522e23df", &(0x7f0000002240)=""/170, &(0x7f0000002300)="f7a0ffeeda11b17e19a749bc6e5c93f8f7c45b9b4508c16d590a380eff4251fa071ff235ffc74186cea80f6a23f0966d3b3532707c4dc18c8351e51c6fdffc3757f6e04c17513d4d4bc2ca7ad55a3cfea5adb1407cfff4a4fcbce2c540ff7a2b0f4d7a1c6b4c8a06d28528c4dbefa629693c0f22f6e753ace6d29a03a0561e706109c2de141e201cf51b139164c1779510630ec4b86019e39430d975e81a42eba4a86693567c8aab1abfff3ae1c6c28ef935b11624999958b1b56bdbe01ae9e94637adc98f614f3f7cc29e2c70b3e4d3f19f006718d617980925f0b96f0fd4bed96db56ab8952ddbf979e2e00df1ffef65", &(0x7f0000002400)="6faa62c7f4e71658f3f35e6027ade7e9c051ac4309ec9f6bbae83147d505c6ec951d055b5e627b54fcdc01c5ee7935f58e8a60a5cbfa07f645d8d6a8c03ad82db84663b98bc482879be8b8b443e79df34016d325198050e3ed92a19f829d172847d43fa976ecd737d0a6e3d695d242eb172f4ad4d1651a342a8796a8ccb25b4656856b6f47d44b8f98d57ab3a49d66642f11f1f55a3b09bf85c0f50d89ff1b88040271a6f8e20c88d841788f9fa618022cf548156a4bd7df08f530aa2a4f3b62697daaf5df06f1542fcdaeb9fb6dfd6031db295cd9ba93fb952b159a1551ef37167b692ec5", 0x53, r0, 0x4}, 0x38) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0xa86, 0x5, 0x2, 0x85}, 'syz0\x00', 0x52}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.056325779s ago: executing program 35 (id=1328): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x24000, 0x60) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) (async) open(&(0x7f0000000440)='./file0\x00', 0x24000, 0x60) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) 17.280995704s ago: executing program 5 (id=1605): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$cgroup_devices(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='b *\a\x00\x00\x00w\x00'], 0x9) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r1 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x7) ioctl$VT_RELDISP(r2, 0x8910) r3 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mo\x01e\x00', &(0x7f0000000140)='\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10400, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r6 = epoll_create1(0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r6, 0x0, 0x0, 0x4c6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000000039a0040008000c00018006000600894f0000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) 14.230762624s ago: executing program 5 (id=1652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a00004000000003ff02000000e400000000000000000001f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x9a38, 0x0, 0x8, 0x5, 0x9, 0x1e3, 0xf900, r6}, 0x20) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r2, 0x105, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xa, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000001800128008000100687372000c00028008000100", @ANYRES32=r7, @ANYBLOB="67de037b5336b06a2f79bc5548ef60b8ef675c3bac0814de731dcadc0bced3b1ecacc34d54b2978d212c1659626225b708c600093ec3737cbe35aff8837c2661b203f94db4898be60de7303ac51c1708272dbba2158a3522bef719018c43c1c3f69fdb6f70aee254ee694b2b0bc42faf8f58bc38362e"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$inet6(0xa, 0x3, 0x4) (async) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a00004000000003ff02000000e400000000000000000001f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x9a38, 0x0, 0x8, 0x5, 0x9, 0x1e3, 0xf900, r6}, 0x20) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r2, 0x105, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xa, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008080) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000001800128008000100687372000c00028008000100", @ANYRES32=r7, @ANYBLOB="67de037b5336b06a2f79bc5548ef60b8ef675c3bac0814de731dcadc0bced3b1ecacc34d54b2978d212c1659626225b708c600093ec3737cbe35aff8837c2661b203f94db4898be60de7303ac51c1708272dbba2158a3522bef719018c43c1c3f69fdb6f70aee254ee694b2b0bc42faf8f58bc38362e"], 0x38}}, 0x0) (async) 14.229528337s ago: executing program 5 (id=1653): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/138, 0x8a}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) r1 = syz_open_pts(r0, 0x42) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0x1006) 14.10216704s ago: executing program 5 (id=1654): ioctl$SG_BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) shutdown(r2, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x11}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x20002000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x180) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000400)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x808080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001000000a6868000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0xa}, 0x94) 13.907994295s ago: executing program 5 (id=1660): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x100000000000f7) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x28) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r4, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(r5, &(0x7f0000000140)='./control\x00', 0x200) r6 = open(&(0x7f0000022ff6)='./control\x00', 0x50500, 0x0) getdents(r6, &(0x7f0000000280)=""/79, 0x4f) rmdir(&(0x7f00000003c0)='./control\x00') r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x1, @local, 0x5}]}, &(0x7f0000000140)=0x10) listen(r7, 0xfff) r9 = accept$inet6(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r8, 0x500}, 0x8) keyctl$revoke(0x3, r0) read$watch_queue(r1, &(0x7f0000000300)=""/62, 0x3e) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000000440)={r10, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x17, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f15239d200", "3f4300ff0008000000000100", [0x8001, 0x101]}}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10}, 0x94) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) 13.65213515s ago: executing program 5 (id=1666): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400140073797a6b616c6c6572300000000000fb0e0fdfdac8462164fe6d44000800050006000080"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[], 0x54) r9 = socket(0x2, 0xa, 0x0) fstat(r9, &(0x7f0000000680)) fchown(0xffffffffffffffff, 0x0, 0xee01) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000130a010100000000000000000500000173797a31000000000900020073797a31000000000900010073797a300000000039d4330610c205ef"], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x20000800) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000040)={0xe67, 0x3, 0x57}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000300000100001800128008000100677470000c000280050005000000000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x24000840) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) socket$kcm(0x2, 0x200000000000001, 0x106) 13.574233269s ago: executing program 36 (id=1666): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400140073797a6b616c6c6572300000000000fb0e0fdfdac8462164fe6d44000800050006000080"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[], 0x54) r9 = socket(0x2, 0xa, 0x0) fstat(r9, &(0x7f0000000680)) fchown(0xffffffffffffffff, 0x0, 0xee01) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000130a010100000000000000000500000173797a31000000000900020073797a31000000000900010073797a300000000039d4330610c205ef"], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x20000800) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000040)={0xe67, 0x3, 0x57}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000300000100001800128008000100677470000c000280050005000000000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x24000840) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) socket$kcm(0x2, 0x200000000000001, 0x106) 7.720794824s ago: executing program 8 (id=1728): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004011, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) pread64(r0, &(0x7f0000000040)=""/143, 0x8f, 0x101) 7.589358164s ago: executing program 8 (id=1729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40043, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000180)={0x1000, 0xe000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) close_range(r1, r0, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) readv(r4, &(0x7f0000002c40)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1) syz_clone(0xa1084100, &(0x7f00000001c0)="066a7ff28a68177dd8147431f299ce02e04296936be1552127ecaddcf728f7adb4efca53df582756a39c4bbd969cbb5f64039db95212da6f056f596e53fa64233ad8ffbd9df3b491775ddf3ec80e7f958cc654f056bdf1e331fcdbf264d966b60222b133e99bd2a8234b62953700b991309195124931f63dd940ce44597f37f59229ffd5aacb8667ba45d3e7c1cddb20b72693d6e1963f4e9af892c778e8f0529f170d1e714c3ac77aed6f796c48521c3bf8f04b0e7e43ca5173f4abaf52a8a2ec67052ac87df9ee8521718ea1ba4c9f13d3f60d0326189f482bbc2f1ec006dd45a0d85f3db555f823308c4e56f5569c4a2708eebe471c76df", 0xf9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000002c0)="c2575aa4459becb7f4ffd0aac550a1f80d63d6cde58c80197ac6bf9e0a0fea9678e272de997b9d2c2a5b64d2c96f52af81c99a0e1eac8a306dc2bb2e1b605ada3d02943384686cd9af714a4c6bd466ae4a7ab0912f60585d42063053f9717e46f300c7415b87d522476ac96e2ec16f5790be6939c0d5306a23ff8d7d5db1ed075b3ecf2798e32bc6") socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[], 0x48) socket$inet6(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r5 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x2000000}, 0x1c) recvfrom$packet(r5, 0x0, 0x0, 0x40010122, &(0x7f0000000100)={0x11, 0xd, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6.691897585s ago: executing program 8 (id=1734): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$lock(r0, 0x27, &(0x7f0000000040)={0x1, 0x2, 0x7fffffffffffffff, 0xff, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) 6.400802548s ago: executing program 8 (id=1738): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="5955fd5a6ab1d716a93a4a5559ee465d3d88eb4f34e522c474edd49d", @ANYBLOB="190369b81fe3c439d4cb15d441def3d07f1c1c2320c2c6472d753a34bdf1bd0c37db261292a1229c00aad3275025e78ab6df9af0ebad0a48d755d8a66dfa344e1437e6be84a9ab600c31a64df76547d2ca509d8a174756f703c1f04da11c90c0f67fb2de840d66d801ca9df4dab0c2673596685611145530287680cca8b580ebe26c3f8bd210afebe9ee740484ce451f9c758c00", @ANYRES32=r1, @ANYBLOB="24005a80200000800500040002000000140005"], 0x40}, 0x1, 0x0, 0x0, 0x24004001}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x5c, r7, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9424b19765764f59968f86ff411a659cd3731289a0209fc0"}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400b1e48a3d03f3fef9e3d817b81c7d84ffc25554ccbe01f29d53379a506cb726ab4510422c614173d23cc0734fcf80f2403d272aa7bf7b03a8f15b30e96949d342f4c859b7f8bf06415d599f08653a699166021e8c1f643fdc2b588b937bf543471438f318a78723ecf49f1f471c8bccc7ab54fd8985abcdc4816062883661986e6991632c93e71ccd024ec6886cef167a98ad8e383b2767a22f342307ce31f68835ccc49f9bb74d04f8332273b1a8ef0abb898dc943e86f85509a67cff440e3e0d8d7f469a59508b89e312839e7bca9b4af8bd33edce475a646ac2546596c642f", @ANYRES16=0x0, @ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x20040005}, 0x200044c0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf7c, 0x48}}}}, [@NL80211_ATTR_IE={0x5b, 0x2a, [@fast_bss_trans={0x37, 0x52, {0x2, 0x0, "9182332994ae658769cf229dc724c585", "f915268b9918b457d57de013b35849d137868daabf1c479337cddcf385b9ca49", "7021b7b53c1339d50a3e45498d129d8381996f520affc2e76e77ea2219f64dc2"}}, @dsss={0x3, 0x1, 0xb8}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x43}]}, 0x8c}}, 0x40000) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x9, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'wg1\x00'}]}}]}, 0x88}}, 0x24004094) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f0000000200)={0x41, r12}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030801d000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c106c77f25c918236b89972bbe6400000000000008000000000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3001) 6.280090328s ago: executing program 8 (id=1741): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)=@arm64={0x4, 0x5, 0x0, '\x00', 0xef}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/vmcoreinfo', 0x8001, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(fpu(pcbc(aes-aesni)),sha384-neon)\x00'}, 0x58) close_range(r0, r0, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="a1baf1efe00a10e7c8520967eca23b41e2e8fbaf5d59815145c7610a", 0x1c) r4 = accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_to_team\x00'}) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0xf, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x24004818) r5 = syz_open_dev$usbmon(&(0x7f0000000340), 0x10000, 0x10200) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000380)) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000003c0)=@req3={0x6, 0x8, 0x4ce9d083, 0x4, 0x1, 0x6, 0x6ce27e24}, 0x1c) r6 = getpgrp(0xffffffffffffffff) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000400)={'\x00', 0x9, 0x7fffffff, 0x0, 0x10001, 0xffffffffffff0000, r6}) accept4$nfc_llcp(r1, &(0x7f0000000480), &(0x7f0000000500)=0x60, 0x800) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000540)={'\x00', 0x3, 0x6, 0x91, 0x0, 0x1, 0x80000, 0x8080000, '\x00', 0x3ff}) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000740)) r8 = syz_usbip_server_init(0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000940)=0x8001, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00), r2) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xd4, r10, 0x608, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x42}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xaa5c}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) ioctl$KVM_RUN(r1, 0xae80, 0x0) read$FUSE(r8, &(0x7f0000000bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r2, &(0x7f0000002c00)={0x18, 0x0, r11, {0x80}}, 0x18) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x37}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) fsetxattr$security_ima(r9, &(0x7f0000002d80), &(0x7f0000002dc0)=@md5={0x1, "e7c3079e476663f8df11a068c0bdfef7"}, 0x11, 0x1) 5.480981742s ago: executing program 8 (id=1753): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x1, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x2}, 0x1, 0x2}, {0x1, 0x1, {0x0, 0xf0, 0x1}, {0x2, 0x0, 0x2}, 0xfe}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x1, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x2}, 0x1, 0x2}, {0x1, 0x1, {0x0, 0xf0, 0x1}, {0x2, 0x0, 0x2}, 0xfe}], 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 2.784367468s ago: executing program 4 (id=1794): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0xa, 0x801, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x3fe, 0x6, 0x5, 0x9, 0x16}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x40}}, 0x0) 2.661727868s ago: executing program 4 (id=1795): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x4e23, 0x7, 0x4e23, 0x5, 0xa, 0x20, 0x0, 0x33, r2, 0xee00}, {0x618, 0x232, 0x1, 0x5, 0x10, 0x4, 0x1000, 0x25c4}, {0x8, 0x4, 0x5, 0x3}, 0x6, 0x6e6bba, 0x0, 0x0, 0x1, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x3505, 0x2, 0x0, 0xc, 0x4, 0x6, 0x1}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a00010000000000000000000a000000000000000000000000000000ff010000000000000000000000000001f8000000000008000000000032000000", @ANYRESHEX=r2, @ANYBLOB="1bf201d0012df4ede2b680734aeb43e4678f7181d408acbdf858f7ebca39b91dec06f309ff68a7bc80481b5bb570e8c2100dbcd8a8dab5348851914f666ca928ced06bb0f9b19f65db2384dba63f4c", @ANYRES64=r2], 0x104}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000600)) socket$inet_udp(0x2, 0x2, 0x0) 2.65650984s ago: executing program 4 (id=1797): unshare(0x68040200) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x900, 0x0, 0x33}, 0x18) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000540)=""/203, 0xcb, 0x0, &(0x7f0000000640)=""/9, 0x9}}, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000800), 0x220000) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ff030000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185900000900000000000000000000001da00600f0ffffff18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff0700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000b7080000000000007b8af8ff00000000b70800000a0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500c56c1424248249f0804d080aab2000f0ffffff18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001863000009000000000000000010000018560000100000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x26, &(0x7f0000000440)=""/38, 0x41000, 0x20, '\x00', r6, @netfilter, r8, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xf, 0x2}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000700)}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.400309336s ago: executing program 4 (id=1800): shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/207) r0 = shmget(0x1, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000100)=""/55) r1 = msgget(0x3, 0x46e) msgsnd(r1, &(0x7f0000000140)={0x0, "a27c3f712ee1413820ecaa39a3ba6e34f48539d59a963719b25a1f631d9e54fc07292105e8486fdce09452df8af06d6cd1a51bca9e6133c53c4793fa58d6fd368e8a70cac4"}, 0x4d, 0x800) msgsnd(r1, &(0x7f00000001c0)={0x3, "0f746c69bd4c116358c85e26bc4adea467fb379cde7e3a433bad8e55f9"}, 0x25, 0x800) r2 = msgget(0x1, 0x208) r3 = msgget$private(0x0, 0x400) msgctl$IPC_RMID(r3, 0x0) unshare(0x0) r4 = memfd_secret(0x80000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000007, 0x110, r4, 0x83688000) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000200)={0x2, 0x7, 0x3ff, 0xc000}) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000240)=""/134) msgsnd(r3, &(0x7f0000000300)={0x0, "256ed87ff5a32bb2d9336dd3af1595a5cdc20915f65031e0fa380708db2dafe5f66bede718fd73a626944c016ab00c1ab845cb2d6181d2840ed2337b31016bc6eab2f198d13848aad200da42ffdd2f4d6a9fc644b55824aa8e0d19e3e8a62ae36a234ec863516906bd76f55d7f468db441514d7c217755532fe86a5ac2"}, 0x85, 0x800) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', r6, 0x2f, 0x2, 0xfa, 0x7158, 0x2, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast2, 0x40, 0x8, 0xb, 0xfff}}) msgrcv(r3, &(0x7f00000004c0)={0x0, ""/4096}, 0x1008, 0x3, 0x3800) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000001500)=""/72) unshare(0x48000100) msgget(0x3, 0x401) r7 = ioctl$USERFAULTFD_IOC_NEW(r4, 0xaa00) close_range(r5, r7, 0x0) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000001580)=""/255) shmget(0x3, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) msgrcv(r1, &(0x7f0000001680)={0x0, ""/92}, 0x64, 0x0, 0x1000) msgctl$IPC_RMID(r2, 0x0) ioctl$KVM_CAP_STEAL_TIME(r4, 0x4068aea3, &(0x7f0000001700)) syz_open_procfs$pagemap(0x0, &(0x7f00000037c0)) 2.320553308s ago: executing program 4 (id=1801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452509005ad94a461cdbfee9bdb942352359a351d1ec0cffb4792cd8000080", 0x4c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aa040000000000000000000086dd604dd308002006e0fd800000000000000000000000000023fe80004001c2048cf437fe5a1853bd9e0a6490e100"/73, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000080ac5833c80000000070000"], 0x0) 2.319861998s ago: executing program 4 (id=1802): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r1, 0x8000000000000000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010025ae7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e00000007f0000010000050000000000000000014f3ac41a3b21efff3c90cc21635e8e247801c2a21088c8a4917f4712f45f5b739d4268a5a060fbc71553db4486103f3731f692f785e8deb5000e56e75f308513bb212c2ef86f6d1f9c70a7b3c1b3731e889df6721261f73acccc42e3acadee0b2def537dfcead8f98eead6a821dd77fb45bd8ee73a506c511871bf870200000000000000256a2fe6e0a2809289c5f62e4a3a6c1b93b72bf68e6c5547fa0804"], 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$rtc(&(0x7f0000000140), 0xc, 0x181000) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x8, 0x7d, 0x6}, 0xe) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {0x2}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 1.381351247s ago: executing program 6 (id=1805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004000}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, 0x0, &(0x7f00000006c0)) (async) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="330200007d00000005f2000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x233) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) read$FUSE(r3, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x2b, 0x8, 0x10000000, 0x45c, 0x4, 0xfffffc00, 0x3, 0x0, 0x0, 0x20, 0xe}}, 0x50) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0, 0xfffffffffffffdaf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000080)) (async) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x2b, 0xa, 0x0, "32cfd5010000aa022c1e00f4bf40074000000400000000b00400d800", 0x30385056}) 1.251166315s ago: executing program 6 (id=1806): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x240000, &(0x7f00000004c0)={[{@index_off}], [{@fowner_eq}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, 'redirect_dir=off'}}, {@obj_role={'obj_role', 0x3d, 'overlay\x00'}}]}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@redirect_dir_off}]}) 1.190638686s ago: executing program 6 (id=1808): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff", 0xe, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.122170644s ago: executing program 6 (id=1810): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x80, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) r2 = syz_clone(0x2020100, 0x0, 0x64, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ftruncate(r3, 0x9) r4 = mmap$IORING_OFF_SQES(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x26, 0x0, 0x7e, 0x4000000000002, 0x0, 0x5, 0x0, 0x0, {0x2}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x1, r0, 0x0, {0x8, 0x6}, 0x21}, 0x1) 1.012185898s ago: executing program 6 (id=1814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x80a0000, 0x1, r2, 0xb}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 808.82941ms ago: executing program 6 (id=1815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000580)={&(0x7f0000000540)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000600)={0x2, 0x0, &(0x7f00000005c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000006c0)={&(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x1, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000740)={0x2, 0x0, &(0x7f0000000700)=[0x0, 0x0]}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[0x0], &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000880)={&(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000940)={0x301, 0x9, &(0x7f0000000780)=[0x0, 0x0, r1, r2, r3, r4, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x3ff, 0x4304, 0xffffffff, 0x2, 0x1, 0x7], &(0x7f00000008c0)=[r6], &(0x7f0000000900)=[0x1000, 0x8], 0x0, 0x4}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x10000000000, 0x0, 0x9, 0x0, 0x1, 0x9}, 0x0, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r9, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x2, 0x10000, 0x3, 0x1, 0x200cca, 0x8, 0x7, 0xa, 0x2, 0x2, 0x1, 0x1, 0x800, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0x3, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8, 0xffffffff]}) dup3(r11, r8, 0x80000) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0xfdef) 221.554665ms ago: executing program 7 (id=1822): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x509400, 0x1) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="693ee7fac92a6c6784d7dda7e007d52fc0ad80df2f12b7d5b6661bf4ee5185f62c99a211b086ed402f2af7de957deb2e54cc7d371f7a", 0x36}, {&(0x7f00000002c0)="65f8842cfe025c00295174a1829cc23d8545aa690eda85a8ccf3e96ddd687691054f97f797598df8816bd1f08dd1060aa07b80703234b432dd870a160c4b6f61841643fc8c2af23586983b707f706d49c072ebb159d01f2b991eaf22470345ce944c0c71b3b1efa281b4f9e0bde006226d185a9bcebe18089d5bb01a57f0584be4bcf89caecacb7a9467f6955157f1fc996e631cdf331c993ba262992e482694a64ffdb4d7033a0223bf5f609b94d995a19b5bf91275d6d6dfe2f9143aa2d3d09a3d800e01c21be148ab1652f65037719c4b0aca", 0xd4}, {&(0x7f00000001c0)="d7624e37bf89d07a241535143cbe88ef046e1c592018747f00b0513b32d7e1ca3cfbad87460808e0d2cb9032963dec9b2f268d685b", 0x35}], 0x3, 0xc) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) 221.162594ms ago: executing program 7 (id=1823): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000100)=""/83, 0x53) getdents64(r0, &(0x7f0000000200)=""/72, 0x48) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0xd8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x4008005}, 0x8d4) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x24, 0x2b, 0xb, 0x70bd2a, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@empty}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x5b}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x1, 0x12}, @fda={0x66646185, 0x6, 0x2, 0xd}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6004c0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000400020011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 121.668707ms ago: executing program 7 (id=1824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r1, 0x409, 0x3f) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYRESHEX=r1], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040000) 120.554146ms ago: executing program 7 (id=1825): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc", 0x1}, {&(0x7f0000000100)='v', 0x1}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='&', 0x1}, {&(0x7f00000001c0)="ca", 0x1}, {&(0x7f00000011c0)="b4", 0x1}, {&(0x7f0000001440)='4', 0x1}], 0x7, 0x3) (async) close(r1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x6a, &(0x7f00000006c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x32}, {[@lsrr={0x83, 0x17, 0x99, [@dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010100, @private=0xa010102, @private=0xa010100, @empty]}, @timestamp_prespec={0x44, 0x14, 0x82, 0x3, 0x1, [{@local, 0x2}, {@rand_addr=0x64010101, 0xc00000}]}]}}}}}}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}, {&(0x7f0000000940)="a6", 0x1}, {&(0x7f00000009c0)="e3", 0x1}, {&(0x7f0000000b80)='a', 0x1}, {&(0x7f0000000c80)='_', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}, {&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}, {&(0x7f00000012c0)='t', 0x1}, {&(0x7f0000000d80)="dd", 0x1}, {&(0x7f0000001dc0)="81", 0x1}], 0x5}}], 0x2, 0x4008440) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x300) (async) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 60.553218ms ago: executing program 7 (id=1826): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000240)={0x1, @win={{}, 0x1, 0x0, 0x0, 0x0, 0x0}}) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x1c, 0x42, 0xb, 0x70ad23, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000"], 0x44}}, 0x4000000) sendto$packet(r6, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x653f86b3ce17aa20) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r10, 0x1, 0x2, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="2e837afb88010000000000fcdbcf890b8be2781868d7395273ebc662b75ca16decf7883f6e1235151a538f960aeb35c5ed294e3405be4e71c5bd273716560b5e195c24786a234b9bef33aa1b94c0b698b230ac81cf6c980bdee68613e6a43e63860019640ec098092ce3c36b4c022cac502e"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r11 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x82000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r11, 0x80045017, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x8, '\x00', r7}, 0x94) 0s ago: executing program 7 (id=1827): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) kernel console output (not intermixed with test programs): iscuous mode [ 143.386195][ T40] audit: type=1400 audit(1753528756.375:31243): avc: denied { mounton } for pid=9908 comm="syz.5.1033" path="/proc/92/task" dev="proc" ino=34165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 143.387601][ T9909] macsec0: entered promiscuous mode [ 143.387621][ T9909] macsec0: entered allmulticast mode [ 143.396547][ T40] audit: type=1400 audit(1753528756.375:31245): avc: denied { read } for pid=9916 comm="syz.3.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.410653][ T40] audit: type=1400 audit(1753528756.375:31246): avc: denied { setopt } for pid=9916 comm="syz.3.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.411269][ T9909] veth1_macvtap: entered promiscuous mode [ 143.418517][ T40] audit: type=1400 audit(1753528756.375:31244): avc: denied { mount } for pid=9908 comm="syz.5.1033" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 143.420443][ T9909] veth1_macvtap: entered allmulticast mode [ 143.428737][ T40] audit: type=1400 audit(1753528756.385:31247): avc: denied { create } for pid=9916 comm="syz.3.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.442614][ T9909] macsec0: left promiscuous mode [ 143.445060][ T9909] macsec0: left allmulticast mode [ 143.447156][ T9909] veth1_macvtap: left allmulticast mode [ 143.452964][ T9920] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 143.458122][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 143.461135][ T9] usb 10-1: no configurations [ 143.467314][ T9] usb 10-1: can't read configurations, error -22 [ 143.502484][ T9925] overlayfs: missing 'lowerdir' [ 143.580357][ T9932] SELinux: Context system_u:object_r:useradd_exec_t:s0 is not valid (left unmapped). [ 143.824059][ T9956] qrtr: Invalid version 0 [ 143.898994][ T9956] kvm: MWAIT instruction emulated as NOP! [ 144.122661][ T9960] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.125455][ T9960] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.128082][ T9960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.130839][ T9960] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.134359][ T9960] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.143515][ T9960] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.241415][ T9973] bridge_slave_1: left allmulticast mode [ 144.245281][ T9973] bridge_slave_1: left promiscuous mode [ 144.247715][ T9973] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.254052][ T9973] bridge_slave_0: left allmulticast mode [ 144.256025][ T9973] bridge_slave_0: left promiscuous mode [ 144.258421][ T9973] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.384057][ T6052] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 144.442119][ T9975] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 144.479610][ T9977] netlink: 'syz.3.1051': attribute type 4 has an invalid length. [ 144.487336][ T9977] SELinux: policydb magic number 0xc0 does not match expected magic number 0xf97cff8c [ 144.491246][ T9977] SELinux: failed to load policy [ 144.522377][ T6052] usb 6-1: device descriptor read/64, error -71 [ 144.523697][ T5315] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 144.677202][ T5315] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 144.772410][ T6052] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 144.905520][ T6052] usb 6-1: device descriptor read/64, error -71 [ 145.012638][ T6052] usb usb6-port1: attempt power cycle [ 145.037884][T10001] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 145.116456][T10005] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 145.199726][T10012] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 145.203041][T10012] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 145.206332][T10012] overlayfs: failed to get uuid (236/file1, err=-13); falling back to uuid=null. [ 145.362306][ T6052] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 145.393180][ T6052] usb 6-1: device descriptor read/8, error -71 [ 145.467429][T10018] ref_ctr going negative. vaddr: 0x200000ffc004, curr val: -29824, delta: 1 [ 145.470873][T10018] ref_ctr increment failed for inode: 0xc1 offset: 0x7 ref_ctr_offset: 0x4 of mm: 0xffff8880384e9e00 [ 145.634524][ T6052] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 145.652719][ T6052] usb 6-1: device descriptor read/8, error -71 [ 145.779952][ T6052] usb usb6-port1: unable to enumerate USB device [ 146.042826][ T5315] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.062057][T10023] __nla_validate_parse: 15 callbacks suppressed [ 146.062071][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1067'. [ 146.069395][T10023] tls_set_device_offload: netdev not found [ 146.075887][T10023] vlan3: entered promiscuous mode [ 146.077849][T10023] bridge0: entered promiscuous mode [ 146.080038][T10023] vlan3: entered allmulticast mode [ 146.081987][T10023] bridge0: entered allmulticast mode [ 146.123914][T10026] bond0: entered promiscuous mode [ 146.126069][T10026] bond_slave_0: entered promiscuous mode [ 146.128800][T10026] bond_slave_1: entered promiscuous mode [ 146.133553][T10026] batadv0: entered promiscuous mode [ 146.136060][T10026] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 146.140535][T10026] Cannot create hsr debugfs directory [ 146.144714][T10026] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 146.149385][T10026] bond0: left promiscuous mode [ 146.151362][T10026] bond_slave_0: left promiscuous mode [ 146.153933][T10026] bond_slave_1: left promiscuous mode [ 146.157744][T10026] batadv0: left promiscuous mode [ 146.215801][ T5315] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.215887][ T5972] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.357538][T10069] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 147.475669][T10075] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1081'. [ 147.523909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 147.534849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 147.552879][T10089] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 147.618018][T10100] xt_hashlimit: size too large, truncated to 1048576 [ 147.678587][T10104] bond0: option ad_select: unable to set because the bond device is up [ 147.859292][ T40] kauditd_printk_skb: 220 callbacks suppressed [ 147.859312][ T40] audit: type=1400 audit(1753528760.855:31468): avc: denied { read write } for pid=5970 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.891881][ T40] audit: type=1400 audit(1753528760.875:31469): avc: denied { open } for pid=5970 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.900384][ T40] audit: type=1400 audit(1753528760.875:31470): avc: denied { ioctl } for pid=5970 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.901895][T10117] fuse: Unknown parameter 'gd-×£O! ¿J%· Á—Oz%Ý%VŠDÝêkTãe 0x0000000000000003' [ 147.909799][ T40] audit: type=1400 audit(1753528760.895:31471): avc: denied { read write } for pid=10116 comm="syz.5.1088" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 147.914245][T10117] overlayfs: workdir and upperdir must be separate subtrees [ 147.920837][ T40] audit: type=1400 audit(1753528760.895:31472): avc: denied { open } for pid=10116 comm="syz.5.1088" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 147.932256][ T40] audit: type=1400 audit(1753528760.895:31473): avc: denied { execute } for pid=10114 comm="syz.3.1087" dev="tmpfs" ino=2123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.940455][ T40] audit: type=1400 audit(1753528760.905:31474): avc: denied { execute_no_trans } for pid=10114 comm="syz.3.1087" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C88548585976CF193563B534202864656C6574656429 dev="tmpfs" ino=2123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.956941][ T40] audit: type=1400 audit(1753528760.955:31475): avc: denied { mount } for pid=10118 comm="syz.3.1089" name="/" dev="9p" ino=35913840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 147.964714][ T40] audit: type=1400 audit(1753528760.955:31476): avc: denied { setattr } for pid=10118 comm="syz.3.1089" name="/" dev="9p" ino=35913840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.984834][ T40] audit: type=1400 audit(1753528760.985:31477): avc: denied { create } for pid=10121 comm="syz.5.1090" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 148.255739][T10132] fuse: Bad value for 'fd' [ 148.282625][ T5972] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.816418][T10122] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 148.819395][T10122] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.825423][T10122] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.828289][T10122] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.911747][T10175] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1098'. [ 148.967896][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1097'. [ 149.007453][T10180] bond2: entered promiscuous mode [ 149.007740][T10180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.043646][T10180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.046470][T10180] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 149.050242][T10180] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 149.068577][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1097'. [ 149.261711][T10152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1096'. [ 149.330661][T10188] 9pnet: Could not find request transport: J×ërdma [ 149.446640][T10239] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1107'. [ 149.661459][T10266] netlink: 'syz.3.1112': attribute type 10 has an invalid length. [ 149.669397][T10269] netlink: 'syz.5.1113': attribute type 58 has an invalid length. [ 149.767700][T10274] block device autoloading is deprecated and will be removed. [ 149.928952][T10288] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 149.932617][T10288] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 149.955990][T10290] ntfs3(sr0): Primary boot signature is not NTFS. [ 149.959173][T10290] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 149.994255][T10293] netlink: 'syz.3.1122': attribute type 1 has an invalid length. [ 149.997372][T10293] NCSI netlink: No device for ifindex 0 [ 150.025735][T10290] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 150.081174][T10299] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 150.083213][T10299] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 150.090151][T10299] vhci_hcd vhci_hcd.0: Device attached [ 150.122378][ T5972] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.342420][ T1329] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 150.357955][T10320] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 150.423293][T10320] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 150.692387][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 150.842573][ T5315] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.842984][ T5969] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.843983][ T5972] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.857017][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 150.860933][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.864013][ T9] usb 6-1: Product: syz [ 150.865736][ T9] usb 6-1: Manufacturer: syz [ 150.867643][ T9] usb 6-1: SerialNumber: syz [ 150.876302][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 150.895080][ T6050] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 151.103842][T10329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.107123][T10329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.315766][ T6052] usb 6-1: USB disconnect, device number 26 [ 151.320505][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 151.402917][T10343] x_tables: duplicate underflow at hook 1 [ 151.974089][ T6050] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 151.977091][ T6050] ath9k_htc: Failed to initialize the device [ 151.980728][ T6052] usb 6-1: ath9k_htc: USB layer deinitialized [ 152.119100][T10300] vhci_hcd: connection reset by peer [ 152.121373][ T1155] vhci_hcd: stop threads [ 152.123038][ T1155] vhci_hcd: release socket [ 152.124959][ T1155] vhci_hcd: disconnect device [ 152.864047][ T40] kauditd_printk_skb: 290 callbacks suppressed [ 152.864063][ T40] audit: type=1400 audit(1753528765.865:31768): avc: denied { unlink } for pid=10386 comm="syz.1.1146" name="#45" dev="tmpfs" ino=1595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.876477][ T40] audit: type=1400 audit(1753528765.865:31769): avc: denied { mount } for pid=10386 comm="syz.1.1146" name="/" dev="overlay" ino=1590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 152.887132][ T40] audit: type=1400 audit(1753528765.875:31770): avc: denied { create } for pid=10386 comm="syz.1.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.895121][ T40] audit: type=1400 audit(1753528765.875:31771): avc: denied { watch watch_reads } for pid=10386 comm="syz.1.1146" path="/284/bus" dev="overlay" ino=1590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.961252][ T40] audit: type=1400 audit(1753528765.955:31772): avc: denied { ioctl } for pid=10383 comm="syz.5.1145" path="socket:[36559]" dev="sockfs" ino=36559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.035301][ T40] audit: type=1400 audit(1753528766.035:31773): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 153.066657][ T40] audit: type=1400 audit(1753528766.065:31774): avc: denied { read write } for pid=10389 comm="syz.4.1148" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.070598][T10390] Invalid logical block size (64) [ 153.078840][ T40] audit: type=1400 audit(1753528766.065:31775): avc: denied { open } for pid=10389 comm="syz.4.1148" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.089475][ T40] audit: type=1400 audit(1753528766.065:31776): avc: denied { read append } for pid=10389 comm="syz.4.1148" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.100503][ T40] audit: type=1400 audit(1753528766.065:31777): avc: denied { open } for pid=10389 comm="syz.4.1148" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.121852][T10395] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 153.130106][T10402] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 153.139741][T10402] cramfs: wrong magic [ 153.153021][T10402] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 153.156374][T10402] cramfs: wrong magic [ 153.231937][T10411] vlan1: entered promiscuous mode [ 153.236357][T10411] vlan1: entered allmulticast mode [ 153.238636][T10411] veth0_vlan: entered allmulticast mode [ 153.297979][T10423] xt_hashlimit: invalid rate [ 153.309524][ T5969] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 153.313548][T10406] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1150'. [ 153.317428][T10424] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1155'. [ 153.323000][ T5969] Bluetooth: hci2: unexpected event 0x3e length: 376 > 260 [ 153.323025][ T5969] Bluetooth: hci2: unexpected subevent 0x0d length: 375 > 260 [ 153.328541][ T5969] Bluetooth: hci2: adv larger than maximum supported [ 153.328612][ T5969] Bluetooth: hci2: adv larger than maximum supported [ 153.331458][ T5969] Bluetooth: hci2: adv larger than maximum supported [ 153.488904][T10433] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 153.519057][T10439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1159'. [ 153.519064][T10440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1159'. [ 153.541606][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1159'. [ 153.694435][T10451] netlink: 'syz.1.1163': attribute type 4 has an invalid length. [ 153.813372][T10462] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.829235][T10462] bond5: entered allmulticast mode [ 153.872381][ T24] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 154.022350][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 154.026979][ T24] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 154.030668][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.042932][ T24] usb 9-1: config 0 descriptor?? [ 154.052661][ T24] as10x_usb: device has been detected [ 154.054894][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 154.079002][ T24] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 154.099848][ T24] as10x_usb: error during firmware upload part1 [ 154.112569][ T24] Registered device nBox DVB-T Dongle [ 154.254016][ T6052] usb 9-1: USB disconnect, device number 13 [ 154.279753][ T6052] Unregistered device nBox DVB-T Dongle [ 154.286879][ T6052] as10x_usb: device has been disconnected [ 154.794443][ T5969] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 154.795247][T10503] syz.1.1180: attempt to access beyond end of device [ 154.795247][T10503] loop1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 154.801553][T10503] qnx6: unable to read the first superblock [ 154.803588][T10503] syz.1.1180: attempt to access beyond end of device [ 154.803588][T10503] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 154.812309][T10503] qnx6: unable to read the first superblock [ 154.814132][T10503] qnx6: unable to read the first superblock [ 154.839535][T10509] vivid-009: ================= START STATUS ================= [ 154.843882][T10509] vivid-009: FM Deviation: 75000 [ 154.845673][T10509] vivid-009: ================== END STATUS ================== [ 155.102979][T10531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1188'. [ 155.267758][ T5969] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 155.275287][ T5969] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 155.472334][ T1329] vhci_hcd: vhci_device speed not set [ 155.706778][T10544] overlayfs: failed to resolve 'verity=require': -2 [ 155.753793][T10546] comedi: No check for data length of config insn id 129 is implemented [ 155.757281][T10546] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 155.761168][T10546] comedi: Assuming n=15 is correct [ 155.923024][ T1110] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 155.925579][ T1110] ata1: failed to read log page 10h (errno=-5) [ 155.927963][ T1110] ata1.00: exception Emask 0x1 SAct 0x10000000 SErr 0x0 action 0x0 [ 155.930638][ T1110] ata1.00: irq_stat 0x40000000 [ 155.933567][ T1110] ata1.00: failed command: WRITE FPDMA QUEUED [ 155.935527][ T1110] ata1.00: cmd 61/00:e0:4e:2f:09/01:00:00:00:00/40 tag 28 ncq dma 131072 out [ 155.935527][ T1110] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 155.941881][ T1110] ata1.00: status: { DRDY } [ 155.945046][ T1110] ata1.00: configured for UDMA/100 [ 155.946881][ T1110] ata1: EH complete [ 155.948172][T10554] new mount options do not match the existing superblock, will be ignored [ 156.047069][T10559] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1197'. [ 156.287146][T10586] netlink: 'syz.1.1205': attribute type 23 has an invalid length. [ 156.300055][T10582] netlink: 'syz.3.1203': attribute type 1 has an invalid length. [ 156.321936][T10582] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.337413][T10582] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.340499][T10582] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 156.345394][T10582] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 156.390981][T10587] gretap2: entered promiscuous mode [ 156.431068][T10590] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1206'. [ 156.585868][T10546] overlayfs: statfs failed on './file0' [ 156.591758][ T6050] libceph: connect (1)[c::]:6789 error -101 [ 156.596524][ T6050] libceph: mon0 (1)[c::]:6789 connect error [ 156.692975][ T7749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.695585][ T7749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.770237][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 156.863968][ T9] libceph: connect (1)[c::]:6789 error -101 [ 156.865969][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 157.101051][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 157.302131][T10668] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 157.353576][T10607] ceph: No mds server is up or the cluster is laggy [ 157.388902][T10671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10671 comm=syz.1.1231 [ 157.482263][T10688] xt_hashlimit: size too large, truncated to 1048576 [ 157.533487][T10686] bridge0: entered allmulticast mode [ 157.540589][T10686] pim6reg: entered allmulticast mode [ 157.676171][T10706] overlay: filesystem on ./bus not supported as upperdir [ 158.042340][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 158.192308][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 158.196616][ T24] usb 6-1: config 0 has no interfaces? [ 158.199833][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.204055][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 158.207318][ T24] usb 6-1: SerialNumber: syz [ 158.212744][ T24] usb 6-1: config 0 descriptor?? [ 158.379816][ T40] kauditd_printk_skb: 324 callbacks suppressed [ 158.379832][ T40] audit: type=1400 audit(1753528771.375:32102): avc: denied { bpf } for pid=10733 comm="syz.5.1249" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.391799][ T40] audit: type=1400 audit(1753528771.375:32103): avc: denied { perfmon } for pid=10733 comm="syz.5.1249" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.417755][ T40] audit: type=1400 audit(1753528771.415:32104): avc: denied { write } for pid=10709 comm="syz.1.1243" name="raw6" dev="proc" ino=4026533014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 158.421278][ T9] usb 6-1: USB disconnect, device number 28 [ 158.432277][ T40] audit: type=1400 audit(1753528771.415:32105): avc: denied { read } for pid=10736 comm="syz.5.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.441490][ T40] audit: type=1400 audit(1753528771.415:32106): avc: denied { mounton } for pid=10709 comm="syz.1.1243" path="/proc/959/task" dev="proc" ino=40275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 158.447922][T10737] openvswitch: netlink: Message has 24 unknown bytes. [ 158.452934][T10737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.455279][ T40] audit: type=1400 audit(1753528771.415:32107): avc: denied { mount } for pid=10709 comm="syz.1.1243" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 158.465523][ T40] audit: type=1400 audit(1753528771.415:32108): avc: denied { create } for pid=10736 comm="syz.5.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.473104][ T40] audit: type=1400 audit(1753528771.415:32109): avc: denied { write } for pid=10736 comm="syz.5.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.482699][ T40] audit: type=1400 audit(1753528771.445:32110): avc: denied { create } for pid=10736 comm="syz.5.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 158.490345][ T40] audit: type=1400 audit(1753528771.445:32111): avc: denied { setopt } for pid=10736 comm="syz.5.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 158.660938][T10729] delete_channel: no stack [ 158.663587][T10751] __nla_validate_parse: 5 callbacks suppressed [ 158.663597][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1255'. [ 158.665316][T10753] xt_socket: unknown flags 0x50 [ 158.767965][T10765] netlink: 'syz.4.1261': attribute type 1 has an invalid length. [ 158.779895][T10765] bond3: entered promiscuous mode [ 158.781719][T10765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.799719][T10765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.803702][T10765] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 158.807518][T10765] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 158.813288][T10765] bond3: (slave ip6gre1): making interface the new active one [ 158.816439][T10765] ip6gre1: entered promiscuous mode [ 158.820106][T10765] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 158.907375][T10780] netlink: 376 bytes leftover after parsing attributes in process `syz.5.1266'. [ 159.025677][T10799] input: syz1 as /devices/virtual/input/input18 [ 159.028242][T10799] input: failed to attach handler leds to device input18, error: -6 [ 159.083038][T10803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1274'. [ 159.095812][T10803] veth1_macvtap: left promiscuous mode [ 159.098388][T10803] macsec0: entered allmulticast mode [ 159.106393][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'. [ 159.109506][T10803] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 159.113115][T10803] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (5) [ 159.153477][T10800] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 159.174064][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 159.177806][T10809] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 159.202566][ T6051] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 159.231473][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1280'. [ 159.235745][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1280'. [ 159.324439][ T5315] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 159.327508][ T5315] Bluetooth: hci2: Injecting HCI hardware error event [ 159.333094][ T5315] Bluetooth: hci2: hardware error 0x00 [ 159.334377][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1281'. [ 159.338493][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1281'. [ 159.342723][T10823] netlink: 'syz.3.1281': attribute type 20 has an invalid length. [ 159.350627][T10827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=10827 comm=syz.1.1282 [ 159.351237][T10823] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.357426][T10823] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.359995][T10823] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.363422][T10823] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.369432][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1281'. [ 159.371921][T10823] netlink: 'syz.3.1281': attribute type 20 has an invalid length. [ 159.382609][ T6051] usb 9-1: Using ep0 maxpacket: 8 [ 159.386788][ T6051] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 159.389505][ T6051] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.392932][ T6051] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.396045][ T6051] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.399481][ T6051] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.404569][ T6051] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.407575][ T6051] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.529940][T10837] tipc: Enabling of bearer rejected, media not registered [ 159.594003][ T5969] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 159.623898][ T6051] usb 9-1: usb_control_msg returned -32 [ 159.626279][ T6051] usbtmc 9-1:16.0: can't read capabilities [ 159.658902][T10851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.943125][T10875] xfs: Unknown parameter '' [ 159.987835][T10878] kvm: kvm [10777]: vcpu1, guest rIP: 0xfff0 Unhandled RDMSR(0x4000007c) [ 160.026083][T10880] gtp1: entered promiscuous mode [ 160.382014][T10888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.448116][T10891] netlink: 'syz.1.1302': attribute type 1 has an invalid length. [ 160.451470][T10891] netlink: 'syz.1.1302': attribute type 2 has an invalid length. [ 160.822292][ T6051] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 160.972327][ T6051] usb 6-1: Using ep0 maxpacket: 8 [ 160.975730][ T6051] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.978876][ T6051] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.981804][ T6051] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.986318][ T6051] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.991413][ T6051] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.999023][T10926] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 161.003782][ T6051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.213177][ T6051] usb 6-1: GET_CAPABILITIES returned 0 [ 161.215161][ T6051] usbtmc 6-1:16.0: can't read capabilities [ 161.397569][T10933] netlink: 'syz.3.1314': attribute type 10 has an invalid length. [ 161.400646][T10933] dummy0: entered promiscuous mode [ 161.405218][T10933] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 161.412601][ T5315] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 161.419259][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.423752][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.426657][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.430274][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.433219][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.435837][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.438686][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.442265][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.445158][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.447658][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.450769][T10937] netlink: 'syz.3.1315': attribute type 2 has an invalid length. [ 161.452611][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.456572][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.459182][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.462182][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.465973][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.468609][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.472138][T10908] ptm ptm54: ldisc open failed (-12), clearing slot 54 [ 161.504215][ T6051] usb 6-1: USB disconnect, device number 29 [ 161.659038][T10955] binder: 10954:10955 unknown command 0 [ 161.660894][T10955] binder: 10954:10955 ioctl c0306201 200000000080 returned -22 [ 161.896369][T10968] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 161.898551][T10968] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.901299][T10968] vhci_hcd vhci_hcd.0: Device attached [ 161.912114][T10969] vhci_hcd: connection closed [ 161.912667][ T1181] vhci_hcd: stop threads [ 161.916450][ T1181] vhci_hcd: release socket [ 161.918414][ T1181] vhci_hcd: disconnect device [ 161.954720][ T6794] usb 9-1: USB disconnect, device number 14 [ 162.723681][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 162.735108][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.795556][T11009] fido_id[11009]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 162.800473][ T6026] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 162.952303][ T6026] usb 10-1: Using ep0 maxpacket: 32 [ 162.956752][ T6026] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 162.960578][ T6026] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.974758][ T6026] usb 10-1: config 0 descriptor?? [ 162.986706][ T6026] as10x_usb: device has been detected [ 162.989792][ T6026] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 163.034455][ T6026] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 163.046884][ T6026] as10x_usb: error during firmware upload part1 [ 163.055063][ T6026] Registered device nBox DVB-T Dongle [ 163.191953][ T6026] usb 10-1: USB disconnect, device number 4 [ 163.217714][ T6026] Unregistered device nBox DVB-T Dongle [ 163.219033][ T6026] as10x_usb: device has been disconnected [ 163.392399][ T40] kauditd_printk_skb: 355 callbacks suppressed [ 163.392412][ T40] audit: type=1400 audit(1753528776.385:32467): avc: denied { read } for pid=10995 comm="syz.5.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.405974][T10996] netlink: 'syz.5.1333': attribute type 13 has an invalid length. [ 163.410729][ T40] audit: type=1400 audit(1753528776.405:32468): avc: denied { create } for pid=10995 comm="syz.5.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 163.411499][T10996] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 163.419801][ T40] audit: type=1400 audit(1753528776.405:32469): avc: denied { write } for pid=10995 comm="syz.5.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 163.643550][ T5315] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 163.648206][ T5315] Bluetooth: hci0: Injecting HCI hardware error event [ 163.654687][ T5315] Bluetooth: hci0: hardware error 0x00 [ 163.980912][ T40] audit: type=1400 audit(1753528776.975:32470): avc: denied { name_bind } for pid=11034 comm="syz.5.1341" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 163.991052][ T40] audit: type=1400 audit(1753528776.975:32471): avc: denied { node_bind } for pid=11034 comm="syz.5.1341" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 164.000772][ T40] audit: type=1400 audit(1753528776.985:32472): avc: denied { create } for pid=11034 comm="syz.5.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.012262][ T40] audit: type=1400 audit(1753528776.985:32473): avc: denied { bind } for pid=11034 comm="syz.5.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.022496][ T40] audit: type=1400 audit(1753528776.985:32474): avc: denied { setopt } for pid=11034 comm="syz.5.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.031079][ T40] audit: type=1400 audit(1753528776.985:32475): avc: denied { accept } for pid=11034 comm="syz.5.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.040444][ T40] audit: type=1400 audit(1753528776.985:32476): avc: denied { write } for pid=11034 comm="syz.5.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.209240][T11039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.322050][T11045] geneve2: entered promiscuous mode [ 164.686197][T11091] netlink: 'syz.1.1352': attribute type 11 has an invalid length. [ 164.795779][T11109] loop6: detected capacity change from 0 to 2560 [ 164.798720][T11110] buffer_io_error: 23 callbacks suppressed [ 164.798730][T11110] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.807413][T11110] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.809877][T11110] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.812607][T11110] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.815339][T11110] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.818224][T11110] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.821009][T11110] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.825657][T11110] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.827987][T11110] ldm_validate_partition_table(): Disk read failed. [ 164.829991][T11110] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.834142][T11110] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.837077][T11110] Dev loop6: unable to read RDB block 0 [ 164.839709][T11110] loop6: unable to read partition table [ 164.844403][T11109] ldm_validate_partition_table(): Disk read failed. [ 164.847893][T11109] Dev loop6: unable to read RDB block 0 [ 164.849861][T11109] loop6: unable to read partition table [ 164.854032][T11109] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 164.907757][T11123] Bluetooth: MGMT ver 1.23 [ 164.909413][T11123] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 165.036451][T11139] __nla_validate_parse: 6 callbacks suppressed [ 165.036467][T11139] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1365'. [ 165.046472][T11139] netlink: 'syz.4.1365': attribute type 1 has an invalid length. [ 165.071195][T11139] bond4: entered promiscuous mode [ 165.076338][T11139] bond4: entered allmulticast mode [ 165.250130][T11150] loop2: detected capacity change from 0 to 7 [ 165.257308][ T9272] Dev loop2: unable to read RDB block 7 [ 165.259168][ T9272] loop2: AHDI p1 p2 p3 [ 165.260551][ T9272] loop2: partition table partially beyond EOD, truncated [ 165.264025][ T9272] loop2: p1 start 1601398130 is beyond EOD, truncated [ 165.266865][ T9272] loop2: p2 start 1702059890 is beyond EOD, truncated [ 165.277092][T11150] Dev loop2: unable to read RDB block 7 [ 165.278852][T11150] loop2: AHDI p1 p2 p3 [ 165.280172][T11150] loop2: partition table partially beyond EOD, truncated [ 165.284251][T11150] loop2: p1 start 1601398130 is beyond EOD, truncated [ 165.287625][T11150] loop2: p2 start 1702059890 is beyond EOD, truncated [ 165.338922][T11158] overlayfs: missing 'lowerdir' [ 165.373930][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1375'. [ 165.587694][T11179] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11179 comm=syz.1.1379 [ 165.646066][T11182] ISOFS: Unable to identify CD-ROM format. [ 165.722405][ T5315] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 166.345384][T11208] netlink: 'syz.4.1389': attribute type 4 has an invalid length. [ 166.348496][T11204] kvm: pic: non byte read [ 166.353689][T11204] kvm: pic: non byte read [ 166.357182][T11204] kvm: pic: non byte read [ 166.361682][T11204] kvm: pic: non byte read [ 166.368863][T11204] kvm: pic: non byte read [ 166.374405][T11204] kvm: pic: non byte read [ 166.378401][T11204] kvm: pic: non byte read [ 166.382383][T11204] kvm: pic: non byte read [ 166.385844][T11204] kvm: pic: non byte read [ 166.406798][ T7749] tipc: Subscription rejected, illegal request [ 166.560331][T11216] netlink: 'syz.4.1392': attribute type 21 has an invalid length. [ 166.564493][T11216] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1392'. [ 166.568574][T11216] netlink: 'syz.4.1392': attribute type 4 has an invalid length. [ 166.572371][T11216] netlink: 'syz.4.1392': attribute type 5 has an invalid length. [ 166.576048][T11216] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1392'. [ 166.591832][T11218] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 166.634079][T11220] cgroup: subsys name conflicts with all [ 166.637583][T11220] comedi comedi4: bad chanlist[0]=0x00000040 chan=64 range length=2 [ 166.762907][ T6794] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 166.780564][T11226] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 166.783424][T11226] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 166.785572][T11226] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 166.787584][T11226] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 166.912443][ T6794] usb 10-1: Using ep0 maxpacket: 16 [ 166.915770][ T6794] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.919110][ T6794] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.926573][ T6794] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.929956][ T6794] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.934984][ T6794] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.937837][ T6794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.940374][ T6794] usb 10-1: SerialNumber: syz [ 166.947809][ T6794] hub 10-1:1.0: bad descriptor, ignoring hub [ 166.950089][ T6794] hub 10-1:1.0: probe with driver hub failed with error -5 [ 166.952993][ T6794] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 167.093454][T11233] tipc: Started in network mode [ 167.095545][T11233] tipc: Node identity 1e44bc42e844, cluster identity 511 [ 167.098611][T11233] tipc: Enabled bearer , priority 0 [ 167.245719][T11232] tipc: Resetting bearer [ 167.402743][T11235] raw-gadget.0 gadget.5: fail, usb_ep_set_wedge returned -11 [ 168.225026][ T6027] tipc: Node number set to 4127243330 [ 168.618793][T11232] tipc: Disabling bearer [ 168.698388][ T40] kauditd_printk_skb: 202 callbacks suppressed [ 168.698399][ T40] audit: type=1400 audit(1753528781.695:32679): avc: denied { bpf } for pid=11246 comm="syz.4.1401" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.708962][ T40] audit: type=1400 audit(1753528781.695:32680): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 168.716964][ T40] audit: type=1400 audit(1753528781.695:32681): avc: denied { read write } for pid=11246 comm="syz.4.1401" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.724556][ T40] audit: type=1400 audit(1753528781.695:32682): avc: denied { open } for pid=11246 comm="syz.4.1401" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.731656][ T40] audit: type=1400 audit(1753528781.695:32683): avc: denied { prog_load } for pid=11246 comm="syz.4.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.744748][ T40] audit: type=1400 audit(1753528781.745:32684): avc: denied { read write } for pid=11248 comm="syz.1.1402" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 168.754858][ T40] audit: type=1400 audit(1753528781.745:32685): avc: denied { open } for pid=11248 comm="syz.1.1402" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 168.764228][ T40] audit: type=1400 audit(1753528781.745:32686): avc: denied { ioctl } for pid=11248 comm="syz.1.1402" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 168.766699][ T6026] usb 10-1: USB disconnect, device number 5 [ 168.775245][ T40] audit: type=1400 audit(1753528781.765:32687): avc: denied { mount } for pid=11250 comm="syz.4.1403" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 168.795398][ T40] audit: type=1400 audit(1753528781.795:32688): avc: denied { create } for pid=11250 comm="syz.4.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 168.931086][T11255] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1404'. [ 169.193009][T11261] unknown channel width for channel at 909000KHz? [ 169.196535][T11261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1406'. [ 169.217086][T11261] bond3: entered promiscuous mode [ 169.219076][T11261] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.259473][T11264] fuse: Bad value for 'fd' [ 169.406018][T11267] random: crng reseeded on system resumption [ 169.418561][T11267] Unrecognized hibernate image header format! [ 169.421999][T11267] PM: hibernation: Image mismatch: architecture specific data [ 169.574301][T11269] netlink: 'syz.5.1409': attribute type 1 has an invalid length. [ 169.614011][T11269] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 169.618332][T11269] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 169.667090][T11271] gretap1: entered promiscuous mode [ 169.672908][T11271] bond4: (slave gretap1): making interface the new active one [ 169.676627][T11271] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 169.693701][T11269] macvlan2: entered promiscuous mode [ 169.695783][T11269] macvlan2: entered allmulticast mode [ 169.698418][T11269] bond4: entered promiscuous mode [ 169.701047][T11269] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.706478][T11269] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 169.718073][T11269] bond4: left promiscuous mode [ 169.744566][T11277] SELinux: ebitmap: truncated map [ 169.755049][T11277] SELinux: failed to load policy [ 169.759433][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'. [ 169.817924][T11279] 9p: Unknown Cache mode or invalid value reada [ 169.943530][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1414'. [ 169.947911][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1414'. [ 169.957711][T11284] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.961616][T11284] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.966312][T11284] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.970342][T11284] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.976014][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1414'. [ 170.463042][T11297] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 170.714073][T11312] binder: BC_ACQUIRE_RESULT not supported [ 170.716560][T11312] binder: 11310:11312 ioctl c0306201 200000000180 returned -22 [ 170.925581][T11321] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 170.976657][T11321] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 170.979716][T11321] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 170.982997][T11321] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 170.986137][T11321] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 170.990774][T11321] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 170.994049][T11321] kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 170.996750][T11321] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 170.999407][T11321] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 171.012711][T11321] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 171.025820][T11331] __nla_validate_parse: 2 callbacks suppressed [ 171.025830][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 171.033487][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 171.606322][T11377] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1446'. [ 171.627680][T11377] qnx6: unable to set blocksize [ 171.704520][T11377] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 171.827660][T11399] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÜÝ$)²% Ä‚L [ 172.122352][ T6050] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 172.286541][ T6050] usb 6-1: config 0 has no interfaces? [ 172.289306][ T6050] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 172.295288][ T6050] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.302036][ T6050] usb 6-1: config 0 descriptor?? [ 172.516257][ T6052] usb 6-1: USB disconnect, device number 30 [ 172.768088][T11420] deleting an unspecified loop device is not supported. [ 172.828865][T11422] netlink: 'syz.4.1455': attribute type 29 has an invalid length. [ 172.897723][T11425] comedi comedi1: s526: I/O port conflict (0xffffffffffffffff,64) [ 173.373418][T11442] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 173.719361][ T40] kauditd_printk_skb: 226 callbacks suppressed [ 173.719390][ T40] audit: type=1400 audit(1753528786.715:32915): avc: denied { create } for pid=11456 comm="syz.1.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.832433][ T6794] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 173.839688][ T40] audit: type=1400 audit(1753528786.835:32916): avc: denied { ioctl } for pid=11456 comm="syz.1.1465" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=43504 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 173.851163][ T40] audit: type=1400 audit(1753528786.845:32917): avc: denied { getopt } for pid=11456 comm="syz.1.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.896659][ T40] audit: type=1400 audit(1753528786.895:32918): avc: denied { create } for pid=11459 comm="syz.1.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.903606][ T40] audit: type=1400 audit(1753528786.905:32919): avc: denied { ioctl } for pid=11459 comm="syz.1.1466" path="socket:[42666]" dev="sockfs" ino=42666 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.931233][ T40] audit: type=1400 audit(1753528786.925:32920): avc: denied { setopt } for pid=11461 comm="syz.1.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.932708][T11462] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1467'. [ 173.941228][ T40] audit: type=1400 audit(1753528786.925:32921): avc: denied { write } for pid=11461 comm="syz.1.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.947876][ T40] audit: type=1400 audit(1753528786.935:32922): avc: denied { write } for pid=11461 comm="syz.1.1467" name="kcm" dev="proc" ino=4026533081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 173.986294][ T40] audit: type=1400 audit(1753528786.985:32923): avc: denied { ioctl } for pid=11463 comm="syz.1.1468" path="socket:[44244]" dev="sockfs" ino=44244 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.998589][ T40] audit: type=1400 audit(1753528786.985:32924): avc: denied { module_request } for pid=11463 comm="syz.1.1468" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 174.007843][ T6794] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 174.011803][ T6794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.018790][ T6794] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 174.023269][ T6794] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 174.026692][ T6794] usb 9-1: Manufacturer: syz [ 174.031612][ T6794] usb 9-1: config 0 descriptor?? [ 174.093107][ T6794] rc_core: IR keymap rc-hauppauge not found [ 174.095581][ T6794] Registered IR keymap rc-empty [ 174.100664][ T6794] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 174.107005][ T6794] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input19 [ 174.241947][T11449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.247036][T11449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.253953][T11449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.256594][T11449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.337544][ T6794] usb 9-1: USB disconnect, device number 15 [ 175.031475][T11485] netlink: 'syz.1.1472': attribute type 1 has an invalid length. [ 175.071675][T11485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=11485 comm=syz.1.1472 [ 175.102022][T11485] 8021q: adding VLAN 0 to HW filter on device bond7 [ 175.106776][T11485] bond6: (slave bond7): making interface the new active one [ 175.109306][T11485] bond6: (slave bond7): Enslaving as an active interface with an up link [ 175.204041][T11489] netlink: 'syz.1.1473': attribute type 3 has an invalid length. [ 175.436425][T11496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1476'. [ 175.502007][T11504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1477'. [ 175.644346][T11515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.753268][T11522] netlink: 'syz.1.1479': attribute type 3 has an invalid length. [ 175.755940][T11522] netlink: 'syz.1.1479': attribute type 3 has an invalid length. [ 175.759185][T11522] netlink: 'syz.1.1479': attribute type 3 has an invalid length. [ 175.763916][T11522] netlink: 'syz.1.1479': attribute type 3 has an invalid length. [ 175.768130][T11522] netlink: 'syz.1.1479': attribute type 3 has an invalid length. [ 175.773716][T11522] netlink: 'syz.1.1479': attribute type 3 has an invalid length. [ 175.776412][T11522] netlink: 'syz.1.1479': attribute type 3 has an invalid length. [ 175.782907][T11517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1479'. [ 175.799984][T11517] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.498024][T11554] syz.4.1482: attempt to access beyond end of device [ 176.498024][T11554] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 176.510950][T11554] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 176.564837][T11561] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.1484'. [ 176.625513][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1487'. [ 176.635077][T11572] pimreg: entered allmulticast mode [ 176.916993][T11599] ip6erspan1: entered promiscuous mode [ 177.000922][T11606] xfrm2: entered allmulticast mode [ 177.069438][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1495'. [ 177.440703][T11615] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 177.488614][ T5969] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.503868][ T5969] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.519710][ T5969] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.525964][ T5969] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.533848][ T5969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.550002][T11624] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 177.615142][ T5969] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.620909][ T5969] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.625336][ T5969] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.628563][ T5969] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.631293][ T5969] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.699071][T11617] chnl_net:caif_netlink_parms(): no params data found [ 177.876118][T11617] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.878503][T11617] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.881225][T11617] bridge_slave_0: entered allmulticast mode [ 177.883982][T11617] bridge_slave_0: entered promiscuous mode [ 177.888826][T11617] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.893088][T11617] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.895536][T11617] bridge_slave_1: entered allmulticast mode [ 177.898226][T11617] bridge_slave_1: entered promiscuous mode [ 177.946493][T11617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.954698][T11617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.996089][ T7749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.999988][ T7749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.004723][ T7749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.071726][T11617] team0: Port device team_slave_0 added [ 178.084619][T11617] team0: Port device team_slave_1 added [ 178.108941][T11662] XFS (nbd4): no-recovery mounts must be read-only. [ 178.142312][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 178.182338][ T7749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.185986][ T7749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.190931][ T7749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.199316][T11630] chnl_net:caif_netlink_parms(): no params data found [ 178.215961][T11617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.218755][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.227897][T11617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.234634][T11617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.237264][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.245764][T11617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.275754][ T7749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.280353][ T7749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.285381][ T7749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.292300][ T9] usb 10-1: device descriptor read/64, error -71 [ 178.411607][ T7749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.422501][ T7749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.426826][ T7749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.445648][T11617] hsr_slave_0: entered promiscuous mode [ 178.448003][T11617] hsr_slave_1: entered promiscuous mode [ 178.450042][T11617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.452863][T11617] Cannot create hsr debugfs directory [ 178.455680][T11630] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.458003][T11630] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.460405][T11630] bridge_slave_0: entered allmulticast mode [ 178.463120][T11630] bridge_slave_0: entered promiscuous mode [ 178.466074][T11630] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.468377][T11630] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.471242][T11630] bridge_slave_1: entered allmulticast mode [ 178.475759][T11630] bridge_slave_1: entered promiscuous mode [ 178.543734][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 178.594487][T11630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.630471][T11630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.672745][ T9] usb 10-1: device descriptor read/64, error -71 [ 178.685390][T11630] team0: Port device team_slave_0 added [ 178.705902][T11630] team0: Port device team_slave_1 added [ 178.785481][ T40] kauditd_printk_skb: 293 callbacks suppressed [ 178.785493][ T40] audit: type=1400 audit(1753528791.785:33218): avc: denied { ioctl } for pid=11648 comm="syz.5.1510" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.797614][ T9] usb usb10-port1: attempt power cycle [ 178.865483][ T7749] bond4 (unregistering): (slave gretap1): Releasing active interface [ 178.868869][ T7749] gretap1 (unregistering): left promiscuous mode [ 178.871510][ T7749] gretap1 (unregistering): left allmulticast mode [ 178.916248][ T7749] dvmrp1 (unregistering): left allmulticast mode [ 179.132397][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 179.152845][ T9] usb 10-1: device descriptor read/8, error -71 [ 179.265426][ T7749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.270141][ T7749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.274604][ T7749] bond0 (unregistering): Released all slaves [ 179.281637][ T7749] bond1 (unregistering): Released all slaves [ 179.289390][ T7749] bond2 (unregistering): Released all slaves [ 179.382815][ T7749] bond3 (unregistering): Released all slaves [ 179.402306][ T9] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 179.424734][ T9] usb 10-1: device descriptor read/8, error -71 [ 179.491278][ T7749] bond4 (unregistering): Released all slaves [ 179.542500][ T9] usb usb10-port1: unable to enumerate USB device [ 179.565657][ T5315] Bluetooth: hci2: command tx timeout [ 179.594180][ T7749] bond5 (unregistering): Released all slaves [ 179.605785][ T7749] bond6 (unregistering): Released all slaves [ 179.620247][T11630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.622965][T11630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.631798][T11630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.642447][ T5315] Bluetooth: hci4: command tx timeout [ 179.679086][T11630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.681485][T11630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.692849][T11630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.760085][ T7749] tipc: Disabling bearer [ 179.764253][ T7749] tipc: Left network mode [ 179.820248][T11630] hsr_slave_0: entered promiscuous mode [ 179.823157][T11630] hsr_slave_1: entered promiscuous mode [ 179.825648][T11630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.828595][T11630] Cannot create hsr debugfs directory [ 179.839253][ T40] audit: type=1400 audit(1753528792.835:33219): avc: denied { search } for pid=5666 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.846781][ T40] audit: type=1400 audit(1753528792.835:33220): avc: denied { search } for pid=5666 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.854959][ T40] audit: type=1400 audit(1753528792.835:33221): avc: denied { search } for pid=5666 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.862303][ T40] audit: type=1400 audit(1753528792.835:33222): avc: denied { search } for pid=5666 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.871108][ T40] audit: type=1400 audit(1753528792.835:33223): avc: denied { search } for pid=5666 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.888683][ T40] audit: type=1400 audit(1753528792.835:33224): avc: denied { search } for pid=5666 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.898166][ T40] audit: type=1400 audit(1753528792.835:33225): avc: denied { read } for pid=5666 comm="dhcpcd" name="n142" dev="tmpfs" ino=7327 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.906172][ T40] audit: type=1400 audit(1753528792.835:33226): avc: denied { open } for pid=5666 comm="dhcpcd" path="/run/udev/data/n142" dev="tmpfs" ino=7327 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.917383][ T40] audit: type=1400 audit(1753528792.835:33227): avc: denied { getattr } for pid=5666 comm="dhcpcd" path="/run/udev/data/n142" dev="tmpfs" ino=7327 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 180.050577][T11617] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 180.081361][T11617] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 180.113946][T11617] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 180.118540][T11617] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 180.160999][ T7749] batman_adv: batadv0: Interface deactivated: macvtap1 [ 180.164453][ T7749] batman_adv: batadv0: Interface deactivated: macvtap2 [ 180.167037][ T7749] mac80211_hwsim hwsim7 wlan0 (unregistering): left allmulticast mode [ 180.188042][ T7749] batman_adv: batadv0: Removing interface: macvtap1 [ 180.200955][ T7749] batman_adv: batadv0: Removing interface: macvtap2 [ 180.252590][T11712] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 180.254789][T11712] overlayfs: failed to set xattr on upper [ 180.256634][T11712] overlayfs: ...falling back to redirect_dir=nofollow. [ 180.258751][T11712] overlayfs: ...falling back to index=off. [ 180.260670][T11712] overlayfs: ...falling back to uuid=null. [ 180.263547][T11712] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 180.301524][ T7749] hsr_slave_0: left promiscuous mode [ 180.305170][ T7749] hsr_slave_1: left promiscuous mode [ 180.307978][ T7749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.311192][ T7749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.346441][ T7749] veth0_macvtap: left promiscuous mode [ 180.348429][ T7749] veth1_vlan: left promiscuous mode [ 181.099745][ T7749] team0 (unregistering): Port device team_slave_1 removed [ 181.204091][ T7749] team0 (unregistering): Port device team_slave_0 removed [ 181.652389][ T5315] Bluetooth: hci2: command tx timeout [ 181.732994][ T5315] Bluetooth: hci4: command tx timeout [ 181.936031][T11731] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.939505][T11731] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.943102][T11731] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.946155][T11731] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.949974][T11731] geneve2: entered promiscuous mode [ 181.951648][T11731] geneve2: entered allmulticast mode [ 181.969836][T11630] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 181.987418][T11630] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 182.001179][T11630] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 182.005197][T11630] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 182.039271][T11745] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1532'. [ 182.048693][T11617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.097029][T11617] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.109981][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.113024][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.125087][ T7751] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.128166][ T7751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.138444][T11630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.193158][T11630] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.216794][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.219309][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.224652][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.227059][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.346282][T11757] gfs2: not a GFS2 filesystem [ 182.401447][T11630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.429675][T11617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.569791][T11630] veth0_vlan: entered promiscuous mode [ 182.576673][T11630] veth1_vlan: entered promiscuous mode [ 182.598615][T11630] veth0_macvtap: entered promiscuous mode [ 182.618402][T11630] veth1_macvtap: entered promiscuous mode [ 182.634912][T11617] veth0_vlan: entered promiscuous mode [ 182.649193][T11630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.662081][T11617] veth1_vlan: entered promiscuous mode [ 182.667912][T11630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.706721][T11630] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.712523][T11630] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.717265][T11630] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.721020][T11630] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.773926][T11617] veth0_macvtap: entered promiscuous mode [ 182.780408][T11617] veth1_macvtap: entered promiscuous mode [ 182.816645][T11617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.832042][T11617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.842049][T11617] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.842882][ T7751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.848897][ T7751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.857888][T11617] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.860907][T11617] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.867790][T11617] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.909849][ T7752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.917323][ T7752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.971996][ T7752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.983112][ T7752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.034198][T11811] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1537'. [ 183.049776][ T7751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.065953][ T7751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.084189][T11813] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1538'. [ 183.225165][T11835] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 183.297629][T11850] xt_hashlimit: size too large, truncated to 1048576 [ 183.349937][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'. [ 183.456202][T11868] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1553'. [ 183.494140][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1553'. [ 183.497340][T11868] bridge_slave_1: left allmulticast mode [ 183.499095][T11868] bridge_slave_1: left promiscuous mode [ 183.500921][T11868] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.506189][T11868] bridge_slave_0: left allmulticast mode [ 183.508456][T11868] bridge_slave_0: left promiscuous mode [ 183.525793][T11868] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.627730][ T5315] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 183.645684][T11892] bond5: entered promiscuous mode [ 183.650240][T11892] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.724833][ T5315] Bluetooth: hci2: command tx timeout [ 183.792275][ T24] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 183.796449][ T5315] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 183.802902][ T5315] Bluetooth: hci4: command tx timeout [ 183.833309][ T40] kauditd_printk_skb: 268 callbacks suppressed [ 183.833319][ T40] audit: type=1400 audit(1753528796.835:33496): avc: denied { map_create } for pid=11920 comm="syz.4.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 183.841962][ T40] audit: type=1400 audit(1753528796.835:33497): avc: denied { map_read map_write } for pid=11920 comm="syz.4.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 183.858412][ T40] audit: type=1400 audit(1753528796.855:33498): avc: denied { unlink } for pid=11919 comm="rm" name="resolv.conf.lapb20.link" dev="tmpfs" ino=7490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.927844][ T40] audit: type=1400 audit(1753528796.925:33499): avc: denied { name_bind } for pid=11930 comm="syz.4.1566" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 183.935507][ T40] audit: type=1400 audit(1753528796.925:33500): avc: denied { node_bind } for pid=11930 comm="syz.4.1566" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 183.944845][ T24] usb 11-1: Using ep0 maxpacket: 8 [ 183.951801][ T24] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 183.961149][ T24] usb 11-1: config 0 has no interface number 0 [ 183.962342][ T40] audit: type=1400 audit(1753528796.945:33501): avc: denied { ioctl } for pid=11879 comm="syz.6.1556" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.965262][ T24] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.975428][T11935] validate_nla: 45 callbacks suppressed [ 183.975441][T11935] netlink: 'syz.7.1567': attribute type 10 has an invalid length. [ 183.975809][ T40] audit: type=1400 audit(1753528796.945:33502): avc: denied { search } for pid=5666 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.975858][ T40] audit: type=1400 audit(1753528796.945:33503): avc: denied { search } for pid=5666 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.975903][ T40] audit: type=1400 audit(1753528796.945:33504): avc: denied { search } for pid=5666 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.975949][ T40] audit: type=1400 audit(1753528796.955:33505): avc: denied { read } for pid=5666 comm="dhcpcd" name="n153" dev="tmpfs" ino=7411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.979386][ T24] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 184.026649][T11935] veth0_vlan: left promiscuous mode [ 184.036635][T11935] veth0_vlan: entered promiscuous mode [ 184.042728][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.047090][ T24] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.052877][ T24] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 184.057016][T11935] netlink: 'syz.7.1567': attribute type 10 has an invalid length. [ 184.058571][ T24] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 184.065710][T11935] veth0_vlan: left promiscuous mode [ 184.067981][T11935] veth0_vlan: entered promiscuous mode [ 184.070199][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.076701][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.082553][ T24] usb 11-1: config 0 descriptor?? [ 184.088662][T11935] netlink: 'syz.7.1567': attribute type 10 has an invalid length. [ 184.093372][ T24] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 184.104873][T11935] veth0_vlan: left promiscuous mode [ 184.108221][T11935] veth0_vlan: entered promiscuous mode [ 184.115481][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.145885][T11935] netlink: 'syz.7.1567': attribute type 10 has an invalid length. [ 184.149271][T11935] veth0_vlan: left promiscuous mode [ 184.153938][T11935] veth0_vlan: entered promiscuous mode [ 184.157700][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.175406][T11935] netlink: 'syz.7.1567': attribute type 10 has an invalid length. [ 184.181163][T11935] veth0_vlan: left promiscuous mode [ 184.187028][T11935] veth0_vlan: entered promiscuous mode [ 184.191948][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.203729][T11935] netlink: 'syz.7.1567': attribute type 10 has an invalid length. [ 184.207528][T11935] veth0_vlan: left promiscuous mode [ 184.210322][T11935] veth0_vlan: entered promiscuous mode [ 184.215292][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.225109][T11935] netlink: 'syz.7.1567': attribute type 10 has an invalid length. [ 184.230250][T11935] veth0_vlan: left promiscuous mode [ 184.232788][T11935] veth0_vlan: entered promiscuous mode [ 184.236636][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.249010][T11935] netlink: 'syz.7.1567': attribute type 10 has an invalid length. [ 184.253724][T11935] veth0_vlan: left promiscuous mode [ 184.257169][T11935] veth0_vlan: entered promiscuous mode [ 184.260973][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.267084][T11935] netlink: 'syz.7.1567': attribute type 10 has an invalid length. [ 184.274322][T11935] veth0_vlan: left promiscuous mode [ 184.276811][T11935] veth0_vlan: entered promiscuous mode [ 184.280403][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.301677][T11935] netlink: 'syz.7.1567': attribute type 10 has an invalid length. [ 184.307977][T11935] veth0_vlan: left promiscuous mode [ 184.310091][ T24] usb 11-1: USB disconnect, device number 2 [ 184.311257][T11935] veth0_vlan: entered promiscuous mode [ 184.314027][ T24] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 184.316969][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.330570][T11935] veth0_vlan: left promiscuous mode [ 184.334161][T11935] veth0_vlan: entered promiscuous mode [ 184.337998][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.348378][T11935] veth0_vlan: left promiscuous mode [ 184.350984][T11935] veth0_vlan: entered promiscuous mode [ 184.355370][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.370124][T11935] veth0_vlan: left promiscuous mode [ 184.375850][T11935] veth0_vlan: entered promiscuous mode [ 184.382024][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.398790][T11935] veth0_vlan: left promiscuous mode [ 184.403695][T11935] veth0_vlan: entered promiscuous mode [ 184.409427][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.422814][T11880] dummy0: entered promiscuous mode [ 184.430061][T11935] veth0_vlan: left promiscuous mode [ 184.433589][T11935] veth0_vlan: entered promiscuous mode [ 184.437109][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.447331][T11935] veth0_vlan: left promiscuous mode [ 184.449834][T11935] veth0_vlan: entered promiscuous mode [ 184.456657][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.472322][T11935] veth0_vlan: left promiscuous mode [ 184.474813][T11935] veth0_vlan: entered promiscuous mode [ 184.480796][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.505296][T11935] veth0_vlan: left promiscuous mode [ 184.508440][T11935] veth0_vlan: entered promiscuous mode [ 184.513337][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.531491][T11935] veth0_vlan: left promiscuous mode [ 184.534406][T11935] veth0_vlan: entered promiscuous mode [ 184.539226][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.555273][T11935] veth0_vlan: left promiscuous mode [ 184.563672][T11935] veth0_vlan: entered promiscuous mode [ 184.567978][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.590720][T11935] veth0_vlan: left promiscuous mode [ 184.593326][T11935] veth0_vlan: entered promiscuous mode [ 184.597452][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.605907][T11935] veth0_vlan: left promiscuous mode [ 184.611786][T11935] veth0_vlan: entered promiscuous mode [ 184.616662][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.629045][T11935] veth0_vlan: left promiscuous mode [ 184.631521][T11935] veth0_vlan: entered promiscuous mode [ 184.636661][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.649976][T11935] veth0_vlan: left promiscuous mode [ 184.656703][T11935] veth0_vlan: entered promiscuous mode [ 184.660465][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.675859][T11935] veth0_vlan: left promiscuous mode [ 184.678458][T11935] veth0_vlan: entered promiscuous mode [ 184.682041][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.704048][T11935] veth0_vlan: left promiscuous mode [ 184.706917][T11935] veth0_vlan: entered promiscuous mode [ 184.711178][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.722296][T11935] veth0_vlan: left promiscuous mode [ 184.728728][T11935] veth0_vlan: entered promiscuous mode [ 184.734517][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.749856][T11935] veth0_vlan: left promiscuous mode [ 184.753467][T11935] veth0_vlan: entered promiscuous mode [ 184.754740][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'. [ 184.757858][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.773435][T11935] veth0_vlan: left promiscuous mode [ 184.776083][T11935] veth0_vlan: entered promiscuous mode [ 184.780171][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.791659][T11935] veth0_vlan: left promiscuous mode [ 184.794998][T11935] veth0_vlan: entered promiscuous mode [ 184.799150][T11935] team0: Device veth0_vlan failed to register rx_handler [ 184.852542][ T9] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 185.027675][ T9] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 185.031964][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.036337][ T9] usb 11-1: Product: syz [ 185.038182][ T9] usb 11-1: Manufacturer: syz [ 185.040678][ T9] usb 11-1: SerialNumber: syz [ 185.058644][ T9] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 185.079539][ T6026] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 185.089675][T12003] binder: 12002:12003 unknown command 0 [ 185.092773][T12003] binder: 12002:12003 ioctl c0306201 200000000080 returned -22 [ 185.381639][T12012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1588'. [ 185.385814][T12012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1588'. [ 185.391230][T12012] overlayfs: failed to resolve './file1': -2 [ 185.476041][T12014] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1589'. [ 185.483313][T11968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.487113][T11968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.521440][ T29] usb 11-1: USB disconnect, device number 3 [ 185.802367][ T5315] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.804307][ T5315] Bluetooth: hci2: command tx timeout [ 185.815873][T12049] syz.7.1601: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 185.835100][T12049] CPU: 0 UID: 0 PID: 12049 Comm: syz.7.1601 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 185.835116][T12049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.835123][T12049] Call Trace: [ 185.835126][T12049] [ 185.835130][T12049] dump_stack_lvl+0x16c/0x1f0 [ 185.835165][T12049] warn_alloc+0x248/0x3a0 [ 185.835183][T12049] ? __pfx_warn_alloc+0x10/0x10 [ 185.835198][T12049] ? __pfx_stack_trace_save+0x10/0x10 [ 185.835219][T12049] ? stack_depot_save_flags+0x28/0xa40 [ 185.835242][T12049] ? __pfx_common_lsm_audit+0x10/0x10 [ 185.835255][T12049] ? kasan_save_stack+0x42/0x60 [ 185.835271][T12049] ? kasan_save_stack+0x33/0x60 [ 185.835285][T12049] ? kasan_save_track+0x14/0x30 [ 185.835301][T12049] ? xskq_create+0x52/0x1d0 [ 185.835315][T12049] ? xsk_setsockopt+0x640/0x840 [ 185.835328][T12049] ? do_sock_setsockopt+0xf0/0x1d0 [ 185.835342][T12049] ? xskq_create+0xfb/0x1d0 [ 185.835358][T12049] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 185.835377][T12049] ? xskq_create+0xfb/0x1d0 [ 185.835395][T12049] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 185.835414][T12049] ? xskq_create+0xfb/0x1d0 [ 185.835429][T12049] vmalloc_user_noprof+0x9e/0xe0 [ 185.835443][T12049] ? xskq_create+0xfb/0x1d0 [ 185.835460][T12049] xskq_create+0xfb/0x1d0 [ 185.835476][T12049] xsk_setsockopt+0x640/0x840 [ 185.835491][T12049] ? __pfx_xsk_setsockopt+0x10/0x10 [ 185.835505][T12049] ? find_held_lock+0x2b/0x80 [ 185.835521][T12049] ? selinux_socket_setsockopt+0x6a/0x80 [ 185.835540][T12049] ? __pfx_xsk_setsockopt+0x10/0x10 [ 185.835561][T12049] do_sock_setsockopt+0xf0/0x1d0 [ 185.835582][T12049] __sys_setsockopt+0x1a0/0x230 [ 185.835601][T12049] __x64_sys_setsockopt+0xbd/0x160 [ 185.835617][T12049] ? do_syscall_64+0x91/0x4c0 [ 185.835627][T12049] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.835643][T12049] do_syscall_64+0xcd/0x4c0 [ 185.835654][T12049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.835665][T12049] RIP: 0033:0x7fcac8d8e9a9 [ 185.835675][T12049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.835685][T12049] RSP: 002b:00007fcac9bef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 185.835696][T12049] RAX: ffffffffffffffda RBX: 00007fcac8fb5fa0 RCX: 00007fcac8d8e9a9 [ 185.835703][T12049] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 185.835709][T12049] RBP: 00007fcac8e10d69 R08: 0000000000000004 R09: 0000000000000000 [ 185.835715][T12049] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.835721][T12049] R13: 0000000000000000 R14: 00007fcac8fb5fa0 R15: 00007ffcac9e3108 [ 185.835734][T12049] [ 185.835738][T12049] Mem-Info: [ 185.877237][T12049] active_anon:14340 inactive_anon:3 isolated_anon:0 [ 185.877237][T12049] active_file:943 inactive_file:54910 isolated_file:0 [ 185.877237][T12049] unevictable:3815 dirty:74 writeback:0 [ 185.877237][T12049] slab_reclaimable:7592 slab_unreclaimable:80814 [ 185.877237][T12049] mapped:25190 shmem:2457 pagetables:1775 [ 185.877237][T12049] sec_pagetables:316 bounce:0 [ 185.877237][T12049] kernel_misc_reclaimable:0 [ 185.877237][T12049] free:425946 free_pcp:22966 free_cma:0 [ 185.892428][ T5969] Bluetooth: hci4: command tx timeout [ 185.894239][T12049] Node 0 active_anon:57360kB inactive_anon:12kB active_file:3772kB inactive_file:219348kB unevictable:11724kB isolated(anon):0kB isolated(file):0kB mapped:100668kB dirty:272kB writeback:0kB shmem:8340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:15504kB pagetables:6888kB sec_pagetables:1264kB all_unreclaimable? no Balloon:0kB [ 185.945886][T12059] openvswitch: netlink: Missing key (keys=40, expected=100) [ 185.957791][T12049] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:292kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:24kB writeback:0kB shmem:1488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 185.970170][T12049] Node 0 DMA free:13124kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB present:15992kB managed:15360kB mlocked:2048kB bounce:0kB free_pcp:100kB local_pcp:0kB free_cma:0kB [ 185.980677][T12049] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 185.983075][T12049] Node 0 DMA32 free:93716kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57360kB inactive_anon:12kB active_file:3772kB inactive_file:219348kB unevictable:9740kB writepending:272kB present:2080628kB managed:1264296kB mlocked:6208kB bounce:0kB free_pcp:64428kB local_pcp:8556kB free_cma:0kB [ 186.010037][T12049] lowmem_reserve[]: 0 0 0 0 0 [ 186.012832][T12049] Node 1 Normal free:1596816kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:292kB unevictable:3536kB writepending:24kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:27416kB local_pcp:12412kB free_cma:0kB [ 186.026695][T12049] lowmem_reserve[]: 0 0 0 0 0 [ 186.028238][T12049] Node 0 DMA: 3*4kB (UM) 3*8kB (UM) 5*16kB (UM) 5*32kB (UM) 5*64kB (UM) 6*128kB (UM) 6*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 0*4096kB = 13140kB [ 186.033587][T12049] Node 0 DMA32: 1954*4kB (UME) 780*8kB (UME) 548*16kB (UME) 222*32kB (UME) 151*64kB (UME) 70*128kB (UME) 42*256kB (UME) 31*512kB (UME) 18*1024kB (UM) 0*2048kB 0*4096kB = 93608kB [ 186.040011][T12049] Node 1 Normal: 60*4kB (UME) 68*8kB (UME) 78*16kB (UME) 65*32kB (UME) 32*64kB (UME) 29*128kB (UME) 11*256kB (UE) 4*512kB (UE) 5*1024kB (UME) 0*2048kB 385*4096kB (UM) = 1596816kB [ 186.046185][T12049] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.049323][T12049] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 186.052692][T12049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.056294][T12049] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 186.059989][T12049] 58306 total pagecache pages [ 186.061746][T12049] 0 pages in swap cache [ 186.063476][T12049] Free swap = 124996kB [ 186.064908][T12049] Total swap = 124996kB [ 186.066352][T12049] 1048443 pages RAM [ 186.067626][T12049] 0 pages HighMem/MovableOnly [ 186.069237][T12049] 283040 pages reserved [ 186.070704][T12049] 0 pages cma reserved [ 186.153948][T12066] sp0: Synchronizing with TNC [ 186.282449][ T6026] usb 11-1: Service connection timeout for: 256 [ 186.285351][ T6026] ath9k_htc 11-1:1.0: ath9k_htc: Unable to initialize HTC services [ 186.285790][T12076] vxcan1: tx address claim with dest, not broadcast [ 186.288847][ T6026] ath9k_htc: Failed to initialize the device [ 186.293685][ T29] usb 11-1: ath9k_htc: USB layer deinitialized [ 186.565373][T12089] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.624709][T12087] /dev/sr0: Can't open blockdev [ 186.628186][T12089] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.688748][T12089] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.769449][T12089] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.863686][T12089] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.877876][T12089] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.888944][T12089] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.900939][T12089] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.393972][T12114] 9pnet_virtio: no channels available for device syz [ 188.032361][T12159] No source specified [ 188.282445][ T5315] Bluetooth: hci3: command 0x1003 tx timeout [ 188.282695][ T5969] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 188.549827][T12180] __nla_validate_parse: 5 callbacks suppressed [ 188.549842][T12180] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1634'. [ 188.556248][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1634'. [ 188.847239][ T40] kauditd_printk_skb: 330 callbacks suppressed [ 188.847250][ T40] audit: type=1400 audit(1753528801.845:33836): avc: denied { create } for pid=12201 comm="syz.6.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.855944][ T40] audit: type=1400 audit(1753528801.845:33837): avc: denied { setopt } for pid=12201 comm="syz.6.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.856410][T12202] netlink: 14560 bytes leftover after parsing attributes in process `syz.6.1642'. [ 188.873417][ T40] audit: type=1400 audit(1753528801.875:33838): avc: denied { mount } for pid=12191 comm="syz.7.1639" name="/" dev="hugetlbfs" ino=50323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 188.931927][T12207] Malformed UNC in devname [ 188.931927][T12207] [ 188.934468][T12207] CIFS: VFS: Malformed UNC in devname [ 188.934832][ T40] audit: type=1400 audit(1753528801.925:33839): avc: denied { mounton } for pid=12206 comm="syz.6.1643" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 188.945188][ T40] audit: type=1400 audit(1753528801.925:33840): avc: denied { unmount } for pid=11630 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 188.953763][ T40] audit: type=1400 audit(1753528801.935:33841): avc: denied { create } for pid=12206 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 188.963457][ T40] audit: type=1400 audit(1753528801.935:33842): avc: denied { bind } for pid=12206 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 188.974042][T12209] netlink: 160 bytes leftover after parsing attributes in process `syz.7.1644'. [ 188.978974][ T40] audit: type=1400 audit(1753528801.935:33843): avc: denied { setopt } for pid=12206 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 188.982735][T12209] xt_hashlimit: Unknown mode mask 180, kernel too old? [ 188.986677][ T40] audit: type=1400 audit(1753528801.935:33844): avc: denied { accept } for pid=12206 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 188.996312][ T40] audit: type=1400 audit(1753528801.935:33845): avc: denied { write } for pid=12206 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 189.028217][T12218] overlayfs: failed to resolve './file0': -2 [ 189.031630][T12219] nvme_fabrics: missing parameter 'transport=%s' [ 189.034789][T12219] nvme_fabrics: missing parameter 'nqn=%s' [ 189.360365][T12249] overlay: filesystem on ./file1 not supported [ 189.470332][T12264] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1659'. [ 189.850548][ T7751] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.856417][ T7751] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.860488][ T7751] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.966154][ T7751] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.969436][ T7751] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.973125][ T7751] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.978206][T12294] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1669'. [ 189.983504][T12294] validate_nla: 28 callbacks suppressed [ 189.983514][T12294] netlink: 'syz.6.1669': attribute type 1 has an invalid length. [ 189.987751][T12294] netlink: 'syz.6.1669': attribute type 2 has an invalid length. [ 189.990165][T12294] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1669'. [ 189.999841][ T5315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.006005][ T5315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.009686][ T5315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.015226][ T5315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.018206][ T5315] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.050011][ T7751] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.062485][ T7751] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.065863][ T7751] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 190.072908][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1671'. [ 190.075773][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1671'. [ 190.154289][ T7751] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.158183][ T7751] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.161386][ T7751] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 190.302096][T12295] chnl_net:caif_netlink_parms(): no params data found [ 190.313905][T12315] kvm: pic: non byte read [ 190.317282][T12315] kvm: pic: non byte read [ 190.320401][T12315] kvm: pic: non byte read [ 190.323844][T12315] kvm: pic: non byte read [ 190.327443][T12315] kvm: pic: non byte read [ 190.330342][T12315] kvm: pic: non byte read [ 190.335135][T12315] kvm: pic: non byte read [ 190.338874][T12315] kvm: pic: non byte read [ 190.344102][T12315] kvm: pic: non byte read [ 190.347017][T12315] kvm: pic: non byte read [ 190.427659][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'. [ 190.481458][ T7751] bond4 (unregistering): (slave gretap1): Releasing active interface [ 190.787733][ T7751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.795098][ T7751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.799316][ T7751] bond0 (unregistering): Released all slaves [ 190.807254][ T7751] bond1 (unregistering): Released all slaves [ 190.906862][ T7751] bond2 (unregistering): Released all slaves [ 191.000316][ T7751] bond3 (unregistering): Released all slaves [ 191.008289][ T7751] bond4 (unregistering): Released all slaves [ 191.166583][T12295] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.169403][T12295] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.171993][T12295] bridge_slave_0: entered allmulticast mode [ 191.176103][T12295] bridge_slave_0: entered promiscuous mode [ 191.181123][T12295] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.183674][T12295] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.185971][T12295] bridge_slave_1: entered allmulticast mode [ 191.188789][T12295] bridge_slave_1: entered promiscuous mode [ 191.220964][T12347] kAFS: No cell specified [ 191.248810][T12295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.278271][T12295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.285774][T12359] netlink: 'syz.4.1685': attribute type 2 has an invalid length. [ 191.289042][T12359] netlink: 'syz.4.1685': attribute type 1 has an invalid length. [ 191.298710][T12359] overlay: ./file0 is not a directory [ 191.324699][T12363] IPVS: length: 142 != 8 [ 191.364750][T12295] team0: Port device team_slave_0 added [ 191.370263][T12295] team0: Port device team_slave_1 added [ 191.370298][T12367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12367 comm=syz.6.1688 [ 191.379580][T12365] ./bus: Can't lookup blockdev [ 191.425647][T12295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.427843][T12295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.438051][T12295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.456504][T12295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.459014][T12295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.473383][T12295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.529065][T12295] hsr_slave_0: entered promiscuous mode [ 191.531624][T12295] hsr_slave_1: entered promiscuous mode [ 191.534752][T12295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.537291][T12295] Cannot create hsr debugfs directory [ 191.557582][ T7751] hsr_slave_0: left promiscuous mode [ 191.559778][ T7751] hsr_slave_1: left promiscuous mode [ 191.562816][ T7751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.565192][ T7751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.574612][ T7751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.576952][ T7751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.618551][ T7751] veth1_macvtap: left promiscuous mode [ 191.620366][ T7751] veth0_macvtap: left promiscuous mode [ 191.622305][ T7751] veth1_vlan: left promiscuous mode [ 191.624414][ T7751] veth0_vlan: left promiscuous mode [ 192.046007][ T5969] Bluetooth: hci0: command tx timeout [ 192.902079][ T7751] team0 (unregistering): Port device team_slave_1 removed [ 192.989955][ T7751] team0 (unregistering): Port device team_slave_0 removed [ 193.023839][T12393] Set syz1 is full, maxelem 65536 reached [ 193.723896][T12421] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 193.855455][T12426] __nla_validate_parse: 1 callbacks suppressed [ 193.855466][T12426] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1703'. [ 193.861236][ T40] kauditd_printk_skb: 264 callbacks suppressed [ 193.861248][ T40] audit: type=1400 audit(1753528806.855:34110): avc: denied { create } for pid=12295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.867891][T12426] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.872772][ T40] audit: type=1400 audit(1753528806.855:34111): avc: denied { write } for pid=12295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.872985][T12426] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.882035][ T40] audit: type=1400 audit(1753528806.855:34112): avc: denied { read } for pid=12295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.887547][T12295] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 193.899275][ T40] audit: type=1400 audit(1753528806.855:34113): avc: denied { remove_name } for pid=12435 comm="rm" name="resolv.conf.eth16.link" dev="tmpfs" ino=7932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.908346][ T40] audit: type=1400 audit(1753528806.865:34114): avc: denied { unlink } for pid=12435 comm="rm" name="resolv.conf.eth16.link" dev="tmpfs" ino=7932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 193.910081][T12295] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 193.916728][ T40] audit: type=1400 audit(1753528806.885:34115): avc: denied { map_create } for pid=12425 comm="syz.6.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.916771][ T40] audit: type=1400 audit(1753528806.885:34116): avc: denied { read } for pid=12425 comm="syz.6.1703" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 193.933918][ T40] audit: type=1400 audit(1753528806.885:34117): avc: denied { open } for pid=12425 comm="syz.6.1703" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 193.941358][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 193.941658][ T40] audit: type=1400 audit(1753528806.885:34118): avc: denied { prog_load } for pid=12425 comm="syz.6.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.942569][T12295] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 193.953782][ T40] audit: type=1400 audit(1753528806.885:34119): avc: denied { bpf } for pid=12425 comm="syz.6.1703" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 193.974017][T12295] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 194.041869][T12295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.044698][ T5969] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 194.067663][T12454] bridge_slave_0: left allmulticast mode [ 194.069497][T12454] bridge_slave_0: left promiscuous mode [ 194.071486][T12454] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.078893][T12454] bridge_slave_1: left allmulticast mode [ 194.081092][T12454] bridge_slave_1: left promiscuous mode [ 194.084002][T12454] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.092114][T12454] bond0: (slave bond_slave_0): Releasing backup interface [ 194.098624][T12454] bond0: (slave bond_slave_1): Releasing backup interface [ 194.122256][ T5969] Bluetooth: hci0: command tx timeout [ 194.123658][T12454] team0: Port device team_slave_0 removed [ 194.132413][T12454] team0: Port device team_slave_1 removed [ 194.135549][T12454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.138656][T12454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.141916][T12454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.144513][T12454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.154527][T12295] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.189421][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.192483][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.199382][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.202831][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.209176][T12454] vlan0: entered promiscuous mode [ 194.217230][T12454] team0: Port device vlan0 added [ 194.358533][T12475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1710'. [ 194.361379][T12475] netlink: 'syz.4.1710': attribute type 1 has an invalid length. [ 194.364573][T12475] netlink: 'syz.4.1710': attribute type 2 has an invalid length. [ 194.367266][T12475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1710'. [ 194.407598][T12295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.537052][T12493] tmpfs: Unknown parameter 'quota,5srquota_inode_hardlimit' [ 194.567437][T12295] veth0_vlan: entered promiscuous mode [ 194.574161][T12295] veth1_vlan: entered promiscuous mode [ 194.595160][T12295] veth0_macvtap: entered promiscuous mode [ 194.599357][T12295] veth1_macvtap: entered promiscuous mode [ 194.620717][ T6026] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 194.622084][T12295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.636512][T12295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.641859][T12295] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.645658][T12295] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.649053][T12295] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.653566][T12295] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.716545][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.718802][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.739725][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.743343][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.799457][ T6026] usb 11-1: Using ep0 maxpacket: 16 [ 194.804020][ T6026] usb 11-1: config 0 has an invalid interface number: 8 but max is 0 [ 194.806599][ T6026] usb 11-1: config 0 has no interface number 0 [ 194.808546][ T6026] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 194.818665][ T6026] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 194.822005][ T6026] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 194.824721][ T6026] usb 11-1: Product: syz [ 194.826302][ T6026] usb 11-1: SerialNumber: syz [ 194.830271][ T6026] usb 11-1: config 0 descriptor?? [ 194.833750][ T6026] cm109 11-1:0.8: invalid payload size 16, expected 4 [ 194.837274][ T6026] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input21 [ 195.007559][T12527] input: syz1 as /devices/virtual/input/input22 [ 195.176108][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1720'. [ 195.251596][T12482] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 195.295735][T12539] hsr_slave_0 (unregistering): left promiscuous mode [ 195.444118][T12553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1724'. [ 195.447084][T12553] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1724'. [ 195.488827][T12558] netlink: 'syz.4.1725': attribute type 21 has an invalid length. [ 195.493356][T12558] netlink: 'syz.4.1725': attribute type 6 has an invalid length. [ 195.496407][T12558] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1725'. [ 195.822252][ T34] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 195.850001][T12582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1730'. [ 195.895062][T12585] sp0: Synchronizing with TNC [ 195.901139][T12585] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 195.983855][ T34] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 195.986729][ T34] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 195.990126][ T34] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 196.007578][ T34] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 196.011853][ T34] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 196.019049][ T34] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 196.019957][T12595] netlink: 'syz.4.1732': attribute type 3 has an invalid length. [ 196.022044][ T34] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.028106][ T34] usb 12-1: Product: syz [ 196.029506][ T34] usb 12-1: Manufacturer: syz [ 196.038945][ T34] cdc_wdm 12-1:1.0: skipping garbage [ 196.040738][ T34] cdc_wdm 12-1:1.0: skipping garbage [ 196.045102][ T34] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 196.046953][ T34] cdc_wdm 12-1:1.0: Unknown control protocol [ 196.068451][T12597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.070920][T12597] IPv6: NLM_F_CREATE should be set when creating new route [ 196.090550][T12599] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1733'. [ 196.262592][ T6026] usb 12-1: USB disconnect, device number 2 [ 196.955549][T12622] netlink: 'syz.4.1736': attribute type 19 has an invalid length. [ 197.057046][T12630] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12564 sclass=netlink_xfrm_socket pid=12630 comm=syz.8.1738 [ 197.140839][T12642] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 197.143969][T12642] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 197.152317][T12642] vhci_hcd vhci_hcd.0: Device attached [ 197.299868][ C0] cm109 11-1:0.8: cm109_urb_irq_callback: urb status -71 [ 197.300069][ T29] usb 11-1: USB disconnect, device number 4 [ 197.302541][ C0] cm109 11-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 197.324078][ T29] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 197.332372][ T6050] vhci_hcd: vhci_device speed not set [ 197.344383][T12653] netlink: 'syz.7.1743': attribute type 10 has an invalid length. [ 197.349237][T12653] team0: Device ipvlan1 failed to register rx_handler [ 197.393856][ T6050] usb 53-1: new full-speed USB device number 2 using vhci_hcd [ 197.504476][T12667] set_target_expiration: 55 callbacks suppressed [ 197.504487][T12667] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 197.661086][T12676] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 197.821323][T12682] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 197.825086][T12682] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 197.830166][T12682] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 197.869091][T12683] misc userio: Invalid payload size [ 197.898786][T12644] vhci_hcd: connection closed [ 197.899140][ T1061] vhci_hcd: stop threads [ 197.904008][ T1061] vhci_hcd: release socket [ 197.906371][ T1061] vhci_hcd: disconnect device [ 198.122556][ T5969] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 198.126254][ T5969] Bluetooth: hci1: Injecting HCI hardware error event [ 198.130921][ T5315] Bluetooth: hci1: hardware error 0x00 [ 198.460010][T12702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12702 comm=syz.6.1758 [ 198.519107][T12705] netlink: 'syz.6.1759': attribute type 1 has an invalid length. [ 198.537078][T12705] overlayfs: statfs failed on './file0' [ 198.596452][T12707] overlayfs: missing 'lowerdir' [ 198.688289][T12712] syz.4.1761 uses old SIOCAX25GETINFO [ 198.693849][T12711] ipt_REJECT: TCP_RESET invalid for non-tcp [ 198.715203][T12711] policy can only be matched on NF_INET_PRE_ROUTING [ 198.715222][T12711] unable to load match [ 198.853440][T12717] tmpfs: Bad value for 'mpol' [ 198.865469][ T40] kauditd_printk_skb: 366 callbacks suppressed [ 198.865486][ T40] audit: type=1400 audit(1753528811.865:34486): avc: denied { mount } for pid=12718 comm="syz.6.1764" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 198.876598][ T40] audit: type=1400 audit(1753528811.875:34487): avc: denied { create } for pid=12718 comm="syz.6.1764" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.887525][ T40] audit: type=1400 audit(1753528811.875:34488): avc: denied { map } for pid=12718 comm="syz.6.1764" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.897793][ T40] audit: type=1400 audit(1753528811.875:34489): avc: denied { read write } for pid=12718 comm="syz.6.1764" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.909891][ T40] audit: type=1400 audit(1753528811.885:34490): avc: denied { execute } for pid=12718 comm="syz.6.1764" path="/59/cpu.stat" dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 198.919338][ T40] audit: type=1400 audit(1753528811.885:34491): avc: denied { read write } for pid=12718 comm="syz.6.1764" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 198.928136][ T40] audit: type=1400 audit(1753528811.885:34492): avc: denied { open } for pid=12718 comm="syz.6.1764" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 199.003344][ T40] audit: type=1400 audit(1753528812.005:34493): avc: denied { map_create } for pid=12718 comm="syz.6.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 199.025493][ T40] audit: type=1400 audit(1753528812.025:34494): avc: denied { unmount } for pid=11617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 199.051049][ T40] audit: type=1400 audit(1753528812.045:34495): avc: denied { read } for pid=12726 comm="syz.6.1767" dev="nsfs" ino=4026533729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 199.060199][T12727] input: syz1 as /devices/virtual/input/input26 [ 199.195789][T12732] __nla_validate_parse: 7 callbacks suppressed [ 199.195805][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1769'. [ 199.428796][T12748] overlayfs: failed to resolve './file1': -13 [ 199.495627][T12755] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 199.500063][T12755] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 199.504131][T12755] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 199.586214][T12753] /dev/sr0: Can't open blockdev [ 199.589476][T12758] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 199.654057][T12756] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 199.690619][T12761] openvswitch: netlink: Missing key (keys=40, expected=100) [ 199.815115][ T1422] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 199.819829][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.823237][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.825239][T12772] netlink: 'syz.6.1781': attribute type 39 has an invalid length. [ 199.862973][T12770] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 200.059528][T12782] input: syz0 as /devices/virtual/input/input27 [ 200.063753][T12782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1785'. [ 200.202266][ T5315] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 200.601613][T12798] netlink: 276 bytes leftover after parsing attributes in process `syz.6.1792'. [ 200.726026][T12808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1795'. [ 200.767937][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1796'. [ 200.979075][T12823] syzkaller0: entered promiscuous mode [ 200.981259][T12823] syzkaller0: entered allmulticast mode [ 200.987954][T12823] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1799'. [ 201.153598][T12830] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.258209][T12830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.266008][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1802'. [ 201.270468][T12830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.387303][T12830] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.391167][T12830] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.394720][T12830] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.398334][T12830] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.455696][T12835] netlink: 'syz.6.1803': attribute type 5 has an invalid length. [ 201.537845][T12833] team0: Port device team_slave_0 removed [ 202.148725][T12844] overlayfs: missing 'lowerdir' [ 202.166755][T12846] input: syz1 as /devices/virtual/input/input30 [ 202.512362][ T6050] vhci_hcd: vhci_device speed not set [ 202.515372][T12862] netlink: 37 bytes leftover after parsing attributes in process `syz.7.1813'. [ 202.707613][T12875] comedi comedi3: comedi_config --init_data is deprecated [ 202.710979][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1817'. [ 203.057543][T12884] tmpfs: Cannot change global quota limit on remount [ 203.061566][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1820'. [ 203.393728][T12900] input: syz1 as /devices/virtual/input/input31 [ 203.424246][T12868] ================================================================== [ 203.427954][T12868] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 203.431266][T12868] Read of size 1 at addr ffff8880362c60b0 by task syz.6.1815/12868 [ 203.435796][T12868] [ 203.437103][T12868] CPU: 0 UID: 0 PID: 12868 Comm: syz.6.1815 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 203.437128][T12868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.437141][T12868] Call Trace: [ 203.437148][T12868] [ 203.437154][T12868] dump_stack_lvl+0x116/0x1f0 [ 203.437184][T12868] print_report+0xcd/0x610 [ 203.437203][T12868] ? __virt_addr_valid+0x81/0x610 [ 203.437226][T12868] ? __phys_addr+0xe8/0x180 [ 203.437248][T12868] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 203.437275][T12868] kasan_report+0xe0/0x110 [ 203.437293][T12868] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 203.437323][T12868] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 203.437349][T12868] __kasan_check_byte+0x36/0x50 [ 203.437363][T12868] lock_acquire+0xfc/0x350 [ 203.437383][T12868] ? __fput_deferred+0x213/0x480 [ 203.437409][T12868] _raw_spin_lock_irqsave+0x3a/0x60 [ 203.437439][T12868] ? remove_wait_queue+0x25/0x180 [ 203.437467][T12868] remove_wait_queue+0x25/0x180 [ 203.437493][T12868] poll_freewait+0xd5/0x250 [ 203.437533][T12868] do_select+0xe52/0x17e0 [ 203.437575][T12868] ? __pfx_do_select+0x10/0x10 [ 203.437601][T12868] ? psi_task_switch+0x201/0x8e0 [ 203.437631][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.437661][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.437691][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.437720][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.437746][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.437775][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.437805][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.437835][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.437863][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.437889][T12868] ? find_held_lock+0x2b/0x80 [ 203.437915][T12868] ? __might_fault+0xe3/0x190 [ 203.437944][T12868] ? __might_fault+0xe3/0x190 [ 203.437973][T12868] ? __might_fault+0x13b/0x190 [ 203.438004][T12868] ? core_sys_select+0x453/0xc10 [ 203.438031][T12868] core_sys_select+0x453/0xc10 [ 203.438064][T12868] ? __pfx_core_sys_select+0x10/0x10 [ 203.438102][T12868] ? find_held_lock+0x2b/0x80 [ 203.438137][T12868] ? set_user_sigmask+0x21b/0x2b0 [ 203.438158][T12868] ? __pfx_set_user_sigmask+0x10/0x10 [ 203.438183][T12868] do_pselect.constprop.0+0x19f/0x1e0 [ 203.438216][T12868] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 203.438250][T12868] ? __x64_sys_futex+0x1e0/0x4c0 [ 203.438280][T12868] __x64_sys_pselect6+0x182/0x240 [ 203.438312][T12868] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 203.438347][T12868] do_syscall_64+0xcd/0x4c0 [ 203.438369][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.438391][T12868] RIP: 0033:0x7facc858e9a9 [ 203.438408][T12868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.438430][T12868] RSP: 002b:00007facc93c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 203.438451][T12868] RAX: ffffffffffffffda RBX: 00007facc87b5fa0 RCX: 00007facc858e9a9 [ 203.438466][T12868] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 203.438478][T12868] RBP: 00007facc8610d69 R08: 0000000000000000 R09: 0000000000000000 [ 203.438489][T12868] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.438503][T12868] R13: 0000000000000000 R14: 00007facc87b5fa0 R15: 00007ffe677f5a88 [ 203.438523][T12868] [ 203.438530][T12868] [ 203.556421][T12868] Allocated by task 12075: [ 203.558733][T12868] kasan_save_stack+0x33/0x60 [ 203.560919][T12868] kasan_save_track+0x14/0x30 [ 203.562943][T12868] __kasan_kmalloc+0xaa/0xb0 [ 203.564935][T12868] comedi_device_postconfig+0x2cb/0xc80 [ 203.567284][T12868] comedi_device_attach+0x3cf/0x900 [ 203.569449][T12868] do_devconfig_ioctl+0x1a7/0x580 [ 203.571569][T12868] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 203.573972][T12868] __x64_sys_ioctl+0x18e/0x210 [ 203.576177][T12868] do_syscall_64+0xcd/0x4c0 [ 203.578441][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.581142][T12868] [ 203.582228][T12868] Freed by task 12875: [ 203.584018][T12868] kasan_save_stack+0x33/0x60 [ 203.586043][T12868] kasan_save_track+0x14/0x30 [ 203.588174][T12868] kasan_save_free_info+0x3b/0x60 [ 203.590489][T12868] __kasan_slab_free+0x51/0x70 [ 203.592748][T12868] kfree+0x2b4/0x4d0 [ 203.594457][T12868] comedi_device_detach+0x2a4/0x9e0 [ 203.596357][T12868] do_devconfig_ioctl+0x46c/0x580 [ 203.598021][T12868] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 203.599648][T12868] __x64_sys_ioctl+0x18e/0x210 [ 203.601162][T12868] do_syscall_64+0xcd/0x4c0 [ 203.602757][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.605128][T12868] [ 203.606057][T12868] The buggy address belongs to the object at ffff8880362c6000 [ 203.606057][T12868] which belongs to the cache kmalloc-256 of size 256 [ 203.610702][T12868] The buggy address is located 176 bytes inside of [ 203.610702][T12868] freed 256-byte region [ffff8880362c6000, ffff8880362c6100) [ 203.616084][T12868] [ 203.617160][T12868] The buggy address belongs to the physical page: [ 203.619508][T12868] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x362c6 [ 203.622920][T12868] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 203.625834][T12868] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 203.628991][T12868] page_type: f5(slab) [ 203.631221][T12868] raw: 00fff00000000040 ffff88801b842b40 0000000000000000 dead000000000001 [ 203.635054][T12868] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 203.638536][T12868] head: 00fff00000000040 ffff88801b842b40 0000000000000000 dead000000000001 [ 203.642305][T12868] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 203.646017][T12868] head: 00fff00000000001 ffffea0000d8b181 00000000ffffffff 00000000ffffffff [ 203.650302][T12868] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 203.653797][T12868] page dumped because: kasan: bad access detected [ 203.656374][T12868] page_owner tracks the page as allocated [ 203.658768][T12868] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9433, tgid 9432 (syz.5.881), ts 136250170072, free_ts 135683052079 [ 203.668686][T12868] post_alloc_hook+0x1c0/0x230 [ 203.670676][T12868] get_page_from_freelist+0x1321/0x3890 [ 203.672961][T12868] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 203.675368][T12868] alloc_pages_mpol+0x1fb/0x550 [ 203.677346][T12868] new_slab+0x23b/0x330 [ 203.679050][T12868] ___slab_alloc+0xd9c/0x1940 [ 203.680988][T12868] __slab_alloc.constprop.0+0x56/0xb0 [ 203.683283][T12868] __kmalloc_noprof+0x2f2/0x510 [ 203.685555][T12868] io_cache_alloc_new+0x45/0xf0 [ 203.687974][T12868] __io_prep_rw+0x21d/0x1000 [ 203.690232][T12868] io_prep_rw+0x24/0x220 [ 203.692236][T12868] io_prep_writev+0x23/0xa0 [ 203.694170][T12868] io_submit_sqes+0x835/0x2580 [ 203.696203][T12868] __do_sys_io_uring_enter+0xd6a/0x1630 [ 203.698608][T12868] do_syscall_64+0xcd/0x4c0 [ 203.700552][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.703072][T12868] page last free pid 5666 tgid 5666 stack trace: [ 203.705764][T12868] __free_frozen_pages+0x7fe/0x1180 [ 203.708156][T12868] __put_partials+0x16d/0x1c0 [ 203.710537][T12868] qlist_free_all+0x4d/0x120 [ 203.712820][T12868] kasan_quarantine_reduce+0x195/0x1e0 [ 203.715135][T12868] __kasan_slab_alloc+0x69/0x90 [ 203.717211][T12868] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 203.719672][T12868] sock_alloc_inode+0x25/0x1c0 [ 203.721714][T12868] alloc_inode+0x64/0x240 [ 203.723549][T12868] sock_alloc+0x40/0x280 [ 203.725407][T12868] __sock_create+0xc1/0x8d0 [ 203.727470][T12868] __sys_socket+0x14d/0x260 [ 203.729057][T12868] __x64_sys_socket+0x72/0xb0 [ 203.730755][T12868] do_syscall_64+0xcd/0x4c0 [ 203.732489][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.734649][T12868] [ 203.735414][T12868] Memory state around the buggy address: [ 203.737157][T12868] ffff8880362c5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 203.739621][T12868] ffff8880362c6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.742108][T12868] >ffff8880362c6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.745187][T12868] ^ [ 203.747613][T12868] ffff8880362c6100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.750979][T12868] ffff8880362c6180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.753616][T12868] ================================================================== [ 203.756091][T12868] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 203.758283][T12868] CPU: 0 UID: 0 PID: 12868 Comm: syz.6.1815 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 203.761972][T12868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.766858][T12868] Call Trace: [ 203.768488][T12868] [ 203.769874][T12868] dump_stack_lvl+0x3d/0x1f0 [ 203.771358][T12868] panic+0x71c/0x800 [ 203.772651][T12868] ? __pfx_panic+0x10/0x10 [ 203.774283][T12868] ? __pfx__printk+0x10/0x10 [ 203.775776][T12868] ? end_report+0x4c/0x170 [ 203.777298][T12868] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 203.779425][T12868] check_panic_on_warn+0xab/0xb0 [ 203.781557][T12868] end_report+0x107/0x170 [ 203.783382][T12868] kasan_report+0xee/0x110 [ 203.785346][T12868] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 203.787684][T12868] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 203.789702][T12868] __kasan_check_byte+0x36/0x50 [ 203.791277][T12868] lock_acquire+0xfc/0x350 [ 203.793005][T12868] ? __fput_deferred+0x213/0x480 [ 203.795139][T12868] _raw_spin_lock_irqsave+0x3a/0x60 [ 203.797122][T12868] ? remove_wait_queue+0x25/0x180 [ 203.798773][T12868] remove_wait_queue+0x25/0x180 [ 203.800381][T12868] poll_freewait+0xd5/0x250 [ 203.802019][T12868] do_select+0xe52/0x17e0 [ 203.803876][T12868] ? __pfx_do_select+0x10/0x10 [ 203.805661][T12868] ? psi_task_switch+0x201/0x8e0 [ 203.807208][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.808659][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.810171][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.811645][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.813228][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.815238][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.817510][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.819723][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.821758][T12868] ? __pfx_pollwake+0x10/0x10 [ 203.823572][T12868] ? find_held_lock+0x2b/0x80 [ 203.825030][T12868] ? __might_fault+0xe3/0x190 [ 203.826538][T12868] ? __might_fault+0xe3/0x190 [ 203.828077][T12868] ? __might_fault+0x13b/0x190 [ 203.829699][T12868] ? core_sys_select+0x453/0xc10 [ 203.831349][T12868] core_sys_select+0x453/0xc10 [ 203.833179][T12868] ? __pfx_core_sys_select+0x10/0x10 [ 203.835345][T12868] ? find_held_lock+0x2b/0x80 [ 203.837357][T12868] ? set_user_sigmask+0x21b/0x2b0 [ 203.839418][T12868] ? __pfx_set_user_sigmask+0x10/0x10 [ 203.841659][T12868] do_pselect.constprop.0+0x19f/0x1e0 [ 203.843872][T12868] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 203.845925][T12868] ? __x64_sys_futex+0x1e0/0x4c0 [ 203.847591][T12868] __x64_sys_pselect6+0x182/0x240 [ 203.849202][T12868] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 203.851133][T12868] do_syscall_64+0xcd/0x4c0 [ 203.852946][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.854903][T12868] RIP: 0033:0x7facc858e9a9 [ 203.856423][T12868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.862995][T12868] RSP: 002b:00007facc93c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 203.865547][T12868] RAX: ffffffffffffffda RBX: 00007facc87b5fa0 RCX: 00007facc858e9a9 [ 203.867980][T12868] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 203.870639][T12868] RBP: 00007facc8610d69 R08: 0000000000000000 R09: 0000000000000000 [ 203.873660][T12868] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.876423][T12868] R13: 0000000000000000 R14: 00007facc87b5fa0 R15: 00007ffe677f5a88 [ 203.879036][T12868] [ 203.880645][T12868] Kernel Offset: disabled [ 203.882102][T12868] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:42:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a5665 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc90006756fc0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3330383838666666 R12=0000000000000000 R13=0000000000000062 R14=ffffffff9b0b9e20 R15=ffffffff855a5600 RIP=ffffffff855a568f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007facc93c36c0 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002000 CR3=000000004b20a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe677f5e10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facc8611d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facc8611d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facc8611d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facc8611d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facc8611de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facc8611ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000046 RBX=ffffffff8e5c4e00 RCX=000000004760b848 RDX=0000000000000000 RSI=ffffffff8de0ad6d RDI=ffffffff8c157460 RBP=0000000000000002 RSP=ffffc90000aefab0 R8 =584717eacbf31927 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81988bb1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3f040d CR3=000000000e382000 CR4=00352ef0 DR0=000000000000be1e DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe677f5bb0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facc8611d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facc8611d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facc8611d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facc8611d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facc8611de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facc8611ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732064616200786c 6c36313025783000 657a697320780004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5605414447005d49 49131415005d1500 405f4c56055d404d 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88801cef0c80 RCX=ffff88801cef0c80 RDX=ffffea0000c8c240 RSI=ffffffff816ca828 RDI=0000000000000007 RBP=ffff8880323092a0 RSP=ffffc900038b7cf0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88805925c400 R13=0000000000000000 R14=ffffc900038b7d28 R15=ffff8880494dcc00 RIP=ffffffff82214e78 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f5cdb380880 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556d558a98 CR3=00000000244f8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fc000000 Opmask01=0000000000290410 Opmask02=00000000ffffffff Opmask03=0000000001041000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfd7be458 00007ffdfd7be458 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfd7be630 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563816980160 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5cdadf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5cdadf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffff0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373254b65e6f4f3 7373254b65e5ffd3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373b2 7373737373730a07 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 37706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 317570632f302f71 6d2f37706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003175 70632f302f716d2f 37706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 752f362e6463685f 796d6d75642f6d72 6f6674616c702f73 6563697665642f73 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c1 0000000000007974 00736576616c7300 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000138375 RBX=0000000000000003 RCX=ffffffff8b867c99 RDX=0000000000000000 RSI=ffffffff8de2ffee RDI=ffffffff8c157460 RBP=ffffed1003bd9000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801dec8000 R14=ffffffff90a94550 R15=0000000000000000 RIP=ffffffff8b8667ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcac8f802d8 CR3=000000004b5d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcac9e3490 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcac8e11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcac8e11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcac8e11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcac8e11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcac8e11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcac8e11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000