last executing test programs: 9m41.111595552s ago: executing program 32 (id=260): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x6e23, 0xffffffff, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0)="e8", 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f0000000000)="208a94057a775c1b76f05504a09ee132c2595469b18f63ec54de9facecb972ea109ebbffff7a81956287873190bc642c0b798682e3b2fa6eea94", 0x3a}, {&(0x7f0000000300)="222b08b90690dbbeeb050e2fe9c1e075ff2ddb241e3477f015700a94f69314959511ebe417d36a41ebb9f8a9eb6c6e46aaf6e65be52250c813b6f919e260bbe8d855acf165b4888db1afb18694bcc858651f9e2c774295686afe1fd62c3e71074ab6d4a82b250116b505c808c903dc97d865952cadbda37b95a560d1f00048a47fc789", 0x83}, {&(0x7f0000002f40)="d667301bd1d1849d2ed9ee986a446dea6ddf48d9a3209415e30258227da4df470cbcd6f3511ca7e001220e6ca9b07fce7f082de3c4bb263b78e42da8ab9cbeecde70fa7977de1988de2094ff483ee62a485d0271f7c2c1ded4a5858e090abf701d6f5ec78b442ef52a73544f5173bd7a9d79db8fbbb6956240a46a6a50df4128ac0e8cdc3c8f3821bb0408a07f5319ac61c303d8235939d3f17a23bdc1de478e09245ebe7828368152e74708d69dfc93d58c73d0d2b07f0528a7e05a67e739020a5790b1d9bbaab1e96e8debd205235c1a9fc1cfd60d76fb6bbbc7a2da4116c956eef8bb15156ee90324b598db7f06ecd38a6b0772f793c4baf172aaf595f890715ada1928d016d3890d73bc6842edd1bc33fdda5398a0ab1301fe7311ef8858c3bf68b81deab9daf5a6cbf396d62e7806f7f0e6b0b7208270d0e3598b4861796d876423caf80cc75b0699c43bc2c94fb3702ddcaafefa637e23504c474b4248fe4887788dad66d4e88429e5cff282ff3b27feb30666b29bcadf617b3db6f1e4848a2041fbecf689423a256876740e7263748c520facd3eec8edda43c109e81e27d91f1e4e13af3e738f5b557f1a32b13f99874b1257c7e36e0b5a32187459fc93500e08325937b196e40c0c65e06dbbe5bd52fe9b6db42b350c9a96a4d996ff1a05a5cffebfcf56716ae9a3c7f9768db96b5e034f0ba8837e9936a17df353702dbf4463b15d64010a65e75805dbb749598511d3330b30d1bc61631fadcdf7755e6de3ae61e855680479219d9f89311ec02dbd878f49292ae1405ca09cc1fc2f8ebbfcb8ee79bbfd1948357986390605f5032cc4f4baf8556cdbce22fa90059fb6e38bfeae2f9b283d6dbbbb90b536b02746212a9822c249d641a6a68aaf3a8fbb111b4fcfad46b3bed94c0a2bbd8471edb26ee5fd21276e6e6fe3d0053461ede35eee03312834b20e5ded2281a834317b2a4a17e10ff283e3f91e65603f8b50219e61138f414cf257c25baba5d6eef6756ee0c9bfc8bc7856004f5ceca6081aca71998f8ed38e70303ead19eabd86f7c21eddc8293892c1d19528aa820f8780b11829d72b858dfa6ac6a10d3f798629fda18f171431628ca9eabf4e3f3fddc2a1e936ea8edebc1940494c3525d12a1115203db9bcd7e4c024cc1cfbdeb553880cb9e9d39dfd322c4f97d8381fa3aed0bafac36eb0813e75ee8bf32b0e7fc9785fcf1d55950b8e8263df973665e762c2d3b4bedf974fdbaf2a3ce0cdaa190df9708ffe3e1452fcb8efa2343d7db8274086abf7cc07f02fb683a233d8538d37f2f852d639dd0ae9837508341e92ce84145d113a98022b8cb3d55fa9346ec4f0327903a3d8c447e4db070ddfed58e33fc6781f51677941dd17d2b83e996197bb738196b0dbb5b552feb27b69c6d1fa196c8f56c4a83b61c2565e0a816e23d2dcadd0e23d2cdcd97606502ceba7c4b4c1c71a39633c2ef369fb06c4f9ba8199761a790baac2714ce2f871b6f7242fadfac37ff3e8d257430af226dbe0f10ebbd04417baf03b798b2e562b0d70e3f455430df46bbc38df4580b1c58639562b7314dc8ffe5e74cb148348dad6e4f907c6c823fd70a35160c5dd4ae3c6fe45045d5cc02fb76320c7ecb8df284bd98056dc37ce262d178e883e7ddef84c42d1ff7ae7b6fc8364e645c2ed48ffb91cb9115a922cf52517caf4d660555e432a2eaf986e3af8e90fe9c89d54c920911a39eaa47518799a2e3bfa8691ba1caeb4699d9273fad8936f2115c0f49cf11ec26a56e608a926f07caefcdd23c06e954c6efa32e7fcca7d5af5d07014d1b44b2c0216570357d81bf91e3cce5d5a006f924be74f05e2667b4df27e7be5c0be626f9f917090eb895ad5698b2dc438f9c113e3cb38c7c434188276a5e6b43a30d3f4caae94b39263f5821a730c4dffeb54b7f2f37cd5f5251d42e7be6c40eb78679378d0b29d117e1f1572a62ea12c339a252438e4896a0c345a312f1ddf1d9430fb24162e6f72e16d701ff8acaddcac4547b735a96444880f01b48bbb6acc75d1846274ad4aa1b0bff114678437dcd4f2e42b38dbd2f2fc127aacd68258c334f57a9016115a42efb7c8a738a34d7e06005ec453f89de5a777d9438df63f815c50eb3222c4d3faa6d05f76124477783e24f716f78dd800fbfc2959b9e56098c8a2b4df3d7e47450d05165c215d23ea305d809ac7078a7d5b7bf3be6520aa6468df5dea2e26167d02b7e3c6345b92b778fcfbd1364ce4128239358b1edd2c77b46287e4dee4a4561bf9c0bdd8683d1244b142189d8b428475a0215ff3ea129d2cd6fc7ba7b444ef2e895a71db276846af7121151146cc171d28e287be882712e22abe54d132a8085ef506b275390f06f874220adfe773862cd1a8eaab2602d9e91d283c0c79b658af4448e0fa0c6d3053ae27b0d6888adaa00e34bd29eacc12b2b8ebebf201fed062a063db72b3cc3c8a333a7eee73d28af952d79094f08376cadf81b5a18bc6c413bf0662810ad537cd9f22ebac0a7acf7d0bb6a538ff8d76315bdd08708abace2513c71d301a3bbfdcf3d16377abb9402e1deedefa7527437b4a976a3e3c1f031789b7ed45f6dbc6131c49fa7da221ef1172d9f88728f883d63a6652b73ef60a02fee83269429d9a0c00d08217c6e16ed475ee912eed39f15e70b45970a1e31b9f6ebe5e2e5144130dbf22e3cbac96aa6b7c7cd8ecc0e727a81f10b286a1325571f3926db583c120d3f50e8a8c99f7dd20e06cac9829743fd9ed3fd19f9279d67cafeb1cf6f826ed2da00f1bb8e26edc76f22c074d3af8e597e627f762739a08fab681daebca1700acd7dc23d07b6b0b04bcd293f952d1606d865751ad5de5b3f76a71cf3c42cd2fbb1197b75e05cf4ed31474921debd74a0852019699f7ac2b8e6f1f1e2970db6269158616e3437cb7e0a0bf9da089dd6fb55684e775d2eea9f7f7c5278248f32d44da0fea62dc21c77bf1cc45e484773717ff4f6bbe509cc8c071e8eb3cfea137a8cd515ee0903ff2072c58a118cada663dc1e00d015f0bef74ebd20fee51d76a4ede0b7b60fa1e3e96922c247ed8b5acf26aaa510ae22a98624e42b0347f785f23a4f047ff6ab3b48fa67eb14ae1fa76825bdaec6f30f012d6e19e4514d53cb8f11b06dd5ce116ef779e0edf06099653c4291cb7d0fcd19d66d163072eb581a757b9fb383e2f8ab830dc3d3f6312dcf92b6b2cae567883ca010b6f47cc0858cad58f90373820e41185a0541df63f1bb64de44da330155e7f931cf46e9f8b1c2af92f02d71f23d24c3ac22c4808f6828e1a54017918e213df57447c32516cc668a3f0d5725a475de7fbce88591805bebd0cc58fb07629a0348781544d50babb45d739eafb75391f19d4771721ebca75d29286d6c1e99a5e6505ce4a89bc5389b6590e2558b9bb9f3a0d62cacd85159453b4e6494ab77ffd36c74e80721b599ec9c93b6427f32cd23c0b3b46cad92c024e9a8af6a886f675b6b378d8e7f3e87c077652ddf1b2519fc488c573cc324ec79a29a574767f3ffdb65d35fc3c304b1ca313e70de86466a73c19e2aa50c816dd2ac7686c81da7084fbabc349f2c22432b0ef39f5b8474e55a4aa6db80771404831b715602fcab2f760c071bc4a151d2d49575d0006869ef2d571c02341a99770b4102027644bb92bcc02bb9d18131ff62f65f778d1f484ed189c29d7758422cd34eefb4183d03ffa55516d9ec59be5357acfa37ceeb645787348fb1372392704c397d8d083f32164ad89f3954091c62cdee8199cba0566523e06c56cea129ac33e0ddef59a2aa7649732d28a4c157842d92dc4d0ac26d9477928939365f69391b6c818a722788ff492adf32783c87a64ab1cece9d638c6e97ce30b19f1b2ce4eb9c85660de51be4013b05bd5621e0ab815793420d5709d7d94498a5a7b15e6f70f0dbd3817cb8fff098b5b93decf407601ceb7af6cec8e2514a22a7493d4bc9ab50bca2664e938612c8649b3ccddaef9394dbdf2bd11e1a16efecf50c353ab70f1737414d003583b58a6d5c852f72a3ec86d0c596593d5725ca840fb002bef19219a92a6cf4a774eee230b71a47edceca3c47f327aa3b45080f6a68a9404b79c825e1d47ad0315c50c903c6ab2fd5552fef399b0efa7c56e9e70b63c9d3714554733e992b59c1845aa8382f7bd57d902662ee2514fe1888f5f65ba2ba351d4364f9ebd7546d6c60dcefa7ce1e31fb1d868efb3141c5c97a9c909c415124d3d4df631f3aed371962bee4b2d95d6443b84a8c8edae1a99f0f94e767a295a77b25e6dfbc37ed7546ed445e2c9fc75d5b3b0c14a71e52b449dcb0a45d1266c0bd28f118bc45f36626145d88c7b12677b50c41107e9bcd9b589fde9f1f916e61ba44922dec23472fc0e97ffa4fb0c810e704f83d9805c7937aa95543a51259068d4540530da8e34d618d01d1ff133be245ea0095b904aee1d9f1cf95cdc13e2e5c60ea4b925aefd2c9b1511f1b2f0a0b13101f3df5f23cd4bf5eb36ccb37e134a6d09631f1afefba9d391705a0dce50bd2e44bb3fabbb86398931e1d35af87cdf250df0627065218fdcdee1cd0480c788864e06f21bab2c8c4e3a56ca0eee1a0b24757041bf37073ec04533bd9e05a7d97a1b3510ceadb339c3d531b4b718a870077a9286bd87d9c1fd882b2001c63ed3ba8c8c32cc70a5b09be8fdd9762ff309666978daf2945dbb392f78fe6c55eee66f7dacfd759b97fc4bde28e4a66cc435c90a8c6868c70d97f69cad45c75b35f0d3bac257fe97a40f79a2e08afe762168067f5c411198270836b420b0cd30f4d1dfd522bde0467ac3fb2c73479485077abf13acd381f534267ecca2430fa8f091de005c61abe2c0decd0913e14275444c22237468f42f2725874e910c9405753e88357770798091d11b2f39b1550dfa40d650df4de57b05fe877855ed45ff7659ccc9d17094ea09d6e05cd4875798847e2509ad233ac9af42515bca9334c1eb705d236809f2afdecdac5fb6e9f93c3cbb2fc14e1ea28349cc7f6e58b4ac756f81726ea975d70d6962515deee64ca418130a0a2b49a713466bbe6ae379ba594ea4e1cf592bee0ff0f46502383c137fa32c3466ae9fac480c2e273a2955797cb0ffba71d279178261fe904413286e21d3e74e41b586d5d6eb13e4be85aa86744bd518c7cace263dddc4d341f9f2d63a3bc660f161e71d16a9dc08d3b9ee59fc00583fd11b958f5aabbd2368bd9c5af5c494da01df1e951ddecf76cdad0eedc384b59ba6fcf5c46d66d2badc88e231256e49928e6652feae56aaa2394f2be5133258e0e0ab6f97d398a51b80d4310027e43d677082f61f9216a4ebf14d8777f84ab67f19e80c460714a52d88277d11480b597ac1428307ee59b15e1db9c3b84af96affea00fada29bcd3fd6141b3ad2855958f63d019dbf89c4540322af266132d9e6210fc47f5d49f95a51434f168d565731952111962f64db13a98bfd741ba591d4869767c4c5f82d00359efe16e", 0xf42}], 0x3) r3 = dup3(r1, r2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r5, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0x12, 0x40000) io_cancel(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x10, r6, &(0x7f00000003c0)="ffa8607a89f2a85fe6315121181315dbb168dc6ac158fecdbcc7ce212e55e0bf1a0cf62a2a97186cc1de7b19be45f62a6b479cb9a5997f4231b7960f603f111c02e8f33918f26ce1e6bc6982443c129d2aefa82302e7e548ab795ced4cdd2deb93037d972de313297c327a8ee5cfb03bc31ca0c97c152333d170ea927bdc53c97cea59c8a4d0a95b9a4e227f9a0ae93ce93372cee2d4278c811805dbcb4c3fe082f8fd3a1c52eca4ba1e380c1037ed2975b50d39b83343254de83950c43e13", 0xbf, 0x3, 0x0, 0x1, r3}, &(0x7f0000000480)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000001380)=0x40) ioctl$CDROM_GET_CAPABILITY(r0, 0x5331) 9m18.304776836s ago: executing program 33 (id=938): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback={0xfffffff5}, [@fragment={0x3b, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) 9m12.762557124s ago: executing program 34 (id=753): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="d4", 0x1, 0xf5, &(0x7f0000000200)={0xa, 0x4e23, 0x80000001, @loopback={0x1100000000000000}, 0x9}, 0x1c) 8m44.590675177s ago: executing program 35 (id=1472): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[r1, r1], 0x0, 0x2}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001e0020"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 8m40.733245784s ago: executing program 36 (id=1297): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8b20, &(0x7f0000000000)={'vlan0\x00', @random="c30014016800"}) write$binfmt_script(r0, &(0x7f0000000600), 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xa1, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ftruncate(r0, 0x5) 8m25.18415013s ago: executing program 37 (id=1500): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="e84cbc7032cef8fe9f038ef341e9cce4a471baad2c64db732bb3a4c023c2d43891595d7e0730c120", 0x28}, {&(0x7f0000000180)="62b1341fb256867a80141b6e7bbb00b5be3b158dd1d4494cb9e374630636", 0x1e}, {&(0x7f00000001c0)="510992c316a252c47a3f59e1263961f433533a311b428eae5dd58945695e41b3016f511559e15a1bd66e7d55ed613aab7019d6b10de19df422c59c026da11c42a5fb987dc496b97e18d1188f5aa475fcdce0b74e099f3159fc21dc394c86b65329c50d39ddaa35deaa", 0x69}], 0x3, &(0x7f0000000280)=[@ip_retopts={{0xfc, 0x0, 0x7, {[@cipso={0x86, 0x4f, 0x3, [{0x2, 0xa, "5e949133f8ae1be7"}, {0x0, 0x7, "d117027c5d"}, {0x7, 0xb, "a517bf19f4811ecbc3"}, {0x2, 0xc, "25b6196897b6af1dbb96"}, {0x6, 0x11, "205becf60402e183a67164b3f506bb"}, {0x7, 0x10, "705c8b879df6f622f83004f21726"}]}, @end, @noop, @ssrr={0x89, 0x7, 0x47, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x59, 0x2, [{0x2, 0xf, "f572e9f9c4c8bc66bb653258dc"}, {0x2, 0x12, "9de469f9acd73a9497b20c4b8fd4e2d4"}, {0x6, 0x10, "fece74641ff755049ba202b044cb"}, {0x1, 0xd, "2605d168be9e5bde367ab1"}, {0x6, 0xa, "5b5a8d87f248384a"}, {0x0, 0xb, "ba4316c3c9c6252aee"}]}, @timestamp_addr={0x44, 0x14, 0x54, 0x1, 0x4, [{@broadcast}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x50}]}, @timestamp={0x44, 0x24, 0xf0, 0x0, 0x7, [0x2, 0x80000000, 0x7, 0x6, 0x5, 0x9, 0x80000000, 0x1]}, @noop, @end, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x138}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000400)="c6b1bd2db57abbff558934295b01673f1f19c1433366639ee2d30aaae14d1e8ce2cc6ed0a8d922ad1478d6ee332b567cec5eb68ee10e5b415523a6d93b1508c365b00bb396b60cbde0d8c21529481fb9068282a889234ef8892ac4df136e2665b7b237611a5e3a92e7a7971aee1520b643854c50f6ee1ea32a440db3893c72c4561d55990e7e48de0c54d488c3da7250450039d544972633f0962692870e619f443bb5328fa7cbaad3aa55ca23a208c497e4e5f3c8ce58a2bee795ee27380b7e3e7ababfa9452900c1f0852042", 0xcd}], 0x1, &(0x7f0000000540)=[@ip_retopts={{0x9c, 0x0, 0x7, {[@cipso={0x86, 0x18, 0x0, [{0x5, 0x12, "11c60857b95886eb1c3be453cc14e43c"}]}, @lsrr={0x83, 0xf, 0xef, [@empty, @empty, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xc5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x80}, {@multicast2, 0x2ee6}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x200}]}, @lsrr={0x83, 0x7, 0xb8, [@remote]}, @ra={0x94, 0x4}, @noop, @cipso={0x86, 0x32, 0x3, [{0x6, 0x11, "cd67ff59884ce3d3f20a46fa7a267c"}, {0x1, 0x8, "fbe7fadfeda0"}, {0x6, 0xb, "215bdf27f6f9a30dca"}, {0x0, 0x8, "8ec794d2879d"}]}, @rr={0x7, 0x7, 0x1b, [@local]}, @end]}}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @generic={0xcc, 0xe, "c7e0a435fed66c0fef26ebde"}, @rr={0x7, 0x17, 0x64, [@empty, @empty, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x18}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x158}}, {{0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=[@ip_retopts={{0x100, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x63, 0x0, 0x0, [0x1d2, 0xdb0e, 0x8, 0x5]}, @timestamp_prespec={0x44, 0x14, 0x47, 0x3, 0x6, [{@loopback, 0x548}, {@multicast2, 0x3}]}, @noop, @timestamp={0x44, 0xc, 0x7, 0x0, 0x4, [0xd, 0xe701]}, @rr={0x7, 0x27, 0xa2, [@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0x21, 0x3, 0x3, [{@remote, 0x646c}, {@multicast2, 0x4}, {@loopback, 0x5}]}, @cipso={0x86, 0x44, 0x2, [{0x6, 0xe, "d4e12dce2024141c0459f946"}, {0x7, 0xf, "8ff8aabbb4f28aaae5363d447c"}, {0x1, 0xd, "b1c079f8d83880ea8fc3a8"}, {0x0, 0x5, "b03a8d"}, {0x0, 0xf, "a04ca3d3ae65fbda2f71e93ee5"}]}, @generic={0x44, 0xf, "181475fc5e294d46df121d170f"}, @timestamp={0x44, 0x8, 0xa3, 0x0, 0x2, [0x2]}, @ssrr={0x89, 0x1b, 0x28, [@private=0xa010102, @broadcast, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}], 0x130}}, {{&(0x7f0000000840)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000880)="a28a291aa180beae6921a640d98d7bb453b229c9a6f41e552cb66971253533396d4934a2a110aed2dda1b9204fb1bb2f7621d5d24eeaefe3e1a99c1fb96313d6f191285ca6d803efdc3434c7d89c293471273a0ccadad1dbeb97df1bf4d289c282ae5c02f49758aa40f2dca3719a90d76eab7e81e26e359056fb340196ea352d76f1d1299a208392727d157698a6465f56545d17c52956c8db9208b29bd608ba7f336194256e5e32590a93ed67f9b8abfb35955c3605fefcee5d458ba89336fdc12072a461a14fd296ab248af242453aaa4bb7fcdc7a94bb9cd3db", 0xdb}, {&(0x7f0000000980)="804a0c8e2e34b216e98a907105632a6cc20a1e152ad1017395b0afdf5baf7257c174fc1416ce27d331aed9a1dd8c662281e0d99a6a9eae91b61adeadda90d33bf3c8c00049b35f95ba14a6675dd146c1ea978bd5c511bc256305695f2be8aa003c51e34965200baa112486dd8b02bbe53c158756a0103a61dc8dbecaed54dd1911a6026ca4c74839aa621ce16028064302a7201fd2322a9fdb09029d43c1f7a1b629605d2676667f546406f9a18057f0dd1b0cd6b0af4d9c5c1e3307e1abf3a8f612bb3b283e44934a", 0xc9}, {&(0x7f0000000a80)="9661abe1caef83afa05b15b46709ee0efd1d984d30f6ef7754e07879ff729ea01dbf8381cbb6e850e41b6b65ed8fb646e5b266111100497bea57487f4d422198ad0b616d0765564a69b09bb3f8735729111d78a06920336b5c09e31f8ba4cc88afee3ac9204672c80791709cc602e4ccb0044a21a3f9a25c7d664f26d5b88bf42c4a1fdcd8ff154c99140243c4977f339788f4d1d6e2e30caaa7b892c88b47644c6db0bef98f070140564ebf4785eb1c9085c533c1de9fb0704291f90f46ae640ac6e259cd64592c354bbc668ed7198552855d397d6ff155c17343d872b8abbbbe9373b3d12c4b353074615562350da3195be36bc6ceac35", 0xf8}, {&(0x7f0000000b80)="518b385368ceba481ddd6839f547f319156f3511bc138b3435a44c9edfb194f26d5fa7fccbb16fb728259ea26ef8374fad0a556dd3a2b4a9b8af41a7b97a7e3ceff7600ccbbd7e58ac716854a692b0819f4729d4294a49e169288799b7df8e1ffae6527eea167917314b6456c9c8920fe21b7a021213578170c7e167e46c6832c06e5cae0956a346", 0x88}], 0x4, &(0x7f0000000c80)}}], 0x4, 0x10000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000140001000000000000000000021fc800", @ANYRES32=r1, @ANYBLOB="080002007f00000014000600060000000180"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 8m24.171572057s ago: executing program 38 (id=1511): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) dup(r0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) (async) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) (async) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) (async) 8m17.398517083s ago: executing program 39 (id=1551): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) shutdown(r1, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0xffffffff908811b9, 0xab2, 0x8, 0x0, 0x101, 0x0, 0x0, 0x0, 0x800}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffffff, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000040)={0x7f1, 0x84, 0xefcc, 0x925, 0x5, "f06fca79266e6c5e443b04683cc267a000", 0xe, 0x2}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r6, 0x0, 0x0) 8m14.665954629s ago: executing program 40 (id=1560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x3}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m59.849373899s ago: executing program 41 (id=1879): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) (async) sendmmsg(r0, &(0x7f000000ab00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002780)="1bccbab1292a07bf068fe6c82e507526732355fe70913c9adc92b63ca96c1f3d449a82f6c2a45051f88cd735c28c02772def52c704691b712a8a684970643206ff7620f4144d813c2bf73ace4a6f7bf8028b5a6c007ec4c93d6dba622456fdfd0a03", 0x62}, {&(0x7f0000002800)="73a138a1a21e6e6acbf2aec79a1922d59f69f7c543ee08558a95383053a5c06d8bd201dd461640097770a51cd7e2ad42e789cd188942270c79f989b8106fabaddfe0876be194a3baad0a2d67b7", 0x4d}, {&(0x7f0000002e40)="7cb57b8e6ebf456a0a0e4430da17472c344d9c4e3b673e6b09fc4696073f0ca9844e74195cdb4caed2248377d8ff8e1129569907a100"/72, 0x48}], 0x3}}], 0x1, 0x40001) 7m32.146431793s ago: executing program 42 (id=2449): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000100)={0x2c, r6, 0x201, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4884}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r9, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x70, r9, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x45}, 0x80c) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r11, 0x1, 0x70bd2b, 0x6, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 7m31.53831427s ago: executing program 43 (id=2453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\a\x00', @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000100080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f0000000540)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioperm(0x0, 0x8001, 0x9) ioperm(0x0, 0x80, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r5, 0x3, 0xfffffffffffffffa, 0x4003}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r6, 0x100, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {}, {0xf, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @broadcast}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r11 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) shmctl$SHM_STAT(r11, 0xd, &(0x7f0000000080)=""/49) getdents(r6, 0x0, 0x18) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'virt_wifi0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x5, 0x4, 0x88, 0xf6, 0x5, 0x6, 0x3, 0x7, 0x5, [0xa, 0x9, 0x0, 0x5, 0x268, 0x7, 0x6, 0x40], [0x6]}}) 7m15.382861187s ago: executing program 44 (id=2782): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x200) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0xd, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000600)={{&(0x7f0000000580)={'Accelerator\x00', {}, {&(0x7f0000000240)={'Accelerator\x00', {&(0x7f00000004c0)=@adf_hex={@bank={'Bank', '4', 'InterruptCoalescingNumResponses\x00'}, {0x637}, {&(0x7f0000000340)=@adf_dec={@normal='NumberDcInstances\x00', {0x3}}}}}}}}}, 0x8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800005, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x80, 0x8000, 0x948f, 0xb1f, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0xe31, 0xd2, 0x29, 0x0, @broadcast, @multicast2}}}}) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 6m51.720407397s ago: executing program 45 (id=2922): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x418840, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x8, 0x3, 0x380000000000000}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0xc0, 0x531, 0x8, @dev={0xfe, 0x80, '\x00', 0x38}, @local, 0x7, 0x7800, 0x7ff, 0x64e}}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000015c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001580)={&(0x7f00000001c0)={0x13a8, 0x12, 0x800, 0x70bd28, 0x25dfdbfc, {0x3, 0x6, 0x4, 0x2, {0x4e23, 0x4e20, [0xb0, 0x8, 0xe, 0x1000], [0x42d, 0x8, 0xbb, 0x7b], r2, [0x9, 0x8]}, 0x77, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "dc4053b06bf7a3a03c348af440ac78efb7a7f4421579afee8eacf979d21eae4b88b12b68fb0fff72d639e5a07655d6bbac112dfe20813f28ec8b07387d9f783df48333a5f2cddbdc7dc7a03d48fd8700555058f16ba5a3dc0a112bf54a10413bc6a52023413421a2de211266a8654adb3fd0f9ed9709b28a85124f13ff573792aae7dfc5f6de3b2d5d6c4ae9be18da0e90f07be7467e730447f9a1ad07ec630f7fe8c1c1fe7edb29e9cb171e8d524f8b314d46629326818935e2f3bd6cbc39d4a1883af5860336c2f51ec47de094c369e5a3ec7d44298b02ac54243d4e394bbaf042b12963330ec8d13b61ee48463cfbdd97a36e5fbc7a16"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "48493ea34c0a417f2e7fb3b0bd20b4c86af9191428079ed4821123e656f321510273e038f3254abd16ce323231884a93286fa2c8478d96d79dccb0ea239920d22218b9633a1fc24732c1a6b87235022964807822b49eec38eecd3fc93e960869dd36bcff72594320ae8763f423190265bffb8733094d4ada5780606357d70b64171764c129fdeb950d5192f0ca"}, @INET_DIAG_REQ_BYTECODE={0x68, 0x1, "bc09bcf689949f40a4a8b5a24cfb3feeccfef145f57fd78d8b36fa5230b54a739211d0fd03b4b65f607090f84ebd09f0905d254709563d45c40dfa9e9b4da8b1a48d4bf79d1ff3b521d67e900d1733a3ab93de9533766865c7bd6587bcdae5b9e2fe42ca"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x64, 0x1, "a072909157948f8a29f08a9ed78de96aa158fa47f7d501d03c4149a517e09f395bf5a015a2196f67953249e1725de24d4c4e2037deeb0bdfbf1fc875f3205f1c1e0e2c6654014459db10fc8e564b9cd97c6a45a9afcb02a9091bcddc047921fb"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "084004fa10a587933604fd32e34cbee96c2526cdaed22db2db91d7b5969244f72187badc89c1acbd77558a0c8251d7c5a357b3ecad037e4f381da560c73dd5d8343a361faa67409ceaccd18a1423882757956b7b8465e509b24a091ee1f8150f5447fdb35792122fbb7b3e80af9858422645a88dc66246729abee8a316d15c7fda37740e399f059c5674aba24373f8ca441467138739d4a7448b3ae1ea436d6bd7d03922b2ccee546467c90dfaf69d7694ee2e737aaf689a755ea76c148497979ce47db7ff6feb1c0b64bdb784bbeb3e151096e6798547d3d639eb04037729e7481a4b53866d"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "20c58f9fbed2292b39"}]}, 0x13a8}, 0x1, 0x0, 0x0, 0x20040040}, 0x80) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000000)={0x49, 0x0, 0x8, 0x6}) 5m33.249253221s ago: executing program 1 (id=4425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000070500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x0) 5m33.179722402s ago: executing program 1 (id=4427): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x4, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}}, 0x20000054) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x222, 0x0, 0x5}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18010300000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000007000000850000000600"/64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0xf4240}, 0x94) 5m33.129651171s ago: executing program 1 (id=4430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010129bd7000fddbdf25310000000500360000000000050033000b0000000a0001007770616e31000000050035"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xe6, 0xffffffffffffffff, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x20004001) 5m33.080066051s ago: executing program 1 (id=4432): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x800, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file0\x00'}) syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) ioctl$CDROMREADTOCENTRY(r0, 0x5323, 0x0) 5m33.018014185s ago: executing program 1 (id=4435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000305003f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x0) 5m32.279262718s ago: executing program 1 (id=4445): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x1, 0x1) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c0000000400000004000000090000", @ANYRESOCT=r1], 0x48) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000009441"]) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0xf, 0x4) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x2002, 0x3, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @empty, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x9}}}}}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000240)=0x1f, 0x4) close_range(r4, r0, 0x2) 5m32.191281737s ago: executing program 46 (id=4445): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x1, 0x1) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c0000000400000004000000090000", @ANYRESOCT=r1], 0x48) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000009441"]) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0xf, 0x4) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x2002, 0x3, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @empty, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x9}}}}}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000240)=0x1f, 0x4) close_range(r4, r0, 0x2) 5m6.849752604s ago: executing program 8 (id=4745): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0xffffff97) 5m6.659829041s ago: executing program 8 (id=4748): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848", 0x14}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1001004, 0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x8000000e51, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m6.409499116s ago: executing program 8 (id=4753): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x6, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000802, &(0x7f0000000280)={[{@userxattr}, {@redirect_dir_follow}]}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x73428351608bd6aa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@deltaction={0x28, 0x31, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x4008094) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f0000000200)={0x2c, 0xa, r4, 0x1d, r8}, 0x10) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100001040400"/20, @ANYRES32=0x0, @ANYBLOB="03050000000000002000128009000100766c616e000003001000028004000480060001000300000008000500", @ANYRES32=r4, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 5m6.267048189s ago: executing program 8 (id=4757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x5c, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x20040040) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848", 0x14}], 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1001004, 0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x8000000e51, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m6.139700283s ago: executing program 8 (id=4762): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000280)) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0xe8) sendto$phonet(r1, &(0x7f0000000440)="cf51bd737eb857f4107d9e43f67742a278b9030aca1929c27059ca0714b98041dc5a5ed2110f7958421cdef30e1650a22f5be82478f01f87437c7e5e855fbb0fb52c3b2f32c8c35dd132740243ba338cf92926439eb093980d609bba6b0b99ed0d7ecbad12f836ded50ba5c4b6959d6a68cef10422dc38881849004d1e8df5ccf661e03881ea388efa62db6cc51255b70cb0d90f7526d085927f7f", 0x9b, 0x48000, 0x0, 0x0) 5m6.139385546s ago: executing program 8 (id=4763): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848", 0x14}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1001004, 0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x8000000e51, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4) 4m51.079315537s ago: executing program 47 (id=4763): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848", 0x14}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1001004, 0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x8000000e51, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4) 4m46.059409447s ago: executing program 7 (id=4920): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a32000000002800048008000240000000000800014000000005140003007665e868315f6d6163768e61700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='caif0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x50, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'dvmrp1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 4m46.059114207s ago: executing program 7 (id=4921): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) rmdir(&(0x7f0000000200)='./file0\x00') write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000200)={'dac02\x00', [0x4f27, 0x7, 0x5, 0x1, 0x4, 0xcc9, 0xfff, 0x10001, 0x4005, 0x104, 0x89, 0x2, 0xfffffffb, 0x4001, 0x8, 0xe1cb, 0x0, 0x1a449, 0x2, 0x4, 0x8, 0xfff7fffd, 0x2, 0x20001e56, 0x264, 0x6, 0x3c, 0xffffffff, 0x92, 0x7ffffff, 0xfffffff9]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000340)='ib_mad_recv_done_handler\x00', r4, 0x0, 0x7}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1]) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) ptrace$setopts(0x4206, r6, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010002000000fcffff7f00000000040000000c000200810000000400000004000b"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 4m45.969615581s ago: executing program 7 (id=4922): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x70bd29, 0x25dfdbfc, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x4e22, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x60, 0x33, 0x0, 0xffffffffffffffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {0x0, 0x10}, 0x70bd2c, 0xfffffffc, 0x2}, 0x0, 0x1}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8) sendto$inet6(r8, &(0x7f00000000c0)="64e9", 0x2, 0x80, &(0x7f0000000080)={0xa, 0x4e22, 0x926e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) recvmmsg(r7, &(0x7f0000000280)=[{{&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000180)=""/131, 0x83}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/178, 0xb2}, {0x0}, {0x0}, {0x0}], 0x6, &(0x7f0000001880)=""/238, 0xee}, 0x1}], 0x1, 0x40, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0xfd45}}, 0x0) (async) write$nci(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000fe6000/0x2000)=nil}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000021000100000000000000000002002000000000000d000000080002"], 0x44}}, 0x20000040) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="6766f30f2a5a38f2a6672667660f3a40ef1267410f01f8f344a5dae9660fc7b000000080c46229a63e0f01f866450ffcba92b50000", 0x35}], 0x1, 0x59, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000ff5000/0x2000)=nil}) (async) r10 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r10, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '\xbc/'}, {0x20, '/dev/kvm\x00'}, {0x20, ':.+!'}], 0xa, "b8fd6a51c192d1ff93543b797aa5763fab582ef3af7c9fcbd503a96c00a280c729076538b1459f667dd7b4d6084b5b84b06081352cbc9281a3870d91db4d5fc21e53e6c7e883cc4ca8fdedd4bf3f11f2d649a4e949a97a88abda8d12a56d9abcc6609f69"}, 0x8b) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000013c0), 0x400, 0x0) write$bt_hci(r11, &(0x7f0000001400)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x3, 0x6, 0x8001, 0x100, 0x8, 0x8}}}, 0x12) 4m45.83984571s ago: executing program 7 (id=4923): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000100)='./file0\x00') setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x21, 0x7}, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf0, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0x2, 0x4, 0x18}}, 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x21, 0x7}, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf0, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0x2, 0x4, 0x18}}, 0xf0}}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 4m45.839698044s ago: executing program 7 (id=4924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000305000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x0) 4m45.224535961s ago: executing program 7 (id=4941): socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}, 0x1, 0x3000000}, 0x0) 4m45.174920822s ago: executing program 48 (id=4941): socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}, 0x1, 0x3000000}, 0x0) 3m37.139175498s ago: executing program 0 (id=5847): statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100, 0x2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000000c0)=@nullb, r0, &(0x7f0000000280)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000040)="7b712b59c6e9edc5372d310fea52477c66eeaec1167853947563fb161d956a04d241ff790044dce8ba6e89cc21fae2e62c6318a93b384b510b67b0ed90c93ee7e1a1820fd093a3f8195dfcabad35d75a952465869fad46785857e7ac", 0x5c) 3m37.138073353s ago: executing program 0 (id=5848): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xb, 0x20002f7}) io_uring_setup(0xb87, &(0x7f0000000000)={0x0, 0x77dc, 0x283, 0x1, 0x158}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e0a0760208023000204000aeb2adae5213c84e2eb6a3a247ed9fb0b21519401a00d8e9712fccb8968aa0f7c8eaffee8f34210cf9fda442e4d788ca91d4aa7cc9dc183aa7053f323cfe144fa2353e002f96a8b3607c028eb8e3f1782315d113c0830c4473a38dc7c7c449c1d988611fb554402c1ba12a1710cf829f9a35e0ab51c804547972050c41885d7285a472e28ec521aa2ae76c3e91e0b870f7db89d1646983cc7799c196d3cd4d11b802a82a066048d2e74a986"], 0xd) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040006000000fcdbdf253800000008000300", @ANYRES32=r4, @ANYBLOB="0c009900010000852ab5132e1ecd9de249aac000660000000c00580041000000000000000c0058004e000000000000000c00580075000000000000000c0058007f00000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x6011}, 0x4028081) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) pwritev(r8, &(0x7f0000000040), 0x0, 0x0, 0x4) r9 = dup(r6) write$FUSE_BMAP(r9, &(0x7f0000000000)={0x18}, 0x18) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000008c0)='binder\x00', 0x824002, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x228061, 0x0) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000480)=ANY=[@ANYBLOB="b0", @ANYRESOCT=r5], 0xb0) write$FUSE_GETXATTR(r9, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r9, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_DYING(r9, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", ""]}, 0x14}}, 0x20000000) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4014, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="00e17aea671b9cb9235006cc098c7adf86e7cb1763fdeb6ce2781430751ca9e2792282aef9f9eaba23e6e2699c4742a5a829097c5f692ab4170af799287b79cc020ced7fa7fe2cb98239b1ea4fead4d82f1d6fe8af87c8e210c106282b5630c9698bd036d70a9d16665df989de1fb9ea10ba785d34445223dc590bac298668608a4a436be256597d55c2ed548f33415b6dfd8d3264bd87403fb35cb97518860f765ef992674a737fb3c30ea3"]) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e000000b65e0000ff7f00001100000000400400", @ANYRES32=r9, @ANYBLOB="0400000000000000705c839eeb08b319afa247eda13a6d28722bfcdc441a15cdf64fbb477d1ffd53e41af914f59dc8029b515bb5d09c577aec23330ffd1f6f848a3557c9546f50ef970cb72bfc8d28c7ad256c4382c5d6dbc0aaf11dee6949ac0ea69105e0a1112b33ade9af765e3be9f95c757026abe5f2655211370213ffb4db2bfe2b021d4971d0b93969979ded595093655d0f255f9226d8bffc1ac2a6390507ed", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="0100000003000000020000000300"/28], 0x50) 3m36.178941895s ago: executing program 0 (id=5856): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10, 0x8a06}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040050}, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = epoll_create(0xfffffffc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x2000}) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x18080, &(0x7f0000000480)={[{@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 3m36.178684334s ago: executing program 0 (id=5857): socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x8) r0 = socket$netlink(0x10, 0x3, 0x4) setreuid(0x0, 0xee01) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000780)={&(0x7f00000006c0)=[0x0], 0x0, r3, 0x0, '\x00', 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[{}], r3, 0x0, '\x00', 0x3, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000000)={r4, r4, 0xfffffffffffffff8, 0x7f, 0x2}) fsopen(&(0x7f0000000ec0)='zonefs\x00', 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000c74d3945f837040e1a59fb9210", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r7], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000010000000020000000900000000000000", @ANYRES32, @ANYBLOB="200001000000000000380e9738da817800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa312, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000027c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff3, 0x1}, {}, {0xfffb, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffffd}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="0000000000000000b702000014000000b702000000000000850000009d000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94) fcntl$lock(r1, 0x25, 0x0) 3m36.079062756s ago: executing program 0 (id=5858): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x0, 0x0, 0x2}, {0x1, 0x1}, 0x2}, {0x1, 0x2, {0x2, 0x0, 0x3}, {0x1, 0x1}, 0x2}], 0x40) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x121000, {0x0, 0x0, 0x74, r1, {0x9, 0x9}, {0x7, 0xfff3}, {0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) 3m35.798963778s ago: executing program 0 (id=5859): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0xa69b9dd2d25d6f0c}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4080) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x40000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f2, 0x9, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8002c205}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@gettaction={0xec, 0x32, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r6, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8804}, 0x20000800) ppoll(&(0x7f0000000b00)=[{r4}, {r4}, {r4}, {r4, 0x6224}], 0x4, &(0x7f0000000b40), &(0x7f0000000b80)={[0x6]}, 0x8) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x41860010}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20008808) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e00), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000e40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000e80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000ec0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000f00)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r10, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x3c, r11, 0x606, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008050}, 0x50) 3m35.741992355s ago: executing program 49 (id=5859): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0xa69b9dd2d25d6f0c}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4080) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x40000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f2, 0x9, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8002c205}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@gettaction={0xec, 0x32, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r6, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8804}, 0x20000800) ppoll(&(0x7f0000000b00)=[{r4}, {r4}, {r4}, {r4, 0x6224}], 0x4, &(0x7f0000000b40), &(0x7f0000000b80)={[0x6]}, 0x8) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x41860010}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20008808) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e00), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000e40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000e80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000ec0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000f00)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r10, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x3c, r11, 0x606, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008050}, 0x50) 3m25.627932164s ago: executing program 9 (id=5972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) 3m25.57820565s ago: executing program 9 (id=5973): unshare(0x6a040200) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x48850) writev(r0, 0x0, 0x0) 3m25.488399012s ago: executing program 9 (id=5974): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r0, 0x0, &(0x7f0000000a40)) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0xb, @pix_mp={0x8000, 0xb0, 0x3234564e, 0x1, 0xc, [{0x7}, {0x0, 0x5}, {0x37f0a349, 0x3ba}, {0x7}, {0x0, 0x80}, {0x2, 0x8}, {0x1ff, 0x7}, {0x2e0d, 0x4431}], 0xf, 0xb9, 0x0, 0x4, 0x5}}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1201b9000000", 0x0, 0x0, 0x1, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) close(r1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001000024", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB='\x00'/28, @ANYRES32, @ANYRES32=0x0, @ANYRES8=r4], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r6, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$l2tp(0x2, 0x2, 0x73) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01070000000000000000410000000e0001006e657064657673696d0000000f000200"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r8) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="6d932bbd700000000000010000000800030003000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 3m25.484076051s ago: executing program 9 (id=5976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000240)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r6], 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000340)=""/179, &(0x7f0000000440)=0xb3) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000240)) recvmmsg(r7, &(0x7f0000002000)=[{{&(0x7f0000000480)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/65, 0x41}, {&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f00000006c0)=""/204, 0xcc}], 0x4, &(0x7f0000000800)}, 0x5}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000840)=""/231, 0xe7}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2, &(0x7f0000001980)=""/71, 0x47}, 0x56b4}, {{&(0x7f0000001a00)=@phonet, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a80)=""/214, 0xd6}], 0x1, &(0x7f0000001bc0)=""/108, 0x6c}, 0xfffffffc}, {{&(0x7f0000001c40)=@can, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/57, 0x39}, {&(0x7f0000001d00)=""/66, 0x42}], 0x2, &(0x7f0000001dc0)=""/146, 0x92}, 0x1}, {{&(0x7f0000001e80)=@nfc, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001f00)=""/83, 0x53}, {&(0x7f0000001f80)}], 0x2}, 0x8001}], 0x5, 0x0, &(0x7f0000002140)={0x0, 0x989680}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2784, 0x124}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x401, 0x236, 0x4}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000000) listen(r4, 0x0) listen(r3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r12, r12, 0x0, 0x40008) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000300)={&(0x7f0000000200)=[r2, 0x0, r9, r10, r11, 0x0, r13, r14], &(0x7f00000002c0)=[0xffff, 0x459a, 0xdf1f, 0x40, 0x5, 0xffffffffffff204d], 0x8}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x4ee0, 0x0, 0x5, 0xb367}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 3m25.178333276s ago: executing program 9 (id=5979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) fstat(r1, &(0x7f0000000340)) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f00000003c0)={{r1}, "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"}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f00000003c0)={{r1}, "a902c6dbed9da43dbfafa5d20257c1b9a57ba7598a26324f79e55ee7c3fa89813f5e972f0b8e0f7ea33eb1d33f4edb24948393e924852d94d40a15f6868fc7736d50d5adce17466ae584dae9b0f4db24dc5171d89bdd85df4e3d0721ebdc679fa891c89ab8158dedf76b2144aa4519eec0b31eea889857e53e17889c438cf536712a80e7ed114ab9851efaa7b731e789457b70f298dbea5359ac08a079f44b9ac637d93108ff334f430d66efe5f1236db95a96458a6694311a46001752eff3a690f17941c1ff1e8fb8fae233ad9e3947535bbaaca60ffbb427a636d8076f3810e548ff01ccea45f764174f7579bdc99244e986558211cf427c6147da44c51922b96b0f83c18afec4821228dd188814075c6491550ad076307f73f28de0e43ad911132ca58851caae0c211d7d15e91918ba1cd4d9a8d1c9a62daf6f14916bb8bef94e89c1c7f1e924624b11eda608eb9957195be5780e2d6b9d89bd366a6e7b05c48b4570751cc78e9808efd7195a9c9ce4fd6c69f9367f1a12a59aee1646d9becbb6d49c2b341bf6bcf45983e67d90c9200cef48bdb58787e2f9bd69b7b02656929a44c88d93209f094ef83d513b1f1e3d303238527224a9193f16683ae9107b0cbcc4d78ca008d2c8d4b4029da157c0a53c7a53cdf1f3ec6a2795cefc0f12f04466925155e2edc3a6f889a118d9200284d17cfff7367eb394325ac3b7d04cc005c207c92c5d43f1520c002d28ee5696eef55da8b21a2368fad8d8a4686d8cb854a39e20b80b8e5817d43bbfd217a7ce069d9ddc477c240ab1389ed196933c80fa7c3b1bb0e43c36984a3d0aec6054b9dd2ee4739c869ff6b157324a18ccc8959b1df449821c4bec1b435cbf8e2b2820806be4cf97a76b4073f7efb3d1a3dbdcfb7c2d77f809b52358c379da3df16b6e425fa0f92259c8ef00d1eae012aef0fe1af5b9be6003206d0bbce36d5e93d403a80373dfa513726edd106fe41ab8dac8b005cbea4ee05f1c153b84c1ad54d7d02e2ba74c6fe48547ea5071f78e93d7c8ea2524686517aa790a64cf4d00e399576cb4582b2c40354670af9802966374e7395e0385ff2b86c2c0fa2140b5da3d051b9b079230c18f5d375224531d1c95e78767361ea7d0a9db63dd0c8543a2b5df140e504530b4bfb5fe4ead432f0a288d17059f69c68c74882101ad178e5f26806981d2be2c8026b998df2581cf05830e24ecb1a6fe9b4a2109d9354ad32cd424f92d73ff19f94dcb600dd03da3c9053933ad116c21625678629074059deabb96f9d056d548c2afe2d3c8d70a46f6b065bccb2067eb0b7e2b3b12bf91e8fe47471776db32cd8d6fbef6c8f34ddcda98988eee74e9fc6da10a77cce7883eb755bfc61c6ec520cefa71c1b02a9a078712a38703c8d3808adb413b43d457741f5cf7d4da6de11eed9f8c73c8ce87fd273a2bf2b07de5be4ce03f9468ecea3db582b1176b9756f724d4a002d7625b29c5554ac1df72943238945732ec54c2f474dd3a2402bb040f9bbd1303f8ac08955592f945a65fa6271d7765ad88efc51c4f0cac5f930597a0454008ba7cc465e7db202b43714aff1c707178c6980d4e70269b7103829464c0220445fae17e9eb860e528c8974e2b0aa751659f9bcca2544b980cd7d18959e9456c07b100620a98d96ab61235eb06b985f8472c10d2c36b9aaf8d93a13fbded8a022f836d5cd75db193e3650bbf5e4f187a8a015388827904fa190472be0b9168ae1401667fb92b1a93503bf39467ced5f153353a8b688c73f5540227fdeb2c487adb122624e705651d77ed8e99cee53f5aab4857352d1ad22ae32f669022f931bbbd50034c06a2187e32b6e255e5365641eadb869810b001958476692be279b7807ea8a4e3e355cb3cc85f486a201bb915c878d346aceb2fadffae9dd18ce65d64e714468a86299136460b631805c227070102dbbc794025e13bc64b037bc1abcea9caeaec2a6a050e23d83aa03c356afe67220667c1406d3ff93618dd7fdfc95c50b34ddefbad7dd8b011763b50e65dce8e085e17f16abf59d337e5f31886df3e90275292a2c9efa8d47945473d5838ab0c09b8b8300431d68c10d90bd9579ce3da97d2902c4c7e3d2ec616dfdf6ee7e110a5766c1da4e7b08c2191c9dc297eb7c51b0c45d15e3cd8b120228ee8f6aa74b5eed1b70ce54cac34edc8c1665b55fe51743ba51207b26bb8d1a44f8c909a3b3289378c8bbdf8d7444f25a876b331c8039a0520a097c2a41c873e3cac6d54f9bbc27cfb5702b2c311a2cd2a890ebb468890475a43d3265ba0af2b8390d9c69cf8500130c83cab424eb1a2b9102997c709d86537e63e9570a31b39df35b4550200951face09e48403225933eb0d8f27d0260cf0efd17d366859f96be059d572f0ad8a312fb4bba2a3743170ddc952666890acdc4ffcc8bea9c4582e40f88f858042934a002c86561ab560eaa075f5c7ea5ee87567090e95a9e245e041581a90183766475e577e48a1500506fc825daef9210078105f60e9ec3c10c98826221c6e4d5edd0b16b0dc96c5360e07c72f9daf7234ba915be78301240ad27107fd5e000a5fcbe1e1602cc702a8fafe1f53eae3d9909f1b8a551491338e38c764ca584fd3d256dad148c17a643852968f4e8300ce1e66301bd1f29b19f3b9b10c969668ee0c6747416fe098a073f4e7cc19584ecfc9d08d3e1badef9310787f0676b81a3907175e7e7d41ae60c461c59ed34d3aaa4790201acdb109f7a90b45a6aedbaf6d5a67cfa2cc5d215237123a562013f445063293b8c8200359b5c1cd0039d276965c6470424adc7b1e848fda5bb57a222ee155f0b08d7883ae6f74bdf725ec3a1ab554997ddcfe290b701dde4dfdef9b5d15560226250949c8b3ba05526f469f8f028f8ebc450e2d5a8b5251f62a0b2ed3768909aa113e243b29a9d38b51d05e3b0db7bae47940540eb4b867ead63b077d235290a9d53309286096f1ec8d64e53b40526959f55de6aa501c0b5f4036aa00a83f6cbe9ec3e38c9d26d2013699e1fde99f3484e6a54177a60a2f765c7badaca85d87b2781b6db2f56ccde17fdc70d248828c6cbb8ff2e1ed97e3b212f6e1ba9b0110daa8cf0a22448f28aaee7ef9527a0d105b370ecb26da519c315b0754b3d2fe9502088658141a701fd6cfff98f46812c65e7cfd1b2d8546d4667cba700ce9dac869a9550e2ebc77eb1fbbe5738429bf6fe534809adcd24a723d1ef602370ba53616a4455822776067a3c0ee8d258e351abdc8c88d8b39918367b8c7d73c5b527c577afed27578dc5ae18baa5dc22d76b58ff02bf38525ca2fd9533c3f36b074b0b97a133299ff0600727afe626dc471aa1ee286831e2f5d294f8b8685e5b350a1ca43d18a0773d8422d7bae8408eda3562d9b3599198a94edf19ed60c16a88afb1c07e7c94c4a17121cd45c75fd788a4ee7df3f2e16bdf37c21cc53a61171640cd1714cc3711aa50cae0a62dac41175d269ac23334274db1e772def3d17c8aa18e24dd218cee08b5e32c7c3f5611b2a4004e2a136cc19023c292f0ecf52c4e540d1fc5c802ba5f44d4b1e86e37714384945ab47b5c2907216ce5ce68fcb1459ca2d963e8843e827e12108ce635caecb580263c5978f44b1c697c7b533935821fdd2eddc22334cf6a1cd3a3f5e23a0db94c723e60d57055338005badd94f281e3732f883ca52f9d3b145b59d46f49b59e29db7a32ea2b7cd53fe52164b77b3c6a7df182c5f46c824af88862b059875321cf6d8613c1559c5ce6c38aa81fa81e75d675bbf70b2c36e203fd1fd0119ce636f646c6be68df4b1f1e847dbd9a9501924242ae8678eadafd00986b19ef673dabe022f57e7139d26044ce4b46382f37e34713d8fafc07946ec45110fed26b70d2eff878f49cec90001baae75709dbea2dcb82040542c38e6e3bbf5afe117e55141fc61ff4e6dc389b66041f0418e883502f214b569fa51c91cf53d564909c834a5013c6165529574594c386d72465b43cd6088cbe9b1ff5488868750b99ba61e706adff8f9a77a216d1e77ba3c380e79354e1c3204b9dee072e3e5df21f2fe87f36bc39360acad7c00d04bc7c442a9d16086d30fc5a6132f7114ecef3bd9bcde8470a7a5b798e85b8c68506d5760eae19987e5aae6b4f1b4b74a16866caf7137774d835f44967ce337737c1133c18e8f1cd9879ef5e58405247ce6aa399e2b0a2816aabdf686ebd6ef6b901ca7424715a4f1e3b95f5aebdf538ffb68bd5126599bcfb6c6a92a6557487b2b2d2685a1a22936e750db83d5eb1cd6172472f9280d9abbf74e57021fb508b00fabb1527bf222c33925706912c037c0c31cb452f46a9eaf154807eed570404ae46a7e11a3e116f2d3453045edf3b721002dce9d609b48a001bf97f2b43b8da79556b37e70e6f07cc750149fabc76c7ba56b21507057bee085c204953be5aecfda759a465cc8b599aa4bd748d48ead099ebf14731df1d3d45c7a9f0a57d9b738ca107293fbbab1624cc9d9048f9a18c697ae90f83c8fb8cd6df301fc1829b502f7ffd584bda87a7fd15da23e6a3e38fd00b305df1b712cd47cb641bdb2d80386932221fd64c2d940430a04cebb8b5f758695b51c84640c8d632fdeb920ba4b8c3a7d634f3873b0f78f27896c8895971a782c36f4e901168592ddded035d7d354a1e0cdc3025c21b5945edd04a1efce9f71ae92253d29f4521b20390d8f270d1c75369fb7d128ebcc3eb5187125b1b5515ac181251ed2e0ae721d13f955efae559680cb8d404d5368f065dbc0e9a7e78357866ea8dfc2e3526c05cde8295227ae6be6e9b9858349d395ffcc666e58dadc26137f628af1d9e20b0fae7ccd3ddad57710f56fb6db526ca0362c9e6ed0604e9973bc28b26c25816b36715325fcb88070c3e69f6171cdd4ff72bcd0dc8b1daae229f2d41cb1043e0331fa4fba6b0e74b4d505afa08bf80fe4425c54dd23ece075cf0beecbe93380e5fa92fd1a47e3bfd2de06900e1debf23849d4c06dd8045212a71cd486bfc14446c3be065fc019132babedc58405daae1498b362d56a54ba0eeb8ee8dd3a72dc738ae5b8eb914b5eac18f0e94ae21be81b7a8b24dcd2b708853287c6017ce89292e7ef8dd86e3cd07e714722d73819c7ff5da0f9e472c5b58a0979f38adaf94ab74767fb85e267f73f18d8da9af2862c87dc6ee0a85122facb2049de1424326f1b9ddea1d6ae93bf4694352353a1e4ad373b559c70745eeb0335be660aff7b642c3838e0d9fc8805a55cf23d0fa2e8ece18fd61d2a82685dfba21466e7205253a70417e8c68b4ae8207c704f9cc25aae89ea8adede5774ad23d94813a18460447a835ca43e946cb700e862f7997d5b704aceff2287231e7b6e63d6332fb6db59e53a35ecfa22eafc51e83bda8cf12fa2a1f902283488bd29d6318b0936a0da57545646663ad8f0e7ec30e8e3bba68ab5d67859a1444b16c1e45125754d576f8f07ea23bbef186ee175e881c049c27477ba1c4468137f78a50ca5663023fdbdac95de2de6c1b7d777a647dc8c4fac909da9945c19db4481d9a5d13e16049f44a14cc0e9fe07b57da8216ad81b06ffe06114341f04539bffee70d7c943f6344066ca4b34ab8c2ed9e56bcec30ea35e687bca08091288c18fdf8c0405c20ff30544f2af680f7f4230d444d56ba9ea2103e853636a76319167710bafeefb3166b465be3867480cb93cfbbe29490eef03f1008aa711cb74aee3062acd011563bf0eb6b6cc12251f3fb38f4f45034"}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004011}, 0x20008000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000a00)={0xf, {"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", 0xfffffffffffffd6a}}, 0x1006) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_ccsidr={0x602000000011000c, &(0x7f0000000100)=0x5}) (async) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_ccsidr={0x602000000011000c, &(0x7f0000000100)=0x5}) 3m25.178192672s ago: executing program 9 (id=5980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000305000005d60000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x0) 3m10.010361279s ago: executing program 50 (id=5980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000305000005d60000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x0) 1m17.967424626s ago: executing program 3 (id=7962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0xe7e6, 0xd, [{0x1}]}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c00)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m17.785516776s ago: executing program 3 (id=7963): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000080)={r3}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r4, 0x100000000) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 61) 1m17.785177683s ago: executing program 3 (id=7964): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x1, @null, @bpq0, 0x7ff, 'syz1\x00', @null, 0xfffffdb8, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c081) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a0100"]) ioctl$KDSETMODE(r4, 0x4b63, 0x4) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r10, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) 1m17.465027182s ago: executing program 3 (id=7975): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9fff}, 0x80) 1m17.464742002s ago: executing program 3 (id=7976): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, &(0x7f0000000140), 0x4001) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) fstat(r2, &(0x7f0000000340)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="200001", @ANYRES32=0x0, @ANYBLOB="000000f1a0"], 0x38}}, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008f"]) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000380)='ns/net\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) (async) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, &(0x7f0000000140), 0x4001) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) (async) fstat(r2, &(0x7f0000000340)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="200001", @ANYRES32=0x0, @ANYBLOB="000000f1a0"], 0x38}}, 0x0) (async) fchdir(r1) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008f"]) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_procfs$namespace(r0, &(0x7f0000000380)='ns/net\x00') (async) 1m16.961596583s ago: executing program 3 (id=7986): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000080)={r3}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r4, 0x100000000) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 62) 1m0.893175747s ago: executing program 51 (id=7986): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000080)={r3}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r4, 0x100000000) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 62) 3.193433317s ago: executing program 5 (id=9122): r0 = creat(&(0x7f0000000600)='./file0\x00', 0xe5) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newlink={0x98, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_GUARD={0x5, 0x5, 0xfd}, @IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_ISOLATED={0x5}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_BACKUP_PORT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) write$qrtrtun(r0, &(0x7f0000001d00)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e84b928ecb96e0e4e781bfca4c928c956321dd51400000000000020011584a8bd051f13baa493645fa9f98701918a1f87f1d439ec93772d6ecaaf8891f7678f2037cccbd78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26cfbb2eb91e40177a780df98cbf94b96d900a2dfc5c877db6700bb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a63d070000930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299dea6c08073dd0c47b9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8303985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725436101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5af97ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35cfe7d498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c17d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef0779cafd02bcf075a212e79e07c3ff38810368745fb77fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f91cc", 0x45d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r5, 0x0) creat(&(0x7f0000000600)='./file0\x00', 0xe5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newlink={0x98, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_GUARD={0x5, 0x5, 0xfd}, @IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_ISOLATED={0x5}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_BACKUP_PORT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) (async) write$qrtrtun(r0, &(0x7f0000001d00)="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", 0x45d) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) (async) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r5, 0x0) (async) 3.07893418s ago: executing program 5 (id=9127): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=virtio,cache=mmap,version=9p2000.u,']) chdir(&(0x7f0000000000)='./file0\x00') lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0)='nfsd\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f00000003c0)={0x3, 0x1, 0x1001, 0x472, 0x3, 0xfffffffffffffffe, 0x23, 0x100000, 0xff01}) fchown(r0, 0xee01, 0x0) 2.989811287s ago: executing program 5 (id=9129): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89f1, 0x0) syz_clone(0x4000, &(0x7f0000000000)="85164e", 0x3, 0x0, 0x0, &(0x7f00000000c0)="d4dcfe345b5c7f38839bea5db55f4b5b5c945915ef5e586d582d323c31696e25b6152fc16a229c1c2da67ba00e28d383d6fc4e3eee769e") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"/3896], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xf87, &(0x7f0000004180)=ANY=[@ANYBLOB="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"], 0x0) 2.256359845s ago: executing program 2 (id=9149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x4, 0x0, &(0x7f0000002300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0x2, 0x9, 0xfffe}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x9}) ioctl(r3, 0x8b32, &(0x7f0000000040)) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) open$dir(&(0x7f0000002900)='./file0\x00', 0x4880, 0x100) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x0, 0x26, 0x0, 0x0, 0xcad80000}, 0x28) socket$xdp(0x2c, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000680)=[{0x2, 0x5, 0xb}, {0x5, 0xff, 0x7}], 0x2, 0x1ff}) 2.256027553s ago: executing program 5 (id=9150): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f0000000180)={{}, 0x8}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1c00083b0100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40003009078001c0e0300050200000000000000000002d58838068b91000000"], 0x4e) (async) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1c00083b0100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40003009078001c0e0300050200000000000000000002d58838068b91000000"], 0x4e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c000000190001090000000000000000021800000000fd090000000008000100ac14140008000f00ff007f"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c000000190001090000000000000000021800000000fd090000000008000100ac14140008000f00ff007f"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001a00010000000000fdffffff020000000000fd00", @ANYRES32, @ANYBLOB="05001b0001"], 0x6c}}, 0x2000c044) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x259) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x14c) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000340)="8fcb000000000000", 0x8) (async) write$qrtrtun(r5, &(0x7f0000000340)="8fcb000000000000", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000b3000040"]) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733f7669727469022c706f73697861636c2c00"]) setsockopt$inet_udp_int(r5, 0x11, 0x67, 0xfffffffffffffffd, 0x0) (async) setsockopt$inet_udp_int(r5, 0x11, 0x67, 0xfffffffffffffffd, 0x0) 2.063240936s ago: executing program 2 (id=9153): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x20) r1 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r1, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140), 0x4) shutdown(r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0xa, &(0x7f0000000080)=[{0x373, 0x81, 0x2, 0x80000001}, {0x0, 0x3, 0x8, 0x80000001}, {0xc89, 0xf, 0xc3, 0x7ff}, {0x9660, 0x9, 0x7d, 0x5}, {0x5, 0x81, 0x5, 0x8}, {0xc, 0x8, 0x81, 0xce5e}, {0x5a, 0x10, 0x7, 0x80000001}, {0x7, 0x9, 0x30, 0xfffffffa}, {0xff14, 0x1, 0x1, 0x8}, {0x7, 0x3, 0x1, 0x6}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000001c00000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r5, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x3, 0x1, 0x1001, 0x472, 0x3, 0xfffffffffffffffc, 0x23, 0x100000, 0xfeff}) fchown(r7, 0xee01, 0x0) 1.902698796s ago: executing program 5 (id=9159): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x8880) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x14000b01, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000e00000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.130996546s ago: executing program 2 (id=9169): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000380)={{r1}, "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"}) accept$ax25(r0, &(0x7f0000001900)={{0x3, @rose}, [@rose, @null, @default, @netrom, @rose, @remote, @netrom, @netrom]}, &(0x7f0000000200)=0x48) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000f00070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) 1.079541233s ago: executing program 2 (id=9171): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9071, 0xffffffffffffffff, 0x0) setitimer(0x2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffff}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) 865.605448ms ago: executing program 2 (id=9175): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89f1, 0x0) syz_clone(0x4000, &(0x7f0000000000)="85164e", 0x3, 0x0, 0x0, &(0x7f00000000c0)="d4dcfe345b5c7f38839bea5db55f4b5b5c945915ef5e586d582d323c31696e25b6152fc16a229c1c2da67ba00e28d383d6fc4e3eee769e") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f00"/3896], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xf87, &(0x7f0000004180)=ANY=[@ANYBLOB="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"], 0x0) 614.528068ms ago: executing program 5 (id=9182): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xa) (async) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) (async) fchdir(r2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000002, 0x7, 0x1000}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) eventfd2(0xff, 0x80801) (async) r7 = eventfd2(0xff, 0x80801) ppoll(&(0x7f00000001c0)=[{r7, 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r3, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r8, r8, 0x0, 0xb) (async) sendfile(r8, r8, 0x0, 0xb) 438.565545ms ago: executing program 6 (id=9190): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000380)={{r1}, "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"}) accept$ax25(r0, &(0x7f0000001900)={{0x3, @rose}, [@rose, @null, @default, @netrom, @rose, @remote, @netrom, @netrom]}, &(0x7f0000000200)=0x48) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000ffffffffffffff9700070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) 384.989084ms ago: executing program 6 (id=9191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000014ea00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 384.392409ms ago: executing program 6 (id=9192): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000002300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0x2, 0x9, 0xfffe}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x9}) ioctl(r2, 0x8b32, &(0x7f0000000040)) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) open$dir(&(0x7f0000002900)='./file0\x00', 0x4880, 0x100) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000680)=[{0x2, 0x5, 0xb}, {0x5, 0xff, 0x7}], 0x2, 0x1ff}) 274.158727ms ago: executing program 4 (id=9194): r0 = creat(&(0x7f0000000ac0)='./file0\x00', 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r1, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02455ae9a32d14364c1639ef00000001000400000000337bcd794646dcd2f7b925ec9bcdf969000400010000000000"], 0x24, 0x0) r2 = open$dir(&(0x7f0000000040)='./file1\x00', 0x800, 0x169) execveat$binfmt(r2, 0x0, &(0x7f00000000c0)={[&(0x7f0000000080)='system.posix_acl_default\x00']}, &(0x7f0000000280)={[&(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)='@,\x00', &(0x7f0000000180)='(\x00', &(0x7f00000001c0)='^(^-}#.@\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000240)='system.posix_acl_default\x00']}, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xc, 0xffbf}, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) 273.806549ms ago: executing program 4 (id=9195): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0xf8, 0x5, 0x4, 0xea, 0x10, "1012a2c2e0d99745e394509d287560250d00"}) mbind(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x3, 0x4) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) r6 = socket(0x23, 0x2, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x200000, 0x0, 0x334e8b}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r10, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x200000, 0x37302b, 0x334e8b, 0x200000000000}) ioctl$sock_qrtr_TIOCINQ(r6, 0x89ee, &(0x7f0000000040)) 192.689864ms ago: executing program 6 (id=9196): r0 = socket$kcm(0x10, 0x7, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x4000010, 0xffffffffffffffff, 0x53d) (async) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x0, 0x8, 0x1, "1efcffffffffffff00", 0x0, 0x0, 0x0, 0x27}) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)="28cc03dd865385029e7fdd986a8e11261eed03bc73e793b6113d743c4ab290c6279481e358660ca81b1d3ca8f7ec14a3c50260a55008d1631a9b518555525ac5672721892739816387d8739b55da8448295b20f06119f87df34fcce893d283dd059d5c95ff2e1acbafe9fe56d7a521eb5728293b41eb89a6fc33d0fe5eedb73427d3af8d3e6ec15e23c4d5f1a7e551ac1a3e722c0f3ee5241cae116433612da7b379d76e59fa9df302806b0bf56db77bc7d31e023f208bf3dad712493e3b7eafc715730a6147bbcbc69918ab76f21b4ad7daf4c0de3cd418fb249fa067651b4cc0"}, {&(0x7f0000000000)="8dc3c7e8d661dbbaadf2ba8937592a72b4781608f19eb9a8b19bffd3c817f7220c3095a47a5482c55af562408d7694"}, {&(0x7f0000000200)="4f1ac6f1301d27701eb3efc51ef639ed1c998e34ffdb90240593e77cccfdf071335b505e0409ba44266d86c39b059ca0ec0a4bcc3b7e8f12a895541fba6b25c9a80a67a28cd333a0568aede90e1350f1f37082dc8b29859d6f4d5612c015b1b189998ca99f6608492bd1fc52ae4a1a5c5b898051a847d3c64fc388eb159c21cfb32686f822c33e01d666ae3654669d7458402d969d690f924817a6c589528816d09c1cde49697fc92b66d2db41616a96c7aa699491335bf2fc75f198391289cfe525efd040b062c79cebad618a79201a7e10f81bb357c72be2"}, {&(0x7f0000000040)="377bb596748a834df7d7051696558ab0bfbbe226da391f16d543a434183d8c90c76770e7f690127f28c0415699840bc1f12346acf3471f231b09f1"}, {&(0x7f0000000080)="0ede58db58a05fc10b786395430ef42caf110ee41bf8c366d634feea265bfca74cf4f7681c054ef8de0a7991d078f3d16258fd41bfaacc468a453af76245c6"}, {&(0x7f0000000480)="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"}], 0x1, 0x0, 0xfe40}, 0x40084) 192.549966ms ago: executing program 6 (id=9197): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000480)={{r1}, "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"}) r2 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x0, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x8503, 0x1003, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x4, 0x6, 0x5, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x0, 0x4, 0x8049]}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x4, 0x440200) close_range(r2, r3, 0x2c431debd8da1d1e) 167.77768ms ago: executing program 4 (id=9198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001100050000200000fddbdf2507000000", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x20048010) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001100050000200000fddbdf2507000000", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x20048010) (async) 165.950565ms ago: executing program 6 (id=9199): r0 = socket(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14007e25701880131acf032fdd1d9ef15aad", @ANYRES16=r4, @ANYBLOB="0107000000000000000045000000"], 0x14}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x3a, [0x7, 0x8, 0x5, 0x0, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x8, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x7, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x8, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x6, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x7, 0xfffffff8, 0x401, 0x46, 0xf1, 0xff, 0xab00000, 0x7, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x29, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x800001, 0x8, 0x1], [0xa772, 0xa61c4fdf, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x10000009, 0xfffffff7, 0x8, 0x40f3, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8cd, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26f, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x9, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0xc4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r12, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x94, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0xfc, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x400, 0x0, 0x1], [0xfffd, 0x9, 0x81, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7f}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x401}]}]}]}}]}, 0xc4}}, 0x4000001) 90.171624ms ago: executing program 4 (id=9200): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 88.935709ms ago: executing program 4 (id=9201): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x0) 167.377µs ago: executing program 2 (id=9202): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x8880) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x14000b01, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000e00000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 4 (id=9203): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000040)=0x5}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00'}) kernel console output (not intermixed with test programs): 6 audit(1760218608.922:30952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29305 comm="syz.2.8193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054978eec9 code=0x7fc00000 [ 613.198630][T29338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8205'. [ 613.202794][T29338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8205'. [ 613.207293][T29338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8205'. [ 613.211427][T29338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8205'. [ 613.568051][ T6012] usb 9-1: USB disconnect, device number 34 [ 613.587227][T29353] netlink: 'syz.5.8210': attribute type 5 has an invalid length. [ 613.653619][T29358] loop2: detected capacity change from 0 to 7 [ 613.657186][T29358] Dev loop2: unable to read RDB block 7 [ 613.659006][T29358] loop2: AHDI p2 [ 613.660292][T29358] loop2: partition table partially beyond EOD, truncated [ 613.712762][T29362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8214'. [ 613.717442][T29362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8214'. [ 613.876462][T29379] tipc: Enabling of bearer rejected, failed to enable media [ 614.005027][T29375] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 614.143568][T29390] loop2: detected capacity change from 0 to 7 [ 614.147426][T10609] Dev loop2: unable to read RDB block 7 [ 614.149298][T10609] loop2: AHDI p2 [ 614.150534][T10609] loop2: partition table partially beyond EOD, truncated [ 614.156085][T29390] Dev loop2: unable to read RDB block 7 [ 614.158514][T29390] loop2: AHDI p2 [ 614.159961][T29390] loop2: partition table partially beyond EOD, truncated [ 614.258037][ T40] audit: type=1400 audit(1760218610.250:30953): avc: denied { map } for pid=29393 comm="syz.5.8225" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 614.307004][ T5957] Bluetooth: hci3: Malformed LE Event: 0x02 [ 614.410646][T29395] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 614.502799][T29402] program syz.5.8228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 614.510617][T29402] ata1.00: non-matching transfer count (0/2304) [ 614.518333][T29402] vim2m vim2m.0: vidioc_s_fmt queue busy [ 614.641478][T29406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 614.773480][T29412] hugetlbfs: Unknown parameter 'si:e' [ 614.867073][T25763] syz_tun (unregistering): left promiscuous mode [ 614.875975][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 614.881509][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 614.886194][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 614.889499][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 614.893545][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 615.030706][T29417] chnl_net:caif_netlink_parms(): no params data found [ 615.046592][T29429] loop6: detected capacity change from 0 to 2640 [ 615.050776][T29429] buffer_io_error: 11 callbacks suppressed [ 615.050792][T29429] Buffer I/O error on dev loop6, logical block 0, async page read [ 615.056233][T29429] Buffer I/O error on dev loop6, logical block 0, async page read [ 615.059066][T29429] Buffer I/O error on dev loop6, logical block 0, async page read [ 615.062117][T29429] Buffer I/O error on dev loop6, logical block 0, async page read [ 615.066036][T29429] Buffer I/O error on dev loop6, logical block 0, async page read [ 615.070071][T29429] Buffer I/O error on dev loop6, logical block 0, async page read [ 615.074311][T29429] Buffer I/O error on dev loop6, logical block 0, async page read [ 615.077412][T29429] Buffer I/O error on dev loop6, logical block 0, async page read [ 615.080782][T29429] ldm_validate_partition_table(): Disk read failed. [ 615.084192][T29429] Buffer I/O error on dev loop6, logical block 0, async page read [ 615.088609][T29429] Buffer I/O error on dev loop6, logical block 0, async page read [ 615.094006][T29429] Dev loop6: unable to read RDB block 0 [ 615.096891][T29429] loop6: unable to read partition table [ 615.099515][T29429] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 615.172696][T24330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.176780][T24330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.198394][T29429] dummy0: entered allmulticast mode [ 615.286827][T29417] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.289930][T29417] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.293294][T29417] bridge_slave_0: entered allmulticast mode [ 615.297684][T29417] bridge_slave_0: entered promiscuous mode [ 615.305024][T29417] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.308661][T29417] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.311972][T29417] bridge_slave_1: entered allmulticast mode [ 615.315438][T29417] bridge_slave_1: entered promiscuous mode [ 615.333214][T24330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.336961][T24330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.403975][T29417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.410890][T29417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.445225][T29417] team0: Port device team_slave_0 added [ 615.450023][T29417] team0: Port device team_slave_1 added [ 615.511284][ T64] Bluetooth: hci0: Malformed LE Event: 0x02 [ 615.514263][T24330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.520310][T24330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.528908][T29417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.531757][T29417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.541219][T29417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.547468][T29417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.549763][T29417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.558615][T29417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.607884][T24330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.611505][T24330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.617638][T29441] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 615.641685][T29417] hsr_slave_0: entered promiscuous mode [ 615.644243][T29417] hsr_slave_1: entered promiscuous mode [ 615.646774][T29417] debugfs: 'hsr0' already exists in 'hsr' [ 615.648892][T29417] Cannot create hsr debugfs directory [ 615.757968][T29454] autofs: Unknown parameter 'Ybp5oO#6*' [ 615.870817][T24330] bridge_slave_1: left allmulticast mode [ 615.873406][T24330] bridge_slave_1: left promiscuous mode [ 615.876166][T24330] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.881899][T24330] bridge_slave_0: left allmulticast mode [ 615.885955][T24330] bridge_slave_0: left promiscuous mode [ 615.888471][T24330] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.093904][T24330] gretap0 (unregistering): left promiscuous mode [ 616.401372][T24330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.406003][T24330] bond_slave_0: left allmulticast mode [ 616.419483][T24330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.424155][T24330] bond_slave_1: left allmulticast mode [ 616.429391][T24330] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 616.433819][T24330] dummy0: left allmulticast mode [ 616.439008][T24330] bond0 (unregistering): Released all slaves [ 616.453341][T24330] bond1 (unregistering): Released all slaves [ 616.544300][T24330] tipc: Left network mode [ 616.904290][T24330] hsr_slave_0: left promiscuous mode [ 616.907608][T24330] hsr_slave_1: left promiscuous mode [ 616.910994][T24330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.913769][T24330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.916840][T24330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.919426][T24330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.949742][T29471] loop2: detected capacity change from 0 to 7 [ 616.954215][T10609] Dev loop2: unable to read RDB block 7 [ 616.956047][T10609] loop2: AHDI p2 [ 616.957119][T24330] veth1_macvtap: left promiscuous mode [ 616.957249][T10609] loop2: partition table partially beyond EOD, truncated [ 616.959149][T24330] veth0_macvtap: left promiscuous mode [ 616.966440][T24330] veth1_vlan: left promiscuous mode [ 616.968952][T24330] veth0_vlan: left promiscuous mode [ 616.969529][T29471] Dev loop2: unable to read RDB block 7 [ 616.973242][T29471] loop2: AHDI p2 [ 616.974938][T29471] loop2: partition table partially beyond EOD, truncated [ 617.058224][ T64] Bluetooth: hci1: command tx timeout [ 618.066846][T24330] team0 (unregistering): Port device team_slave_1 removed [ 618.211165][T24330] team0 (unregistering): Port device team_slave_0 removed [ 619.173469][T29417] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 619.184242][T29417] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 619.192186][T29417] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 619.214021][T29417] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 619.220109][T29487] __nla_validate_parse: 7 callbacks suppressed [ 619.220125][T29487] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8252'. [ 619.273508][ T64] Bluetooth: hci1: command tx timeout [ 619.294498][T29417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.307045][T29496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8253'. [ 619.307558][T29417] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.357326][T10463] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.360049][T10463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.373993][T29498] tmpfs: Bad value for 'mpol' [ 619.375931][T23422] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.379149][T23422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.488914][T29506] loop2: detected capacity change from 0 to 7 [ 619.494487][T29506] Dev loop2: unable to read RDB block 7 [ 619.496506][T29506] loop2: AHDI p2 [ 619.498851][T29506] loop2: partition table partially beyond EOD, truncated [ 619.522422][ T64] Bluetooth: hci3: Malformed LE Event: 0x02 [ 619.607240][T29417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.631628][T29504] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 619.714080][T29529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8262'. [ 619.765817][T29534] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20001 [ 619.784751][T29417] veth0_vlan: entered promiscuous mode [ 619.791649][T29417] veth1_vlan: entered promiscuous mode [ 619.796341][T29543] CIFS mount error: No usable UNC path provided in device string! [ 619.796341][T29543] [ 619.801263][T29543] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 619.812436][T29543] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8266'. [ 619.816619][T29543] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8266'. [ 619.823606][T29543] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8266'. [ 619.827422][T29543] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8266'. [ 619.834628][T29417] veth0_macvtap: entered promiscuous mode [ 619.841437][T29417] veth1_macvtap: entered promiscuous mode [ 619.857319][T29417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.867804][T29417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.878059][T29541] sctp: [Deprecated]: syz.4.8265 (pid 29541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 619.878059][T29541] Use struct sctp_sack_info instead [ 619.878133][T24330] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.881318][T29546] hugetlbfs: Unknown parameter 'si:e' [ 619.890173][T24330] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.893342][T24330] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.897649][T24330] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.976308][T23343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.981366][T23343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.997728][T29553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8270'. [ 619.998807][T23428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.004424][T23428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.008314][T29553] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8270'. [ 620.011518][ T64] Bluetooth: hci0: Malformed LE Event: 0x02 [ 620.015095][T29553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8270'. [ 620.045472][ T40] audit: type=1400 audit(2000000005.004:30954): avc: denied { connect } for pid=29558 comm="syz.5.8271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 620.129893][T29554] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 620.321999][T29605] FAULT_INJECTION: forcing a failure. [ 620.321999][T29605] name failslab, interval 1, probability 0, space 0, times 0 [ 620.327573][T29605] CPU: 2 UID: 0 PID: 29605 Comm: syz.6.8286 Not tainted syzkaller #0 PREEMPT(full) [ 620.327591][T29605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 620.327599][T29605] Call Trace: [ 620.327621][T29605] [ 620.327626][T29605] dump_stack_lvl+0x16c/0x1f0 [ 620.327661][T29605] should_fail_ex+0x512/0x640 [ 620.327690][T29605] ? fs_reclaim_acquire+0xae/0x150 [ 620.327707][T29605] should_failslab+0xc2/0x120 [ 620.327722][T29605] __kmalloc_noprof+0xdd/0x880 [ 620.327740][T29605] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 620.327757][T29605] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 620.327769][T29605] tomoyo_realpath_from_path+0xc2/0x6e0 [ 620.327783][T29605] ? tomoyo_profile+0x47/0x60 [ 620.327800][T29605] tomoyo_path_number_perm+0x245/0x580 [ 620.327817][T29605] ? tomoyo_path_number_perm+0x237/0x580 [ 620.327835][T29605] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 620.327854][T29605] ? find_held_lock+0x2b/0x80 [ 620.327884][T29605] ? find_held_lock+0x2b/0x80 [ 620.327898][T29605] ? hook_file_ioctl_common+0x145/0x410 [ 620.327916][T29605] ? __fget_files+0x20e/0x3c0 [ 620.327932][T29605] security_file_ioctl+0x9b/0x240 [ 620.327947][T29605] __x64_sys_ioctl+0xb7/0x210 [ 620.327965][T29605] do_syscall_64+0xcd/0x4e0 [ 620.327978][T29605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.327990][T29605] RIP: 0033:0x7f9c2738eec9 [ 620.328002][T29605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.328013][T29605] RSP: 002b:00007f9c2821a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.328039][T29605] RAX: ffffffffffffffda RBX: 00007f9c275e5fa0 RCX: 00007f9c2738eec9 [ 620.328050][T29605] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 620.328057][T29605] RBP: 00007f9c2821a090 R08: 0000000000000000 R09: 0000000000000000 [ 620.328063][T29605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.328070][T29605] R13: 00007f9c275e6038 R14: 00007f9c275e5fa0 R15: 00007ffe36ddefc8 [ 620.328085][T29605] [ 620.328091][T29605] ERROR: Out of memory at tomoyo_realpath_from_path. [ 620.329001][ T64] Bluetooth: hci3: Malformed LE Event: 0x02 [ 620.378771][T29610] hugetlbfs: Unknown parameter 'si:e' [ 620.441345][T29602] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 620.737771][ T6029] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 620.830488][T29638] loop2: detected capacity change from 0 to 7 [ 620.834621][T10609] Dev loop2: unable to read RDB block 7 [ 620.837607][T10609] loop2: AHDI p2 [ 620.839153][T10609] loop2: partition table partially beyond EOD, truncated [ 620.844150][T29638] Dev loop2: unable to read RDB block 7 [ 620.846730][T29638] loop2: AHDI p2 [ 620.848393][T29638] loop2: partition table partially beyond EOD, truncated [ 620.901960][ T40] audit: type=1400 audit(2000000005.808:30955): avc: denied { setattr } for pid=29643 comm="syz.5.8301" name="SCTP" dev="sockfs" ino=172625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 620.912413][ T6029] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 620.915868][T29646] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 620.915868][T29646] program syz.4.8302 not setting count and/or reply_len properly [ 620.916668][ T6029] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 620.927349][ T6029] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.936980][ T6029] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 620.941337][ T6029] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.944691][ T6029] usb 11-1: Product: syz [ 620.946732][ T6029] usb 11-1: Manufacturer: syz [ 620.948867][ T6029] usb 11-1: SerialNumber: syz [ 621.057483][T29660] hugetlbfs: Unknown parameter 'si:e' [ 621.063906][T29658] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 621.182402][ T6029] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 621.226824][T29666] kvm: kvm [29665]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 621.232239][T29666] kvm: kvm [29665]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 621.254040][T29666] kvm: kvm [29665]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 621.283237][T29675] program syz.5.8313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.283753][T29666] kvm: kvm [29665]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 621.291518][T29666] kvm: kvm [29665]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 621.291846][T29675] hfsplus: unable to find HFS+ superblock [ 621.311903][T29666] kvm_intel: kvm [29665]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 621.401329][ T6029] usb 11-1: USB disconnect, device number 4 [ 621.409357][ T6029] usblp0: removed [ 621.498867][ T64] Bluetooth: hci1: command tx timeout [ 621.678276][ T55] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 621.838723][ T55] usb 7-1: Using ep0 maxpacket: 32 [ 621.844713][ T55] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 621.849006][ T55] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1352, setting to 1024 [ 621.852851][ T55] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.858641][ T55] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 621.863175][ T55] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 621.866105][ T55] usb 7-1: Product: syz [ 621.867493][ T55] usb 7-1: Manufacturer: syz [ 621.869106][ T55] usb 7-1: SerialNumber: syz [ 621.879240][T29681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 621.887580][ T55] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input37 [ 622.114990][T10612] usb 7-1: USB disconnect, device number 27 [ 622.124497][T10612] appletouch 7-1:1.0: input: appletouch disconnected [ 622.413641][T29704] syz_tun: entered promiscuous mode [ 622.419300][T29704] gretap0: entered promiscuous mode [ 622.425083][T29704] debugfs: 'hsr1' already exists in 'hsr' [ 622.429313][T29704] Cannot create hsr debugfs directory [ 622.826562][ C2] vcan0: j1939_tp_rxtimer: 0xffff888048431000: rx timeout, send abort [ 622.829544][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880571ed800: rx timeout, send abort [ 622.833795][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888048431000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 622.838719][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff8880571ed800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 622.843127][T29710] netlink: 'syz.6.8325': attribute type 1 has an invalid length. [ 622.923471][T29723] loop2: detected capacity change from 0 to 7 [ 622.926176][T29723] Dev loop2: unable to read RDB block 7 [ 622.928141][T29723] loop2: AHDI p2 [ 622.929905][T29723] loop2: partition table partially beyond EOD, truncated [ 622.974819][T29726] tmpfs: Bad value for 'mpol' [ 623.237926][T24847] syz_tun (unregistering): left promiscuous mode [ 623.256650][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 623.263881][ T5957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 623.269019][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 623.282732][ T5304] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 623.287357][ T5304] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 623.288516][ T5949] Bluetooth: hci3: Malformed LE Event: 0x02 [ 623.400391][T29744] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 623.477141][T29741] chnl_net:caif_netlink_parms(): no params data found [ 623.593260][T23422] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.602101][T23422] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.675839][T29741] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.678919][T29741] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.681629][T29741] bridge_slave_0: entered allmulticast mode [ 623.684680][T29741] bridge_slave_0: entered promiscuous mode [ 623.688586][T29741] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.690834][T29741] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.693166][T29741] bridge_slave_1: entered allmulticast mode [ 623.696030][T29741] bridge_slave_1: entered promiscuous mode [ 623.720258][ T64] Bluetooth: hci1: command tx timeout [ 623.747902][T23422] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.754778][T23422] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.786654][T29741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.793026][T29741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.802136][T29768] netlink: 'syz.5.8345': attribute type 1 has an invalid length. [ 623.844728][T29768] 8021q: adding VLAN 0 to HW filter on device bond2 [ 623.848614][T29741] team0: Port device team_slave_0 added [ 623.857237][T29768] bond2: (slave geneve2): making interface the new active one [ 623.861215][T29768] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 623.884091][T23422] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.887341][T23422] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.895586][T29741] team0: Port device team_slave_1 added [ 623.961578][T23422] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.965113][T23422] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.976212][T29741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.980894][T29741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.989204][T29741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.993971][T29741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.996351][T29741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.005888][T29741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.079463][T29741] hsr_slave_0: entered promiscuous mode [ 624.084624][T29741] hsr_slave_1: entered promiscuous mode [ 624.088006][T29741] debugfs: 'hsr0' already exists in 'hsr' [ 624.090480][T29741] Cannot create hsr debugfs directory [ 624.238660][T23422] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.244832][T23422] netpci0: left allmulticast mode [ 624.246622][T23422] netpci0: left promiscuous mode [ 624.248593][T23422] bridge0: port 1(netpci0) entered disabled state [ 624.417684][T23422] gretap0 (unregistering): left promiscuous mode [ 624.873393][T23422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.878199][T23422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.882703][T23422] bond0 (unregistering): Released all slaves [ 624.889832][T23422] bond1 (unregistering): Released all slaves [ 624.897145][T23422] bond2 (unregistering): Released all slaves [ 625.125480][T29779] erofs (device loop5): cannot find valid erofs superblock [ 625.276454][ T40] audit: type=1800 audit(2000000009.896:30956): pid=29790 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.8352" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 625.304419][T23422] hsr_slave_0: left promiscuous mode [ 625.307315][T23422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.310903][T23422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.315507][T23422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.318754][T23422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.328585][T23422] veth1_macvtap: left promiscuous mode [ 625.332003][T23422] veth0_macvtap: left promiscuous mode [ 625.335531][T23422] veth1_vlan: left allmulticast mode [ 625.337479][T23422] veth1_vlan: left promiscuous mode [ 625.339576][T23422] veth0_vlan: left promiscuous mode [ 625.440130][ T5957] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 625.441819][ T64] Bluetooth: hci5: command 0x1003 tx timeout [ 625.496509][T29798] loop2: detected capacity change from 0 to 7 [ 625.500372][T10609] Dev loop2: unable to read RDB block 7 [ 625.502867][T10609] loop2: AHDI p2 [ 625.504169][T10609] loop2: partition table partially beyond EOD, truncated [ 625.517080][ T5957] Bluetooth: hci2: command tx timeout [ 625.518633][T29798] Dev loop2: unable to read RDB block 7 [ 625.528537][T29798] loop2: AHDI p2 [ 625.530316][T29798] loop2: partition table partially beyond EOD, truncated [ 625.607865][ T40] audit: type=1326 audit(2000000010.205:30957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.6.8355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2738eec9 code=0x7ffc0000 [ 625.619235][ T40] audit: type=1326 audit(2000000010.205:30958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.6.8355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2738eec9 code=0x7ffc0000 [ 625.631766][ T40] audit: type=1326 audit(2000000010.205:30959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.6.8355" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9c2738eec9 code=0x7ffc0000 [ 625.642513][ T40] audit: type=1326 audit(2000000010.205:30960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.6.8355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2738eec9 code=0x7ffc0000 [ 625.653144][ T40] audit: type=1326 audit(2000000010.205:30961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.6.8355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2738eec9 code=0x7ffc0000 [ 625.665375][ T40] audit: type=1326 audit(2000000010.205:30962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.6.8355" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c2738eec9 code=0x7ffc0000 [ 625.674675][ T40] audit: type=1326 audit(2000000010.205:30963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.6.8355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2738eec9 code=0x7ffc0000 [ 625.684270][ T40] audit: type=1326 audit(2000000010.205:30964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.6.8355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2738eec9 code=0x7ffc0000 [ 625.782878][T29806] hugetlbfs: Unknown parameter 'si:e' [ 626.577034][T23422] team0 (unregistering): Port device team_slave_1 removed [ 626.659543][T23422] team0 (unregistering): Port device team_slave_0 removed [ 627.740068][ T5957] Bluetooth: hci2: command tx timeout [ 627.938729][T29813] geneve2: entered promiscuous mode [ 627.941367][T29813] geneve2: entered allmulticast mode [ 627.984760][T29816] __nla_validate_parse: 10 callbacks suppressed [ 627.984773][T29816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8360'. [ 627.996448][T29818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=29818 comm=syz.5.8362 [ 628.003348][T29818] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8362'. [ 628.007375][T29818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=29818 comm=syz.5.8362 [ 628.049684][T29813] program syz.4.8360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 628.105037][T29828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8365'. [ 628.108516][T29828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8365'. [ 628.128144][T29741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 628.134840][T29741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 628.141573][T29830] hugetlbfs: Unknown parameter 'si:e' [ 628.150718][T29741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 628.191325][T29836] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8368'. [ 628.191646][T29741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 628.240923][T29849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8369'. [ 628.299109][T29741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.304525][T29856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8371'. [ 628.320103][T29741] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.330484][T23430] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.333646][T23430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.361133][T23422] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.363740][T23422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.460973][T29870] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8374'. [ 628.463880][T29870] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8374'. [ 628.489737][T29873] hugetlbfs: Unknown parameter 'si:e' [ 628.499028][T29741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.527406][T29741] veth0_vlan: entered promiscuous mode [ 628.535152][T29741] veth1_vlan: entered promiscuous mode [ 628.540344][T29878] netlink: 'syz.4.8377': attribute type 1 has an invalid length. [ 628.562499][T29878] bond1: (slave geneve2): making interface the new active one [ 628.566355][T29878] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 628.569524][T23365] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 628.573052][T23365] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 628.576902][T23365] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 628.579967][T23365] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 628.597086][T29741] veth0_macvtap: entered promiscuous mode [ 628.603871][T29741] veth1_macvtap: entered promiscuous mode [ 628.611306][T29882] loop2: detected capacity change from 0 to 7 [ 628.615480][T10609] Dev loop2: unable to read RDB block 7 [ 628.617551][T29741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.618161][T10609] loop2: AHDI p2 [ 628.623854][T10609] loop2: partition table partially beyond EOD, truncated [ 628.627354][T29741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.631649][T29882] Dev loop2: unable to read RDB block 7 [ 628.634097][T29882] loop2: AHDI p2 [ 628.634656][T24330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.635720][T29882] loop2: partition table partially beyond EOD, truncated [ 628.639432][T24330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.650481][T24330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.661250][T24330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.731032][T23422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.733746][T23422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.762003][T23422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.765556][T23422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.865461][T29889] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 628.867788][T29888] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 628.901543][T29891] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 628.985771][T29895] netlink: 'syz.2.8382': attribute type 1 has an invalid length. [ 628.991949][T10463] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 628.994796][T10463] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.025529][ T5951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.043589][T29897] syz_tun: entered promiscuous mode [ 629.047789][T29897] gretap0: entered promiscuous mode [ 629.051761][T29897] debugfs: 'hsr1' already exists in 'hsr' [ 629.055936][T29897] Cannot create hsr debugfs directory [ 629.097708][T29899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8384'. [ 629.284246][T29903] "syz.2.8385" (29903) uses obsolete ecb(arc4) skcipher [ 629.331916][T29903] EXT4-fs (nbd2): unable to read superblock [ 629.754522][T29933] hugetlbfs: Unknown parameter 'si:e' [ 629.792852][ T53] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.829236][T29940] loop2: detected capacity change from 0 to 7 [ 629.832722][T29940] Dev loop2: unable to read RDB block 7 [ 629.834759][T29940] loop2: AHDI p2 [ 629.836486][T29940] loop2: partition table partially beyond EOD, truncated [ 629.909541][ T64] Bluetooth: hci5: sending frame failed (-49) [ 629.915728][ T5957] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 629.964076][ T5957] Bluetooth: hci2: command tx timeout [ 630.060831][ T53] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 630.583762][T29957] input: syz1 as /devices/virtual/input/input39 [ 630.643972][T29958] hugetlbfs: Unknown parameter 'si:e' [ 632.116429][T29900] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 632.187366][ T5957] Bluetooth: hci2: command tx timeout [ 632.190843][T29967] loop2: detected capacity change from 0 to 7 [ 632.195296][T29967] Dev loop2: unable to read RDB block 7 [ 632.199118][T29967] loop2: AHDI p2 [ 632.201413][T29967] loop2: partition table partially beyond EOD, truncated [ 632.668414][ T34] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 632.841034][ T34] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.845020][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 632.848070][ T34] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 632.851402][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.856804][ T34] usb 9-1: config 0 descriptor?? [ 632.861570][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 632.863865][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 632.872524][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 632.876068][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 632.878676][ T34] usb 9-1: media controller created [ 632.882566][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 632.891805][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 632.894385][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 632.897946][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input40 [ 632.904117][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 632.907368][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 633.075632][T29992] dvb-usb: bulk message failed: -22 (4/0) [ 633.083013][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 633.085159][ T840] usb 9-1: USB disconnect, device number 35 [ 633.085163][ T34] dvb-usb: error while querying for an remote control event. [ 633.103733][ T840] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 633.407743][T29995] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 633.457789][ T5957] Bluetooth: hci3: Malformed LE Event: 0x02 [ 633.470224][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 633.570923][T30021] __nla_validate_parse: 8 callbacks suppressed [ 633.570938][T30021] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8430'. [ 633.577300][T30021] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8430'. [ 633.582359][T30023] loop2: detected capacity change from 0 to 7 [ 633.586514][T30023] Dev loop2: unable to read RDB block 7 [ 633.591577][T30023] loop2: AHDI p2 [ 633.593905][T30023] loop2: partition table partially beyond EOD, truncated [ 633.606622][ T40] audit: type=1400 audit(2000000017.688:30965): avc: denied { setattr } for pid=30024 comm="syz.5.8431" path="/dev/nmem0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 633.638514][T30027] bridge0: entered allmulticast mode [ 633.650221][T30027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8432'. [ 633.654120][T30027] bridge_slave_1: left allmulticast mode [ 633.656170][T30027] bridge_slave_1: left promiscuous mode [ 633.658579][T30027] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.672776][T30027] bridge_slave_0: left allmulticast mode [ 633.675410][T30027] bridge_slave_0: left promiscuous mode [ 633.677751][T30027] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.687131][T30033] netlink: 'syz.5.8435': attribute type 1 has an invalid length. [ 633.698717][T30027] bridge0 (unregistering): left allmulticast mode [ 633.761783][ T40] audit: type=1400 audit(2000000017.838:30966): avc: denied { execute } for pid=30035 comm="syz.4.8436" path="/sys/kernel/debug/binder/state" dev="debugfs" ino=3460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 633.815435][T30033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 633.834022][T30037] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 633.846398][T30041] vlan2: entered allmulticast mode [ 633.848769][T30041] veth1: entered allmulticast mode [ 633.851765][T30041] veth1: entered promiscuous mode [ 633.854507][T30041] veth1: left promiscuous mode [ 633.858536][T30041] bond3: (slave vlan2): making interface the new active one [ 633.861809][T30041] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 633.872392][T30041] veth1: entered promiscuous mode [ 633.874372][T30041] vlan2: entered promiscuous mode [ 633.876417][T30041] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 633.937628][T30054] loop2: detected capacity change from 0 to 7 [ 633.944531][T10609] Dev loop2: unable to read RDB block 7 [ 633.946564][T10609] loop2: AHDI p2 [ 633.947778][T10609] loop2: partition table partially beyond EOD, truncated [ 633.962790][T30054] Dev loop2: unable to read RDB block 7 [ 633.964632][T30054] loop2: AHDI p2 [ 633.965831][T30054] loop2: partition table partially beyond EOD, truncated [ 634.319652][T30084] hugetlbfs: Unknown parameter 'si:e' [ 634.336112][ T6029] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 634.451969][T30088] loop2: detected capacity change from 0 to 7 [ 634.455977][T30088] Dev loop2: unable to read RDB block 7 [ 634.457779][T30088] loop2: AHDI p2 [ 634.458957][T30088] loop2: partition table partially beyond EOD, truncated [ 634.507058][ T6029] usb 11-1: Using ep0 maxpacket: 8 [ 634.510971][ T6029] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 634.516192][ T6029] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 634.521886][ T6029] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 634.524107][T30092] afs: Unknown parameter 'measure' [ 634.526148][ T6029] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 634.533215][ T6029] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 634.537812][ T6029] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.542087][ T40] audit: type=1400 audit(2000000018.567:30967): avc: denied { unlink } for pid=30091 comm="syz.5.8456" name="file0" dev="9p" ino=71827687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 634.673714][T30100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8461'. [ 634.677231][T30100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8461'. [ 634.733847][T30104] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8458'. [ 634.737417][T30104] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8458'. [ 634.747364][T30106] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20003 [ 634.773056][ T6029] usb 11-1: GET_CAPABILITIES returned 0 [ 634.776079][ T6029] usbtmc 11-1:16.0: can't read capabilities [ 634.781527][T30110] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 634.910500][T30123] netlink: 'syz.2.8470': attribute type 58 has an invalid length. [ 634.968576][T30127] kernel read not supported for file /policy (pid: 30127 comm: syz.2.8472) [ 635.174976][T30143] hugetlbfs: Unknown parameter 'si:e' [ 635.219786][T30147] loop2: detected capacity change from 0 to 7 [ 635.226115][T30147] Dev loop2: unable to read RDB block 7 [ 635.228636][T30147] loop2: AHDI p2 [ 635.230180][T30147] loop2: partition table partially beyond EOD, truncated [ 635.398375][T30158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8484'. [ 635.454612][ T40] audit: type=1400 audit(2000000019.418:30968): avc: denied { shutdown } for pid=30156 comm="syz.5.8484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 635.600711][T30169] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8488'. [ 635.603754][T30169] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8488'. [ 635.680490][T30174] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 635.684020][T30174] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 635.685908][ T5957] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 635.686593][ T5957] Bluetooth: hci3: Malformed LE Event: 0x02 [ 635.686654][T30174] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 635.695612][T30174] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 635.831344][T30184] program syz.5.8495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 635.867796][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.907894][ T40] audit: type=1800 audit(2000000019.849:30969): pid=30188 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.8498" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 636.162620][T30205] hugetlbfs: Unknown parameter 'si:e' [ 636.825038][ T5957] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 636.825117][ T5957] Bluetooth: hci2: Dropping invalid advertising data [ 636.832546][ T5957] Bluetooth: hci2: Malformed LE Event: 0x02 [ 636.964627][T30264] loop2: detected capacity change from 0 to 7 [ 636.968208][T30264] Dev loop2: unable to read RDB block 7 [ 636.970417][T30264] loop2: AHDI p2 [ 636.971840][T30264] loop2: partition table partially beyond EOD, truncated [ 637.309967][ T5951] usb 11-1: USB disconnect, device number 5 [ 637.453989][T23428] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.456933][T23428] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.460563][T23428] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 637.636447][T30293] FAT-fs (sr0): bogus number of reserved sectors [ 637.638889][T30293] FAT-fs (sr0): Can't find a valid FAT filesystem [ 637.685325][T30293] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 638.000530][T30320] overlayfs: missing 'lowerdir' [ 638.004354][T30320] ieee802154 phy0 wpan0: encryption failed: -22 [ 638.028187][ T55] Process accounting resumed [ 638.359317][ T40] audit: type=1400 audit(2000000022.140:30970): avc: denied { setattr } for pid=30348 comm="syz.6.8556" name="tty4" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 638.634565][ T5957] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 638.634621][ T5957] Bluetooth: hci1: Dropping invalid advertising data [ 638.640940][ T5957] Bluetooth: hci1: Malformed LE Event: 0x02 [ 638.743195][T30378] loop2: detected capacity change from 0 to 7 [ 638.747166][T30378] Dev loop2: unable to read RDB block 7 [ 638.748996][T30378] loop2: AHDI p2 [ 638.750316][T30378] loop2: partition table partially beyond EOD, truncated [ 638.953631][ T5957] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 638.953684][ T5957] Bluetooth: hci1: Dropping invalid advertising data [ 638.961215][ T5957] Bluetooth: hci1: Malformed LE Event: 0x02 [ 639.019713][T30397] __nla_validate_parse: 7 callbacks suppressed [ 639.019731][T30397] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8574'. [ 639.103786][T30393] kernel profiling enabled (shift: 34) [ 639.106521][T30393] profiling shift: 34 too large [ 639.143233][T30407] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8577'. [ 639.147724][T30407] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8577'. [ 639.231773][T30421] loop2: detected capacity change from 0 to 7 [ 639.238231][ T5957] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 639.238274][ T5957] Bluetooth: hci1: Dropping invalid advertising data [ 639.242170][T29741] Dev loop2: unable to read RDB block 7 [ 639.246625][ T5957] Bluetooth: hci1: Malformed LE Event: 0x02 [ 639.247402][T29741] loop2: AHDI p1 p2 p3 [ 639.251670][T29741] loop2: partition table partially beyond EOD, truncated [ 639.255328][T29741] loop2: p1 start 1601398130 is beyond EOD, truncated [ 639.258104][T29741] loop2: p2 start 1702059890 is beyond EOD, truncated [ 639.262965][T30421] Dev loop2: unable to read RDB block 7 [ 639.272094][T30421] loop2: AHDI p1 p2 p3 [ 639.273938][T30421] loop2: partition table partially beyond EOD, truncated [ 639.277851][T30421] loop2: p1 start 1601398130 is beyond EOD, truncated [ 639.280788][T30421] loop2: p2 start 1702059890 is beyond EOD, truncated [ 639.326180][T30435] gfs2: not a GFS2 filesystem [ 639.330454][T30435] gfs2: not a GFS2 filesystem [ 639.333211][T30435] gfs2: not a GFS2 filesystem [ 639.335270][T30435] gfs2: not a GFS2 filesystem [ 639.337281][T30435] gfs2: not a GFS2 filesystem [ 639.339773][ T5354] Dev loop2: unable to read RDB block 7 [ 639.341602][ T5354] loop2: AHDI p1 p2 p3 [ 639.342555][T30435] gfs2: not a GFS2 filesystem [ 639.343018][ T5354] loop2: partition table partially beyond EOD, truncated [ 639.344972][T30435] gfs2: not a GFS2 filesystem [ 639.346859][ T5354] loop2: p1 start 1601398130 is beyond EOD, truncated [ 639.349184][T30435] gfs2: not a GFS2 filesystem [ 639.355893][T30435] gfs2: not a GFS2 filesystem [ 639.358544][T30435] gfs2: not a GFS2 filesystem [ 639.360662][ T5354] loop2: p2 start 1702059890 is beyond EOD, truncated [ 639.362445][T30435] gfs2: not a GFS2 filesystem [ 639.365294][T30435] gfs2: not a GFS2 filesystem [ 639.367677][T30435] gfs2: not a GFS2 filesystem [ 639.370006][T30435] gfs2: not a GFS2 filesystem [ 639.373064][T30435] gfs2: not a GFS2 filesystem [ 639.383952][T30435] gfs2: not a GFS2 filesystem [ 639.386450][T30435] gfs2: not a GFS2 filesystem [ 639.389820][T30435] gfs2: not a GFS2 filesystem [ 639.392308][T30435] gfs2: not a GFS2 filesystem [ 639.395463][T30435] gfs2: not a GFS2 filesystem [ 639.397585][T30435] gfs2: not a GFS2 filesystem [ 639.409205][T30435] gfs2: not a GFS2 filesystem [ 639.415366][T30435] gfs2: not a GFS2 filesystem [ 639.418807][T30435] gfs2: not a GFS2 filesystem [ 639.421214][T30435] gfs2: not a GFS2 filesystem [ 639.423443][T30435] gfs2: not a GFS2 filesystem [ 639.425845][T30435] gfs2: not a GFS2 filesystem [ 639.428368][T30435] gfs2: not a GFS2 filesystem [ 639.430500][T30435] gfs2: not a GFS2 filesystem [ 639.433609][T30435] gfs2: not a GFS2 filesystem [ 639.449954][T30435] gfs2: not a GFS2 filesystem [ 639.453548][T30435] gfs2: not a GFS2 filesystem [ 639.455817][T30435] gfs2: not a GFS2 filesystem [ 639.459104][T30435] gfs2: not a GFS2 filesystem [ 639.462071][T30435] gfs2: not a GFS2 filesystem [ 639.464957][T30435] gfs2: not a GFS2 filesystem [ 639.467223][T30435] gfs2: not a GFS2 filesystem [ 639.469507][T30447] netlink: 'syz.4.8591': attribute type 21 has an invalid length. [ 639.470193][T30435] gfs2: not a GFS2 filesystem [ 639.475160][T30435] gfs2: not a GFS2 filesystem [ 639.477541][T30435] gfs2: not a GFS2 filesystem [ 639.480059][T30435] gfs2: not a GFS2 filesystem [ 639.482158][T30435] gfs2: not a GFS2 filesystem [ 639.484821][T30435] gfs2: not a GFS2 filesystem [ 639.486986][T30435] gfs2: not a GFS2 filesystem [ 639.489476][T30435] gfs2: not a GFS2 filesystem [ 639.491638][T30435] gfs2: not a GFS2 filesystem [ 639.493847][T30435] gfs2: not a GFS2 filesystem [ 639.496231][T30435] gfs2: not a GFS2 filesystem [ 639.499191][T30435] gfs2: not a GFS2 filesystem [ 639.503597][T30435] gfs2: not a GFS2 filesystem [ 639.506079][T30435] gfs2: not a GFS2 filesystem [ 639.508128][T30435] gfs2: not a GFS2 filesystem [ 639.510613][T30435] gfs2: not a GFS2 filesystem [ 639.513116][T30435] gfs2: not a GFS2 filesystem [ 639.515297][T30435] gfs2: not a GFS2 filesystem [ 639.517448][T30435] gfs2: not a GFS2 filesystem [ 639.519735][T30435] gfs2: not a GFS2 filesystem [ 639.522747][T30435] gfs2: not a GFS2 filesystem [ 639.525211][T30435] gfs2: not a GFS2 filesystem [ 639.528121][T30435] gfs2: not a GFS2 filesystem [ 639.530739][T30435] gfs2: not a GFS2 filesystem [ 639.535597][T30435] gfs2: not a GFS2 filesystem [ 639.537887][T30435] gfs2: not a GFS2 filesystem [ 639.540394][T30435] gfs2: not a GFS2 filesystem [ 639.543193][T30435] gfs2: not a GFS2 filesystem [ 639.555249][T30454] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8595'. [ 639.579832][T30457] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8596'. [ 639.584091][T30457] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8596'. [ 639.625612][T30460] loop2: detected capacity change from 0 to 7 [ 639.630309][T30460] Dev loop2: unable to read RDB block 7 [ 639.632111][T30460] loop2: AHDI p2 [ 639.633327][T30460] loop2: partition table partially beyond EOD, truncated [ 639.725776][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 639.728110][ T1115] ata1: failed to read log page 10h (errno=-5) [ 639.730292][ T1115] ata1.00: exception Emask 0x1 SAct 0x4 SErr 0x0 action 0x0 [ 639.732842][ T1115] ata1.00: irq_stat 0x40000000 [ 639.735039][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 639.737543][ T1115] ata1.00: cmd 61/18:10:06:20:10/00:00:00:00:00/40 tag 2 ncq dma 12288 out [ 639.737543][ T1115] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 639.743545][ T1115] ata1.00: status: { DRDY } [ 639.745197][ T1115] ata1.00: error: { ABRT } [ 639.748502][ T1115] ata1.00: configured for UDMA/100 [ 639.751127][ T1115] ata1: EH complete [ 639.812850][T30467] netlink: 'syz.6.8598': attribute type 4 has an invalid length. [ 640.134426][T30498] o2cb: This node has not been configured. [ 640.134431][ T40] audit: type=1400 audit(2000000023.796:30971): avc: denied { create } for pid=30494 comm="syz.5.8604" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 640.143622][T30498] o2cb: Cluster check failed. Fix errors before retrying. [ 640.145889][T30498] (syz.5.8604,30498,1):user_dlm_register:674 ERROR: status = -22 [ 640.148322][T30498] (syz.5.8604,30498,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 640.248284][T30501] loop2: detected capacity change from 0 to 7 [ 640.250726][T30501] Dev loop2: unable to read RDB block 7 [ 640.252478][T30501] loop2: AHDI p2 [ 640.253656][T30501] loop2: partition table partially beyond EOD, truncated [ 640.736439][T30495] netlink: 232 bytes leftover after parsing attributes in process `syz.5.8604'. [ 641.609793][T30539] netlink: 'syz.6.8616': attribute type 11 has an invalid length. [ 641.708765][T30548] binder: 30547:30548 ioctl c018620b 0 returned -14 [ 641.796065][T30552] hugetlbfs: Unknown parameter 'si:e' [ 641.910537][T30554] kvm: kvm [30553]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 641.914702][T30554] kvm: kvm [30553]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 641.950731][T30562] MTD: Attempt to mount non-MTD device "/dev/nbd5" [ 641.951573][T30554] kvm: kvm [30553]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 641.953668][T30562] cramfs: wrong magic [ 641.976276][T30554] kvm: kvm [30553]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 641.979409][T30554] kvm: kvm [30553]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 641.991703][T30566] netlink: 'syz.2.8627': attribute type 1 has an invalid length. [ 641.996910][T30554] kvm_intel: kvm [30553]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 642.023037][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 642.276842][T30579] hugetlbfs: Unknown parameter 'si:e' [ 642.463519][T30591] bond0: entered allmulticast mode [ 642.465502][T30591] bond_slave_0: entered allmulticast mode [ 642.467312][T30591] bond_slave_1: entered allmulticast mode [ 642.832325][ T40] audit: type=1400 audit(2000000026.322:30972): avc: denied { map } for pid=30614 comm="syz.4.8643" path="socket:[178638]" dev="sockfs" ino=178638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 642.945387][T30617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8644'. [ 643.402402][ T53] usb 9-1: new low-speed USB device number 36 using dummy_hcd [ 643.575889][ T53] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 643.579406][ T53] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 643.584211][ T53] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 643.591766][ T53] usb 9-1: string descriptor 0 read error: -22 [ 643.595899][ T53] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 643.601023][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.608583][T30623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 643.615245][T30633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8649'. [ 643.703959][ T40] audit: type=1400 audit(2000000027.135:30973): avc: denied { append } for pid=30634 comm="syz.2.8650" name="sequencer" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="nfs" [ 643.813634][T30640] loop2: detected capacity change from 0 to 7 [ 643.818115][T10609] Dev loop2: unable to read RDB block 7 [ 643.826151][T10609] loop2: AHDI p2 [ 643.828006][T10609] loop2: partition table partially beyond EOD, truncated [ 643.830885][ T53] cdc_ncm 9-1:1.0: bind() failure [ 643.838466][ T53] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 643.839714][T30642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8652'. [ 643.843821][ T53] cdc_ncm 9-1:1.1: bind() failure [ 643.856602][T30640] Dev loop2: unable to read RDB block 7 [ 643.858718][ T53] usb 9-1: USB disconnect, device number 36 [ 643.859158][T30640] loop2: AHDI p2 [ 643.863361][T30640] loop2: partition table partially beyond EOD, truncated [ 644.004571][T30643] batman_adv: batadv0: Removing interface: team0 [ 644.010498][T30643] team0 (unregistering): Port device team_slave_0 removed [ 644.015291][T30643] team0 (unregistering): Port device team_slave_1 removed [ 644.056258][ T5957] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 644.056300][ T5957] Bluetooth: hci2: Dropping invalid advertising data [ 644.061237][ T5957] Bluetooth: hci2: Malformed LE Event: 0x02 [ 644.228618][T30671] loop2: detected capacity change from 0 to 7 [ 644.232487][T10609] Dev loop2: unable to read RDB block 7 [ 644.234511][T10609] loop2: AHDI p2 [ 644.236396][T10609] loop2: partition table partially beyond EOD, truncated [ 644.242073][T30671] Dev loop2: unable to read RDB block 7 [ 644.244702][T30671] loop2: AHDI p2 [ 644.245996][T30671] loop2: partition table partially beyond EOD, truncated [ 644.396638][T30680] bridge_slave_0: default FDB implementation only supports local addresses [ 644.401570][ T5957] Bluetooth: hci0: unknown advertising packet type: 0x82 [ 644.401602][ T5957] Bluetooth: hci0: Dropping invalid advertising data [ 644.409805][ T5957] Bluetooth: hci0: Malformed LE Event: 0x02 [ 644.747933][T30693] loop2: detected capacity change from 0 to 7 [ 644.751545][T30693] Dev loop2: unable to read RDB block 7 [ 644.754032][T30693] loop2: AHDI p2 [ 644.755667][T30693] loop2: partition table partially beyond EOD, truncated [ 644.833654][T30701] __nla_validate_parse: 7 callbacks suppressed [ 644.833669][T30701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8674'. [ 644.840758][T30701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8674'. [ 645.068474][T30715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8680'. [ 645.075372][T30715] openvswitch: netlink: Flow key attr not present in new flow. [ 645.129255][T30722] loop2: detected capacity change from 0 to 7 [ 645.132727][T10609] Dev loop2: unable to read RDB block 7 [ 645.139024][T10609] loop2: AHDI p2 [ 645.140954][T10609] loop2: partition table partially beyond EOD, truncated [ 645.146749][T30722] Dev loop2: unable to read RDB block 7 [ 645.149816][T30722] loop2: AHDI p2 [ 645.151222][T30722] loop2: partition table partially beyond EOD, truncated [ 645.405357][T30739] Scaler: ================= START STATUS ================= [ 645.409181][T30739] Scaler: ================== END STATUS ================== [ 645.419226][T30739] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8689'. [ 645.464265][T23343] team0: left allmulticast mode [ 645.467207][T23343] team_slave_0: left allmulticast mode [ 645.469568][T23343] team_slave_1: left allmulticast mode [ 645.471998][T23343] bridge0: port 3(team0) entered disabled state [ 645.478022][T23343] bridge_slave_1: left allmulticast mode [ 645.480594][T23343] bridge_slave_1: left promiscuous mode [ 645.483099][T23343] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.491560][T23343] bridge_slave_0: left allmulticast mode [ 645.493930][T23343] bridge_slave_0: left promiscuous mode [ 645.496514][T23343] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.619890][T30759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8696'. [ 645.676887][T23343] gretap0 (unregistering): left promiscuous mode [ 645.720396][T23343] dvmrp17 (unregistering): left allmulticast mode [ 646.096255][T23343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.100793][T23343] bond0 (unregistering): (slave c@0): Releasing backup interface [ 646.105284][T23343] bond0 (unregistering): Released all slaves [ 646.232239][T23343] bond1 (unregistering): (slave wlan0): Releasing active interface [ 646.235484][T23343] vlan2: entered promiscuous mode [ 646.243126][T23343] bond1 (unregistering): (slave vlan2): Releasing active interface [ 646.249202][T23343] bond1 (unregistering): Released all slaves [ 646.256755][T23343] bond2 (unregistering): Released all slaves [ 646.263377][T30748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8692'. [ 646.268377][T30748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8692'. [ 646.292586][T30762] SELinux: failed to load policy [ 646.303558][ T5957] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 646.303596][ T5957] Bluetooth: hci2: Dropping invalid advertising data [ 646.310595][ T5957] Bluetooth: hci2: Malformed LE Event: 0x02 [ 646.328970][T30770] hugetlbfs: Unknown parameter 'si:e' [ 646.364304][T23430] vlan2: left promiscuous mode [ 646.373055][T30774] loop2: detected capacity change from 0 to 7 [ 646.376791][T30774] Dev loop2: unable to read RDB block 7 [ 646.378667][T30774] loop2: AHDI p2 [ 646.379996][T30774] loop2: partition table partially beyond EOD, truncated [ 646.424836][T23343] IPVS: stopping backup sync thread 24991 ... [ 646.452765][T30782] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 646.475749][T30787] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 646.495495][T30790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8708'. [ 646.498744][T30790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8708'. [ 646.758849][T30816] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8717'. [ 646.817083][T23343] hsr_slave_0: left promiscuous mode [ 646.819697][T23343] hsr_slave_1: left promiscuous mode [ 646.822207][T23343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.826664][T23343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.831662][T23343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.834979][T23343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.882199][T23343] veth1_macvtap: left allmulticast mode [ 646.884791][T23343] veth1_macvtap: left promiscuous mode [ 646.887366][T23343] veth0_macvtap: left promiscuous mode [ 646.889628][T23343] veth1_vlan: left promiscuous mode [ 646.892020][T23343] veth0_vlan: left promiscuous mode [ 647.715537][T30820] usb usb8: usbfs: process 30820 (syz.5.8721) did not claim interface 0 before use [ 647.777727][T30826] SQUASHFS error: Failed to read block 0x0: -5 [ 647.783637][T30826] unable to read squashfs_super_block [ 648.233491][T23343] team_slave_1 (unregistering): left promiscuous mode [ 648.238384][T23343] team0 (unregistering): Port device team_slave_1 removed [ 648.402080][T23343] team_slave_0 (unregistering): left promiscuous mode [ 648.406273][T23343] team0 (unregistering): Port device team_slave_0 removed [ 649.370838][T30825] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 649.441332][T30847] hugetlbfs: Unknown parameter 'si:e' [ 649.583759][T30857] loop2: detected capacity change from 0 to 7 [ 649.592630][T10609] Dev loop2: unable to read RDB block 7 [ 649.595301][T10609] loop2: AHDI p2 [ 649.596937][T10609] loop2: partition table partially beyond EOD, truncated [ 649.602216][T30857] Dev loop2: unable to read RDB block 7 [ 649.604645][T30857] loop2: AHDI p2 [ 649.606718][T30857] loop2: partition table partially beyond EOD, truncated [ 649.850167][T23343] IPVS: stop unused estimator thread 0... [ 650.156013][ T40] audit: type=1326 audit(6000000599.917:30974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30885 comm="syz.4.8745" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa18338eec9 code=0x0 [ 650.601026][T30893] hugetlbfs: Unknown parameter 'si:e' [ 650.691811][T30904] FAULT_INJECTION: forcing a failure. [ 650.691811][T30904] name failslab, interval 1, probability 0, space 0, times 0 [ 650.699048][T30904] CPU: 3 UID: 0 PID: 30904 Comm: syz.5.8752 Not tainted syzkaller #0 PREEMPT(full) [ 650.699068][T30904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 650.699077][T30904] Call Trace: [ 650.699093][T30904] [ 650.699099][T30904] dump_stack_lvl+0x16c/0x1f0 [ 650.699129][T30904] should_fail_ex+0x512/0x640 [ 650.699153][T30904] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 650.699170][T30904] should_failslab+0xc2/0x120 [ 650.699188][T30904] kmem_cache_alloc_noprof+0x75/0x6e0 [ 650.699210][T30904] ? skb_clone+0x190/0x3f0 [ 650.699229][T30904] ? skb_clone+0x190/0x3f0 [ 650.699243][T30904] skb_clone+0x190/0x3f0 [ 650.699259][T30904] netlink_deliver_tap+0xabd/0xd30 [ 650.699280][T30904] netlink_unicast+0x64c/0x870 [ 650.699299][T30904] ? __pfx_netlink_unicast+0x10/0x10 [ 650.699322][T30904] netlink_sendmsg+0x8c8/0xdd0 [ 650.699342][T30904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.699385][T30904] ____sys_sendmsg+0xa98/0xc70 [ 650.699406][T30904] ? copy_msghdr_from_user+0x10a/0x160 [ 650.699422][T30904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.699449][T30904] ___sys_sendmsg+0x134/0x1d0 [ 650.699466][T30904] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.699502][T30904] __sys_sendmsg+0x16d/0x220 [ 650.699518][T30904] ? __pfx___sys_sendmsg+0x10/0x10 [ 650.699573][T30904] ? fput+0x9b/0xd0 [ 650.699593][T30904] do_syscall_64+0xcd/0x4e0 [ 650.699609][T30904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.699623][T30904] RIP: 0033:0x7ff3a578eec9 [ 650.699635][T30904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.699649][T30904] RSP: 002b:00007ff3a66b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.699662][T30904] RAX: ffffffffffffffda RBX: 00007ff3a59e5fa0 RCX: 00007ff3a578eec9 [ 650.699671][T30904] RDX: 0000000004000880 RSI: 0000200000000440 RDI: 0000000000000003 [ 650.699679][T30904] RBP: 00007ff3a66b8090 R08: 0000000000000000 R09: 0000000000000000 [ 650.699687][T30904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.699694][T30904] R13: 00007ff3a59e6038 R14: 00007ff3a59e5fa0 R15: 00007ffd55317d58 [ 650.699712][T30904] [ 651.103284][ T40] audit: type=1400 audit(6000000600.806:30975): avc: denied { accept } for pid=30936 comm="syz.2.8764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 651.112675][T30937] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 651.112705][T30937] SELinux: failed to load policy [ 651.125191][ T40] audit: type=1400 audit(6000000600.815:30976): avc: denied { execute } for pid=30936 comm="syz.2.8764" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 651.229907][T30948] __nla_validate_parse: 5 callbacks suppressed [ 651.229921][T30948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8769'. [ 651.331985][T30959] 9p filesystem being mounted at /133/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 651.342255][ T40] audit: type=1400 audit(6000000601.030:30977): avc: denied { shutdown } for pid=30958 comm="syz.2.8772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 651.360696][ T40] audit: type=1400 audit(6000000601.049:30978): avc: denied { create } for pid=30958 comm="syz.2.8772" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 651.402073][ T5957] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 651.405052][ T5957] Bluetooth: Wrong link type (-22) [ 651.443220][ T40] audit: type=1326 audit(6000000601.133:30979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30973 comm="syz.4.8778" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa18338eec9 code=0x0 [ 651.448559][T30977] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 651.499090][T30980] FAULT_INJECTION: forcing a failure. [ 651.499090][T30980] name failslab, interval 1, probability 0, space 0, times 0 [ 651.503287][T30980] CPU: 0 UID: 0 PID: 30980 Comm: syz.5.8780 Not tainted syzkaller #0 PREEMPT(full) [ 651.503304][T30980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 651.503311][T30980] Call Trace: [ 651.503316][T30980] [ 651.503321][T30980] dump_stack_lvl+0x16c/0x1f0 [ 651.503337][T30980] should_fail_ex+0x512/0x640 [ 651.503357][T30980] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 651.503377][T30980] should_failslab+0xc2/0x120 [ 651.503391][T30980] kmem_cache_alloc_node_noprof+0x78/0x770 [ 651.503409][T30980] ? __alloc_skb+0x2b2/0x380 [ 651.503424][T30980] ? __alloc_skb+0x2b2/0x380 [ 651.503434][T30980] __alloc_skb+0x2b2/0x380 [ 651.503446][T30980] ? __pfx___alloc_skb+0x10/0x10 [ 651.503457][T30980] ? genl_rcv_msg+0x490/0x800 [ 651.503473][T30980] ? genl_rcv_msg+0x4bb/0x800 [ 651.503509][T30980] netlink_ack+0x15d/0xb80 [ 651.503529][T30980] netlink_rcv_skb+0x332/0x420 [ 651.503548][T30980] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.503565][T30980] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 651.503585][T30980] ? netlink_deliver_tap+0x1ae/0xd30 [ 651.503600][T30980] genl_rcv+0x28/0x40 [ 651.503614][T30980] netlink_unicast+0x5a7/0x870 [ 651.503630][T30980] ? __pfx_netlink_unicast+0x10/0x10 [ 651.503650][T30980] netlink_sendmsg+0x8c8/0xdd0 [ 651.503666][T30980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.503686][T30980] ____sys_sendmsg+0xa98/0xc70 [ 651.503703][T30980] ? copy_msghdr_from_user+0x10a/0x160 [ 651.503716][T30980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.503739][T30980] ___sys_sendmsg+0x134/0x1d0 [ 651.503752][T30980] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.503783][T30980] __sys_sendmsg+0x16d/0x220 [ 651.503798][T30980] ? __pfx___sys_sendmsg+0x10/0x10 [ 651.503820][T30980] do_syscall_64+0xcd/0x4e0 [ 651.503832][T30980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.503844][T30980] RIP: 0033:0x7ff3a578eec9 [ 651.503854][T30980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.503865][T30980] RSP: 002b:00007ff3a66b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.503876][T30980] RAX: ffffffffffffffda RBX: 00007ff3a59e5fa0 RCX: 00007ff3a578eec9 [ 651.503883][T30980] RDX: 0000000004000880 RSI: 0000200000000440 RDI: 0000000000000003 [ 651.503890][T30980] RBP: 00007ff3a66b8090 R08: 0000000000000000 R09: 0000000000000000 [ 651.503896][T30980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.503902][T30980] R13: 00007ff3a59e6038 R14: 00007ff3a59e5fa0 R15: 00007ffd55317d58 [ 651.503916][T30980] [ 651.596810][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.639837][T30986] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8781'. [ 651.643770][T30986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8781'. [ 651.656897][T30988] netlink: 172 bytes leftover after parsing attributes in process `syz.5.8784'. [ 651.699916][T30995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30995 comm=syz.5.8785 [ 651.704812][T30993] netlink: 'syz.5.8785': attribute type 1 has an invalid length. [ 651.749090][T30993] bond4: entered promiscuous mode [ 651.752493][T30993] bond4: entered allmulticast mode [ 651.810760][T31001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.816078][T31001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.904901][T30998] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 652.050480][ T10] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 652.165487][T31021] hugetlbfs: Unknown parameter 'si:e' [ 652.200177][ T10] usb 10-1: device descriptor read/64, error -71 [ 652.309868][T23343] bridge0: port 3(batadv0) entered disabled state [ 652.314209][T23343] team0: left allmulticast mode [ 652.316227][T23343] team_slave_0: left allmulticast mode [ 652.320114][T23343] team_slave_1: left allmulticast mode [ 652.323228][T23343] bridge0: port 1(team0) entered disabled state [ 652.328293][T23343] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.478819][ T10] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 652.504574][T23343] gretap0 (unregistering): left promiscuous mode [ 652.627675][ T10] usb 10-1: device descriptor read/64, error -71 [ 652.745528][ T10] usb usb10-port1: attempt power cycle [ 652.891171][T23343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.897720][T23343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.902059][T23343] bond0 (unregistering): Released all slaves [ 652.997547][T23343] tipc: Disabling bearer [ 653.011282][T23343] tipc: Left network mode [ 653.119492][ T10] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 653.143778][T31050] usb usb1: check_ctrlrecip: process 31050 (syz.4.8805) requesting ep 01 but needs 81 [ 653.147535][T31050] usb usb1: usbfs: process 31050 (syz.4.8805) did not claim interface 0 before use [ 653.151170][T31047] usb usb1: check_ctrlrecip: process 31047 (syz.4.8805) requesting ep 01 but needs 81 [ 653.155747][T31047] usb usb1: usbfs: process 31047 (syz.4.8805) did not claim interface 0 before use [ 653.156106][ T10] usb 10-1: device descriptor read/8, error -71 [ 653.177212][T31054] 9p filesystem being mounted at /92/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 653.211089][ T40] audit: type=1400 audit(6000000602.780:30980): avc: denied { unlink } for pid=31053 comm="syz.6.8808" name="file0" dev="9p" ino=71827687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 653.232408][T31059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8809'. [ 653.319277][T23343] hsr_slave_0: left promiscuous mode [ 653.322192][T23343] hsr_slave_1: left promiscuous mode [ 653.324833][T23343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.328449][T23343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.332509][T23343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.335882][T23343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.391584][T23343] veth1_macvtap: left promiscuous mode [ 653.394560][T23343] veth0_macvtap: left promiscuous mode [ 653.396684][T23343] veth1_vlan: left promiscuous mode [ 653.401616][T23343] veth0_vlan: left promiscuous mode [ 653.429619][ T10] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 653.455702][ T10] usb 10-1: device descriptor read/8, error -71 [ 653.580727][ T10] usb usb10-port1: unable to enumerate USB device [ 653.596017][T31080] netlink: 'syz.2.8812': attribute type 11 has an invalid length. [ 654.538804][T31084] loop2: detected capacity change from 0 to 7 [ 654.545084][T31084] Dev loop2: unable to read RDB block 7 [ 654.546949][T31084] loop2: AHDI p2 [ 654.548192][T31084] loop2: partition table partially beyond EOD, truncated [ 654.645988][T23343] team_slave_1 (unregistering): left promiscuous mode [ 654.650627][T23343] team0 (unregistering): Port device team_slave_1 removed [ 654.710823][ T40] audit: type=1400 audit(6000000604.183:30981): avc: granted { setsecparam } for pid=31085 comm="syz.6.8818" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 654.829549][T23343] team_slave_0 (unregistering): left promiscuous mode [ 654.834527][T23343] team0 (unregistering): Port device team_slave_0 removed [ 655.057305][T31090] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8819'. [ 655.739707][T31087] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 655.895804][T31108] 9p filesystem being mounted at /228/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 655.935362][T31110] hugetlbfs: Unknown parameter 'si:e' [ 656.070118][T31124] netlink: 'syz.2.8831': attribute type 1 has an invalid length. [ 656.095041][T31124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 656.098262][T31124] netlink: 'syz.2.8831': attribute type 1 has an invalid length. [ 656.099304][ T5957] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 656.102991][ T5957] Bluetooth: hci1: Malformed LE Event: 0x02 [ 656.122533][T31124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 656.132805][T31124] netlink: 'syz.2.8831': attribute type 1 has an invalid length. [ 656.160524][T31124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 656.164197][T31124] netlink: 'syz.2.8831': attribute type 1 has an invalid length. [ 656.188810][T31124] 8021q: adding VLAN 0 to HW filter on device bond4 [ 656.192531][T31124] netlink: 'syz.2.8831': attribute type 1 has an invalid length. [ 656.221971][T31124] 8021q: adding VLAN 0 to HW filter on device bond5 [ 656.225479][T31124] netlink: 'syz.2.8831': attribute type 1 has an invalid length. [ 656.229843][T31138] hugetlbfs: Unknown parameter 'si:e' [ 656.243874][T31124] 8021q: adding VLAN 0 to HW filter on device bond6 [ 656.247603][T31124] netlink: 'syz.2.8831': attribute type 1 has an invalid length. [ 656.272957][T31124] 8021q: adding VLAN 0 to HW filter on device bond7 [ 656.277501][T31124] netlink: 'syz.2.8831': attribute type 1 has an invalid length. [ 656.282315][T23343] IPVS: stop unused estimator thread 0... [ 656.297079][T31124] 8021q: adding VLAN 0 to HW filter on device bond8 [ 656.324427][T31124] 8021q: adding VLAN 0 to HW filter on device bond9 [ 656.345641][T31124] 8021q: adding VLAN 0 to HW filter on device bond10 [ 656.366401][T31124] 8021q: adding VLAN 0 to HW filter on device bond11 [ 656.390483][T31124] 8021q: adding VLAN 0 to HW filter on device bond12 [ 656.414233][T31124] 8021q: adding VLAN 0 to HW filter on device bond13 [ 656.440346][T31124] 8021q: adding VLAN 0 to HW filter on device bond14 [ 656.467338][T31124] 8021q: adding VLAN 0 to HW filter on device bond15 [ 656.492138][T31124] 8021q: adding VLAN 0 to HW filter on device bond16 [ 656.509167][T31124] 8021q: adding VLAN 0 to HW filter on device bond17 [ 656.531645][T31124] 8021q: adding VLAN 0 to HW filter on device bond18 [ 656.546761][T31124] 8021q: adding VLAN 0 to HW filter on device bond19 [ 656.547423][T31159] dns_resolver: Unsupported server list version (0) [ 656.581653][T31124] 8021q: adding VLAN 0 to HW filter on device bond20 [ 656.585604][T31169] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8840'. [ 656.604859][T31124] 8021q: adding VLAN 0 to HW filter on device bond21 [ 656.623796][T31124] 8021q: adding VLAN 0 to HW filter on device bond22 [ 656.632765][T31169] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.635781][T31169] bridge_slave_1: left allmulticast mode [ 656.638218][T31169] bridge_slave_1: left promiscuous mode [ 656.640298][T31169] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.644606][T31169] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 656.664618][T31124] 8021q: adding VLAN 0 to HW filter on device bond23 [ 656.762395][T31124] 8021q: adding VLAN 0 to HW filter on device bond24 [ 656.780383][T31124] 8021q: adding VLAN 0 to HW filter on device bond25 [ 656.814238][T31124] 8021q: adding VLAN 0 to HW filter on device bond26 [ 656.829932][T31184] 9p filesystem being mounted at /460/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 656.837184][T31124] 8021q: adding VLAN 0 to HW filter on device bond27 [ 656.884979][T31124] 8021q: adding VLAN 0 to HW filter on device bond28 [ 656.901587][T31124] 8021q: adding VLAN 0 to HW filter on device bond29 [ 656.918247][T31124] 8021q: adding VLAN 0 to HW filter on device bond30 [ 656.935083][T31124] 8021q: adding VLAN 0 to HW filter on device bond31 [ 656.951057][T31124] 8021q: adding VLAN 0 to HW filter on device bond32 [ 656.966511][T31124] 8021q: adding VLAN 0 to HW filter on device bond33 [ 656.990779][T31197] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 657.072198][ T5957] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 657.072243][ T5957] Bluetooth: hci1: Dropping invalid advertising data [ 657.078580][ T5957] Bluetooth: hci1: Malformed LE Event: 0x02 [ 657.086027][T31204] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 657.212372][T31216] 9p filesystem being mounted at /115/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 657.595523][T31243] batadv_slave_0: entered promiscuous mode [ 657.597528][T31243] batadv_slave_0: left promiscuous mode [ 657.695254][ T53] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 657.867230][ T53] usb 11-1: no configurations [ 657.868752][ T53] usb 11-1: can't read configurations, error -22 [ 658.005244][ T53] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 658.116202][ T5957] Bluetooth: hci3: Malformed LE Event: 0x02 [ 658.176799][ T53] usb 11-1: no configurations [ 658.178794][ T53] usb 11-1: can't read configurations, error -22 [ 658.182083][ T53] usb usb11-port1: attempt power cycle [ 658.561538][ T53] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 658.575390][T31264] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8871'. [ 658.579869][T31264] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8871'. [ 658.585773][ T53] usb 11-1: no configurations [ 658.587787][ T53] usb 11-1: can't read configurations, error -22 [ 658.634539][T31266] comedi comedi0: No channels found! [ 658.680401][T31270] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8874'. [ 658.683971][T31270] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8874'. [ 658.688872][T31270] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8874'. [ 658.732685][ T53] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 658.762351][T31282] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8877'. [ 658.765372][ T53] usb 11-1: no configurations [ 658.766079][T31282] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 658.768075][ T53] usb 11-1: can't read configurations, error -22 [ 658.768369][ T53] usb usb11-port1: unable to enumerate USB device [ 658.801583][T31284] binder: 31283:31284 ioctl c018620c 200000000000 returned -1 [ 658.805130][T31284] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8878'. [ 658.827368][T31289] loop2: detected capacity change from 0 to 7 [ 658.833121][T31289] Dev loop2: unable to read RDB block 7 [ 658.835523][T31289] loop2: AHDI p2 [ 658.836767][T31289] loop2: partition table partially beyond EOD, truncated [ 659.071600][ T40] audit: type=1804 audit(6000000608.261:30982): pid=31312 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.8885" name="file0" dev="ramfs" ino=183451 res=1 errno=0 [ 659.138334][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 659.149602][T31318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.214969][T31328] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 659.231351][T31330] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 659.234128][T31330] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 659.238823][T31330] vhci_hcd vhci_hcd.0: Device attached [ 659.251003][T31331] usbip_core: unknown command [ 659.253195][T31331] vhci_hcd: unknown pdu 0 [ 659.255403][T31331] usbip_core: unknown command [ 659.259334][T23343] vhci_hcd: stop threads [ 659.261385][T23343] vhci_hcd: release socket [ 659.263259][T23343] vhci_hcd: disconnect device [ 659.282462][T31339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8894'. [ 659.292608][T31339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8894'. [ 659.344988][ T40] audit: type=1400 audit(6000000608.523:30983): avc: denied { remount } for pid=31342 comm="syz.2.8896" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 659.346338][T31345] tipc: Started in network mode [ 659.356272][T31345] tipc: Node identity 4, cluster identity 4711 [ 659.359330][T31345] tipc: Node number set to 4 [ 659.485757][T31353] Invalid logical block size (1835008) [ 659.794149][ T5957] Bluetooth: hci2: Malformed LE Event: 0x02 [ 659.937156][T31386] FAULT_INJECTION: forcing a failure. [ 659.937156][T31386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.943198][T31386] CPU: 2 UID: 0 PID: 31386 Comm: syz.2.8912 Not tainted syzkaller #0 PREEMPT(full) [ 659.943216][T31386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 659.943223][T31386] Call Trace: [ 659.943227][T31386] [ 659.943232][T31386] dump_stack_lvl+0x16c/0x1f0 [ 659.943248][T31386] should_fail_ex+0x512/0x640 [ 659.943263][T31386] _copy_from_user+0x2e/0xd0 [ 659.943276][T31386] do_sock_getsockopt+0x3ca/0x440 [ 659.943293][T31386] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 659.943308][T31386] ? __fget_files+0x204/0x3c0 [ 659.943326][T31386] __sys_getsockopt+0x12f/0x260 [ 659.943342][T31386] __x64_sys_getsockopt+0xbd/0x160 [ 659.943353][T31386] ? do_syscall_64+0x91/0x4e0 [ 659.943364][T31386] ? lockdep_hardirqs_on+0x7c/0x110 [ 659.943382][T31386] do_syscall_64+0xcd/0x4e0 [ 659.943392][T31386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.943405][T31386] RIP: 0033:0x7ff4f578eec9 [ 659.943414][T31386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.943425][T31386] RSP: 002b:00007ff4f6665038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 659.943436][T31386] RAX: ffffffffffffffda RBX: 00007ff4f59e5fa0 RCX: 00007ff4f578eec9 [ 659.943443][T31386] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 659.943450][T31386] RBP: 00007ff4f6665090 R08: 00002000000002c0 R09: 0000000000000000 [ 659.943553][T31386] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 659.943561][T31386] R13: 00007ff4f59e6038 R14: 00007ff4f59e5fa0 R15: 00007ffe45c8a018 [ 659.943575][T31386] [ 660.010532][ C2] vkms_vblank_simulate: vblank timer overrun [ 660.118829][T31401] hugetlbfs: Unknown parameter 'si:e' [ 660.241390][T31411] validate_nla: 25 callbacks suppressed [ 660.241406][T31411] netlink: 'syz.5.8921': attribute type 10 has an invalid length. [ 660.433231][T31427] dlm: Unknown command passed to DLM device : 255 [ 660.433231][T31427] [ 660.682937][T31440] Device name not specified. [ 660.682937][T31440] [ 660.996153][T31469] pim6reg13: entered allmulticast mode [ 661.126806][ T53] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 661.287406][ T53] usb 11-1: Using ep0 maxpacket: 32 [ 661.292075][ T53] usb 11-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.297435][ T53] usb 11-1: config 0 interface 0 has no altsetting 0 [ 661.300723][ T53] usb 11-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 661.304231][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.309688][ T53] usb 11-1: config 0 descriptor?? [ 661.409880][ T5957] Bluetooth: hci0: unknown advertising packet type: 0x82 [ 661.409944][ T5957] Bluetooth: hci0: Malformed LE Event: 0x02 [ 661.418371][T31483] hugetlbfs: Unknown parameter 'si:e' [ 661.594407][ T53] usbhid 11-1:0.0: can't add hid device: -71 [ 661.596477][ T53] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 661.606393][ T53] usb 11-1: USB disconnect, device number 10 [ 661.766399][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.770523][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.773527][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.776735][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.781207][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.784741][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.788178][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.792042][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.794871][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.797712][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.803737][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.807206][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.811355][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.817464][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.823611][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.827142][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.830619][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.834433][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.838101][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.842007][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.845288][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.848986][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.852659][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.856779][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.862071][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.866339][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.869883][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.873408][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.877376][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.881581][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.885207][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.888081][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.891188][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.893989][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.895051][T31530] loop2: detected capacity change from 0 to 7 [ 661.896784][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.896828][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.896857][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.896884][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.896909][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.896935][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.896961][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.903619][T31530] Dev loop2: unable to read RDB block 7 [ 661.906242][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.916943][T31530] loop2: AHDI p2 [ 661.922148][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.931098][T31530] loop2: partition table partially beyond EOD, truncated [ 661.932201][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.939379][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.942101][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.944738][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.947356][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.950307][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.952928][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.955527][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.958566][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.962102][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.965027][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.967687][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.970433][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.973452][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.976311][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.978934][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.982974][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.986841][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.990972][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.994598][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 661.997789][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 662.001926][ T5957] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 662.058801][ T5957] Bluetooth: hci3: Malformed LE Event: 0x02 [ 662.616402][T31570] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 662.627161][T31570] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 662.631273][T31570] __nla_validate_parse: 9 callbacks suppressed [ 662.631287][T31570] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8966'. [ 662.811213][T31579] netlink: 504 bytes leftover after parsing attributes in process `syz.4.8968'. [ 663.094599][T31593] CUSE: unknown device info "" [ 663.096233][T31593] CUSE: zero length info key specified [ 663.494108][T31606] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8976'. [ 663.623063][T31611] trusted_key: encrypted_key: insufficient parameters specified [ 663.921104][T31622] loop2: detected capacity change from 0 to 7 [ 663.925446][T19328] Dev loop2: unable to read RDB block 7 [ 663.927273][T19328] loop2: AHDI p2 [ 663.929409][T19328] loop2: partition table partially beyond EOD, truncated [ 663.936252][T31622] Dev loop2: unable to read RDB block 7 [ 663.938773][T31622] loop2: AHDI p2 [ 663.940285][T31622] loop2: partition table partially beyond EOD, truncated [ 663.998368][T31632] comedi comedi0: No channels found! [ 664.058493][T31637] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8987'. [ 664.061371][T31638] netlink: 'syz.6.8987': attribute type 1 has an invalid length. [ 664.065112][T31638] netlink: 'syz.6.8987': attribute type 101 has an invalid length. [ 664.068938][T31638] netlink: 232 bytes leftover after parsing attributes in process `syz.6.8987'. [ 664.326939][T31664] comedi comedi0: No channels found! [ 664.342312][T31662] kvm: MWAIT instruction emulated as NOP! [ 664.358530][T31667] FAULT_INJECTION: forcing a failure. [ 664.358530][T31667] name failslab, interval 1, probability 0, space 0, times 0 [ 664.363658][T31667] CPU: 2 UID: 0 PID: 31667 Comm: syz.6.8999 Not tainted syzkaller #0 PREEMPT(full) [ 664.363674][T31667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 664.363682][T31667] Call Trace: [ 664.363687][T31667] [ 664.363692][T31667] dump_stack_lvl+0x16c/0x1f0 [ 664.363708][T31667] should_fail_ex+0x512/0x640 [ 664.363721][T31667] ? fs_reclaim_acquire+0xae/0x150 [ 664.363750][T31667] should_failslab+0xc2/0x120 [ 664.363766][T31667] __kmalloc_noprof+0xdd/0x880 [ 664.363783][T31667] ? tomoyo_encode2+0x100/0x3e0 [ 664.363798][T31667] ? tomoyo_encode2+0x100/0x3e0 [ 664.363810][T31667] tomoyo_encode2+0x100/0x3e0 [ 664.363824][T31667] tomoyo_encode+0x29/0x50 [ 664.363835][T31667] tomoyo_realpath_from_path+0x18f/0x6e0 [ 664.363853][T31667] tomoyo_path_number_perm+0x245/0x580 [ 664.363870][T31667] ? tomoyo_path_number_perm+0x237/0x580 [ 664.363888][T31667] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 664.363907][T31667] ? find_held_lock+0x2b/0x80 [ 664.363937][T31667] ? find_held_lock+0x2b/0x80 [ 664.363952][T31667] ? hook_file_ioctl_common+0x145/0x410 [ 664.363971][T31667] ? __fget_files+0x20e/0x3c0 [ 664.363986][T31667] security_file_ioctl+0x9b/0x240 [ 664.364000][T31667] __x64_sys_ioctl+0xb7/0x210 [ 664.364018][T31667] do_syscall_64+0xcd/0x4e0 [ 664.364054][T31667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.364067][T31667] RIP: 0033:0x7f9c2738eec9 [ 664.364077][T31667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.364088][T31667] RSP: 002b:00007f9c2821a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.364098][T31667] RAX: ffffffffffffffda RBX: 00007f9c275e5fa0 RCX: 00007f9c2738eec9 [ 664.364106][T31667] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 664.364112][T31667] RBP: 00007f9c2821a090 R08: 0000000000000000 R09: 0000000000000000 [ 664.364119][T31667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.364125][T31667] R13: 00007f9c275e6038 R14: 00007f9c275e5fa0 R15: 00007ffe36ddefc8 [ 664.364140][T31667] [ 664.364209][T31667] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.441430][T31667] comedi comedi0: No channels found! [ 664.516665][T31676] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9001'. [ 664.520080][T31676] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9001'. [ 664.915482][T31693] loop4: detected capacity change from 0 to 2560 [ 664.918423][T31693] buffer_io_error: 11 callbacks suppressed [ 664.918435][T31693] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.923438][T31693] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.926874][T31693] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.929593][T31693] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.933051][T31693] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.935993][T31693] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.939415][T31693] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.943355][T31693] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.947460][T31693] ldm_validate_partition_table(): Disk read failed. [ 664.950549][T31693] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.954554][T31693] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.957247][T31693] Dev loop4: unable to read RDB block 0 [ 664.959222][T31693] loop4: unable to read partition table [ 664.961972][T31693] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 665.007943][T31697] overlayfs: failed to resolve './file0': -2 [ 665.087427][ T5957] Bluetooth: hci0: SCO packet for unknown connection handle 1995 [ 665.089108][ T5957] Bluetooth: Wrong link type (-22) [ 665.236554][T31723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9016'. [ 666.203552][T31739] comedi: valid board names for 8255 driver are: [ 666.208372][T31739] 8255 [ 666.209489][T31739] comedi: valid board names for vmk80xx driver are: [ 666.211683][T31739] vmk80xx [ 666.213197][T31739] comedi: valid board names for usbduxsigma driver are: [ 666.216884][T31739] usbduxsigma [ 666.218599][T31739] comedi: valid board names for usbduxfast driver are: [ 666.221657][T31739] usbduxfast [ 666.223170][T31739] comedi: valid board names for usbdux driver are: [ 666.229004][T31739] usbdux [ 666.230593][T31739] comedi: valid board names for ni6501 driver are: [ 666.233329][T31739] ni6501 [ 666.234559][T31739] comedi: valid board names for dt9812 driver are: [ 666.236254][T31749] netlink: 304 bytes leftover after parsing attributes in process `syz.6.9026'. [ 666.238448][T31739] dt9812 [ 666.243175][T31739] comedi: valid board names for ni_labpc_cs driver are: [ 666.246320][T31739] ni_labpc_cs [ 666.248105][T31739] comedi: valid board names for ni_daq_700 driver are: [ 666.251243][T31739] ni_daq_700 [ 666.252793][T31739] comedi: valid board names for labpc_pci driver are: [ 666.256072][T31739] labpc_pci [ 666.258002][T31739] comedi: valid board names for adl_pci9118 driver are: [ 666.261943][T31739] pci9118dg [ 666.263079][T31739] pci9118hg [ 666.264134][T31739] pci9118hr [ 666.265191][T31739] comedi: valid board names for 8255_pci driver are: [ 666.267334][T31739] 8255_pci [ 666.268505][T31739] comedi: valid board names for s526 driver are: [ 666.271896][T31739] s526 [ 666.273231][T31739] comedi: valid board names for multiq3 driver are: [ 666.276152][T31739] multiq3 [ 666.277886][T31739] comedi: valid board names for pcmuio driver are: [ 666.282301][T31739] pcmuio48 [ 666.283638][T31739] pcmuio96 [ 666.285004][T31739] comedi: valid board names for pcmmio driver are: [ 666.287661][T31739] pcmmio [ 666.288961][T31739] comedi: valid board names for pcmda12 driver are: [ 666.292267][T31739] pcmda12 [ 666.293941][T31739] comedi: valid board names for pcmad driver are: [ 666.297163][T31739] pcmad12 [ 666.298539][T31739] pcmad16 [ 666.299905][T31739] comedi: valid board names for ni_labpc driver are: [ 666.303734][T31739] lab-pc-1200 [ 666.305200][T31739] lab-pc-1200ai [ 666.306794][T31739] lab-pc+ [ 666.308253][T31739] comedi: valid board names for atmio16 driver are: [ 666.311505][T31739] atmio16 [ 666.313188][T31739] atmio16d [ 666.314595][T31739] comedi: valid board names for ni_at_ao driver are: [ 666.317226][T31739] at-ao-6 [ 666.318496][T31739] at-ao-10 [ 666.319821][T31739] comedi: valid board names for ni_at_a2150 driver are: [ 666.327432][T31739] ni_at_a2150 [ 666.329158][T31739] comedi: valid board names for adq12b driver are: [ 666.332765][T31739] adq12b [ 666.334477][T31739] comedi: valid board names for mpc624 driver are: [ 666.337500][T31739] mpc624 [ 666.339075][T31739] comedi: valid board names for c6xdigio driver are: [ 666.342356][T31739] c6xdigio [ 666.344220][T31739] comedi: valid board names for aio_iiro_16 driver are: [ 666.347765][T31739] aio_iiro_16 [ 666.349404][T31739] comedi: valid board names for aio_aio12_8 driver are: [ 666.352292][T31739] aio_aio12_8 [ 666.353808][T31739] aio_ai12_8 [ 666.355618][T31739] aio_ao12_4 [ 666.357088][T31739] comedi: valid board names for fl512 driver are: [ 666.359817][T31739] fl512 [ 666.361030][T31739] comedi: valid board names for dmm32at driver are: [ 666.363702][T31739] dmm32at [ 666.365325][T31739] comedi: valid board names for dt282x driver are: [ 666.368745][T31739] dt2821 [ 666.370192][T31739] dt2821-f [ 666.371694][T31739] dt2821-g [ 666.373456][T31739] dt2823 [ 666.374895][T31739] dt2824-pgh [ 666.376683][T31739] dt2824-pgl [ 666.378280][T31739] dt2825 [ 666.379611][T31739] dt2827 [ 666.381144][T31739] dt2828 [ 666.382406][T31739] dt2829 [ 666.383663][T31739] dt21-ez [ 666.385003][T31739] dt23-ez [ 666.386463][T31739] dt24-ez [ 666.387968][T31739] dt24-ez-pgl [ 666.389559][T31739] comedi: valid board names for dt2817 driver are: [ 666.392666][T31739] dt2817 [ 666.393979][T31739] comedi: valid board names for dt2815 driver are: [ 666.398030][T31739] dt2815 [ 666.399509][T31739] comedi: valid board names for dt2814 driver are: [ 666.402567][T31739] dt2814 [ 666.404064][T31739] comedi: valid board names for dt2811 driver are: [ 666.407827][T31739] dt2811-pgh [ 666.409658][T31739] dt2811-pgl [ 666.410959][T31739] comedi: valid board names for dt2801 driver are: [ 666.413135][T31739] dt2801 [ 666.414156][T31739] comedi: valid board names for das6402 driver are: [ 666.416412][T31739] das6402-12 [ 666.418588][T31739] das6402-16 [ 666.418723][T31754] loop2: detected capacity change from 0 to 7 [ 666.420373][T31739] comedi: valid board names for das1800 driver are: [ 666.426262][T31739] das-1701st [ 666.426425][T31754] Dev loop2: unable to read RDB block 7 [ 666.428039][T31739] das-1701st-da [ 666.430656][T31754] loop2: AHDI p2 [ 666.431696][T31739] das-1702st [ 666.433278][T31754] loop2: partition table partially beyond EOD, truncated [ 666.434399][T31739] das-1702st-da [ 666.434411][T31739] das-1702hr [ 666.440512][T31739] das-1702hr-da [ 666.441929][T31739] das-1701ao [ 666.443264][T31739] das-1702ao [ 666.444606][T31739] das-1801st [ 666.445914][T31739] das-1801st-da [ 666.447198][T31739] das-1802st [ 666.448358][T31739] das-1802st-da [ 666.449658][T31739] das-1802hr [ 666.450901][T31739] das-1802hr-da [ 666.452118][T31739] das-1801hc [ 666.453529][T31739] das-1802hc [ 666.455024][T31739] das-1801ao [ 666.456690][T31739] das-1802ao [ 666.458346][T31739] comedi: valid board names for das800 driver are: [ 666.461922][T31739] das-800 [ 666.463805][T31739] cio-das800 [ 666.465609][T31739] das-801 [ 666.466936][T31739] cio-das801 [ 666.468388][T31739] das-802 [ 666.469710][T31739] cio-das802 [ 666.471217][T31739] cio-das802/16 [ 666.473111][T31739] comedi: valid board names for isa-das08 driver are: [ 666.476258][T31739] isa-das08 [ 666.477823][T31739] das08-pgm [ 666.479267][T31739] das08-pgh [ 666.480752][T31739] das08-pgl [ 666.482459][T31739] das08-aoh [ 666.483971][T31739] das08-aol [ 666.485527][T31739] das08-aom [ 666.486897][T31739] das08/jr-ao [ 666.488361][T31739] das08jr-16-ao [ 666.490362][T31739] pc104-das08 [ 666.492251][T31739] das08jr/16 [ 666.494587][T31739] comedi: valid board names for das16m1 driver are: [ 666.497691][T31739] das16m1 [ 666.498969][T31739] comedi: valid board names for dac02 driver are: [ 666.501656][T31739] dac02 [ 666.503058][T31739] comedi: valid board names for rti802 driver are: [ 666.506008][T31739] rti802 [ 666.507266][T31739] comedi: valid board names for rti800 driver are: [ 666.509934][T31739] rti800 [ 666.511195][T31739] rti815 [ 666.512519][T31739] comedi: valid board names for pcm3724 driver are: [ 666.516870][T31739] pcm3724 [ 666.518573][T31739] comedi: valid board names for pcl818 driver are: [ 666.524235][T31739] pcl818l [ 666.526323][T31739] pcl818h [ 666.527538][T31739] pcl818hd [ 666.528658][T31739] pcl818hg [ 666.529657][T31739] pcl818 [ 666.530519][T31739] pcl718 [ 666.531431][T31739] pcm3718 [ 666.532351][T31739] comedi: valid board names for pcl816 driver are: [ 666.534171][T31739] pcl816 [ 666.535292][T31739] pcl814b [ 666.538713][T31739] comedi: valid board names for pcl812 driver are: [ 666.542218][T31739] pcl812 [ 666.544058][T31739] pcl812pg [ 666.545929][T31739] acl8112pg [ 666.547979][T31739] acl8112dg [ 666.549341][T31739] acl8112hg [ 666.550705][T31739] a821pgl [ 666.551847][T31739] a821pglnda [ 666.552912][T31739] a821pgh [ 666.553891][T31739] a822pgl [ 666.554903][T31739] a822pgh [ 666.555892][T31739] a823pgl [ 666.556928][T31739] a823pgh [ 666.558301][T31739] pcl813 [ 666.559551][T31739] pcl813b [ 666.560586][T31739] acl8113 [ 666.561560][T31739] iso813 [ 666.562500][T31739] acl8216 [ 666.563499][T31739] a826pg [ 666.564450][T31739] comedi: valid board names for pcl730 driver are: [ 666.566494][T31739] pcl730 [ 666.567431][T31739] iso730 [ 666.568496][T31739] acl7130 [ 666.569471][T31739] pcm3730 [ 666.570472][T31739] pcl725 [ 666.571467][T31739] p8r8dio [ 666.572501][T31739] acl7225b [ 666.573835][T31739] p16r16dio [ 666.574991][T31739] pcl733 [ 666.575934][T31739] pcl734 [ 666.576877][T31739] opmm-1616-xt [ 666.577987][T31739] pearl-mm-p [ 666.580387][T31739] ir104-pbf [ 666.581426][T31739] comedi: valid board names for pcl726 driver are: [ 666.584195][T31739] pcl726 [ 666.585599][T31739] pcl727 [ 666.586945][T31739] pcl728 [ 666.588462][T31739] acl6126 [ 666.589868][T31739] acl6128 [ 666.591903][T31739] comedi: valid board names for pcl724 driver are: [ 666.594830][T31739] pcl724 [ 666.596152][T31739] pcl722 [ 666.596828][T31764] kvm: kvm [31761]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 666.597393][T31739] pcl731 [ 666.597405][T31739] acl7122 [ 666.597412][T31739] acl7124 [ 666.597419][T31739] pet48dio [ 666.597425][T31739] pcmio48 [ 666.597432][T31739] onyx-mm-dio [ 666.597441][T31739] comedi: valid board names for pcl711 driver are: [ 666.597450][T31739] pcl711 [ 666.601821][T31764] kvm: kvm [31761]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 666.603291][T31739] pcl711b [ 666.603304][T31739] acl8112hg [ 666.603311][T31739] acl8112dg [ 666.603320][T31739] comedi: valid board names for amplc_pc263 driver are: [ 666.603330][T31739] pc263 [ 666.603339][T31739] comedi: valid board names for amplc_pc236 driver are: [ 666.628819][T31739] pc36at [ 666.629973][T31739] comedi: valid board names for amplc_dio200 driver are: [ 666.632296][T31739] pc212e [ 666.633273][T31739] pc214e [ 666.634231][T31739] pc215e [ 666.635235][T31739] pc218e [ 666.636584][T31739] pc272e [ 666.637708][T31739] comedi: valid board names for comedi_parport driver are: [ 666.641014][T31739] comedi_parport [ 666.642589][T31739] comedi: valid board names for comedi_test driver are: [ 666.645067][T31739] comedi_test [ 666.646267][T31739] comedi: valid board names for comedi_bond driver are: [ 666.648742][T31739] comedi_bond [ 666.669764][T31764] kvm: kvm [31761]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 666.674396][T31764] kvm: kvm [31761]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 666.826370][T31777] netlink: 'syz.2.9038': attribute type 10 has an invalid length. [ 666.829553][T31778] netlink: 'syz.2.9038': attribute type 10 has an invalid length. [ 666.957938][ T40] audit: type=1400 audit(6000000615.641:30984): avc: denied { read } for pid=31787 comm="syz.4.9042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 666.964648][ T40] audit: type=1400 audit(6000000615.641:30985): avc: denied { getopt } for pid=31787 comm="syz.4.9042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 667.021765][T31791] vfat: Unknown parameter 'discard4:^Xs]j>]zǵ)@K+$^Q Ȥ_oWFzXH^' [ 667.545555][T31811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9049'. [ 668.791976][ T5957] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 668.796415][ T5957] Bluetooth: hci1: Injecting HCI hardware error event [ 668.804636][ T5957] Bluetooth: hci1: hardware error 0x00 [ 668.877485][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 668.877533][T31762] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 669.716239][T31762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 669.719007][T31762] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 669.727963][T31762] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 669.733361][T31762] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 669.736092][T31762] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 669.740089][T31762] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 669.793559][T31816] hugetlbfs: Unknown parameter 'si:e' [ 669.869573][T31827] syz.5.9055 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 669.934521][ T64] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 670.039002][T31841] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 670.041740][T31841] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 670.047685][T31841] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 670.051135][T31841] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 670.094067][T31846] comedi comedi0: No channels found! [ 670.182669][T31854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9059'. [ 670.187056][T31854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9059'. [ 670.199812][T31856] 9p filesystem being mounted at /283/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 670.245122][T31860] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9066'. [ 670.248383][T31860] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9066'. [ 670.295217][T31862] 9pnet_virtio: no channels available for device syz [ 670.395792][T31870] loop2: detected capacity change from 0 to 7 [ 670.399484][T10609] Dev loop2: unable to read RDB block 7 [ 670.401608][T10609] loop2: AHDI p2 [ 670.402886][T10609] loop2: partition table partially beyond EOD, truncated [ 670.409571][T31870] Dev loop2: unable to read RDB block 7 [ 670.411713][T31870] loop2: AHDI p2 [ 670.413126][T31870] loop2: partition table partially beyond EOD, truncated [ 670.456249][ T40] audit: type=1400 audit(6000000618.906:30986): avc: denied { read write } for pid=31871 comm="syz.2.9073" name="file0" dev="9p" ino=71827687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 670.465166][ T40] audit: type=1400 audit(6000000618.906:30987): avc: denied { open } for pid=31871 comm="syz.2.9073" path="/219/file0/file0" dev="9p" ino=71827687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 670.507041][T31878] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9076'. [ 670.512353][T31878] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9076'. [ 670.619641][T31890] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 670.691633][T31896] loop2: detected capacity change from 0 to 7 [ 670.696254][T31896] Dev loop2: unable to read RDB block 7 [ 670.698056][T31896] loop2: AHDI p2 [ 670.699398][T31896] loop2: partition table partially beyond EOD, truncated [ 670.753449][T10612] hid_parser_main: 221 callbacks suppressed [ 670.753463][T10612] hid-generic 07FF:0008:0006.000A: unknown main item tag 0x7 [ 670.762856][T10612] hid-generic 07FF:0008:0006.000A: unknown main item tag 0x6 [ 670.766318][T10612] hid-generic 07FF:0008:0006.000A: item fetching failed at offset 52/117 [ 670.776670][T10612] hid-generic 07FF:0008:0006.000A: probe with driver hid-generic failed with error -22 [ 670.813028][T31905] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9087'. [ 670.815850][T31905] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9087'. [ 670.819048][T31905] netlink: 'syz.2.9087': attribute type 5 has an invalid length. [ 670.822383][T31905] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9087'. [ 670.827426][T31906] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9087'. [ 670.830378][T31906] netlink: 'syz.2.9087': attribute type 5 has an invalid length. [ 670.902928][T31920] FAULT_INJECTION: forcing a failure. [ 670.902928][T31920] name failslab, interval 1, probability 0, space 0, times 0 [ 670.907453][T31920] CPU: 0 UID: 0 PID: 31920 Comm: syz.5.9092 Not tainted syzkaller #0 PREEMPT(full) [ 670.907484][T31920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 670.907492][T31920] Call Trace: [ 670.907497][T31920] [ 670.907503][T31920] dump_stack_lvl+0x16c/0x1f0 [ 670.907519][T31920] should_fail_ex+0x512/0x640 [ 670.907533][T31920] ? fs_reclaim_acquire+0xae/0x150 [ 670.907550][T31920] should_failslab+0xc2/0x120 [ 670.907577][T31920] __kmalloc_noprof+0xdd/0x880 [ 670.907602][T31920] ? kfree+0x252/0x6d0 [ 670.907618][T31920] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 670.907636][T31920] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 670.907650][T31920] tomoyo_realpath_from_path+0xc2/0x6e0 [ 670.907665][T31920] ? tomoyo_profile+0x47/0x60 [ 670.907683][T31920] tomoyo_path_number_perm+0x245/0x580 [ 670.907701][T31920] ? tomoyo_path_number_perm+0x237/0x580 [ 670.907721][T31920] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 670.907741][T31920] ? __pfx__kstrtoull+0x10/0x10 [ 670.907762][T31920] ? find_held_lock+0x2b/0x80 [ 670.907794][T31920] ? from_kuid+0x8d/0xd0 [ 670.907811][T31920] ? __pfx_from_kuid+0x10/0x10 [ 670.907831][T31920] tomoyo_path_chown+0x173/0x1b0 [ 670.907847][T31920] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 670.907863][T31920] ? from_vfsuid+0xea/0x140 [ 670.907881][T31920] ? __pfx_from_vfsuid+0x10/0x10 [ 670.907898][T31920] ? __lock_acquire+0x62e/0x1ce0 [ 670.907912][T31920] security_path_chown+0x12a/0x2e0 [ 670.907926][T31920] chown_common+0x3d3/0x680 [ 670.907946][T31920] ? __pfx_chown_common+0x10/0x10 [ 670.907998][T31920] ksys_fchown+0x11a/0x190 [ 670.908023][T31920] __x64_sys_fchown+0x72/0xb0 [ 670.908038][T31920] ? lockdep_hardirqs_on+0x7c/0x110 [ 670.908056][T31920] do_syscall_64+0xcd/0x4e0 [ 670.908069][T31920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.908082][T31920] RIP: 0033:0x7ff3a578eec9 [ 670.908092][T31920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.908105][T31920] RSP: 002b:00007ff3a66b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 670.908117][T31920] RAX: ffffffffffffffda RBX: 00007ff3a59e5fa0 RCX: 00007ff3a578eec9 [ 670.908125][T31920] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000003 [ 670.908132][T31920] RBP: 00007ff3a66b8090 R08: 0000000000000000 R09: 0000000000000000 [ 670.908139][T31920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.908145][T31920] R13: 00007ff3a59e6038 R14: 00007ff3a59e5fa0 R15: 00007ffd55317d58 [ 670.908162][T31920] [ 670.914637][T31920] ERROR: Out of memory at tomoyo_realpath_from_path. [ 671.026251][ T5957] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 671.101116][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 671.127462][T31933] netlink: 'syz.6.9096': attribute type 12 has an invalid length. [ 671.284925][ T5957] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 671.313310][T31942] loop2: detected capacity change from 0 to 7 [ 671.317677][T31942] Dev loop2: unable to read RDB block 7 [ 671.319728][T31942] loop2: AHDI p2 [ 671.321121][T31942] loop2: partition table partially beyond EOD, truncated [ 671.752654][T31954] hugetlbfs: Unknown parameter 'si:e' [ 671.788415][ T5957] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 672.251481][T31984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=31984 comm=syz.5.9115 [ 672.254792][T31985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=31985 comm=syz.5.9115 [ 672.341600][T31989] loop2: detected capacity change from 0 to 7 [ 672.344712][T29741] Dev loop2: unable to read RDB block 7 [ 672.347020][T29741] loop2: AHDI p2 [ 672.348285][T29741] loop2: partition table partially beyond EOD, truncated [ 672.354168][T31989] Dev loop2: unable to read RDB block 7 [ 672.356421][T31989] loop2: AHDI p2 [ 672.357734][T31989] loop2: partition table partially beyond EOD, truncated [ 672.364162][ T5354] Dev loop2: unable to read RDB block 7 [ 672.367044][ T5354] loop2: AHDI p2 [ 672.368754][ T5354] loop2: partition table partially beyond EOD, truncated [ 672.398158][T31997] hugetlbfs: Unknown parameter 'si:e' [ 672.462183][T32006] ip6gretap0: entered promiscuous mode [ 672.466052][T32006] ip6gretap0: left promiscuous mode [ 672.547171][T32015] nfsd: Unknown parameter 'usrquotartio' [ 672.574695][ T40] audit: type=1400 audit(6000000620.889:30988): avc: denied { watch } for pid=32017 comm="syz.4.9128" path="/302/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 672.612727][T32018] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 672.622989][T32018] kvm: pic: level sensitive irq not supported [ 672.623284][T32018] kvm: pic: non byte read [ 672.627880][T32018] kvm: pic: level sensitive irq not supported [ 672.628194][T32018] kvm: pic: non byte read [ 672.633052][T32018] kvm: pic: level sensitive irq not supported [ 672.633346][T32018] kvm: pic: non byte read [ 672.638910][T32018] kvm: pic: level sensitive irq not supported [ 672.639623][T32018] kvm: pic: non byte read [ 672.645014][T32018] kvm: pic: level sensitive irq not supported [ 672.645302][T32018] kvm: pic: non byte read [ 672.649683][T32018] kvm: pic: level sensitive irq not supported [ 672.649999][T32018] kvm: pic: non byte read [ 672.655394][T32018] kvm: pic: level sensitive irq not supported [ 672.655749][T32018] kvm: pic: non byte read [ 672.660712][T32018] kvm: pic: level sensitive irq not supported [ 672.661715][T32018] kvm: pic: non byte read [ 672.667058][T32018] kvm: pic: level sensitive irq not supported [ 672.667427][T32018] kvm: pic: non byte read [ 672.671841][T32018] kvm: pic: level sensitive irq not supported [ 672.672204][T32018] kvm: pic: non byte read [ 672.831806][T32033] loop2: detected capacity change from 0 to 7 [ 672.834663][T10609] Dev loop2: unable to read RDB block 7 [ 672.836556][T10609] loop2: AHDI p2 [ 672.837716][T10609] loop2: partition table partially beyond EOD, truncated [ 672.843255][T32033] Dev loop2: unable to read RDB block 7 [ 672.846583][T32033] loop2: AHDI p2 [ 672.848015][T32033] loop2: partition table partially beyond EOD, truncated [ 673.108446][T32055] hugetlbfs: Unknown parameter 'si:e' [ 673.121246][T32057] loop2: detected capacity change from 0 to 7 [ 673.131018][T10609] Dev loop2: unable to read RDB block 7 [ 673.133672][T10609] loop2: AHDI p2 [ 673.135747][T10609] loop2: partition table partially beyond EOD, truncated [ 673.143735][T32057] Dev loop2: unable to read RDB block 7 [ 673.145933][T32057] loop2: AHDI p2 [ 673.147709][T32057] loop2: partition table partially beyond EOD, truncated [ 673.253109][T32065] tipc: Started in network mode [ 673.254818][T32065] tipc: Node identity 561ecafafa2b, cluster identity 4711 [ 673.257264][T32065] tipc: Enabled bearer , priority 0 [ 673.277281][T32065] netlink: 'syz.4.9148': attribute type 1 has an invalid length. [ 673.280631][T32065] netlink: 'syz.4.9148': attribute type 1 has an invalid length. [ 673.377107][T32064] tipc: Disabling bearer [ 673.398673][ T40] audit: type=1400 audit(6000000621.656:30989): avc: denied { map } for pid=32069 comm="syz.5.9150" path="/525" dev="tmpfs" ino=2819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 673.503419][ T40] audit: type=1400 audit(6000000621.759:30990): avc: denied { unmount } for pid=29417 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 673.522190][ T40] audit: type=1326 audit(6000000621.778:30991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32082 comm="syz.2.9153" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4f578eec9 code=0x0 [ 673.552704][T32085] comedi comedi0: comedi_config --init_data is deprecated [ 674.674822][T32139] comedi comedi0: No channels found! [ 674.753462][T32143] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 674.796207][T32145] hugetlbfs: Unknown parameter 'si:e' [ 675.054214][T32172] blktrace: Concurrent blktraces are not allowed on nullb0 [ 675.059580][T32172] binder: 32171:32172 ioctl 1276 0 returned -22 [ 675.183184][T32186] loop2: detected capacity change from 0 to 7 [ 675.186450][T10609] Dev loop2: unable to read RDB block 7 [ 675.188923][T10609] loop2: AHDI p2 [ 675.190993][T10609] loop2: partition table partially beyond EOD, truncated [ 675.196500][T32186] Dev loop2: unable to read RDB block 7 [ 675.198756][T32186] loop2: AHDI p2 [ 675.200230][T32186] loop2: partition table partially beyond EOD, truncated [ 675.414187][T32200] comedi comedi0: No channels found! [ 675.630053][T32212] [ 675.631113][T32212] ====================================================== [ 675.634118][T32212] WARNING: possible circular locking dependency detected [ 675.637251][T32212] syzkaller #0 Not tainted [ 675.639648][T32212] ------------------------------------------------------ [ 675.644646][T32212] syz.4.9203/32212 is trying to acquire lock: [ 675.647521][T32212] ffffffff90131638 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xd3/0x810 [ 675.651422][T32212] [ 675.651422][T32212] but task is already holding lock: [ 675.654349][T32212] ffffffff901315d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x2c/0x810 [ 675.658246][T32212] [ 675.658246][T32212] which lock already depends on the new lock. [ 675.658246][T32212] [ 675.662866][T32212] [ 675.662866][T32212] the existing dependency chain (in reverse order) is: [ 675.666996][T32212] [ 675.666996][T32212] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 675.670485][T32212] _raw_spin_lock_bh+0x33/0x40 [ 675.672781][T32212] nr_remove_neigh+0x1a/0x290 [ 675.674970][T32212] nr_add_node+0x2408/0x2c00 [ 675.677250][T32212] nr_rt_ioctl+0x11b7/0x29b0 [ 675.679465][T32212] nr_ioctl+0x19a/0x2d0 [ 675.681471][T32212] sock_do_ioctl+0x118/0x280 [ 675.684154][T32212] sock_ioctl+0x227/0x6b0 [ 675.686835][T32212] __x64_sys_ioctl+0x18b/0x210 [ 675.689422][T32212] do_syscall_64+0xcd/0x4e0 [ 675.691539][T32212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.694377][T32212] [ 675.694377][T32212] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 675.698118][T32212] _raw_spin_lock_bh+0x33/0x40 [ 675.700485][T32212] nr_rt_ioctl+0x816/0x29b0 [ 675.702529][T32212] nr_ioctl+0x19a/0x2d0 [ 675.704687][T32212] sock_do_ioctl+0x118/0x280 [ 675.707063][T32212] sock_ioctl+0x227/0x6b0 [ 675.709635][T32212] __x64_sys_ioctl+0x18b/0x210 [ 675.712267][T32212] do_syscall_64+0xcd/0x4e0 [ 675.714580][T32212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.717247][T32212] [ 675.717247][T32212] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 675.720611][T32212] __lock_acquire+0x12a6/0x1ce0 [ 675.722839][T32212] lock_acquire+0x179/0x350 [ 675.724977][T32212] _raw_spin_lock_bh+0x33/0x40 [ 675.727181][T32212] nr_rt_device_down+0xd3/0x810 [ 675.729478][T32212] nr_device_event+0x126/0x170 [ 675.731583][T32212] notifier_call_chain+0xb9/0x410 [ 675.734268][T32212] call_netdevice_notifiers_info+0xbe/0x140 [ 675.737426][T32212] netif_close_many+0x319/0x630 [ 675.739754][T32212] netif_close+0x17f/0x230 [ 675.741866][T32212] dev_close+0xaa/0x240 [ 675.744049][T32212] bpq_device_event+0x6a9/0x910 [ 675.746333][T32212] notifier_call_chain+0xb9/0x410 [ 675.748705][T32212] call_netdevice_notifiers_info+0xbe/0x140 [ 675.752401][T32212] __dev_notify_flags+0x1f7/0x2e0 [ 675.755080][T32212] netif_change_flags+0x108/0x160 [ 675.757463][T32212] dev_change_flags+0xba/0x250 [ 675.759686][T32212] dev_ifsioc+0x1498/0x1f70 [ 675.761868][T32212] dev_ioctl+0x223/0x10e0 [ 675.763943][T32212] sock_do_ioctl+0x19d/0x280 [ 675.766108][T32212] sock_ioctl+0x227/0x6b0 [ 675.768181][T32212] __x64_sys_ioctl+0x18b/0x210 [ 675.770415][T32212] do_syscall_64+0xcd/0x4e0 [ 675.772652][T32212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.776068][T32212] [ 675.776068][T32212] other info that might help us debug this: [ 675.776068][T32212] [ 675.780694][T32212] Chain exists of: [ 675.780694][T32212] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 675.780694][T32212] [ 675.786290][T32212] Possible unsafe locking scenario: [ 675.786290][T32212] [ 675.789592][T32212] CPU0 CPU1 [ 675.792467][T32212] ---- ---- [ 675.795173][T32212] lock(nr_neigh_list_lock); [ 675.797416][T32212] lock(&nr_node->node_lock); [ 675.800638][T32212] lock(nr_neigh_list_lock); [ 675.803625][T32212] lock(nr_node_list_lock); [ 675.805505][T32212] [ 675.805505][T32212] *** DEADLOCK *** [ 675.805505][T32212] [ 675.808872][T32212] 2 locks held by syz.4.9203/32212: [ 675.811359][T32212] #0: ffffffff8fee5208 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x212/0x10e0 [ 675.815765][T32212] #1: ffffffff901315d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x2c/0x810 [ 675.820148][T32212] [ 675.820148][T32212] stack backtrace: [ 675.822940][T32212] CPU: 1 UID: 0 PID: 32212 Comm: syz.4.9203 Not tainted syzkaller #0 PREEMPT(full) [ 675.822968][T32212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 675.822981][T32212] Call Trace: [ 675.822990][T32212] [ 675.822999][T32212] dump_stack_lvl+0x116/0x1f0 [ 675.823020][T32212] print_circular_bug+0x275/0x350 [ 675.823043][T32212] check_noncircular+0x14c/0x170 [ 675.823066][T32212] __lock_acquire+0x12a6/0x1ce0 [ 675.823092][T32212] lock_acquire+0x179/0x350 [ 675.823111][T32212] ? nr_rt_device_down+0xd3/0x810 [ 675.823141][T32212] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 675.823170][T32212] _raw_spin_lock_bh+0x33/0x40 [ 675.823195][T32212] ? nr_rt_device_down+0xd3/0x810 [ 675.823221][T32212] nr_rt_device_down+0xd3/0x810 [ 675.823250][T32212] ? __local_bh_enable_ip+0xa4/0x120 [ 675.823279][T32212] nr_device_event+0x126/0x170 [ 675.823301][T32212] notifier_call_chain+0xb9/0x410 [ 675.823320][T32212] ? __pfx_nr_device_event+0x10/0x10 [ 675.823344][T32212] call_netdevice_notifiers_info+0xbe/0x140 [ 675.823372][T32212] netif_close_many+0x319/0x630 [ 675.823399][T32212] ? __pfx_netif_close_many+0x10/0x10 [ 675.823427][T32212] ? __neigh_ifdown.isra.0+0x523/0x920 [ 675.823456][T32212] netif_close+0x17f/0x230 [ 675.823481][T32212] ? __pfx_netif_close+0x10/0x10 [ 675.823510][T32212] dev_close+0xaa/0x240 [ 675.823533][T32212] bpq_device_event+0x6a9/0x910 [ 675.823556][T32212] notifier_call_chain+0xb9/0x410 [ 675.823580][T32212] ? __pfx_bpq_device_event+0x10/0x10 [ 675.823605][T32212] call_netdevice_notifiers_info+0xbe/0x140 [ 675.823632][T32212] __dev_notify_flags+0x1f7/0x2e0 [ 675.823652][T32212] ? __pfx___dev_notify_flags+0x10/0x10 [ 675.823675][T32212] ? __pfx___dev_change_flags+0x10/0x10 [ 675.823698][T32212] ? __mutex_trylock_common+0xe9/0x250 [ 675.823722][T32212] netif_change_flags+0x108/0x160 [ 675.823746][T32212] dev_change_flags+0xba/0x250 [ 675.823771][T32212] dev_ifsioc+0x1498/0x1f70 [ 675.823793][T32212] ? __pfx_dev_ifsioc+0x10/0x10 [ 675.823812][T32212] ? __pfx___mutex_lock+0x10/0x10 [ 675.823834][T32212] ? dev_load+0x8e/0x240 [ 675.823854][T32212] dev_ioctl+0x223/0x10e0 [ 675.823874][T32212] sock_do_ioctl+0x19d/0x280 [ 675.823900][T32212] ? __pfx_sock_do_ioctl+0x10/0x10 [ 675.823955][T32212] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 675.823985][T32212] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 675.824011][T32212] sock_ioctl+0x227/0x6b0 [ 675.824040][T32212] ? __pfx_sock_ioctl+0x10/0x10 [ 675.824067][T32212] ? hook_file_ioctl_common+0x145/0x410 [ 675.824097][T32212] ? selinux_file_ioctl+0x180/0x270 [ 675.824118][T32212] ? selinux_file_ioctl+0xb4/0x270 [ 675.824139][T32212] ? __pfx_sock_ioctl+0x10/0x10 [ 675.824167][T32212] __x64_sys_ioctl+0x18b/0x210 [ 675.824194][T32212] do_syscall_64+0xcd/0x4e0 [ 675.824213][T32212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.824233][T32212] RIP: 0033:0x7fa18338eec9 [ 675.824248][T32212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.824266][T32212] RSP: 002b:00007fa1841ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.824285][T32212] RAX: ffffffffffffffda RBX: 00007fa1835e5fa0 RCX: 00007fa18338eec9 [ 675.824297][T32212] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 0000000000000004 [ 675.824310][T32212] RBP: 00007fa183411f91 R08: 0000000000000000 R09: 0000000000000000 [ 675.824323][T32212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.824335][T32212] R13: 00007fa1835e6038 R14: 00007fa1835e5fa0 R15: 00007fffdb0232b8 [ 675.824353][T32212] [ 675.978349][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.147150][ T5957] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 676.149699][ T5957] Bluetooth: hci0: Injecting HCI hardware error event [ 676.151847][ T5957] Bluetooth: hci0: hardware error 0x00 [ 678.370678][ T5957] Bluetooth: hci0: Opcode 0x0c03 failed: -110 VM DIAGNOSIS: 19:51:14 Registers: info registers vcpu 0 CPU#0 RAX=00000000004bf73c RBX=0000000000000000 RCX=ffffffff8b513a89 RDX=ffffed100d4c6656 RSI=ffffffff8bd040c0 RDI=ffffffff8190aeed RBP=fffffbfff1bd2f40 RSP=ffffffff8de07e08 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97a00 R14=ffffffff905fbb90 R15=0000000000000000 RIP=ffffffff8b5125af RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6e67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555585cbd808 CR3=000000002ac77000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000fefce002 Opmask02=00000000fefcf000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe36ddf350 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe36ddf4d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe36ddf4d6 00007ffe36ddf4dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c27412fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c27412fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c27412fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c27412fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c2741305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c2741313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852342c5 RDI=ffffffff9ab75a40 RBP=ffffffff9ab75a00 RSP=ffffc900038fef78 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000032 R14=ffffffff9ab75a00 R15=ffffffff85234260 RIP=ffffffff852342ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fa1841ac6c0 ffffffff 00c00000 GS =0000 ffff8880d6f67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b333d2ff8 CR3=000000005d5fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d757365722f72 65776f702f737973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd55318266 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd55318266 00007ffd5531826c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3a5812fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3a5812fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3a5812fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3a5812fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3a581305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3a581313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3a59b74a8 00007ff3a59b74a0 00007ff3a59b7498 00007ff3a59b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3a651d100 00007ff3a59b7460 00007ff3a59b7478 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3a59b74b8 00007ff3a59b74b0 00007ff3a59b74a8 00007ff3a59b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000003fa6d4 RBX=0000000000000002 RCX=ffffffff8b513a89 RDX=ffffed100d506656 RSI=ffffffff8bd040c0 RDI=ffffffff8190aeed RBP=ffffed1003b54920 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d506655 R10=ffff88806a8332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801daa4900 R14=ffffffff905fbb90 R15=0000000000000000 RIP=ffffffff8b5125af RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7067000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3cb242 CR3=000000005d5fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdb0237c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdb0237c6 00007fffdb0237cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa183412fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa183412fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa183412fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa183412fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa18341305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa18341313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1835b74a8 00007fa1835b74a0 00007fa1835b7498 00007fa1835b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa18411d100 00007fa1835b7460 00007fa1835b7478 00007fa1835b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1835b74b8 00007fa1835b74b0 00007fa1835b74a8 00007fa1835b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffea0000de4500 RCX=ffffffff81ff5129 RDX=ffffea0000de4500 RSI=0000000000000008 RDI=ffffea0000de4500 RBP=ffffea0000de4500 RSP=ffffc900043ef758 R8 =0000000000000000 R9 =fffff940001bc8a0 R10=ffffea0000de4507 R11=0000000000000000 R12=ffff88802abb64a8 R13=0000000000000000 R14=ffffc900043efa10 R15=0000000000000005 RIP=ffffffff81ff512c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555575110500 ffffffff 00c00000 GS =0000 ffff8880d7167000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe45c88ff8 CR3=000000003ad49000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdb023640 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdb0237c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdb0237c6 00007fffdb0237cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa183412fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa183412fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa183412fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa183412fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa18341305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa18341313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000