last executing test programs: 12.766601473s ago: executing program 1 (id=2): mkdir(&(0x7f0000000b40)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='io_uring_task_add\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) (async, rerun: 64) io_uring_enter(r2, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) (rerun: 64) shutdown(r5, 0x1) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 11.837403814s ago: executing program 1 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x22, 0x1, 0x0}, &(0x7f0000000000)=0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4008800) r2 = socket$inet(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x4}}, './file1/file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x4}}, './file1/file0\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x11c, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x7, 0x7ff, 0x7, 0x1, 0x7, 0x30, 0x4}}, {0xc, 0x2, [0x4, 0x5, 0x2, 0x6]}}, {{0x1c, 0x1, {0x1, 0x6, 0x3, 0xc9, 0x1, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x8, 0x1d8, 0x2d4d, 0x2, 0x2902420e, 0x7, 0x2}}, {0x8, 0x2, [0x6, 0xed9]}}]}]}, 0x11c}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, 'xfrm0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'pimreg0\x00'}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/raw6\x00') read$FUSE(r9, &(0x7f0000000a40)={0x2020}, 0x2020) (async) read$FUSE(r9, &(0x7f0000000a40)={0x2020}, 0x2020) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x20, 0x140d, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x801) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x20, 0x140d, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x801) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000a01080000000000000000020000070900020073797a32000000000900010073797a30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44010}, 0x8094) socket$inet6_tcp(0xa, 0x1, 0x0) 11.758936844s ago: executing program 1 (id=11): mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='hfsplus\x00', 0x204001, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x94, 0x7, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x7, 0x4132, 0x6, 0x1000, 0x0, 0x3, 0xc, "fe1d00003413000000000020b42717e47f00"}}) r5 = socket$netlink(0x10, 0x3, 0x0) inotify_init1(0x0) syslog(0xa, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2800000011000100000055246f956e937b4300001e00000056cc0700000003380000"], 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 3.146241159s ago: executing program 0 (id=106): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x3, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x1, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee00}, {0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x340, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0xa0802) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) connect(r0, &(0x7f00000000c0)=@generic={0x0, "95377c3f880f0201a15060f13e15e4dc2d5d6586667770ce73969e3d994009147d1637dd69d7fe4c1465402f81fffd7a7a4ddfe3042cd2cd3bdfc0510696eea517ffbccfa6303966334aa4c0e36a8c2d9d4a875bfd68da0b8c588bcdf8cc9b4d4c8812d18cddc9a07aa7eec08d5247ee26a976f3099963696db39301df7d"}, 0x80) 3.079796078s ago: executing program 0 (id=107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x3) (async, rerun: 64) r1 = socket$kcm(0xa, 0x3, 0x87) (rerun: 64) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) writev(r4, &(0x7f0000003e80)=[{0x0}, {&(0x7f0000000b00)="3bca", 0x2}], 0x2) (async) r5 = socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r10, 0x4000000, 0x3c, 0x6a, &(0x7f00000002c0)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/106, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000500)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.9454042s ago: executing program 0 (id=108): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000f600"/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.943235796s ago: executing program 0 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) lseek(r0, 0x6, 0x4) (async) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async, rerun: 32) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') (async) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x4e23, @multicast2}}}, 0x88) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000003c0)={0x2, {{0x2, 0x1, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x14c) (async) mkdir(&(0x7f0000000340)='./file0\x00', 0x50) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@redirect_dir_off}, {@volatile}, {@redirect_dir_nofollow}, {@nfs_export_off}, {@redirect_dir_off}]}) (async, rerun: 32) chdir(&(0x7f00000003c0)='./bus\x00') r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x8) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRES64=0x0], 0x10) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) (async) r3 = landlock_create_ruleset(&(0x7f0000000200)={0x567, 0x0, 0x1}, 0x18, 0x3) close_range(r3, r3, 0x0) (async) landlock_restrict_self(r3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async, rerun: 64) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') (async, rerun: 64) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x20000006, 0x8000}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.85908035s ago: executing program 0 (id=110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000100)="c4e3c1cff26866b8000000000f23c80f21f86635040010000f23f8f32e656564819cf06c09000f01c466b9800000c00f326635000400000f303664660fc6634a4d2e2e260fc731f20f38f19553ffbaf80c66b8080aae8366efbafc0cec13ed", 0x5f}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x0, 0x9, 0x9, 0x0, 0x68708d3f}, {0x2, 0x1, 0x7fffffff, 0x2, 0x8, 0xd}], ['\x00', '\x00']}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000100)="c4e3c1cff26866b8000000000f23c80f21f86635040010000f23f8f32e656564819cf06c09000f01c466b9800000c00f326635000400000f303664660fc6634a4d2e2e260fc731f20f38f19553ffbaf80c66b8080aae8366efbafc0cec13ed", 0x5f}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x0, 0x9, 0x9, 0x0, 0x68708d3f}, {0x2, 0x1, 0x7fffffff, 0x2, 0x8, 0xd}], ['\x00', '\x00']}) (async) 2.358694906s ago: executing program 0 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x75}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000804) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), 0xffffffffffffffff, 0x2}}, 0x18) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, &(0x7f0000000000)=[r4], 0x1) syz_usb_connect(0x2, 0x2fb, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7c, 0xcb, 0x27, 0xff, 0xeb1, 0x6668, 0x36c6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e9, 0x1, 0x8, 0x5, 0x0, 0xe, [{{0x9, 0x4, 0x3c, 0x81, 0xe, 0xf, 0x24, 0xe2, 0x9, [@uac_as], [{{0x9, 0x5, 0x2, 0x0, 0x58f9639b378a9666, 0x5, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x5, 0x6, 0x51}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xf, 0xd, 0x8a, [@generic={0xdb, 0x31, "bad9ff405345342b25ed1fdb5b8516979a6d2cc10fe4f7de55801d4d678dfd8851d434ac7812a73146eff5f617e25958261e0ee9d3074fcc018307fd1dd82f6d1a8e2cc86a1738ca0a44f1e77a2e3bb6c6f61ca997eddcfa6a0a132bcb2adb1bd0732a1ab0a0c754eaac94e390c44dd039d3008fcc2acbc29c979b4fe1a2586bda68b628c546ff2f631dc8ecd5fe41682d4f7d456297dbf73a5b552b8c9c5e93833db0915d75dd75ff7e1511ffd8c56d12783521ddb9ce6a77eace002b33fa0e04342285b8fd545068bf36ea82031ede769a14284663c38f46"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x9, 0xc, 0xc, [@generic={0x88, 0xe, "047fd4793ac71f6a0a097806c97fe201233d6d85e3d9202f4acccba6cda0d6bdc37d10c6f2a83c05d3c359cdf0746fedf5b4e16400d666c58a0fa877aa3914a6e939529299ff6a4e3fa1da86aeb2a7820903f997832ab2a514d229005f5d9592ec5edd4abc1e13ac7cad922478ddf0e625de404ffd695c31d4cd4b631cc4d713f9eda958f3db"}, @generic={0x28, 0x3, "6099430c7aa8b2a56191e009db84aabb3e0da1052c363c28360e3504566a8fbf5d2520df9389"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x40, 0x1, 0x8}}, {{0x9, 0x5, 0xf, 0x1, 0x1ff, 0x16, 0x5, 0xc}}, {{0x9, 0x5, 0x80, 0x8, 0x8, 0x81, 0xfc, 0x6}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x47, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xf8, 0x1}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x6c, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfe, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x2, 0xc0, 0x3}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x6, 0x0, 0x2}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x1, 0xb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}, @generic={0xa4, 0x11, "0c3dcd72af4ea63d0cf13a50042a0fb79441595df760b0adab5dda0de036e89bf691d44b6be52fe92bdd5bd88ffdd58def95defe753b799bf0cd15c32a527cc6f9780484f8a299f8e77cd3b13e57f65d7c72251d7aa3a4973becc74e7bf045d42c3c8dcf3d6326a2c2dfb0781db227725946d41fcd3f49c0d2f806bab29ce08ee9b279a6283a4ebfb248d1d6cfe49f1e23e2cd5fa251dbb34b623b06130b91677a6e"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x7f, 0x8, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf5, 0x9}]}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0xff, 0x9, 0x6, 0x10, 0xa}, 0x10, &(0x7f0000000400)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x8, 0x1, 0x0, 0x1}]}, 0x7, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x445}}, {0xb6, &(0x7f0000000680)=@string={0xb6, 0x3, "b0dadafe9f840c3b73ed92ce7c4dd13c7478413ba59c0cfe342df70d95d0ee851d2dbe5a0bfe41e0da38de15fd7355f22d25b87a62864b48e6ac747c996ecb04094c00461f458e74b73a4d39dd99fe5408d171d29313ffe64ff3506d0faef6cd67f43b879cbb5336d258124abc419c310ac1b829efce0f72304cee452c6a3dd2b971ea24bf4f43fb5f4926be8494766ff9cdf54109940b2cd0c7690eade15da5abbe8369fe0b63ee4b3668b274b087c9f63bc6a3"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x180a}}, {0x62, &(0x7f0000000780)=@string={0x62, 0x3, "7edd6542afd8b983874c14ad487cf1d04179d9c8a4ef5e042a9a7d21191abe0c23c4b23382c87812398fc18dd4a3a4dea4027bb91891991cad6bd02766536ab99bd75e480f63022a0ae4fda854d2d479d237a54a13d090105eafd4db96f0cde9"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x414}}, {0xf1, &(0x7f0000000880)=@string={0xf1, 0x3, "c32a1ff9ab0f2851976e793773f4d306a0d883938842bc34e3dd3e48c70453faed34295c1fae436402a7cf2c3752d478eff99e8796bd667bac486c55f207518fc64f700e38db1349944fcb376836e441c945ae7f786bbf55465c887b1469ce64747b519b9cdc026a6db990fbde51d4c02fccc6fcfcbc31ebbab97ae2b5d61bab645e075440cef0030d6f1836121601637c429d01a91781be180592b17938128423931157d22a3e68da0f0970fa10f1c65f4afc8b765be4f0d7c67ed8f0f260bfdc2ba5b3158814d6c0d747cee4ba261ef42a7bcd2a85e3e64fae6c0e19c690dd17a3865734463ff17883ea91c678a6"}}]}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001d"]) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28011, r2, 0xaae46000) 769.836364ms ago: executing program 2 (id=131): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32) close(0x3) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x62b, 0x5, 0x5, 0xffffffffffffffff, 0x8, 0x8000, 0xffffffffffffff9d, 0x1, 0x1, 0x8, 0x100000001, 0x9, 0x1, 0x6, 0x2, 0xffffffffffff5f24], 0xeeeff000, 0x890}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000200)=0x6, 0x2) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) (async) r5 = socket$inet6(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 769.25893ms ago: executing program 2 (id=132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000e70f00010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="68c5000000000000140003006e657464657673696d30000000000000180016801400018010000600060000000300000007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 709.836297ms ago: executing program 2 (id=133): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x4042, 0x3e, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffa}, 0x50) (async) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 650.109524ms ago: executing program 2 (id=134): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x200, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x1d8, 0x12, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x30}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x40, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfff}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xb0, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xa0, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_EXPRESSIONS={0x54, 0xa, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0xcc, 0x14, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x87, 0x8, "c8902e690485fa55e2d7da3f3878e17dfd8bbd51241c980ef170d2078544828e4b6ad0e4938d9020a7e671b66c76c9d57fc0584b0a30d6fb326a1204f32afe52837112d6a1ce53c71ae4e337a4c55b689651cd27bf92ad6a3dfa9fc706538be8bd6c3c22ab289ec12b69ae23249d8e100dcec4a2a2ddf0ab4dc96b5f2d9f0cc0d790af"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0xbc, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x94, 0x6, "9cc718bbb97d9f5e4a1b713743df9e4a1deed56bda45471f009a3a38f5d9e58e769ad77de4a514dc203032be5aed2b63112e1f4ae48bc1eb7a24844ef50704197a99fe1366298c081c4a2093c6ac89a7d52ade623897718a4d6955d2415244519e0dbfb84e2eccf5df28dbb12a4692729835964b3f34d493fc823688a9cb99190852524ec033924ec193635976624b70"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3b0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x130, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@nested={0x100, 0x12, 0x0, 0x1, [@typed={0xc, 0x4b, 0x0, 0x0, @u64=0x5}, @typed={0x5, 0x122, 0x0, 0x0, @str='\x00'}, @typed={0xe5, 0x12a, 0x0, 0x0, @binary="8ff5bb9427ab70a33426e7c093e686a42f8e8f0d6b0f40cfe60be041b3f1f8cddfe753828af570bd1154423c4208ffbabc2d99757b21b0753a1f09ce362ffbad546905dc09b5bbfb11bf58a4f9dd181af172a96d2f7f1d37f8ae06f9b786ff845b6a3a13a6bcec6a0f6ad18b6334c2a6dac7b5786627490b9c6a04c0c82432ae0d64142b1e1c22814bf47a6a8cb7b0da337e72471875bcbbcd2436abf94b2bdfd70b25c2b7e0d5cf3df1c8adc803ca04bf42a598dc11a2fb686a4d53ab9a15a6958781d01b9c79dfe5de1d6838a3fc320ae6435a4cd7514deff3b1c1202790516f"}]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) 595.185995ms ago: executing program 2 (id=135): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x61, 0x2) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) migrate_pages(0x0, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24002104) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0xffffffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0x0, 0x20303159, 0x3, @discrete={0x5, 0xe5}}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x43, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x95fb) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x1cf042, 0x0) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='pstore\x00', 0x221000d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='nilfs2_mdt_insert_new_block\x00', r5, 0x0, 0x9}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e22}}]}, 0x24}}, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000024c0)=[{}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) socket(0x2000000000000021, 0x2, 0x10000000000002) 594.803422ms ago: executing program 2 (id=136): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001380), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4c004}, 0x240040c4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000e7b8e6536538fad0c379d3765d7d1b31eadb49a242cd01ad5fc40f03ea890a09324db8d6b3ba79fb9e6992880166be5b09139c99d06a4e1f8af4f8d2b2860ff003a6b9cbbe230d85d1bfa7bd16723bfb93f6d174c1d9fa071980305a0dbcd00"/111, @ANYRES16=r2, @ANYBLOB="070607bd7002fddbdf252d00000008002f00000000000a0001007770616e310000000c0009000203aaaaaaaaaaaa05002b000200000005002e0006000000"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x4008400) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000e7b8e6536538fad0c379d3765d7d1b31eadb49a242cd01ad5fc40f03ea890a09324db8d6b3ba79fb9e6992880166be5b09139c99d06a4e1f8af4f8d2b2860ff003a6b9cbbe230d85d1bfa7bd16723bfb93f6d174c1d9fa071980305a0dbcd00"/111, @ANYRES16=r2, @ANYBLOB="070607bd7002fddbdf252d00000008002f00000000000a0001007770616e310000000c0009000203aaaaaaaaaaaa05002b000200000005002e0006000000"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x4008400) unshare(0x60400) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x6, r3, 'id1\x00'}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20000) syz_usb_disconnect(r5) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080011400000000005001500020000000500010006000000050005000200000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080011400000000005001500020000000500010006000000050005000200000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0) ioctl$EVIOCRMFF(r5, 0xc0085508, &(0x7f00000000c0)=0x18) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000100)={{0x9, 0x5}, {0xf}, 0xfffffffa, 0x0, 0xf7}) unshare(0x30030c00) (async) unshare(0x30030c00) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32=r6, @ANYRESDEC=0x0], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x240c8040) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32=r6, @ANYRESDEC=0x0], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x240c8040) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000100)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000013c0)={0x2020}, 0xffffffffffffff6b) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000013c0)={0x2020}, 0xffffffffffffff6b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x40}) socket$nl_xfrm(0x10, 0x3, 0x6) 219.378344ms ago: executing program 3 (id=139): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = getpid() syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x101}}, './file1\x00'}) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x3) r3 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x8, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x1, 0x5001) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r4}}]}}) stat(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) getpid() (async) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) syz_pidfd_open(r0, 0x0) (async) setns(r1, 0x24020000) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x101}}, './file1\x00'}) (async) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x3) (async) syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r3) (async) wait4(r3, 0x0, 0x8, 0x0) (async) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) (async) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x1, 0x5001) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r4}}]}}) (async) stat(&(0x7f0000000440)='./file1\x00', 0x0) (async) 168.887717ms ago: executing program 3 (id=140): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x10000}, {0x6, 0x6}, 0xab4, [0x5, 0x7a, 0x1, 0x4000000005, 0x40, 0x63, 0xffffffffffffffff, 0x5f, 0x2, 0xfffffffffffffffd, 0x10, 0x4, 0x6, 0xffdffffffffffff7, 0x1, 0xa]}) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) 163.423345ms ago: executing program 3 (id=141): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000002240)={0x9d0000, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400200001000030531bd7000ffffffff00cf0000", @ANYRES32=0x0, @ANYBLOB="8b800000000000002000128008000100677265001400028008000600ac14143a08000700e000030a"], 0x40}}, 0x0) 89.25642ms ago: executing program 3 (id=142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=r4, @ANYBLOB="0400130006001200040000000600b5009f0400000a0006"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4088050) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xec, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x177}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x32}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6e0}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x40, r6, 0x1, 0x70bd2f, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffffb}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 88.85361ms ago: executing program 3 (id=143): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x28, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 3 (id=144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x4c}}, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r3, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) socket$inet(0x2, 0x5, 0x4) (async) mount$overlay(0x0, &(0x7f0000000bc0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b80), 0x200010, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:10508' (ED25519) to the list of known hosts. [ 46.357666][ T40] audit: type=1400 audit(1764863081.918:62): avc: denied { name_bind } for pid=5847 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.394603][ T40] audit: type=1400 audit(1764863081.958:63): avc: denied { execute } for pid=5848 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.401266][ T40] audit: type=1400 audit(1764863081.958:64): avc: denied { execute_no_trans } for pid=5848 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.698323][ T40] audit: type=1400 audit(1764863084.258:65): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.706434][ T40] audit: type=1400 audit(1764863084.278:66): avc: denied { mount } for pid=5848 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.717251][ T5848] cgroup: Unknown subsys name 'net' [ 48.885977][ T5848] cgroup: Unknown subsys name 'cpuset' [ 48.890729][ T5848] cgroup: Unknown subsys name 'rlimit' [ 49.179429][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 49.179447][ T40] audit: type=1400 audit(1764863084.738:74): avc: denied { setattr } for pid=5848 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.192228][ T40] audit: type=1400 audit(1764863084.738:75): avc: denied { create } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.201322][ T40] audit: type=1400 audit(1764863084.738:76): avc: denied { write } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.210799][ T40] audit: type=1400 audit(1764863084.738:77): avc: denied { read } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.221487][ T40] audit: type=1400 audit(1764863084.758:78): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.230797][ T40] audit: type=1400 audit(1764863084.758:79): avc: denied { mount } for pid=5848 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.238707][ T40] audit: type=1400 audit(1764863084.768:80): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.269645][ T5919] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 49.274099][ T40] audit: type=1400 audit(1764863084.838:81): avc: denied { relabelto } for pid=5919 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 49.282783][ T40] audit: type=1400 audit(1764863084.838:82): avc: denied { write } for pid=5919 comm="mkswap" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.290850][ T40] audit: type=1400 audit(1764863084.838:83): avc: denied { read } for pid=5848 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 50.078098][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.516644][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.521788][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.525040][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.528393][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.532980][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.544381][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.553815][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.565004][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.567931][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.571072][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.574238][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.575707][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.578211][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.581267][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.583287][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.585663][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.590841][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.591974][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.594113][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.601040][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.870304][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 54.019068][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.021870][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.024552][ T5940] bridge_slave_0: entered allmulticast mode [ 54.027280][ T5940] bridge_slave_0: entered promiscuous mode [ 54.052311][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.055456][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.058406][ T5940] bridge_slave_1: entered allmulticast mode [ 54.061074][ T5940] bridge_slave_1: entered promiscuous mode [ 54.065670][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 54.113032][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 54.123893][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.142133][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 54.164610][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.262989][ T5940] team0: Port device team_slave_0 added [ 54.290256][ T5940] team0: Port device team_slave_1 added [ 54.319978][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.322548][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.325397][ T5944] bridge_slave_0: entered allmulticast mode [ 54.328084][ T5944] bridge_slave_0: entered promiscuous mode [ 54.339139][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.341426][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.344449][ T5944] bridge_slave_1: entered allmulticast mode [ 54.347318][ T5944] bridge_slave_1: entered promiscuous mode [ 54.349940][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.352219][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.354939][ T5948] bridge_slave_0: entered allmulticast mode [ 54.357666][ T5948] bridge_slave_0: entered promiscuous mode [ 54.367896][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.370627][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.372941][ T5936] bridge_slave_0: entered allmulticast mode [ 54.376164][ T5936] bridge_slave_0: entered promiscuous mode [ 54.385589][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.388073][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.390590][ T5936] bridge_slave_1: entered allmulticast mode [ 54.393758][ T5936] bridge_slave_1: entered promiscuous mode [ 54.402297][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.404824][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.407277][ T5948] bridge_slave_1: entered allmulticast mode [ 54.409989][ T5948] bridge_slave_1: entered promiscuous mode [ 54.413129][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.415785][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.426931][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.438589][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.441448][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.451794][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.488653][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.495961][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.514107][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.520233][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.549920][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.565656][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.585212][ T5940] hsr_slave_0: entered promiscuous mode [ 54.588704][ T5940] hsr_slave_1: entered promiscuous mode [ 54.610496][ T5944] team0: Port device team_slave_0 added [ 54.621899][ T5944] team0: Port device team_slave_1 added [ 54.641452][ T5936] team0: Port device team_slave_0 added [ 54.663533][ T5948] team0: Port device team_slave_0 added [ 54.666592][ T5936] team0: Port device team_slave_1 added [ 54.683659][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.686508][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.696893][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.702254][ T5948] team0: Port device team_slave_1 added [ 54.717466][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.719681][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.728885][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.747814][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.750715][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.760558][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.776863][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.780069][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.790979][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.796191][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.798510][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.806800][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.819982][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.822244][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.830445][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.881532][ T5944] hsr_slave_0: entered promiscuous mode [ 54.883974][ T5944] hsr_slave_1: entered promiscuous mode [ 54.886188][ T5944] debugfs: 'hsr0' already exists in 'hsr' [ 54.888457][ T5944] Cannot create hsr debugfs directory [ 54.917472][ T5948] hsr_slave_0: entered promiscuous mode [ 54.920830][ T5948] hsr_slave_1: entered promiscuous mode [ 54.922978][ T5948] debugfs: 'hsr0' already exists in 'hsr' [ 54.924989][ T5948] Cannot create hsr debugfs directory [ 54.949966][ T5936] hsr_slave_0: entered promiscuous mode [ 54.952280][ T5936] hsr_slave_1: entered promiscuous mode [ 54.954444][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 54.956276][ T5936] Cannot create hsr debugfs directory [ 55.183912][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.199495][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.210911][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.225432][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.264787][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.270341][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.275250][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.281461][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.333972][ T5936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.346004][ T5936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.351369][ T5936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.356248][ T5936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.407932][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.423252][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.428249][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.432605][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.472340][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.499712][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.520468][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.522901][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.537463][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.541873][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.545102][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.584799][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.598752][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.604014][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.613222][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.615708][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.626388][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.628694][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.646593][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.654408][ T5950] Bluetooth: hci2: command tx timeout [ 55.654438][ T5293] Bluetooth: hci1: command tx timeout [ 55.654489][ T5943] Bluetooth: hci0: command tx timeout [ 55.655129][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.657130][ T5951] Bluetooth: hci3: command tx timeout [ 55.666496][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 55.666509][ T40] audit: type=1400 audit(1764863091.228:94): avc: denied { sys_module } for pid=5940 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.686977][ T211] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.689512][ T211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.695263][ T211] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.697559][ T211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.705113][ T211] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.707397][ T211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.722042][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.724772][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.791742][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.847653][ T5940] veth0_vlan: entered promiscuous mode [ 55.863535][ T5940] veth1_vlan: entered promiscuous mode [ 55.878089][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.930838][ T5940] veth0_macvtap: entered promiscuous mode [ 55.939836][ T5940] veth1_macvtap: entered promiscuous mode [ 55.949143][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.955291][ T5944] veth0_vlan: entered promiscuous mode [ 55.967931][ T5944] veth1_vlan: entered promiscuous mode [ 55.972660][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.982972][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.990385][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.001991][ T4249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.006027][ T4249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.011402][ T4249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.014800][ T4249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.035203][ T5944] veth0_macvtap: entered promiscuous mode [ 56.047936][ T5948] veth0_vlan: entered promiscuous mode [ 56.051584][ T5944] veth1_macvtap: entered promiscuous mode [ 56.069713][ T5948] veth1_vlan: entered promiscuous mode [ 56.098052][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.118899][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.125257][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.129138][ T5936] veth0_vlan: entered promiscuous mode [ 56.131147][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.142482][ T1211] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.158222][ T1211] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.172272][ T1211] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.180068][ T5936] veth1_vlan: entered promiscuous mode [ 56.183968][ T1211] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.188155][ T1211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.191283][ T1211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.205823][ T40] audit: type=1400 audit(1764863091.768:95): avc: denied { mount } for pid=5940 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.211941][ T5948] veth0_macvtap: entered promiscuous mode [ 56.216414][ T40] audit: type=1400 audit(1764863091.778:96): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/syzkaller.8bgRxF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.227934][ T40] audit: type=1400 audit(1764863091.778:97): avc: denied { mount } for pid=5940 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.237673][ T40] audit: type=1400 audit(1764863091.778:98): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/syzkaller.8bgRxF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.241644][ T5948] veth1_macvtap: entered promiscuous mode [ 56.255655][ T40] audit: type=1400 audit(1764863091.778:99): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/syzkaller.8bgRxF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.270578][ T40] audit: type=1400 audit(1764863091.788:100): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.270926][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.271978][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.271997][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.283451][ T40] audit: type=1400 audit(1764863091.798:101): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.296509][ T40] audit: type=1400 audit(1764863091.798:102): avc: denied { mount } for pid=5940 comm="syz-executor" name="/" dev="gadgetfs" ino=7101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 56.303795][ T40] audit: type=1400 audit(1764863091.808:103): avc: denied { mount } for pid=5940 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.325045][ T5936] veth0_macvtap: entered promiscuous mode [ 56.351555][ T5936] veth1_macvtap: entered promiscuous mode [ 56.356533][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.372410][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.376040][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.381195][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.398324][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.409598][ T94] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.413504][ T94] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.419692][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.422103][ T94] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.428543][ T94] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.438994][ T4249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.442827][ T4249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.454285][ T4249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.458159][ T4249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.538336][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.540772][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.572390][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.576821][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.594742][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.598077][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.611671][ T211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.618301][ T211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.669295][ T6042] GUP no longer grows the stack in syz.0.1 (6042): 200000004000-20000000a000 (200000002000) [ 56.675923][ T6042] CPU: 0 UID: 0 PID: 6042 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 56.675947][ T6042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.675957][ T6042] Call Trace: [ 56.675964][ T6042] [ 56.675972][ T6042] dump_stack_lvl+0x16c/0x1f0 [ 56.676000][ T6042] gup_vma_lookup+0x1d2/0x220 [ 56.676026][ T6042] __get_user_pages+0x241/0x33c0 [ 56.676066][ T6042] ? find_held_lock+0x2b/0x80 [ 56.676089][ T6042] ? __pfx___get_user_pages+0x10/0x10 [ 56.676125][ T6042] get_user_pages_remote+0x243/0xab0 [ 56.676152][ T6042] ? mast_spanning_rebalance.isra.0+0x2020/0x2060 [ 56.676180][ T6042] ? __pfx_get_user_pages_remote+0x10/0x10 [ 56.676207][ T6042] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.676234][ T6042] __access_remote_vm+0x24d/0x850 [ 56.676260][ T6042] ? do_raw_spin_lock+0x12c/0x2b0 [ 56.676288][ T6042] ? __pfx___access_remote_vm+0x10/0x10 [ 56.676311][ T6042] ? set_page_refcounted+0xbd/0x230 [ 56.676342][ T6042] proc_pid_cmdline_read+0x4de/0x8e0 [ 56.676371][ T6042] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 56.676397][ T6042] ? rw_verify_area+0xcf/0x6c0 [ 56.676423][ T6042] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 56.676446][ T6042] vfs_readv+0x5c1/0x8b0 [ 56.676476][ T6042] ? __pfx_vfs_readv+0x10/0x10 [ 56.676521][ T6042] ? __fget_files+0x20e/0x3c0 [ 56.676545][ T6042] ? do_preadv+0x1a6/0x270 [ 56.676568][ T6042] do_preadv+0x1a6/0x270 [ 56.676594][ T6042] ? __pfx_do_preadv+0x10/0x10 [ 56.676627][ T6042] do_syscall_64+0xcd/0xf80 [ 56.676654][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.676673][ T6042] RIP: 0033:0x7f04a578f7c9 [ 56.676689][ T6042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.676707][ T6042] RSP: 002b:00007f04a6575038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 56.676726][ T6042] RAX: ffffffffffffffda RBX: 00007f04a59e5fa0 RCX: 00007f04a578f7c9 [ 56.676739][ T6042] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 56.676751][ T6042] RBP: 00007f04a5813f91 R08: 0000000000000000 R09: 0000000000000000 [ 56.676761][ T6042] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 56.676773][ T6042] R13: 00007f04a59e6038 R14: 00007f04a59e5fa0 R15: 00007ffcc0544c08 [ 56.676799][ T6042] [ 56.807847][ T6048] process 'syz.2.7' launched './file1' with NULL argv: empty string added [ 57.262858][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9'. [ 57.544505][ T6062] syzkaller0: entered promiscuous mode [ 57.546880][ T6062] syzkaller0: entered allmulticast mode [ 57.581514][ T6062] syz.3.12: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 57.635250][ T6004] hid-generic 0006:0004:0009.0002: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 57.675718][ T6070] fido_id[6070]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.729231][ T6074] Zero length message leads to an empty skb [ 57.734615][ T5951] Bluetooth: hci1: command tx timeout [ 57.734701][ T5950] Bluetooth: hci3: command tx timeout [ 57.734769][ T5293] Bluetooth: hci0: command tx timeout [ 57.734788][ T5293] Bluetooth: hci2: command tx timeout [ 57.996144][ T6091] program syz.3.19 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.084509][ T6098] syz.2.21: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 58.092665][ T6098] CPU: 1 UID: 0 PID: 6098 Comm: syz.2.21 Not tainted syzkaller #0 PREEMPT(full) [ 58.092688][ T6098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.092699][ T6098] Call Trace: [ 58.092706][ T6098] [ 58.092713][ T6098] dump_stack_lvl+0x16c/0x1f0 [ 58.092742][ T6098] warn_alloc+0x248/0x3a0 [ 58.092765][ T6098] ? __pfx_warn_alloc+0x10/0x10 [ 58.092795][ T6098] ? packet_set_ring+0xb4c/0x17e0 [ 58.092822][ T6098] ? __vmalloc_node_noprof+0xad/0xf0 [ 58.092855][ T6098] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 58.092891][ T6098] ? packet_set_ring+0xb4c/0x17e0 [ 58.092923][ T6098] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 58.092951][ T6098] ? alloc_pages_mpol+0x25a/0x550 [ 58.092979][ T6098] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 58.093005][ T6098] ? rcu_is_watching+0x12/0xc0 [ 58.093029][ T6098] ? packet_set_ring+0xb4c/0x17e0 [ 58.093061][ T6098] __vmalloc_node_noprof+0xad/0xf0 [ 58.093089][ T6098] ? packet_set_ring+0xb4c/0x17e0 [ 58.093118][ T6098] packet_set_ring+0xb4c/0x17e0 [ 58.093154][ T6098] packet_setsockopt+0x16f6/0x2410 [ 58.093175][ T6098] ? __pfx_packet_setsockopt+0x10/0x10 [ 58.093192][ T6098] ? __pfx_sock_has_perm+0x10/0x10 [ 58.093220][ T6098] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 58.093242][ T6098] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 58.093269][ T6098] ? find_held_lock+0x2b/0x80 [ 58.093292][ T6098] ? selinux_socket_setsockopt+0x6a/0x80 [ 58.093319][ T6098] ? __pfx_packet_setsockopt+0x10/0x10 [ 58.093339][ T6098] do_sock_setsockopt+0xf3/0x1d0 [ 58.093362][ T6098] __sys_setsockopt+0x1a0/0x230 [ 58.093407][ T6098] __x64_sys_setsockopt+0xbd/0x160 [ 58.093432][ T6098] ? do_syscall_64+0x91/0xf80 [ 58.093456][ T6098] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.093479][ T6098] do_syscall_64+0xcd/0xf80 [ 58.093505][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.093523][ T6098] RIP: 0033:0x7f9a3a18f7c9 [ 58.093538][ T6098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.093555][ T6098] RSP: 002b:00007f9a3afe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 58.093573][ T6098] RAX: ffffffffffffffda RBX: 00007f9a3a3e5fa0 RCX: 00007f9a3a18f7c9 [ 58.093585][ T6098] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004 [ 58.093596][ T6098] RBP: 00007f9a3a213f91 R08: 000000000000001c R09: 0000000000000000 [ 58.093607][ T6098] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.093617][ T6098] R13: 00007f9a3a3e6038 R14: 00007f9a3a3e5fa0 R15: 00007fff2af92728 [ 58.093643][ T6098] [ 58.176311][ T6098] Mem-Info: [ 58.177939][ T6098] active_anon:7130 inactive_anon:0 isolated_anon:0 [ 58.177939][ T6098] active_file:1497 inactive_file:40631 isolated_file:0 [ 58.177939][ T6098] unevictable:1777 dirty:1739 writeback:0 [ 58.177939][ T6098] slab_reclaimable:11830 slab_unreclaimable:64362 [ 58.177939][ T6098] mapped:24171 shmem:2392 pagetables:1013 [ 58.177939][ T6098] sec_pagetables:306 bounce:0 [ 58.177939][ T6098] kernel_misc_reclaimable:0 [ 58.177939][ T6098] free:472338 free_pcp:21464 free_cma:0 [ 58.198579][ T6098] Node 0 active_anon:28520kB inactive_anon:0kB active_file:5988kB inactive_file:162324kB unevictable:3572kB isolated(anon):0kB isolated(file):0kB mapped:96684kB dirty:6920kB writeback:0kB shmem:6032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12528kB pagetables:3736kB sec_pagetables:1224kB all_unreclaimable? no Balloon:0kB [ 58.212470][ T6098] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:36kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 58.225861][ T6098] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 58.238512][ T6098] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 58.240807][ T6098] Node 0 DMA32 free:278572kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28520kB inactive_anon:0kB active_file:5988kB inactive_file:162324kB unevictable:3572kB writepending:6920kB zspages:0kB present:2080628kB managed:1266432kB mlocked:36kB bounce:0kB free_pcp:68476kB local_pcp:12864kB free_cma:0kB [ 58.254875][ T6098] lowmem_reserve[]: 0 0 0 0 0 [ 58.256905][ T6098] Node 1 Normal free:1595148kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:36kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:17476kB local_pcp:3844kB free_cma:0kB [ 58.270696][ T6098] lowmem_reserve[]: 0 0 0 0 0 [ 58.272787][ T6098] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 58.278563][ T6098] Node 0 DMA32: 2*4kB (UE) 5*8kB (UM) 4*16kB (UM) 90*32kB (M) 74*64kB (UME) 8*128kB (ME) 23*256kB (UME) 9*512kB (UM) 7*1024kB (ME) 1*2048kB (M) 61*4096kB (M) = 278320kB [ 58.284435][ T6098] Node 1 Normal: 3*4kB (UE) 8*8kB (UME) 7*16kB (UE) 6*32kB (E) 4*64kB (E) 3*128kB (UME) 3*256kB (E) 4*512kB (UM) 0*1024kB 1*2048kB (M) 388*4096kB (M) = 1595132kB [ 58.291223][ T6098] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 58.294817][ T6098] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 58.297775][ T6098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 58.298508][ T6108] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 58.300831][ T6098] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 58.307757][ T6098] 44516 total pagecache pages [ 58.308389][ T6108] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 58.309430][ T6098] 0 pages in swap cache [ 58.314887][ T6098] Free swap = 124996kB [ 58.316341][ T6098] Total swap = 124996kB [ 58.317702][ T6098] 1048443 pages RAM [ 58.319056][ T6098] 0 pages HighMem/MovableOnly [ 58.320634][ T6098] 282522 pages reserved [ 58.321965][ T6098] 0 pages cma reserved [ 58.339795][ T6108] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 58.343155][ T6108] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 58.347053][ T6108] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 58.350596][ T6108] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 58.354680][ T6108] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 58.358533][ T6108] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 58.362152][ T6108] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 58.421861][ T6108] binder: 6107:6108 ioctl 890b 200000000140 returned -22 [ 58.545752][ T6126] capability: warning: `syz.3.28' uses deprecated v2 capabilities in a way that may be insecure [ 58.818452][ T6143] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 58.857954][ T6147] netlink: 'syz.3.34': attribute type 11 has an invalid length. [ 59.004578][ T6157] netlink: 36 bytes leftover after parsing attributes in process `syz.2.37'. [ 59.065512][ T6160] syz.3.38 uses obsolete (PF_INET,SOCK_PACKET) [ 59.333923][ T6172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6172 comm=syz.2.40 [ 59.338418][ T6172] netlink: 'syz.2.40': attribute type 1 has an invalid length. [ 59.367892][ T6174] netlink: 'syz.0.41': attribute type 13 has an invalid length. [ 59.370388][ T6174] netlink: 'syz.0.41': attribute type 17 has an invalid length. [ 59.706487][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 59.709619][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.45'. [ 59.719366][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.45'. [ 59.743977][ T6183] XFS (nbd3): SB validate failed with error -5. [ 59.814091][ T5950] Bluetooth: hci2: command tx timeout [ 59.814146][ T5943] Bluetooth: hci1: command tx timeout [ 59.814206][ T5293] Bluetooth: hci3: command tx timeout [ 59.814280][ T5951] Bluetooth: hci0: command tx timeout [ 59.884370][ T6207] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 59.936128][ T6215] netlink: 'syz.3.54': attribute type 10 has an invalid length. [ 59.941930][ T6215] batman_adv: batadv0: Adding interface: team0 [ 59.945369][ T6215] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.953256][ T6215] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 60.016234][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 60.073557][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.148067][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.152147][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.233700][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 60.238709][ T24] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 60.241352][ T24] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 60.244640][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 60.248315][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.251378][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 60.254703][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 60.259780][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 60.262852][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.262900][ T6232] capability: warning: `syz.2.60' uses 32-bit capabilities (legacy support in use) [ 60.270632][ T24] usb 5-1: config 0 descriptor?? [ 60.479288][ T24] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 60.686236][ T40] kauditd_printk_skb: 142 callbacks suppressed [ 60.686251][ T40] audit: type=1400 audit(1764863096.248:246): avc: denied { read write } for pid=6202 comm="syz.0.49" name="lp0" dev="devtmpfs" ino=2849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 60.699325][ T40] audit: type=1400 audit(1764863096.248:247): avc: denied { open } for pid=6202 comm="syz.0.49" path="/dev/usb/lp0" dev="devtmpfs" ino=2849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 60.700579][ T24] usb 5-1: USB disconnect, device number 2 [ 60.718264][ T24] usblp0: removed [ 61.096776][ T40] audit: type=1400 audit(1764863096.658:248): avc: denied { mounton } for pid=6235 comm="syz.2.61" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 61.102804][ T6236] (syz.2.61,6236,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 61.110665][ T6236] (syz.2.61,6236,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 61.210432][ T40] audit: type=1400 audit(1764863096.768:249): avc: denied { create } for pid=6237 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.218108][ T40] audit: type=1400 audit(1764863096.788:250): avc: denied { write } for pid=6237 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.335597][ T6243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.64'. [ 61.341771][ T40] audit: type=1400 audit(1764863096.898:251): avc: denied { mount } for pid=6242 comm="syz.0.64" name="/" dev="ramfs" ino=8954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 61.357176][ T5943] Bluetooth: hci0: unexpected subevent 0x19 length: 24 < 28 [ 61.388960][ T6242] Process accounting resumed [ 61.414525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 61.422529][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.65'. [ 61.424263][ T6250] tmpfs: Unknown parameter 'usrquoôa' [ 61.430581][ T1155] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.430651][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.65'. [ 61.439047][ T1155] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.442533][ T1155] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.445684][ T1155] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.463568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.498086][ T40] audit: type=1400 audit(1764863097.058:252): avc: denied { create } for pid=6253 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.513345][ T40] audit: type=1400 audit(1764863097.068:253): avc: denied { bind } for pid=6253 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.523521][ T40] audit: type=1400 audit(1764863097.068:254): avc: denied { setopt } for pid=6253 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.530751][ T40] audit: type=1400 audit(1764863097.068:255): avc: denied { write } for pid=6253 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.772635][ T6274] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.893611][ T5943] Bluetooth: hci0: command tx timeout [ 61.893664][ T5951] Bluetooth: hci3: command tx timeout [ 61.901382][ T5950] Bluetooth: hci1: command tx timeout [ 61.903899][ T5950] Bluetooth: hci2: command tx timeout [ 62.396396][ T6288] ======================================================= [ 62.396396][ T6288] WARNING: The mand mount option has been deprecated and [ 62.396396][ T6288] and is ignored by this kernel. Remove the mand [ 62.396396][ T6288] option from the mount to silence this warning. [ 62.396396][ T6288] ======================================================= [ 62.826207][ T6318] netlink: 'syz.2.86': attribute type 2 has an invalid length. [ 62.936846][ T6323] binder_alloc: 6322: binder_alloc_buf, no vma [ 63.108298][ T6329] tmpfs: Unknown parameter 'in32' [ 63.384567][ T6331] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 63.388310][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 63.510853][ T6336] binder: 6335:6336 ioctl c018620c 2000000000c0 returned -22 [ 63.770849][ T6334] cgroup: fork rejected by pids controller in /syz0 [ 64.044615][ T6389] netlink: 'syz.2.98': attribute type 1 has an invalid length. [ 64.047924][ T6389] netlink: 'syz.2.98': attribute type 1 has an invalid length. [ 64.055244][ T6389] netlink: 'syz.2.98': attribute type 11 has an invalid length. [ 64.058475][ T6389] netlink: 44 bytes leftover after parsing attributes in process `syz.2.98'. [ 64.073468][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.223511][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 64.226412][ T34] usb 8-1: too many configurations: 193, using maximum allowed: 8 [ 64.231097][ T34] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 240 [ 64.234904][ T34] usb 8-1: can't read configurations, error -22 [ 64.363534][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.513550][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 64.516566][ T34] usb 8-1: too many configurations: 193, using maximum allowed: 8 [ 64.520839][ T34] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 240 [ 64.526237][ T34] usb 8-1: can't read configurations, error -22 [ 64.529922][ T34] usb usb8-port1: attempt power cycle [ 64.633914][ T6025] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.784350][ T6025] usb 5-1: Using ep0 maxpacket: 16 [ 64.788176][ T6025] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.792552][ T6025] usb 5-1: config 0 has no interfaces? [ 64.794924][ T6025] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.798727][ T6025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.804720][ T6025] usb 5-1: config 0 descriptor?? [ 64.873542][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 64.894315][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 64.897229][ T34] usb 8-1: too many configurations: 193, using maximum allowed: 8 [ 64.901504][ T34] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 240 [ 64.905988][ T34] usb 8-1: can't read configurations, error -22 [ 65.009943][ T6392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.014114][ T6392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.043528][ T34] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 65.063938][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 65.068102][ T34] usb 8-1: too many configurations: 193, using maximum allowed: 8 [ 65.071997][ T34] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 240 [ 65.075568][ T34] usb 8-1: can't read configurations, error -22 [ 65.078274][ T34] usb usb8-port1: unable to enumerate USB device [ 65.085075][ T6025] usb 5-1: USB disconnect, device number 3 [ 65.817536][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 65.817553][ T40] audit: type=1400 audit(1764863101.378:322): avc: denied { read append } for pid=6399 comm="syz.0.101" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 65.830502][ T40] audit: type=1400 audit(1764863101.388:323): avc: denied { open } for pid=6399 comm="syz.0.101" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 65.841322][ T40] audit: type=1400 audit(1764863101.388:324): avc: denied { ioctl } for pid=6399 comm="syz.0.101" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x6409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 65.852766][ T40] audit: type=1400 audit(1764863101.388:325): avc: denied { create } for pid=6399 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.896980][ T40] audit: type=1400 audit(1764863101.458:326): avc: denied { read } for pid=6401 comm="syz.0.102" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.907181][ T40] audit: type=1400 audit(1764863101.458:327): avc: denied { open } for pid=6401 comm="syz.0.102" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.917586][ T40] audit: type=1400 audit(1764863101.458:328): avc: denied { ioctl } for pid=6401 comm="syz.0.102" path="/dev/input/event0" dev="devtmpfs" ino=941 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.149496][ T6414] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 66.244910][ T40] audit: type=1400 audit(1764863101.808:329): avc: denied { map_create } for pid=6418 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.250715][ T40] audit: type=1400 audit(1764863101.808:330): avc: denied { map_read map_write } for pid=6418 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.310280][ T40] audit: type=1400 audit(1764863101.868:331): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.596335][ T6431] netlink: 700 bytes leftover after parsing attributes in process `syz.2.111'. [ 66.887682][ T6433] cgroup: fork rejected by pids controller in /syz2 [ 66.924365][ T6467] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.133487][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 67.263478][ T24] usb 5-1: device descriptor read/64, error -71 [ 67.285186][ T6499] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 67.489666][ T6520] dlm: no local IP address has been set [ 67.491606][ T6520] dlm: cannot start dlm midcomms -107 [ 67.513566][ T24] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 67.643561][ T24] usb 5-1: device descriptor read/64, error -71 [ 67.723606][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 67.753837][ T24] usb usb5-port1: attempt power cycle [ 67.884973][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 67.888509][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.891817][ T9] usb 8-1: config 0 has no interfaces? [ 67.894212][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 67.897299][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.902786][ T9] usb 8-1: config 0 descriptor?? [ 68.109537][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.113813][ T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 68.115086][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.122789][ T9] usb 8-1: USB disconnect, device number 6 [ 68.133993][ T24] usb 5-1: device descriptor read/8, error -71 [ 68.207394][ T6545] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 68.380126][ T6547] ptrace attach of "/syz-executor exec"[5940] was attempted by "/syz-executor exec"[6547] [ 68.384326][ T24] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 68.403986][ T24] usb 5-1: device descriptor read/8, error -71 [ 68.525063][ T24] usb usb5-port1: unable to enumerate USB device [ 68.553805][ T6563] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 68.598311][ T6566] Bluetooth: MGMT ver 1.23 [ 68.673340][ T5950] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 68.676275][ T5950] Bluetooth: Wrong link type (-22) [ 68.678426][ T5950] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 68.681052][ T5950] Bluetooth: Wrong link type (-22) [ 68.683223][ T5950] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 68.686616][ T5950] Bluetooth: Wrong link type (-22) [ 68.694018][ T5950] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 69.093486][ T6025] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 69.111854][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 69.154314][ T6597] netlink: 'syz.3.143': attribute type 1 has an invalid length. [ 69.157716][ T6597] netlink: 228 bytes leftover after parsing attributes in process `syz.3.143'. [ 69.257720][ T6568] ------------[ cut here ]------------ [ 69.259459][ T6568] WARNING: mm/page_alloc.c:5159 at __alloc_frozen_pages_noprof+0x309/0x2440, CPU#0: syz.2.136/6568 [ 69.262766][ T6568] Modules linked in: [ 69.264202][ T6568] CPU: 0 UID: 0 PID: 6568 Comm: syz.2.136 Not tainted syzkaller #0 PREEMPT(full) [ 69.267679][ T6568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.270998][ T6568] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2440 [ 69.273096][ T6568] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d1 cd 4b 09 83 fe 0a 0f 86 0c fe ff ff 80 3d 4d 08 55 0e 00 75 0b c6 05 44 08 55 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 69.280002][ T6568] RSP: 0018:ffffc900066179f8 EFLAGS: 00010246 [ 69.282525][ T6568] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 69.285932][ T6568] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 69.289181][ T6568] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009 [ 69.292490][ T6568] R10: 0000000000000013 R11: 00000000ffffffff R12: 0000000000040cc0 [ 69.295888][ T6568] R13: 1ffff92000cc2f55 R14: ffffffff9abb3944 R15: 0000000000000013 [ 69.299189][ T6568] FS: 00007f9a3afe66c0(0000) GS:ffff8880d6983000(0000) knlGS:0000000000000000 [ 69.302885][ T6568] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.305777][ T6568] CR2: 00002000000044c0 CR3: 00000000611fd000 CR4: 0000000000352ef0 [ 69.309187][ T6568] DR0: 0000000000000000 DR1: 00000000000000d8 DR2: 0000000000000000 [ 69.312615][ T6568] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 69.316136][ T6568] Call Trace: [ 69.317592][ T6568] [ 69.318875][ T6568] ? find_held_lock+0x2b/0x80 [ 69.320799][ T6568] ? avc_has_extended_perms+0x33a/0x1090 [ 69.323241][ T6568] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 69.325989][ T6568] ? avc_has_extended_perms+0x47c/0x1090 [ 69.328208][ T6568] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 69.330378][ T6568] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.332352][ T6568] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.334726][ T6568] ? policy_nodemask+0xea/0x4e0 [ 69.336569][ T6568] alloc_pages_mpol+0x1fb/0x550 [ 69.338390][ T6568] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 69.340059][ T6568] ___kmalloc_large_node+0x130/0x1a0 [ 69.341738][ T6568] __kmalloc_large_node_noprof+0x1c/0x70 [ 69.343662][ T6568] ? __might_fault+0xe3/0x190 [ 69.345111][ T6568] __kmalloc_noprof.cold+0xc/0x62 [ 69.346723][ T6568] ? raw_alloc_io_data+0x12c/0x1a0 [ 69.348638][ T6568] ? raw_alloc_io_data+0x12c/0x1a0 [ 69.350450][ T6568] raw_alloc_io_data+0x12c/0x1a0 [ 69.352017][ T6568] raw_ioctl+0x628/0x2bf0 [ 69.353535][ T6568] ? __pfx_raw_ioctl+0x10/0x10 [ 69.355039][ T6568] ? selinux_file_ioctl+0xb4/0x270 [ 69.356640][ T6568] ? __pfx_raw_ioctl+0x10/0x10 [ 69.358214][ T6568] __x64_sys_ioctl+0x18e/0x210 [ 69.359729][ T6568] do_syscall_64+0xcd/0xf80 [ 69.361147][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.362982][ T6568] RIP: 0033:0x7f9a3a18f7c9 [ 69.364491][ T6568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.370381][ T6568] RSP: 002b:00007f9a3afe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.372941][ T6568] RAX: ffffffffffffffda RBX: 00007f9a3a3e5fa0 RCX: 00007f9a3a18f7c9 [ 69.375474][ T6568] RDX: 00002000000000c0 RSI: 00000000c0085508 RDI: 0000000000000006 [ 69.377929][ T6568] RBP: 00007f9a3a213f91 R08: 0000000000000000 R09: 0000000000000000 [ 69.380349][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.382791][ T6568] R13: 00007f9a3a3e6038 R14: 00007f9a3a3e5fa0 R15: 00007fff2af92728 [ 69.385309][ T6568] [ 69.386296][ T6568] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 69.388539][ T6568] CPU: 0 UID: 0 PID: 6568 Comm: syz.2.136 Not tainted syzkaller #0 PREEMPT(full) [ 69.391360][ T6568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.394656][ T6568] Call Trace: [ 69.395733][ T6568] [ 69.396674][ T6568] dump_stack_lvl+0x3d/0x1f0 [ 69.398122][ T6568] vpanic+0x640/0x6f0 [ 69.399391][ T6568] ? __alloc_frozen_pages_noprof+0x309/0x2440 [ 69.401252][ T6568] panic+0xca/0xd0 [ 69.402439][ T6568] ? __pfx_panic+0x10/0x10 [ 69.403833][ T6568] ? check_panic_on_warn+0x1f/0xb0 [ 69.405402][ T6568] check_panic_on_warn+0xab/0xb0 [ 69.406942][ T6568] __warn+0x108/0x3c0 [ 69.408218][ T6568] __report_bug+0x2a0/0x520 [ 69.409678][ T6568] ? __alloc_frozen_pages_noprof+0x309/0x2440 [ 69.411594][ T6568] ? __pfx___report_bug+0x10/0x10 [ 69.413219][ T6568] ? __kernel_text_address+0xd/0x40 [ 69.414932][ T6568] ? unwind_get_return_address+0x59/0xa0 [ 69.416737][ T6568] ? arch_stack_walk+0xa6/0x100 [ 69.418297][ T6568] ? __alloc_frozen_pages_noprof+0x309/0x2440 [ 69.420218][ T6568] report_bug+0xb2/0x220 [ 69.421574][ T6568] ? __alloc_frozen_pages_noprof+0x309/0x2440 [ 69.423528][ T6568] handle_bug+0x127/0x260 [ 69.424893][ T6568] exc_invalid_op+0x17/0x50 [ 69.426370][ T6568] asm_exc_invalid_op+0x1a/0x20 [ 69.427894][ T6568] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2440 [ 69.429932][ T6568] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d1 cd 4b 09 83 fe 0a 0f 86 0c fe ff ff 80 3d 4d 08 55 0e 00 75 0b c6 05 44 08 55 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 69.435762][ T6568] RSP: 0018:ffffc900066179f8 EFLAGS: 00010246 [ 69.437649][ T6568] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 69.440088][ T6568] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 69.442569][ T6568] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009 [ 69.445041][ T6568] R10: 0000000000000013 R11: 00000000ffffffff R12: 0000000000040cc0 [ 69.447502][ T6568] R13: 1ffff92000cc2f55 R14: ffffffff9abb3944 R15: 0000000000000013 [ 69.449927][ T6568] ? find_held_lock+0x2b/0x80 [ 69.451399][ T6568] ? avc_has_extended_perms+0x33a/0x1090 [ 69.453147][ T6568] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 69.455092][ T6568] ? avc_has_extended_perms+0x47c/0x1090 [ 69.456906][ T6568] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 69.458872][ T6568] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.460504][ T6568] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.462372][ T6568] ? policy_nodemask+0xea/0x4e0 [ 69.463908][ T6568] alloc_pages_mpol+0x1fb/0x550 [ 69.465432][ T6568] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 69.467127][ T6568] ___kmalloc_large_node+0x130/0x1a0 [ 69.468754][ T6568] __kmalloc_large_node_noprof+0x1c/0x70 [ 69.470485][ T6568] ? __might_fault+0xe3/0x190 [ 69.471954][ T6568] __kmalloc_noprof.cold+0xc/0x62 [ 69.473536][ T6568] ? raw_alloc_io_data+0x12c/0x1a0 [ 69.475143][ T6568] ? raw_alloc_io_data+0x12c/0x1a0 [ 69.476738][ T6568] raw_alloc_io_data+0x12c/0x1a0 [ 69.478303][ T6568] raw_ioctl+0x628/0x2bf0 [ 69.479679][ T6568] ? __pfx_raw_ioctl+0x10/0x10 [ 69.481194][ T6568] ? selinux_file_ioctl+0xb4/0x270 [ 69.482825][ T6568] ? __pfx_raw_ioctl+0x10/0x10 [ 69.484350][ T6568] __x64_sys_ioctl+0x18e/0x210 [ 69.485868][ T6568] do_syscall_64+0xcd/0xf80 [ 69.487328][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.489183][ T6568] RIP: 0033:0x7f9a3a18f7c9 [ 69.490595][ T6568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.496537][ T6568] RSP: 002b:00007f9a3afe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.499106][ T6568] RAX: ffffffffffffffda RBX: 00007f9a3a3e5fa0 RCX: 00007f9a3a18f7c9 [ 69.501648][ T6568] RDX: 00002000000000c0 RSI: 00000000c0085508 RDI: 0000000000000006 [ 69.504165][ T6568] RBP: 00007f9a3a213f91 R08: 0000000000000000 R09: 0000000000000000 [ 69.506641][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.509053][ T6568] R13: 00007f9a3a3e6038 R14: 00007f9a3a3e5fa0 R15: 00007fff2af92728 [ 69.511529][ T6568] [ 69.513121][ T6568] Kernel Offset: disabled [ 69.514497][ T6568] Rebooting in 86400 seconds..