last executing test programs: 2m3.288687923s ago: executing program 3 (id=25): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020000000000000000060900010073797a30000000000800054000000021500000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30004800002400038020000080080003400000000214000b8010000180080001006475700004000280140000001000010000000000000000000084000a"], 0xd4}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) dup(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f00000000c0)=[{0x5, 0x1, 0x0, 0x0, @time, {}, {}, @result}], 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) read(r4, &(0x7f0000000140)=""/4, 0x4) read$FUSE(r1, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) r6 = open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x2000, 0x1) execveat(r6, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000300)={[&(0x7f00000001c0)='{*\x00', &(0x7f0000000200)='fuse\x00', &(0x7f0000000280)='/dev/fuse\x00', &(0x7f00000002c0)='/dev/fuse\x00']}, &(0x7f0000000380)={[&(0x7f0000000340)='\\\\\x00']}, 0x800) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0xffffe012, 0x9}}, './file0/file0\x00'}) write$FUSE_WRITE(r1, &(0x7f0000000240)={0x18, 0x0, r5, {0x7}}, 0x18) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r7, 0x0, 0x0) wait4(r7, 0x0, 0x80000000, 0x0) wait4(r7, 0x0, 0x1, 0x0) acct(&(0x7f0000000140)='./file0/file0\x00') 2m2.475100131s ago: executing program 3 (id=54): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) r2 = io_uring_setup(0x756c, &(0x7f0000000140)={0x0, 0x49fd, 0x2, 0x20000001, 0x185}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) (async) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) (async) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) (async) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000000c0)=0x80, 0x4) r5 = gettid() bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x7ff, @empty, 0xffff}, 0x1c) (async) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f00000021c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) (async) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) sendto$inet6(r4, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000140)={[0x7, 0x9, 0xfffffffffffffff9, 0x2000000000000, 0x10000, 0x0, 0x6, 0x2000000000001000, 0x0, 0x0, 0x1000000000000000, 0x6bf7, 0x5, 0x8, 0x0, 0x7], 0xdddd1000, 0x2113d0}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m2.337877918s ago: executing program 3 (id=56): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r1, r2, &(0x7f0000000100)=0x6, 0x100000000010001) (async) sendfile(r1, r2, &(0x7f0000000100)=0x6, 0x100000000010001) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) 2m0.218376207s ago: executing program 3 (id=89): madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x40000001}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x48}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$netlink(0x10, 0x3, 0x1) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000100)) ptrace$cont(0x20, r5, 0x0, 0x0) 2m0.148175976s ago: executing program 3 (id=90): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x1c, r2, 0x301, 0x0, 0x200, {{}, {@val={0x8, 0x1, 0x59}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0xe501, 0x3, 0x4b8, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x420, 0x230, 0x230, 0x420, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {0xfffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xeb}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x518) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f00000000c0)={0xcc, 0x0, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000140)={0x4, 0x2, {0x3, 0x0, 0x3, 0x3, 0xfffffffb}, 0x3}) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000100)=ANY=[@ANYRES64=r8], 0x6) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 1m58.538749586s ago: executing program 3 (id=121): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="b445cfcdd781"], 0xfdef) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000390900"/20, @ANYRES32=r3, @ANYBLOB="000a5547c84b00006e21010008002800"], 0x28}}, 0x4000001) r5 = socket$netlink(0x10, 0x3, 0x9) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="6fa03d4b10b8e2"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="001925bd7000060000005e00000008000300", @ANYRES32=r9, @ANYBLOB="05001801380000000800a100fbffffff0800260000000000080022017703000008009f00d41f271e0800220192020000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008801}, 0x40) r10 = dup(r2) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2, @remote, 0x7, 0x9, 0x2, 0x0, 0x4, 0x1040014, r3}) 1m58.505382007s ago: executing program 32 (id=121): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="b445cfcdd781"], 0xfdef) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000390900"/20, @ANYRES32=r3, @ANYBLOB="000a5547c84b00006e21010008002800"], 0x28}}, 0x4000001) r5 = socket$netlink(0x10, 0x3, 0x9) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="6fa03d4b10b8e2"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="001925bd7000060000005e00000008000300", @ANYRES32=r9, @ANYBLOB="05001801380000000800a100fbffffff0800260000000000080022017703000008009f00d41f271e0800220192020000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008801}, 0x40) r10 = dup(r2) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2, @remote, 0x7, 0x9, 0x2, 0x0, 0x4, 0x1040014, r3}) 1m56.084043625s ago: executing program 0 (id=146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1m55.978546827s ago: executing program 0 (id=149): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x90400) 1m55.927434517s ago: executing program 0 (id=152): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000080)={0x20071026, r3}, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x0, 0x9, 0x81}) (async) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004440)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000004540)=0xe8) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x800001, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x80, 0x400}}, 0x50) (async) syz_fuse_handle_req(r6, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0xa, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r8, r9, 0x5, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004700)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000004800)=0xe8) syz_fuse_handle_req(r4, &(0x7f0000002180)="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", 0x2000, &(0x7f0000004e80)={&(0x7f0000004180)={0x50, 0x0, 0x6, {0x7, 0x2b, 0xb4, 0x8000, 0x1a, 0x97e, 0x40, 0x8, 0x0, 0x0, 0x10, 0xfffffffe}}, &(0x7f0000000100)={0x18, 0x0, 0xcd8, {0x8}}, &(0x7f0000004200)={0x18, 0xffffffffffffffda, 0x1bf, {0xfb2}}, &(0x7f0000004240)={0x18, 0xffffffffffffffda, 0x2, {0x8}}, &(0x7f0000004280)={0x18, 0x2f, 0x3ff, {0x9}}, &(0x7f00000042c0)={0x28, 0x0, 0x80, {{0x4, 0x8, 0x0, r3}}}, &(0x7f0000004300)={0x60, 0xfffffffffffffff5, 0xdff, {{0xfffffffffffffffe, 0x8, 0xdd76, 0x5, 0x5, 0x2, 0x2, 0x9}}}, &(0x7f0000004380)={0x18, 0x0, 0xe, {0x3}}, &(0x7f00000043c0)={0x13, 0xb, 0x7fff, {'%}\x00'}}, &(0x7f0000004400)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000004580)={0x78, 0x0, 0x8, {0xffffffffffffffff, 0x9, 0x0, {0x2, 0xfff, 0x6, 0xa, 0x7fff, 0x101, 0x7f, 0x0, 0x5, 0xa000, 0x7fff, r5, r2, 0x3, 0x8000}}}, &(0x7f0000004600)={0x90, 0x2f, 0x4, {0x1, 0x2, 0xc1, 0x3, 0x2, 0x3, {0x4, 0x81, 0x0, 0x0, 0x3, 0x40, 0x800, 0x3, 0x1, 0x6000, 0x0, r1, r9, 0x7, 0x2ef0}}}, &(0x7f00000046c0)={0x30, 0x0, 0x4f0, [{0x1, 0x0, 0x3, 0x3, '!*&'}]}, &(0x7f0000004840)={0x3d8, 0xffffffffffffffda, 0x5, [{{0x1, 0x2, 0x8, 0x1, 0x4, 0x7, {0x6, 0x80000001, 0xe, 0x1f08, 0x6, 0x8001, 0x7, 0xb05, 0x4ef, 0x6000, 0x5, r1, r2, 0xff, 0x48c}}, {0x1, 0x4, 0x1, 0x5b0c, '*'}}, {{0x3, 0x0, 0x6, 0x2, 0x10001, 0x8, {0x6, 0x3, 0x0, 0x10, 0x4, 0x5, 0x6, 0x8000, 0xb2, 0x8000, 0x5, r1, r2, 0xd, 0x9}}, {0x5, 0x3ff, 0x2, 0x6, '{,'}}, {{0x6, 0x0, 0x5, 0xcbc, 0x7ff, 0xd, {0x4, 0x8, 0x229, 0x1, 0x9, 0xfffffffffffff356, 0x80000001, 0x7, 0x1, 0x2000, 0x9, r1, r2, 0x8ef, 0x8}}, {0x0, 0x4, 0x2, 0x5, '$*'}}, {{0x3, 0x1, 0x7fffffffffffffff, 0x1964, 0x400, 0xfffffff0, {0x1, 0x0, 0x100000001, 0x3, 0x800, 0xb, 0x800, 0x5, 0x8001, 0x6000, 0x6, r10, r2, 0x2, 0x401}}, {0x5, 0x3f35, 0x1, 0x7, '4'}}, {{0x5, 0x2, 0x8001, 0x79a, 0x7, 0x9, {0x5, 0x4, 0x9, 0x5, 0x100, 0x1, 0x8, 0xfffffff8, 0x7b, 0x2000, 0x6, r1, r2, 0xa0de, 0x10001}}, {0x6, 0x2, 0x9, 0x3, '^.][,]*%@'}}, {{0x6, 0x1, 0x4, 0x0, 0x8, 0x10000, {0x1, 0x6, 0x1, 0x2, 0x2, 0xffffffffffffffff, 0x9, 0x5, 0x0, 0x2000, 0x0, r1, r2, 0x8, 0x8}}, {0x6, 0x5, 0x1, 0xa, ':'}}]}, &(0x7f0000004c40)={0xa0, 0x0, 0x7fffffff, {{0x0, 0x2, 0x45, 0x7fffffff, 0x81, 0x0, {0x3, 0x5, 0x9, 0x10001, 0x80000000, 0x4, 0xfffffff9, 0x8, 0x2, 0x6000, 0x8, r1, r2, 0x621, 0x564319cf}}, {0x0, 0x9}}}, &(0x7f0000004d00)={0x20, 0xfffffffffffffffe, 0xa0f, {0x6, 0x4, 0x1, 0xe588}}, &(0x7f0000004d40)={0x130, 0x0, 0x2, {0xfffffffffffff6ab, 0x4, 0x0, '\x00', {0x100, 0x2, 0x1, 0x0, r1, r2, 0xa000, '\x00', 0x2, 0x830, 0x6, 0x2, {0x10, 0x3f}, {0x80000000, 0x200}, {0x8000000000000001, 0x6}, {0x8, 0x9}, 0x8001, 0x1, 0x7f, 0x3ff}}}}) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x201000, 0x1800, 0x0, 0x2}, 0x20) 1m55.86435836s ago: executing program 0 (id=153): r0 = epoll_create1(0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc000201e}) epoll_create1(0x0) get_robust_list(0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) epoll_create(0x9) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x49, 0x2, {0x4, 0x4, 0x8}}, 0x14) pread64(r0, &(0x7f0000000140)=""/83, 0x53, 0x7) (async) pread64(r0, &(0x7f0000000140)=""/83, 0x53, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') (async) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') fsync(r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x60000010}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) fcntl$dupfd(r1, 0x0, r2) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x880000, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x82) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1m55.863431464s ago: executing program 0 (id=154): writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc", 0x2}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m55.419894943s ago: executing program 0 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0xdffffffb, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000020000100000003000000000180"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x273, @time={0x65757100, 0x4}}) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000200)={0xe, 0x1, 0x1, 0x0, 0x5}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x1b, 0xa, 0x0, "001e2974ea7e3406e2d701be4a6886ce4fb12589bf80d73ae100867a392f08d8", 0x47504a4d}) r8 = socket$vsock_stream(0x28, 0x1, 0x28) getsockname(r8, &(0x7f0000000080)=@ll, &(0x7f0000000140)=0x80) 1m55.346101961s ago: executing program 33 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0xdffffffb, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000020000100000003000000000180"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x273, @time={0x65757100, 0x4}}) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000200)={0xe, 0x1, 0x1, 0x0, 0x5}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x1b, 0xa, 0x0, "001e2974ea7e3406e2d701be4a6886ce4fb12589bf80d73ae100867a392f08d8", 0x47504a4d}) r8 = socket$vsock_stream(0x28, 0x1, 0x28) getsockname(r8, &(0x7f0000000080)=@ll, &(0x7f0000000140)=0x80) 1m30.206890341s ago: executing program 2 (id=578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x70, r1, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x30}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1045}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x24008000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac000000", @ANYBLOB="5fd265df37a0244ad38b04e2574b55b3034c347f5ce699b2e7a281fd0679e641dc4cbd730f4022082575f175d733e17a7519057489d8825afaf4672043855207dd4c5ce07efef07b387b18e7bd97a583ff2200d18e8c6f1858b31e50ac3a56b7bd14841169e1cc483694a96aba77104c8196ed9601a4464fcdeca4cfb16954de0b1cfb100e88933368cd4a0f9d4624b7d08bee608438ec55e645e787ac42b6ef489305025f939afaf5745a26150754d048afb2393fa8af90615525e0c96030a92dc6f69684e9e01c2220cba07670172775818a7adde1a59b684c7a7432aff912e08f23a5dd08010c5f4b8622495d3c8eb8", @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c800}, 0x8040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) 1m30.127266947s ago: executing program 2 (id=579): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffb) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 10) 1m29.798299752s ago: executing program 2 (id=583): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5080) r1 = memfd_create(&(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r1, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) 1m29.798005782s ago: executing program 2 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) io_setup(0x20, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) chdir(&(0x7f0000000200)='./file0\x00') unlink(&(0x7f0000000280)='./file1\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000100)={0x34, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x400c800) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000480)={0x19a00080, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 1m29.67786501s ago: executing program 2 (id=587): mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ntfs3\x00', 0x221000d, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) rmdir(&(0x7f0000000380)='./file0/../file0\x00') (async) mknod(&(0x7f0000000240)='./file0\x00', 0x1000, 0xfffffff6) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x2, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x400]}, 0x8) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2b}, 0x14}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_CAPBSET_READ(0x59616d61, 0xdaffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4d40, 0x3a, '', 0x3a, '', 0x3a, './cgroup', 0x3a, [0x46, 0x43, 0x50, 0x43, 0x4f]}, 0x2d) 1m29.09743673s ago: executing program 2 (id=599): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = userfaultfd(0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40, 0x52}}, 0x1c}}, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1m29.047369461s ago: executing program 34 (id=599): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = userfaultfd(0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40, 0x52}}, 0x1c}}, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1m26.296250179s ago: executing program 5 (id=639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffb) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 15) 1m26.0969588s ago: executing program 5 (id=644): writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc", 0x2}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 42) 1m25.778620314s ago: executing program 5 (id=650): r0 = socket(0x400000000010, 0x6, 0x81) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 1m25.777816201s ago: executing program 5 (id=652): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x1000000000000000, 0x4c880) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000040000005a"]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x12, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000380)={0x1000, 0x7, 0x100, "f4f63d251c2632ef9a55f9d18eec127cfef056cf6aa4027c09e9c144aa1c77466f47a31dca886731701b297a44087d1ffda80dcfbc2b5eab90fdb94bd2e50b513b6a73103868dc60256cd92ec05d4aab230073bab527112fe230b78ad70f57077a7729b651d7e189562ad928cc9457a272878bf5ad1c4649e1ffa2c68af986609cec05aa584a854bad649221f7bf5f41e91f94956edaf7eaf700da23e157e35cc22a99c3de389cd62bc65a50d4a9b63ff6909bc94598a24f5603f519b2b57644a780f090bb7a8f0d3a0d333b1212e69d9a1563f2ef7046c39f684a032a971dff76ab8a6e240de1a34ba48de0ff99d5bda144b4b1dfceeb65583bd51087c5a6648d3e7654d5214bcf9a32ffa7d13ce899f724f329fed40d92492b50e7ee8f2c3cb8ee0616859ac13fff662f96c976371c9afa1a9a35d31051a8c402de81c162ffc1a14df44597780eda8ed384a0992b0ba1b365ddc7114322ec5bba20c1b64eb5bad47811def873d2e7d299a7f727b020b4470a1ec71334f6014c470408b7e9906f9d9ba305c0a9a8b7549436579cdf121b238a00fde8ef71d19076328a095a0bf9efc39f114b6fcd93c9e4df7ab390ef5565667cb51ef5821d9801ef709737b0539b30c5a43619722003a7a6bfba2c66ad29585f36afe20af45e4a7354c2ef6b48f773797bb4d0f6e206146766761984f8ff01a7402b3b7cf066ddfaf7465ce9b84fdb613765bf1b84483037c2d8304e065bbc90c518f88b43e62090a3efc6d7e8387f9c24b04db1f8d19fc518a6e22558f3f18e942848c61771b4f7f4a96fd5812a71eeb365c77780dfb27a0501f19ba3cc82519da9e780072e0aaca597bc1f01dfd98104fa01dd77e52c480dd4324ca611a3e2b6e1757cbba81744c36f6d20685764d5a72f44a4122ac68c0c86d6e6397c6c57ce636b39a5709f671b63ee1a7d8e33c369d94814deabbf3790d4b57d0c6da978c7227a52fe4b53bcefd2bb0b667f1bb85396a74bacf7c1ce83c739a938df90dee1ea7ffb71c2ca329f461bc952b3d3b1a9bbfa906e877f4133b403d98bdd8ce153729ec7f7bc29f5bf49d3dcae91c2e0e0dc0267434bb7b2a3ae86527a531821f9dab5151f7962e2ec391cd8cef7eb780a54263398762233a38a8c60ec4c2b6e0d6a73ed1a42d4c95d35a659d0e362169b75cc946aa552b391ca66101a36db50bc9fca1fb355ef3940ab657fda19215873e87982b206d5dbe98e30b443f508d856118d4a09c8cc1bd73a10eb3bad27297c772175e2eb3ee1bafa8b071a83f299a8b880ec691409484d6f8598878670b2ee477146c779f43f01476e90cde36cfbd5acfb347098cb81edde8a7051847f88713bf5622498f24be39ff36f52719ee3cb888da897f4fcc9856c58a946d382959e8b93374f06f821ce7f5936ecddb3d099992ccb20e4b9094b8dbffdc84f7d9d2dc3403290dc9ca4a94f382941140e78fed55f20ff453a2749db5ed9eeab19bd57124cd519c620219d199fca0126562227ec5e1b91e2ea76f593f6d45760c6a623dd6156f32ea93a4077b99e59d28aa241d7f2bdfa489f4afaedb31f5ff59713b67cba4e68e48db21171f96bda97a9e6716c74bc68d39779cab06519edc3922d88a4c3851ca88ee5c1ba5f69df2c3bbb51c43d39e697e2328a29d00d318c71a6ff702f00cc1b8f0e493f0a29650ad80d5cd6c87874d1269ad7bd666f6fa66570f5d68a73199de0d855202b3181f566356ae7b7b10a3cdcb5ba51bf5bc7b74646120f2ca0d35e81094f5c529125b32a51f809c439a7ef6e1484bd99d6c51fa01ca9e2ae0a77e01c49de000acc6a71c745c0a8163f7de4998b76645b9fa95dcc610fa5200c17c013beef838497b87e89fba8d70dbe97e3f8c068b9e2f27dd5d8ffdd227ccda211241e2af96c81b1e4421919c1a559131d246884145368301cb26b7f433e3508b1fa43f981402e72781790ed6b91dac8cbc77aeb2e49c862c60fb43b979f0c338b063b045710526518329f98fc91ddc8f171eb1b6713304c4142d6311e58a8de394a74fdf139ea430ddc2e45c990e256bc54d0b9afbee54386634bf6d5587b7f4aad0f280872aa64787ebb818321933ce6b8b812660b66dea81ee3ad8c5c9a9c491d97b04658dadfb951effe92fc95b5dca7cf78d5f4da17956619996a4f8cb29c2f6f5bf34e67b9311b75c8a5161ea34361092869705b50e9fa3980b50a3ad770307c2a6ad3ae10484098e99c4eb801148a992a472ccb6a3b1327863b0e5cc49005c73fc1f0cecf30a572990aee9db25b1b6fabeaf634d02e8170dd59f33635afc1ceb8bc3e957d3e94b141de633d7a43d9431e585a2ed98c356ea33a41aba0e9ed65938bf84befb8e936a09ab231ef1e01fccefa2c68b32bbf557dfa53840c712cb262d5066c02d7e484ae23db53f07e834561b01098e0da2093aa0018f9c6e36e6642b31a997ced6cd4b86b92c14e16c478bf8e215f6ef6a5075f45083e3bcacc7a7272cfeb931a6470a8ebc543317f7ca7c081538a665160505f2d93c8b145eaf00e83ff59e5efa3c2f061e2c45dd936062dc262bd0e1ea1114c521930bb841bb629539bf151b71f652138661577b326ebceeac69b66568e53a7163d2116821ddaf57dd8517f958c0c314b75b54c33a48985d997b5ee704c4f544714657dcea5fa70b6b661a698744118f399711ace3a3832145ce7f24aa0a35762eb7bfe8e01c9c7a3ef13ad6388dd45b0f8d98e99aa551e757d7620c7b8c6581c675542143c2cf63b7cdd4cf545d917225366a231dab0c6b63e3688b54363c8ec58e405ebc27dc6a2df8311f76b0eff3cdbe1c48e5d5a958c7b7d608ba1a76c5877c54c5551c8cfd0e08778a0963d04f023d02fadb6e7e186a21c2cd5f0968e0193a47d7cf37998fa6b97974380a51aef10e9850615a4a0cd6842df483b9a9748dd610f0ae85e0f9f6dc7358dda23946de65516743c2e1c35b9799a6f9accf17dd3025e944bd73127c4a554b8468ce6a4acf2fdbd5195afea57f0e7e5ae267681d728517ba2007cd34051e609e615f56a65b8a8ded7ce63e012074ba1d2f4f7232e70e24b4b65a206c26c3033e28a40a51aec8f89272c11f36f594ec18a0e19530dbd699361e9160e434da7c63951d046b919b05e83e817ed704c0cce6623330b5888156300926c044cbb751c6684422c2ad327df2fe0d520d0b80f46650e4840e77bcab1f3f0e58ed76a3549c241411f8967e44e5220c3fb3994b338f61338577530425b5f18bde8f2a5f4105a9fb96955842301c1552aa9934c72b8d62ba632e8d7cdf36d5758ba66e42f4c1cf3052a092b78d483a8ed31ffdbbedb9439689cab221fe3eeafa1ec204c93ffdf43b7b7c10482da3c0b5885b12bf6b509a5ba796c5d37e8ae6019ae443de08ba79f87594634018881cfc3df904e70871a32680e9a213cc4950121fed263be6a06f32d5d38a5240836194f68a128c3bf868aa07dc7316ead631da9ea45eeefdbcdbc5a8f0959f00e1de6c3aec331bef3158e98e5ac37e75658f49ecd4f16e581107e16cc7c73574f9c32a6c9ec3e0516c0bee62da8296129a9f684c4347e1c9724abbf40197615740611666304f832ee101b5ea874cc7b207a485b3fd9858af8110d368bbd17621c0b26cffb1f7b5b3774238b124d5b6fe57e88f7092ca444ddc6d5678113ad652a4d02e4d437c76fd0f3894c7df05681ca9c5278ceb8777b5419992a8c6ddbcfd5cbd03544084d2284956d444b5b3e817554d505c41c496e775a2395cb63f1634d8d4e2d81f123851b263fe764bb553feae7906f30a6c6db4babaea04e63b19679f2b236da786dd25937f871006097396fdf6740140ef6e0094b6c2e4d70c5eec043120701da2cd39e01443d31b75bd4920e9ab903ffaa3ba4090af8fe9d5416bf24bcd5b0d49ab8b77507a1453c5fbea2b43e3969351d72e8a00063011a37b28956baeaf41d833fa7a63effccfe8309765e1d20a9b1abbe6c3fe06217c2252aff089136cb8ce654f01b44188f14d27b62af782b1bb69497c2bbb64fb5e6753a9ec653a9c8c23ceaaaec0e164ffdde5e581b3390bb3f6d10321135a8d5e5d4a4d3ea604eb1626baf716851f0a0bcb0362fee88b828e9fc5d7d234fd79acf7e3f43cb7e7e98108e0245a201567ea230e5d0a5e50994652070a20f2c69f190332ac392d4c16e0b65a27084144b4b7183948428949e57270c6cb19ceeaf3205e272757b37edf23f05abeaaf06e69aaaa7ad9d215cc14b3ebab87b3d899e8466b9e35662d2794a51703255d671189320da18abc045bba7139305bfaba265daea6167f5bb04a7da92f9dcf872417d2a3288e415a6ffa42fe20d5f0d6301cd0926ef91275d21cbe4db6f9fd3fad8c60e4eaa7b82f4a75f85e27167656f321095026b2217945641175abcaa5880a2e4f8de489fe3954a17dd46ded40f55ac4f2fc51353656a819694b3715c214d6fde1da261f41e1c46a02737ec63c17f9fddaeb81ecd4156be83d7a34534d1a0af6225f53f63bdcbc388aa3d546cc81a0a836a2b085b33d289b9415cd5f1642b5ba9594712fdc7150ba27ae587babb09afa0b92640595f545dd8a7a44990021fe1390b708658c64b80fc093cad7c060d44d14a8c0df43aec4fddb36fc4d6deba24ee59daa6a3cbe7d20220112dbbdd0376c07c45b6530b5df7203315e6ec3cb71ca2c57124d0475cfc18b6d173032765a08eedef20492728ae017f5cb6ab6152a1328565fb82a0c11625cb8e1614a8def3d764636469a03ec957341f9a29dc6d11774df4c10dd756cec07734cca44b58e3a3fe2f91d1f59e7f3f356086867a4e55794eb3cf8ab1828a2b474071de9c01af87a042cc61fdb052112d0e8cdd7f05982ef18134807dba81da3a6c3b07ef88f064489b30de2a10748b4be628ff59d7315980488a6177666244f9af6d070399d4318f2debe5e82764bd04e595f8230dfa505c695d7048e80d86c2a402c6b452f77c0989b0c92345c9190d983ef21e0863c3747b72de9a20f5e442d4df66e60a24167f8d0469369fa8400d85b39d40f14fc23100da3b7c9ffc4e47408298892a664ea8a7e39a4c7f4aef57bb7d5db22e4b3b39959dbe6b84eafa403a1431e8eaf025983f4951e4723a61773bc16ceb1af786f73e7c102ae6f9716bc82559d47fd3eb61af5cb6c9dbfea9527010c5178dd50ed58714a678f542af2142c093e97c1b5e9f3d44f7e7d34e6f07b7df45d874c8bed64abe4f55a510d7f49f75f24cb1162e315ca44b15d3fb9934f7179387916ce843903a1473752751d229ba37540526611f949bf0cbf9fcf7f86a0b8e547378f1d3f1220a022ec88bf5f1495678c2eaa8087b379fc6066ce52907d8d36663b41c7149ed6d94e6cd74576205070d298bceee7cd6a5b123da364017c5449242b47d5e918acb7f4241232694406fa7f09208e9725a3a8fda78a4f390d184b76b6471bf2effaae5cc7b532c0537846af7ff96c8478ad8aaba619d690410f3ec0dd949003fe31438b6745b72a4f79f6f61db74ccae92876e21072d8651b46111f022985c867fa313c6f4b47ac573382ab71cc3fef6d13ccf27f6c10bd8ed21e58baea1c39abfe4b8fef819fe1ecb8824cb4c2c213bb45f8d1efd44f78fc8525f5d296423f26a7ba2e39473cd019c63eb6b346a18d5622fb2f3b45db259af3585a97f7414ef1e4d73562544376a48a79004fb1933a05220bb5440f59982cec95c10f0dc2a3cfbb45948e1a751640ec85c57c8fdb7a227177d0972185a7f61"}) r2 = syz_io_uring_setup(0x6ae2, &(0x7f0000000300)={0x0, 0x8bc6, 0x10100, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001700)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f00000013c0)=""/238, 0xee}, {&(0x7f0000001500)=""/72, 0x48}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000001600)=""/230, 0xe6}, {&(0x7f00000014c0)}], 0x8) r3 = syz_io_uring_setup(0x49d4, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000000)={&(0x7f0000002000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x1}, 0x1) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) syz_open_dev$sg(&(0x7f0000000140), 0x1000000000000000, 0x4c880) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000040000005a"]) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x12, r1, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000380)={0x1000, 0x7, 0x100, "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"}) (async) syz_io_uring_setup(0x6ae2, &(0x7f0000000300)={0x0, 0x8bc6, 0x10100, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001700)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f00000013c0)=""/238, 0xee}, {&(0x7f0000001500)=""/72, 0x48}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000001600)=""/230, 0xe6}, {&(0x7f00000014c0)}], 0x8) (async) syz_io_uring_setup(0x49d4, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000080)) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000000)={&(0x7f0000002000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x1}, 0x1) (async) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) (async) 1m25.718670263s ago: executing program 5 (id=653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x141001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) io_submit(r4, 0x2, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x9, r1, &(0x7f0000000240)="2153005a4eaa3a9a60879b3041d58c0154d168dff750201b5bf1a12f", 0x1c, 0x8, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x6cd2, r1, &(0x7f00000002c0)="4f7bcebc0e28dc10c60acbf322c402bfcee77dbbcf2eb9d2e43acbc60f09743ac7842415bdb9e1e1c032e4974b47ca3b33380014fbc068d24e18bc06fbe098f583", 0x41, 0x3, 0x0, 0x1, r5}]) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000000)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="91d9ec66f30fc7720066b8048000000f23c00f21f86635030007000f23f80fb55ca866b9800000c00f326635002000000f300f79c0baf80c66b82421908a66efbafc0c66b80090000066ef0f01c5660f51e8", 0x52}], 0x1, 0x44, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="0f32f2ae440f2b404fb94e090000b800000000ba008000000f3066ba4100b8f5000000ef660fedaa0c00000043d841008fe85885fdfec7442400470759d2c744240275c00000c7442406000000000f0114249b", 0x7b}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1m25.34856193s ago: executing program 5 (id=658): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x1, 0xfffffff8, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x6, 0x7}) syz_pidfd_open(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x68c, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x60, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000003300)=ANY=[@ANYBLOB="00000100", @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b00ff0f0000060016003c9700000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x24004844) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 1m17.32693093s ago: executing program 1 (id=755): r0 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xb22c, 0x10}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) write(r0, &(0x7f00000001c0)="17e37e0cf0bcb1a5a8d1553a87d262116732513897989ce6341a6f44eb8918967b9a73c1c8fc8b35a4edc56380eb5af5d06bd0459db11cff48fd02497f893da78a584a1f41a4504c89d52ee2c3ce16628a319747b1ee038d5313dec2d7cfc7ae98f7a725cd4a8dcfc5c8195ecc63bcce551eb9f703652e6484ac3c25500624d6886d488c39765d18c588ddaee69b9628f467ef5a5c05910363ccc3a74940e914a9d00bbde7ab03b8d582c55889a2c2e02f255ea2de936bcfb5e157a45144efcc945d5357dd55ad257146fc43dc823c1ade7af6896259ee3d0b1adb87ff90e252159998a277f81072", 0xe8) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0xffffffb6, 0xffffffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000040)={0x1, 0xffffffff, 0xa4, &(0x7f0000000440)=""/164}) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m17.228571642s ago: executing program 1 (id=756): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x1, 0x7, &(0x7f0000000080)={0x0, "e953e14fcab3efeb00000000000000000876060ec031fa7e00"}}) 1m17.228186751s ago: executing program 1 (id=757): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd5e3691b396bfe58, 0x1a, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffff9}, @printk={@u}, @alu={0x7, 0x1, 0x0, 0x4, 0x9, 0x38, 0x2dbe83d111550bb7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x5, 0x3, 0xb7d}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x1, 0x1], &(0x7f0000000480)=[{0x5, 0x1, 0xf}, {0x5, 0x2, 0x10, 0x4}, {0x4, 0x2, 0xa, 0xa}, {0x3, 0x2, 0xc, 0x2}, {0x4, 0x3, 0xf, 0x6}, {0x0, 0x4, 0xc, 0x8}, {0x3, 0x5, 0xb, 0x3}, {0x4, 0x5, 0x2, 0x1}], 0x10, 0xffffff80}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd5e3691b396bfe58, 0x1a, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffff9}, @printk={@u}, @alu={0x7, 0x1, 0x0, 0x4, 0x9, 0x38, 0x2dbe83d111550bb7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x5, 0x3, 0xb7d}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x1, 0x1], &(0x7f0000000480)=[{0x5, 0x1, 0xf}, {0x5, 0x2, 0x10, 0x4}, {0x4, 0x2, 0xa, 0xa}, {0x3, 0x2, 0xc, 0x2}, {0x4, 0x3, 0xf, 0x6}, {0x0, 0x4, 0xc, 0x8}, {0x3, 0x5, 0xb, 0x3}, {0x4, 0x5, 0x2, 0x1}], 0x10, 0xffffff80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='fsi_master_gpio_out\x00', r0, 0x0, 0x3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='fsi_master_gpio_out\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e34, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 1m16.357209649s ago: executing program 1 (id=775): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) (async, rerun: 64) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async, rerun: 64) chdir(&(0x7f00000000c0)='./file0\x00') (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r1, 0xf9c55000) accept4$alg(r1, 0x0, 0x0, 0x80400) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0xfffff000, {0x0, 0x0, 0x0, 0x40, 0x9a, 0x0, 0x9, 0xa, 0x1, "60b070715efcb37a9bd8783e750eca064ec85a8fb096da4d8ab9c2366540227966ad869f60a2cae91c73d09a3ca2619daa2cf866ba5734c8c5da56f5b6fea7a6", "46823d96456b6ea5b8262b7d40ea95d5fd11f04c37f0e1cc8a2d0e725e3740dd5cd50bf06cf1e8c8dafe68504ed0c15873270f603137fb837c4aa214df810d8d", "c8a40aa4112f714a9eeacb870bcc03c1a2e32494f35c133c73143db400b898fa", [0x1]}}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r2, 0x6000000) (async) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0x100, 0x9, 0x0) 1m16.286341262s ago: executing program 1 (id=777): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020114000129184ad4a08058195c60140000002f0600ac141414e0ecff02808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e46691e233da4d163f53ab1b3f65c3042e749c2d4c8303a0f7fbda34fb8825f80200a3"], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) chdir(&(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) 1m15.256355658s ago: executing program 1 (id=795): setreuid(0xee00, 0x0) (async, rerun: 32) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x1070bd2d, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) r4 = getuid() setreuid(0xee00, r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0xfffffffffffffdc2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10, 0x0, r3}, 0x94) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0) (rerun: 64) 1m10.358360907s ago: executing program 35 (id=658): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x1, 0xfffffff8, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x6, 0x7}) syz_pidfd_open(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x68c, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x60, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000003300)=ANY=[@ANYBLOB="00000100", @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b00ff0f0000060016003c9700000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x24004844) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 57.593876226s ago: executing program 36 (id=795): setreuid(0xee00, 0x0) (async, rerun: 32) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x1070bd2d, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) r4 = getuid() setreuid(0xee00, r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa32000000000000703000002feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0xfffffffffffffdc2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10, 0x0, r3}, 0x94) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0) (rerun: 64) 32.37818019s ago: executing program 4 (id=1427): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) (async, rerun: 32) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x72, 0x101301) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_vlan\x00'}) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000001180)={0x8f4, "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"}) 32.307966358s ago: executing program 4 (id=1428): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000085000000500000009500000000000000adf2edbf195835ca3ba94f7989986d02fe8152d0f0609a779f0f9d9e54330f1d1d57b072ebfe3b13265ee55d9f877d4dc0fa2d2fea6b4b2b459e3d835952d1938027d0bb73d83c20af44739a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x40, 0x0, 0x27) 32.306708017s ago: executing program 4 (id=1429): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [{0x8, 0x1}], {0x10, 0x6}}, 0x2c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 32.223865134s ago: executing program 4 (id=1430): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 32.223721852s ago: executing program 4 (id=1431): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x87aca000) syz_clone(0x8002000, &(0x7f0000000080)="cb2bc3cf921537d79e2b4c30756307aeb517572f75bb65cd16414bfedf8f6f46eff21db27e3174e3965c045d0895860f3cc2c2f4b69e0087b2ee7d09285c65de66df52eca897fff427a215d0f265e060c3b335c77c0484040aa425864d6d1adb2fce1bfe2bdb121c2955ce859b8f019cc09e01e7eabb4938a9b8", 0x7a, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000240)="f79280fcf04ba0b9bacb5ddf99df7744e3bae01ea1caa7f8fe326099821d43c313ac43fba350fedf6b917573df0a5073d825a089653fac28bc8486e7650d04e3741640526aaadba4b1697e82074feca3e7dbfdb7ab46362b656b829a740b23ef91dfba492cd3b5fef3578896c02fe5f020605e7e7dd2bad9e7d7c68d4734efed90e8325de0b93f69ac048f189b1085fa3bd0ecec1938bc631bc6f3761dd0d6ad471aa95c2b31cda168f0e0d20fb5cbde07d4e8079ce2388b3d22a65a96ccee0000000000") set_mempolicy(0x4000, &(0x7f0000000200)=0x2, 0x6) set_mempolicy(0x3, &(0x7f0000000140)=0x6, 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x87aca000) (async) syz_clone(0x8002000, &(0x7f0000000080)="cb2bc3cf921537d79e2b4c30756307aeb517572f75bb65cd16414bfedf8f6f46eff21db27e3174e3965c045d0895860f3cc2c2f4b69e0087b2ee7d09285c65de66df52eca897fff427a215d0f265e060c3b335c77c0484040aa425864d6d1adb2fce1bfe2bdb121c2955ce859b8f019cc09e01e7eabb4938a9b8", 0x7a, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000240)="f79280fcf04ba0b9bacb5ddf99df7744e3bae01ea1caa7f8fe326099821d43c313ac43fba350fedf6b917573df0a5073d825a089653fac28bc8486e7650d04e3741640526aaadba4b1697e82074feca3e7dbfdb7ab46362b656b829a740b23ef91dfba492cd3b5fef3578896c02fe5f020605e7e7dd2bad9e7d7c68d4734efed90e8325de0b93f69ac048f189b1085fa3bd0ecec1938bc631bc6f3761dd0d6ad471aa95c2b31cda168f0e0d20fb5cbde07d4e8079ce2388b3d22a65a96ccee0000000000") (async) set_mempolicy(0x4000, &(0x7f0000000200)=0x2, 0x6) (async) set_mempolicy(0x3, &(0x7f0000000140)=0x6, 0x1ff) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) 32.106832722s ago: executing program 4 (id=1432): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r2) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46"], 0x9c5) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) close(r4) ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000380)=@bcast) close(r3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0xc0189436, &(0x7f0000000140)) execveat(r6, &(0x7f00000000c0)='./file1\x00', &(0x7f00000003c0)={[&(0x7f0000000100)='*)[\x00', &(0x7f0000000140)='\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)=']&\x00', &(0x7f0000000240)='\x00', &(0x7f0000000740)='(\x93/**:\x00\x94k\xb2 \x10\xa2\xf5\xca61UT\xed\b\x83\x03*\xaa..k\xa8\xe5X\xdb\x8a\xc7`\xf3\x97\xe6>`\xe9\xdb\x85zt\xc4\xb88|\x17\x96K\x9b\xa4\xe8{\xd1\xadp\xb8\x1e\xff\xa8\a\xeb[|8\x953\b\x9b\xcc\x12`\x19\xd4i\xab5\x02\xc1G\xe9@\x1e{\xc6T\x83\xc2\x05R\xa9\xf7\x86\xbe\xec^(\ap\x94\x83*\x8f\xf1\xc5\x8b\xae\xf9\b\xadv\x85\x0ej\xd4\xd2^\xbe\x82\xc9~-\xf2\xe6\xb5\xcc\x9da\xa4s?\xe2\xe3\x89:\xe9\xb9\x91\xe0\xa2\xac\x9c\x10d\xdc\xd2+\xaao\x98j\x94\x01\xc8\xda\xea\x89\xee|\xcaJ)9}\xc6\x85\xbe\xac/_\xeb\xda\xfc.N%\x8b\xc0K\xdanP2\rZz\xa5\xd4\x97\x19\xbe~\x0f\bK\x9e\xb2p\x1c\xd8C\x9b7<\xe8\'Fk\x86O\x1a\xc44\xc5\xd9\x81\x93~2\x96\xa1\xbe\x1a', &(0x7f0000000480)='}$/{}\x00', &(0x7f0000000300)='\x00']}, &(0x7f0000000680)={[&(0x7f0000000340)='!\\\x00', &(0x7f0000000440)='!,\x00', &(0x7f0000000700)='\xb0(\xca\xa7OT\x87\x11\x85\xee/J\x19\xba\xd1 \x82\x0fl^\x9d', &(0x7f0000000280)='\x00;3\xd2\xe5\xf1\xb6\x9b\xdaH>\x92\xb9\x06\xae\xc2E\xbdE:\xf0\xf4\xec\x9b\b\xdcL\x8c\xeeH\xcb\t\xad\x1eF\xa5\xd5\xb3Z\xda\x03ed\xa5\xf0Hg\aO}w_\xea\x02 \x95\\t\x85: \xc4\x1dXf\xde\xdf\xd5q\xa1%\xc0\xb2\xb9\xd1\x1f=\t\xf8~qA\f\xb6\x14\xe9\x93.\xd7\x9e\x9f\xf2\x82\xe21#\xb9\x02\x92e', &(0x7f0000000500)='&$\x00', &(0x7f0000000540)='*\x00', &(0x7f00000004c0)=':$-\\@]\xd5)[\xc6\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='^{-\xa4-){I\x00', &(0x7f0000000580)='\x15\xdd-7\xf6R5\xf5\x19\xf2\xd6\x9f!\r\"\xfe\xa5Gz\x01z\x1a\xa5\x01\x18Y\xb1\xbf\xcf\x9ae`\x03\"\xca\x94z\x91\xae\x8d\xd1l\xe2\x81R@\xbd,\xec\n\xf7\xf0\xb4\x19\b\x1b\x19=K\xba\xee']}, 0x400) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x401, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 32.063472128s ago: executing program 37 (id=1432): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r2) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46"], 0x9c5) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) close(r4) ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000380)=@bcast) close(r3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0xc0189436, &(0x7f0000000140)) execveat(r6, &(0x7f00000000c0)='./file1\x00', &(0x7f00000003c0)={[&(0x7f0000000100)='*)[\x00', &(0x7f0000000140)='\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)=']&\x00', &(0x7f0000000240)='\x00', &(0x7f0000000740)='(\x93/**:\x00\x94k\xb2 \x10\xa2\xf5\xca61UT\xed\b\x83\x03*\xaa..k\xa8\xe5X\xdb\x8a\xc7`\xf3\x97\xe6>`\xe9\xdb\x85zt\xc4\xb88|\x17\x96K\x9b\xa4\xe8{\xd1\xadp\xb8\x1e\xff\xa8\a\xeb[|8\x953\b\x9b\xcc\x12`\x19\xd4i\xab5\x02\xc1G\xe9@\x1e{\xc6T\x83\xc2\x05R\xa9\xf7\x86\xbe\xec^(\ap\x94\x83*\x8f\xf1\xc5\x8b\xae\xf9\b\xadv\x85\x0ej\xd4\xd2^\xbe\x82\xc9~-\xf2\xe6\xb5\xcc\x9da\xa4s?\xe2\xe3\x89:\xe9\xb9\x91\xe0\xa2\xac\x9c\x10d\xdc\xd2+\xaao\x98j\x94\x01\xc8\xda\xea\x89\xee|\xcaJ)9}\xc6\x85\xbe\xac/_\xeb\xda\xfc.N%\x8b\xc0K\xdanP2\rZz\xa5\xd4\x97\x19\xbe~\x0f\bK\x9e\xb2p\x1c\xd8C\x9b7<\xe8\'Fk\x86O\x1a\xc44\xc5\xd9\x81\x93~2\x96\xa1\xbe\x1a', &(0x7f0000000480)='}$/{}\x00', &(0x7f0000000300)='\x00']}, &(0x7f0000000680)={[&(0x7f0000000340)='!\\\x00', &(0x7f0000000440)='!,\x00', &(0x7f0000000700)='\xb0(\xca\xa7OT\x87\x11\x85\xee/J\x19\xba\xd1 \x82\x0fl^\x9d', &(0x7f0000000280)='\x00;3\xd2\xe5\xf1\xb6\x9b\xdaH>\x92\xb9\x06\xae\xc2E\xbdE:\xf0\xf4\xec\x9b\b\xdcL\x8c\xeeH\xcb\t\xad\x1eF\xa5\xd5\xb3Z\xda\x03ed\xa5\xf0Hg\aO}w_\xea\x02 \x95\\t\x85: \xc4\x1dXf\xde\xdf\xd5q\xa1%\xc0\xb2\xb9\xd1\x1f=\t\xf8~qA\f\xb6\x14\xe9\x93.\xd7\x9e\x9f\xf2\x82\xe21#\xb9\x02\x92e', &(0x7f0000000500)='&$\x00', &(0x7f0000000540)='*\x00', &(0x7f00000004c0)=':$-\\@]\xd5)[\xc6\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='^{-\xa4-){I\x00', &(0x7f0000000580)='\x15\xdd-7\xf6R5\xf5\x19\xf2\xd6\x9f!\r\"\xfe\xa5Gz\x01z\x1a\xa5\x01\x18Y\xb1\xbf\xcf\x9ae`\x03\"\xca\x94z\x91\xae\x8d\xd1l\xe2\x81R@\xbd,\xec\n\xf7\xf0\xb4\x19\b\x1b\x19=K\xba\xee']}, 0x400) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x401, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1.848663693s ago: executing program 9 (id=2118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x110, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) (async) sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0xeb}], 0x1, 0x2000, 0x0) r3 = dup(r0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000002060300"], 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000002060300"], 0x58}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000040)={@rand_addr=' \x01\x00', r6}, 0x14) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) 1.778897684s ago: executing program 9 (id=2120): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000280)={{r1}, r2, 0x14, @unused=[0x6, 0x2, 0xd4c, 0x400], @name="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"}) close(0x3) 1.710144629s ago: executing program 9 (id=2122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35b", 0x6) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r6 = userfaultfd(0x80001) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_submit(r3, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001200010200"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00 '], 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000001680)={0x2020}, 0x2020) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x47d}) ioctl$UFFDIO_REGISTER(r6, 0x8010aa01, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r10, 0x3305) 1.09620806s ago: executing program 8 (id=2133): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x8081000}}, "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", "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"}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f28008001800"], 0x114}], 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a0000}}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4) 995.82151ms ago: executing program 8 (id=2134): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r3, r2) (async) setreuid(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioprio_get$uid(0x3, 0x0) 995.596395ms ago: executing program 8 (id=2135): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xa000) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x101, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x6, 0x8, 0x7fff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(r2, r1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140)={r6}) dup(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x4c}}, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 884.153646ms ago: executing program 8 (id=2136): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=@newtfilter={0x84, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_EMATCHES={0x50, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="a6806da8e68e4b054682", @TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0x84}}, 0x0) 880.518448ms ago: executing program 8 (id=2139): openat$uinput(0xffffffffffffff9c, &(0x7f0000002980), 0x2, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002980), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000f0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000040), 0x0}, 0x20) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) fsetxattr(r4, &(0x7f0000000040)=@random={'system.', '/dev/uinput\x00'}, &(0x7f00000002c0)='fuse\x00', 0x5, 0x2) (async) fsetxattr(r4, &(0x7f0000000040)=@random={'system.', '/dev/uinput\x00'}, &(0x7f00000002c0)='fuse\x00', 0x5, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)=0x4, 0x4) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0x24, "dd7cb8101902223145c90158c573a7508e053c9f203cf8cf59177a0037c71b76637af1df"}, &(0x7f0000000380)=0x2c) shutdown(r4, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRESDEC=0x0]) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000000c0)=0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) (async) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) bind$inet(r6, &(0x7f0000000c80)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) (async) bind$inet(r6, &(0x7f0000000c80)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000002100)=ANY=[@ANYBLOB="0180c2000000000000002c000000000011907800000018e000d8c98aa86e2b9a0400cd708f64000100004e200018907804000000000000000000"], 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000029c0)={0x9, 0xa5a, {0x52, 0x676, 0x5, {0xcb5, 0xc0c}, {0x9, 0x3}, @ramp={0x8, 0x7a, {0x7f5a, 0x752b, 0x0, 0x8}}}, {0x55, 0x4, 0x1551, {0x0, 0x7}, {0x1000, 0xcbf}, @const={0x171, {0xfff8, 0xa, 0x7624, 0x4}}}}) 880.343674ms ago: executing program 9 (id=2140): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x4}]}, 0x30}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf25010041000c00050025000000000000000c0002000000000000000000100007800c000180080001"], 0x3c}}, 0x8800) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast2, @dev={0xac, 0x14, 0x14, 0x1f}, 0x6, 0x1d}}) 810.093176ms ago: executing program 9 (id=2142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r2, 0x301, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x40004) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000100000002000000000000000000007f00ec97630000f1ffffff"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 702.301034ms ago: executing program 9 (id=2144): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r2, 0x289e0cb5, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=@newsa={0x148, 0x1a, 0x713, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xb1}}]}, 0x148}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x78, 0x30, 0xb, 0x100, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x2, 0x0, 0x800}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x0) 700.831931ms ago: executing program 8 (id=2145): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) poll(&(0x7f0000000000)=[{r0, 0x100}, {r0, 0x1010}], 0x2, 0xfffffff2) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) ppoll(&(0x7f00000001c0)=[{r1, 0x1046}, {r0, 0x4498}, {r2, 0x100}], 0x3, &(0x7f0000000200), &(0x7f0000000240)={[0x3]}, 0x8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x1, 0x0, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x1, 0x6, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x823, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000180)={0x401, 0x9}) 699.995534ms ago: executing program 7 (id=2147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x3, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xfffffffffffffffe, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x40) 584.012064ms ago: executing program 7 (id=2149): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x37) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x3}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x400000, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xc, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) syz_emit_ethernet(0x3a, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbbbbbfbb00000000000008004500003c00000000001190787f000001e0000001000000000001000053e5b1b80c5d8c000100000000000000"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r10, 0xdc, "3804cbe9b48588b1515ce5123d1908b9d588b7a845aebcbcc000180ee129838ef9e0695a186325a584813751bf670112aafd3002222166e039fa1f962bc1294167decd17c611806817fff0149039d2f16846ad3bd3b000919c17b2e9bc72c2c27529b2a4b9d93074dc5c2c7d1da5fadeb47e5a834b05b5906e6b52f92b0be9f3983ee8a70a9ae62cf2479984facb310227f16655bab5e5921e74ab122bd755c3c71390e92c513b1f26a2eb1e8ccb79ffee4e60c716f3fe14f3ddd623fed14738f367070e782493ee12ef21b0340939258465aebb52a586ff45bd4eb1"}, &(0x7f00000000c0)=0xe4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private2, 0xfffffffc}) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r11, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 523.81332ms ago: executing program 7 (id=2150): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000000)={&(0x7f0000002000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x1}, 0x1) (async, rerun: 32) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) (rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r3, 0x4}, 0x38) (async) r4 = getpgid(0xffffffffffffffff) ptrace$setsig(0x4203, r4, 0x6, &(0x7f0000000240)={0x20, 0x6}) (async, rerun: 64) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) (rerun: 64) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b090b, 0xf, '\x00', @p_u32=&(0x7f0000000040)=0x45f6}}) (async, rerun: 64) r6 = socket(0x2000000015, 0x80005, 0x0) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x10c, &(0x7f0000000180)=0x15a0, 0x0, 0x4) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000080), &(0x7f00000002c0)=@tcp6=r6}, 0x20) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 442.430078ms ago: executing program 7 (id=2154): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x1}, 0xe) listen(r2, 0x90004) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000200)='m', 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0xc0844123, &(0x7f0000000180)=0x4) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000240)=0xfffffffffffff03b) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd2a, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xd, 0x2, 0x0, 0x0, 0x6, 0x18}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000885) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="b80000001900010000000000000000000f000000000000000000000000000000fc0100000000000000000000000000010000000000aa000002"], 0xb8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff80000000}, {0x4, 0x0, 0xfffffffffffffffd}, 0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0x3, 0x0, 0x8}}, 0xe8) 331.899489ms ago: executing program 7 (id=2157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001900)='./binderfs/binder0\x00', 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61641024000280080004400000001c08000340000000b9080001400000000a08000240000000000900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a00)={0x4, 0x0, &(0x7f0000001940)=[@exit_looper], 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r6, r7, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000030701020000000000000000050000030c02034000000000000008000c00034000000000000000080c00034000000000000000000900010073797a3000000000c64c256b5c612f94237474dcc749baccdf04e7b1e02cb5d0ad1c271397111c73cf2c18a2a544748750284a79c9efe235ecd76d780061b584573cb34934ddc148d1895a6869b293"], 0x44}, 0x1, 0x0, 0x0, 0x48810}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0xc4, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf803831}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7284}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000001c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) (async) sendfile(r2, r2, 0x0, 0x4) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001900)='./binderfs/binder0\x00', 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) lseek(r5, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61641024000280080004400000001c08000340000000b9080001400000000a08000240000000000900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a00)={0x4, 0x0, &(0x7f0000001940)=[@exit_looper], 0x0, 0x0, 0x0}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup3(r6, r7, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000030701020000000000000000050000030c02034000000000000008000c00034000000000000000080c00034000000000000000000900010073797a3000000000c64c256b5c612f94237474dcc749baccdf04e7b1e02cb5d0ad1c271397111c73cf2c18a2a544748750284a79c9efe235ecd76d780061b584573cb34934ddc148d1895a6869b293"], 0x44}, 0x1, 0x0, 0x0, 0x48810}, 0x8000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0xc4, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf803831}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7284}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) 282.307933ms ago: executing program 7 (id=2159): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x88001) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000600)=0x7, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905", @ANYRES32], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) recvmsg(r5, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0xc) 160.735483ms ago: executing program 6 (id=2162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000003300), 0x8000, 0x0) ioctl$CDROMRESET(r1, 0x5312) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e40bb4b68ff4e3a8fe314a0"], &(0x7f0000000280)='GPL\x00'}, 0x94) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0], 0x2, 0xd}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@delqdisc={0x270, 0x25, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4}, {0xfff3, 0x6}, {0x9, 0x9}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x2, "c5befe2d7a804db3159ec49725e825e6"}}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x64a1dd08, 0x4, 0xe2f, 0x4}, 0x5, 0x1, 0x5, 0x8000, 0x4, 0x17, 0x8, 0xb, 0x5, 0xfffff801, {0x621b5ac6, 0xa1fb, 0x8, 0x7, 0x3, 0x7ff}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x40}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x6, 0x80}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff00000}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1d, 0x6}}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_RATE={0x6, 0x5, {0x81, 0xa}}, @TCA_STAB={0x17c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x80, 0x2, 0xc, 0x1, 0x7, 0x9, 0x9}}, {0x16, 0x2, [0x40, 0x1000, 0x6, 0x8, 0xc1d, 0x7f, 0x0, 0x3, 0x400]}}, {{0x1c, 0x1, {0x8, 0x32, 0x5, 0x8, 0x1, 0x7, 0x3, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x1, 0x3, 0x7ff, 0x40, 0x3, 0x1, 0x800}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x4, 0x8001, 0x0, 0x1, 0x2, 0x3, 0x9}}, {0x16, 0x2, [0x4, 0x5, 0x0, 0x7fff, 0x3, 0xff, 0x4a7, 0x2, 0x8001]}}, {{0x1c, 0x1, {0x0, 0x8, 0x7, 0x5, 0x2, 0x1d1d800, 0x1, 0xa}}, {0x18, 0x2, [0x7f, 0xe6, 0x9, 0xd0, 0x8, 0x0, 0x6, 0x5, 0x6, 0x7]}}, {{0x1c, 0x1, {0x2, 0x40, 0x1, 0x5e72, 0x0, 0xfffff801, 0x9, 0x3}}, {0xa, 0x2, [0x4, 0x7fff, 0x2]}}, {{0x1c, 0x1, {0x11, 0x2, 0x0, 0x0, 0x2, 0x8000, 0x8001, 0x3}}, {0xa, 0x2, [0x8001, 0x7e, 0xb5b]}}, {{0x1c, 0x1, {0x4, 0xc, 0x200, 0x80, 0x1, 0xc3, 0x81}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x80, 0x3, 0x36, 0x2, 0xe, 0x8000, 0x4}}, {0xc, 0x2, [0xfff, 0x1000, 0x4, 0x200]}}]}]}, 0x270}, 0x1, 0xf0ffffffffffff}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r6, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x15, 0x0, &(0x7f0000001380)) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0x18, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r10 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, r11, 0x0) socket$nl_route(0x10, 0x3, 0x0) 69.576481ms ago: executing program 6 (id=2163): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'pimreg\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x2, 0x0, 0x6, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x700, 0x6, 0x10001}}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x8084}, 0x1) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32], 0x44}}, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x7}]}}]}, 0x3c}}, 0x20000084) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x5, 0x200, 0x6, @empty, @empty, 0x7800, 0x8000, 0x7fe00580, 0x401}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0xfd, 0xecd, 0x2b, @loopback, @remote, 0x7800, 0x8, 0x7, 0xc}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000001800)=ANY=[@ANYBLOB=',\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="91572bbd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7401028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400020000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="7001028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400a80900003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400030003080500000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=r1, @ANYBLOB="6001028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400018000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff7f00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000008000100", @ANYRES32=r5, @ANYBLOB="80000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400631f000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="a801028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600dc864c4c847b697bf8615a01caa6f2ae5b14608c24f3303f1c7e59b0a56ff25c5a13fa99780c09543758366a91280598cfb0e4b2a0ebbd39f283c15e059f37774c75818ab61f250cfc353a8ab7102ced3233161e19206708efd2be8a7ca30ef4bf6ccfbcef08600b83a4d241b2a6279cd217a7a0beaac1ee6f7814d374f54f715a858a55dca2b70278fc4ce64f8061bbf1815398a4b4179c3d920b06c37f09f75b9d2eac8747751e87378c0fcc3cb89272", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004009a010000"], 0x72c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) r14 = fcntl$dupfd(r0, 0x0, r0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) socket$igmp(0x2, 0x3, 0x2) sendmsg$IPVS_CMD_GET_CONFIG(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) 69.129071ms ago: executing program 6 (id=2164): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x8000, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000140)=0x4) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e082f7c6cbecbf09d6dd7be5a02dfd64541f329c14f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc00", 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="f40000000000000061104c000000000005000000000000009500000c000000001d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x8000, 0x0) (async) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000140)=0x4) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e082f7c6cbecbf09d6dd7be5a02dfd64541f329c14f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc00", 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="f40000000000000061104c000000000005000000000000009500000c000000001d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) (async) 67.972493ms ago: executing program 6 (id=2165): r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc6}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xa6}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xa, &(0x7f00000001c0)=""/10, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x5, 0x227d, 0x97}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7feb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='rxrpc_conn\x00', r3, 0x0, 0x4e85}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r6 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x2) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c00028008000200ea000000140003007866726d30"], 0x50}}, 0x0) 544.536µs ago: executing program 6 (id=2166): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x3, 0x24}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x321}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x8c0}, 0x40) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x10, 0x2a, [@chsw_timing={0x68, 0x4, {0x5, 0x50}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xb, 0xb2, 0x9}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c4}, 0x800) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000300)={0x0, 0x3, 0x2025}) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000340)={0x0, 0x0, {0x9, 0x7be6, 0x100f, 0x5, 0xb, 0x2, 0x1, 0x1}}) r3 = syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x80, 0x40000) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r3, 0x40044104, &(0x7f0000000400)=0x2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1bc, r1, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1}}}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1840ed2350f4c687"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4e6b46c6f4bfc7fb"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1fc6bf3195c1fd1b20b01a51c9f6c5e2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="036fab478770b8717a063251260bd6bd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d8850a1da697e15d"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a6a19e15848b3638bbafa5edbbfd7cc4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a27ea107d93a1a19033a94e8daec4408"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3be44e7be02e69f7"}]}, @NL80211_ATTR_REKEY_DATA={0xb0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="aaf7f44db790c83b28425a8cc4491207"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3c55dd1d1d9d47f1b4cdd071bfa1059c24640953b7debede"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="84a0ed10dcc00b0072d1483cdff030d6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8fea8bfbbb9db991"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c9fc9893655d357ac153ec23ee3911fd8f78459e409f559d0b910b30a2dfb105"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="70b14b5ab354f10cb3c7ca4a6e2b7c4250e08c65e2e612ef2c0968050da29f07"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c27f0129b8dfd8e2416159ffbd63d11a"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dda8a706089dc6cd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3875850a8179ac51"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2a457c42be3903f2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "24cef4f65f8d1d7d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "42c3c539815a0ae1"}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000700)={0x0, 0x7fff, 0x7, '\x00', &(0x7f00000006c0)=0xe}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4d36}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44001) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000880)=@x86={0x2, 0x6, 0x1, 0x0, 0x6, 0x10, 0x2, 0x80, 0x0, 0x6, 0x9, 0x3, 0x0, 0x8d, 0x0, 0x8, 0x3, 0xd, 0x4, '\x00', 0x7, 0x6}) r6 = syz_open_dev$vcsn(&(0x7f00000008c0), 0x461, 0xc000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000900)={0x13}) r7 = syz_open_dev$sndpcmp(&(0x7f0000000940), 0x5, 0x181200) ioctl$SNDRV_PCM_IOCTL_START(r7, 0x4142, 0x0) r8 = syz_open_dev$vivid(&(0x7f0000000980), 0x3, 0x2) ioctl$VIDIOC_S_PRIORITY(r8, 0x40045644, 0x1) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000009c0)={0x0, {0x100, 0x6}}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000a40)={'vcan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6d8b3c5d381114c9}}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x14c, r10, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd1b}}]}, 0x14c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000d40)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000d00), 0x106}}, 0x20) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000d80)=0x78) close(r9) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000e00)) 0s ago: executing program 6 (id=2167): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r0) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x5005, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="66643d4887dfcc9883087b2c25e97727d8082b23463b6ee61d70c196999777693be1c49e7c2f81000000000000000000", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x2, 0x80000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00c8"], 0x24}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$FUSE(r4, 0x0, 0xeffd) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r5], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) kernel console output (not intermixed with test programs): d PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.169281][T11062] Call Trace: [ 111.169286][T11062] [ 111.169290][T11062] dump_stack_lvl+0x16c/0x1f0 [ 111.169311][T11062] should_fail_ex+0x512/0x640 [ 111.169331][T11062] should_fail_alloc_page+0xe7/0x130 [ 111.169344][T11062] prepare_alloc_pages+0x3c2/0x610 [ 111.169357][T11062] ? rcu_is_watching+0x12/0xc0 [ 111.169373][T11062] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 111.169392][T11062] ? kasan_save_stack+0x42/0x60 [ 111.169407][T11062] ? kasan_save_stack+0x33/0x60 [ 111.169422][T11062] ? kasan_save_track+0x14/0x30 [ 111.169437][T11062] ? __kasan_kmalloc+0xaa/0xb0 [ 111.169451][T11062] ? __kvmalloc_node_noprof+0x27b/0x620 [ 111.169467][T11062] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 111.169483][T11062] ? mmu_topup_memory_caches+0xbc/0x170 [ 111.169497][T11062] ? kvm_mmu_load+0xd9/0x22a0 [ 111.169508][T11062] ? vcpu_run+0x34eb/0x5500 [ 111.169519][T11062] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 111.169532][T11062] ? kvm_vcpu_ioctl+0x5eb/0x1690 [ 111.169544][T11062] ? __x64_sys_ioctl+0x18e/0x210 [ 111.169571][T11062] ? do_syscall_64+0xcd/0x4c0 [ 111.169581][T11062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.169594][T11062] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 111.169619][T11062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.169633][T11062] ? policy_nodemask+0xea/0x4e0 [ 111.169645][T11062] alloc_pages_mpol+0x1fb/0x550 [ 111.169656][T11062] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 111.169667][T11062] ? trace_kmalloc+0x2b/0xd0 [ 111.169678][T11062] ? __kvmalloc_node_noprof+0x298/0x620 [ 111.169698][T11062] alloc_pages_noprof+0x131/0x390 [ 111.169713][T11062] get_free_pages_noprof+0x10/0xb0 [ 111.169733][T11062] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 111.169750][T11062] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 111.169770][T11062] mmu_topup_memory_caches+0xbc/0x170 [ 111.169784][T11062] kvm_mmu_load+0xd9/0x22a0 [ 111.169797][T11062] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 111.169808][T11062] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 111.169819][T11062] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 111.169833][T11062] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 111.169845][T11062] ? __pfx_kvm_mmu_load+0x10/0x10 [ 111.169857][T11062] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 111.169873][T11062] ? kvm_check_and_inject_events+0x71c/0x1310 [ 111.169889][T11062] vcpu_run+0x34eb/0x5500 [ 111.169900][T11062] ? kvm_mmu_post_init_vm+0x269/0x370 [ 111.169916][T11062] ? __lock_acquire+0xb8a/0x1c90 [ 111.169929][T11062] ? __pfx_vcpu_run+0x10/0x10 [ 111.169944][T11062] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 111.169956][T11062] ? __local_bh_enable_ip+0xa4/0x120 [ 111.169973][T11062] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 111.169986][T11062] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 111.170003][T11062] kvm_vcpu_ioctl+0x5eb/0x1690 [ 111.170018][T11062] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 111.170035][T11062] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 111.170048][T11062] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 111.170064][T11062] ? hook_file_ioctl_common+0x145/0x410 [ 111.170080][T11062] ? selinux_file_ioctl+0x180/0x270 [ 111.170090][T11062] ? selinux_file_ioctl+0xb4/0x270 [ 111.170100][T11062] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 111.170115][T11062] __x64_sys_ioctl+0x18e/0x210 [ 111.170130][T11062] do_syscall_64+0xcd/0x4c0 [ 111.170141][T11062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.170152][T11062] RIP: 0033:0x7f908cb8e9a9 [ 111.170161][T11062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.170171][T11062] RSP: 002b:00007f908da9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.170182][T11062] RAX: ffffffffffffffda RBX: 00007f908cdb5fa0 RCX: 00007f908cb8e9a9 [ 111.170188][T11062] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 111.170194][T11062] RBP: 00007f908da9e090 R08: 0000000000000000 R09: 0000000000000000 [ 111.170201][T11062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.170207][T11062] R13: 0000000000000000 R14: 00007f908cdb5fa0 R15: 00007ffc4b8b2528 [ 111.170220][T11062] [ 111.233416][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 111.234344][ C3] vkms_vblank_simulate: vblank timer overrun [ 111.317194][ C3] vkms_vblank_simulate: vblank timer overrun [ 111.354469][T11075] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 111.357694][T11075] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.361200][T11075] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 111.378428][T11077] Cannot find map_set index 0 as target [ 111.412882][T11079] xt_hashlimit: size too large, truncated to 1048576 [ 111.465022][T11090] : renamed from bridge_slave_0 (while UP) [ 111.956992][T11114] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.920'. [ 112.263778][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 113.313622][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 114.343451][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 114.987592][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.928'. [ 114.990349][T11138] netlink: 20 bytes leftover after parsing attributes in process `syz.6.928'. [ 114.996376][T11138] geneve3: entered promiscuous mode [ 114.996388][T11138] geneve3: entered allmulticast mode [ 115.004750][T11141] netlink: 36 bytes leftover after parsing attributes in process `syz.4.929'. [ 115.018017][T11145] netlink: 'syz.7.930': attribute type 1 has an invalid length. [ 115.079905][T11170] netlink: 72 bytes leftover after parsing attributes in process `syz.6.935'. [ 115.115085][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.122031][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.129323][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.133190][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.135991][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.330455][T11315] uprobe: syz.7.944:11315 failed to unregister, leaking uprobe [ 115.347438][T11182] chnl_net:caif_netlink_parms(): no params data found [ 115.383562][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 115.407053][T11381] lo: entered promiscuous mode [ 115.409567][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.6.945'. [ 115.414529][T11381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.418885][T11397] overlayfs: failed to clone lowerpath [ 115.499173][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.499217][T11182] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.515729][T11182] bridge_slave_0: entered allmulticast mode [ 115.516448][T11182] bridge_slave_0: entered promiscuous mode [ 115.526851][T11182] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.526929][T11182] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.532230][T11182] bridge_slave_1: entered allmulticast mode [ 115.533045][T11182] bridge_slave_1: entered promiscuous mode [ 115.599366][T11182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.601863][T11182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.672547][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 115.675219][T11182] team0: Port device team_slave_0 added [ 115.677830][T11182] team0: Port device team_slave_1 added [ 115.717728][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 115.717749][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.948'. [ 115.749509][T11182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.749538][T11182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.749571][T11182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.770123][T11182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.772379][T11182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.772412][T11182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.830715][T11182] hsr_slave_0: entered promiscuous mode [ 115.832955][T11182] hsr_slave_1: entered promiscuous mode [ 115.837737][T11182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.839936][T11182] Cannot create hsr debugfs directory [ 116.004716][T11182] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 116.008981][T11182] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 116.012794][T11182] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 116.017010][T11182] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 116.032226][T11182] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.034477][T11182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.036756][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.039036][T11182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.066260][T11182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.074710][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.078087][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.089015][T11182] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.095414][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.097627][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.105732][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.108218][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.123762][ T836] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 116.201373][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 116.201388][ T40] audit: type=1400 audit(1753073503.528:609): avc: denied { ioctl } for pid=12261 comm="syz.6.955" path="socket:[35719]" dev="sockfs" ino=35719 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.229407][T12262] tipc: Started in network mode [ 116.231173][T12262] tipc: Node identity 5a517421e1e8, cluster identity 4711 [ 116.235743][T12262] tipc: Enabled bearer , priority 0 [ 116.239810][T12261] tipc: Resetting bearer [ 116.273440][ T836] usb 9-1: Using ep0 maxpacket: 8 [ 116.276451][ T836] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 116.279136][ T836] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.282104][ T836] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.286125][ T836] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14112, setting to 1024 [ 116.289796][ T836] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 116.292952][ T836] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.297433][ T836] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.300344][ T836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.424983][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 116.518505][ T836] usb 9-1: usb_control_msg returned -32 [ 116.520600][ T836] usbtmc 9-1:16.0: can't read capabilities [ 116.891311][T12274] usbtmc 9-1:16.0: stb usb_control_msg returned -32 [ 116.899223][T12085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.903004][T12085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.147088][ T5958] Bluetooth: hci1: command tx timeout [ 117.239988][T12261] tipc: Disabling bearer [ 117.252904][T11182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.280343][ T40] audit: type=1800 audit(1753073504.608:610): pid=12298 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.962" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 117.327604][T12304] netlink: 32 bytes leftover after parsing attributes in process `syz.7.963'. [ 117.380638][T11182] veth0_vlan: entered promiscuous mode [ 117.388435][T11182] veth1_vlan: entered promiscuous mode [ 117.409313][T12315] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 117.411262][T12318] netlink: 'syz.6.966': attribute type 2 has an invalid length. [ 117.413183][T11182] veth0_macvtap: entered promiscuous mode [ 117.414399][T12318] netlink: 1184 bytes leftover after parsing attributes in process `syz.6.966'. [ 117.418726][T11182] veth1_macvtap: entered promiscuous mode [ 117.422221][T12318] xt_hashlimit: invalid rate [ 117.429111][T11182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.439507][T11182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.445391][T11182] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.448310][T11182] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.451032][T11182] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.454501][T11182] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.464162][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 117.489151][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.491786][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.508155][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.510582][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.734071][T12371] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.737143][T12371] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.791382][T12371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.799058][T12371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.845146][T12371] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.847850][T12371] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.850484][T12371] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.853219][T12371] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.216875][T12407] netlink: 'syz.8.985': attribute type 11 has an invalid length. [ 118.222916][T12407] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.226057][T12407] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.228681][T12407] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.231287][T12407] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.235876][T12407] netlink: 'syz.8.985': attribute type 11 has an invalid length. [ 118.288628][T12415] x_tables: ip6_tables: CT target: only valid in raw table, not ethtool [ 118.292593][ T40] audit: type=1400 audit(1753073505.618:611): avc: denied { setattr } for pid=12414 comm="syz.6.987" path="socket:[37931]" dev="sockfs" ino=37931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.393070][T12430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.395809][T12430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.399157][T12430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.402343][T12430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.475500][T12434] SELinux: failed to load policy [ 118.513441][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 118.719409][ T40] audit: type=1400 audit(1753073506.048:612): avc: denied { watch watch_reads } for pid=12458 comm="syz.7.997" path="pipe:[36799]" dev="pipefs" ino=36799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 118.727242][ T40] audit: type=1400 audit(1753073506.058:613): avc: denied { ioctl } for pid=12461 comm="syz.6.998" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 118.814485][T12472] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12472 comm=syz.7.1000 [ 118.820244][T12472] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12472 comm=syz.7.1000 [ 118.823932][T12471] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12471 comm=syz.7.1000 [ 118.831209][ T40] audit: type=1400 audit(1753073506.158:614): avc: denied { accept } for pid=12470 comm="syz.7.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 118.851324][ T9] usb 9-1: USB disconnect, device number 14 [ 118.873702][ T40] audit: type=1400 audit(1753073506.208:615): avc: denied { ioctl } for pid=12483 comm="syz.6.1002" path="socket:[38125]" dev="sockfs" ino=38125 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.909663][T12492] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 119.233603][ T5958] Bluetooth: hci1: command tx timeout [ 119.543534][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 119.851634][T12536] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 119.981023][ T40] audit: type=1400 audit(1753073507.308:616): avc: denied { write } for pid=12550 comm="syz.4.1015" name="/" dev="9p" ino=35913808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.022056][ T40] audit: type=1400 audit(1753073507.348:617): avc: denied { setopt } for pid=12555 comm="syz.8.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.029532][ T40] audit: type=1400 audit(1753073507.358:618): avc: denied { getopt } for pid=12555 comm="syz.8.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.053975][T12551] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 120.273099][T12578] __nla_validate_parse: 12 callbacks suppressed [ 120.273111][T12578] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1020'. [ 120.424725][T12604] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1026'. [ 120.439148][T12610] overlay: ./file0 is not a directory [ 120.441258][T12610] cgroup: Need name or subsystem set [ 120.568544][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1035'. [ 120.574130][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1035'. [ 120.593472][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 120.713348][T12660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12660 comm=syz.8.1042 [ 120.762456][T12678] loop6: detected capacity change from 0 to 63 [ 120.910996][T12709] xt_hashlimit: size too large, truncated to 1048576 [ 120.912838][T12706] tmpfs: Bad value for 'mpol' [ 121.073675][ T6096] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 121.203561][ T6019] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 121.223740][ T6096] usb 13-1: Using ep0 maxpacket: 8 [ 121.227787][ T6096] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 121.231314][ T6096] usb 13-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 121.235580][ T6096] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.239514][ T6096] usb 13-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 121.244734][ T6096] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.248556][ T6096] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.258485][ T6096] usbtmc 13-1:16.0: bulk endpoints not found [ 121.303624][ T5958] Bluetooth: hci1: command tx timeout [ 121.353597][ T6019] usb 11-1: Using ep0 maxpacket: 32 [ 121.357314][ T6019] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 121.359881][ T6019] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 121.363175][ T6019] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 121.366588][ T6019] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 121.370678][ T6019] usb 11-1: config 0 interface 0 has no altsetting 0 [ 121.374751][ T6019] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 121.377581][ T6019] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 121.380184][ T6019] usb 11-1: Product: syz [ 121.381488][ T6019] usb 11-1: Manufacturer: syz [ 121.382955][ T6019] usb 11-1: SerialNumber: syz [ 121.385976][ T6019] usb 11-1: config 0 descriptor?? [ 121.388961][ T6019] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 121.393964][ T6019] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 121.457439][T12695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.462010][T12695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.469168][T12695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.474198][T12695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.479417][T12695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.483149][T12695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.486092][T12695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.489295][T12695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.493309][T12695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.496621][T12695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.515067][ T6019] usb 13-1: USB disconnect, device number 2 [ 121.559043][T12743] syzkaller0: entered promiscuous mode [ 121.561401][T12743] syzkaller0: entered allmulticast mode [ 121.596864][ T836] usb 11-1: USB disconnect, device number 2 [ 121.596922][ C0] ldusb 11-1:0.0: usb_submit_urb failed (-19) [ 121.606996][ T836] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 121.623642][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 121.767125][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1056'. [ 121.779878][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 121.779898][ T40] audit: type=1400 audit(1753073509.108:624): avc: denied { map } for pid=12775 comm="syz.8.1057" path="socket:[40059]" dev="sockfs" ino=40059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 121.915234][T12798] openvswitch: netlink: EtherType 0 is less than min 600 [ 121.973605][ T6019] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 122.134012][ T6019] usb 9-1: Using ep0 maxpacket: 32 [ 122.138941][ T6019] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.142301][ T6019] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.147502][ T6019] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 122.151310][ T6019] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.163546][ T6019] usb 9-1: config 0 descriptor?? [ 122.383069][ T6019] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 122.581711][T12833] random: crng reseeded on system resumption [ 122.637142][ T60] usb 9-1: USB disconnect, device number 15 [ 122.663481][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 122.975893][T12855] 9pnet_fd: p9_fd_create_unix (12855): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 122.976847][T12856] 9pnet_fd: p9_fd_create_unix (12856): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 123.035992][ T40] audit: type=1400 audit(1753073510.368:625): avc: denied { create } for pid=12904 comm="syz.7.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 123.134032][T12912] fuse: Bad value for 'fd' [ 123.137088][ T40] audit: type=1400 audit(1753073510.468:626): avc: denied { connect } for pid=12910 comm="syz.6.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.143825][T12912] fuse: Bad value for 'user_id' [ 123.145407][T12912] fuse: Bad value for 'user_id' [ 123.349154][ T40] audit: type=1400 audit(1753073510.678:627): avc: denied { lock } for pid=12925 comm="syz.6.1078" path="socket:[38420]" dev="sockfs" ino=38420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 123.351954][T12940] netlink: 'syz.4.1081': attribute type 1 has an invalid length. [ 123.383454][ T5958] Bluetooth: hci1: command tx timeout [ 123.472657][ T40] audit: type=1326 audit(1753073510.798:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.7.1085" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac638e9a9 code=0x0 [ 123.580076][T12964] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 123.703583][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 123.736241][ T40] audit: type=1400 audit(1753073511.068:629): avc: denied { setcurrent } for pid=12976 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 123.745694][ T40] audit: type=1400 audit(1753073511.078:630): avc: denied { map } for pid=12977 comm="syz.8.1089" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 123.752943][ T40] audit: type=1400 audit(1753073511.078:631): avc: denied { execute } for pid=12977 comm="syz.8.1089" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 123.861670][ T40] audit: type=1400 audit(1753073511.188:632): avc: denied { bind } for pid=12994 comm="syz.8.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.909026][ T40] audit: type=1400 audit(1753073511.238:633): avc: denied { setopt } for pid=12999 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.935698][T13001] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1097'. [ 123.976257][T13011] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 123.979399][T13011] overlayfs: failed to set xattr on upper [ 123.981814][T13011] overlayfs: ...falling back to redirect_dir=nofollow. [ 123.986913][T13011] overlayfs: ...falling back to index=off. [ 123.989278][T13011] overlayfs: ...falling back to uuid=null. [ 123.991726][T13011] overlayfs: ...falling back to xino=off. [ 123.996237][T13011] overlayfs: conflicting lowerdir path [ 124.000676][T13010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.329868][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1106'. [ 124.406584][T13055] tipc: Cannot configure node identity twice [ 124.449259][T13067] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.1113'. [ 124.627321][T13101] ./cgroup: Can't lookup blockdev [ 124.723928][ T6018] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 124.753545][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 124.807997][T13108] netlink: 'syz.8.1121': attribute type 62 has an invalid length. [ 124.860881][T13149] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1125'. [ 124.863962][T13149] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1125'. [ 124.874630][ T6018] usb 9-1: Using ep0 maxpacket: 32 [ 124.878351][ T6018] usb 9-1: config 64 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.881749][ T6018] usb 9-1: config 64 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.885488][ T6018] usb 9-1: config 64 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 124.889471][ T6018] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 124.892242][ T6018] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.311056][ T6018] hid (null): global environment stack underflow [ 125.313194][ T6018] hid (null): report_id 11414 is invalid [ 125.315674][ T6018] hid (null): invalid report_size 1280 [ 125.317755][ T6018] hid (null): global environment stack underflow [ 125.329644][ T6018] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:64.0/0003:0458:5011.0005/input/input15 [ 125.398654][ T6018] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:64.0/0003:0458:5011.0005/input/input16 [ 125.415241][ T6018] kye 0003:0458:5011.0005: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 125.763285][T13193] __nla_validate_parse: 2 callbacks suppressed [ 125.763300][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1134'. [ 125.783496][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 125.837142][T13204] netlink: 'syz.8.1137': attribute type 32 has an invalid length. [ 125.839604][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1137'. [ 125.842530][T13204] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 125.969406][T13258] wg2: entered promiscuous mode [ 125.970994][T13258] wg2: entered allmulticast mode [ 126.014913][T13266] binder: 13265:13266 ioctl c018620c 200000000140 returned -22 [ 126.017866][T13266] binder: 13265:13266 unknown command 0 [ 126.019624][T13266] binder: 13265:13266 ioctl c0306201 200000000080 returned -22 [ 126.025956][T13266] binder: 13265:13266 ioctl c0184800 2000000000c0 returned -22 [ 126.029069][T13266] netlink: 'syz.6.1145': attribute type 12 has an invalid length. [ 126.080095][T13279] netlink: zone id is out of range [ 126.082529][T13279] netlink: zone id is out of range [ 126.085010][T13279] netlink: zone id is out of range [ 126.087042][T13279] netlink: zone id is out of range [ 126.184372][T13288] netlink: 'syz.8.1153': attribute type 1 has an invalid length. [ 126.186821][T13288] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1153'. [ 126.190415][T13288] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.192817][T13288] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.195084][T13288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.200078][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1153'. [ 126.205476][T13288] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 126.208926][T13288] netlink: 120 bytes leftover after parsing attributes in process `syz.8.1153'. [ 126.247579][T13306] binder: 13302:13306 ioctl 4018620d 0 returned -22 [ 126.251833][T13305] overlay: ./file0 is not a directory [ 126.351145][T13314] netlink: 29 bytes leftover after parsing attributes in process `syz.7.1159'. [ 126.356103][T13314] netlink: 29 bytes leftover after parsing attributes in process `syz.7.1159'. [ 126.436778][ C0] kye 0003:0458:5011.0005: usb_submit_urb(ctrl) failed: -1 [ 126.624196][T13375] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.1174'. [ 126.658460][T13380] geneve0: entered allmulticast mode [ 126.679065][ T5958] Bluetooth: hci1: Dropping invalid advertising data [ 126.681610][ T5958] Bluetooth: hci1: Malformed LE Event: 0x02 [ 126.764235][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 126.766396][ T1113] ata1: failed to read log page 10h (errno=-5) [ 126.768809][ T1113] ata1.00: exception Emask 0x1 SAct 0x80000 SErr 0x0 action 0x0 [ 126.771382][ T1113] ata1.00: irq_stat 0x40000000 [ 126.773200][ T1113] ata1.00: failed command: WRITE FPDMA QUEUED [ 126.775368][ T1113] ata1.00: cmd 61/18:98:56:09:10/00:00:00:00:00/40 tag 19 ncq dma 12288 out [ 126.775368][ T1113] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 126.780654][ T1113] ata1.00: status: { DRDY } [ 126.782193][ T1113] ata1.00: error: { ABRT } [ 126.787560][ T1113] ata1.00: configured for UDMA/100 [ 126.789412][ T1113] ata1: EH complete [ 126.800681][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 126.800692][ T40] audit: type=1400 audit(1753073514.128:721): avc: denied { create } for pid=13384 comm="syz.7.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.812177][ T40] audit: type=1400 audit(1753073514.138:722): avc: denied { getopt } for pid=13384 comm="syz.7.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.833524][ C2] net_ratelimit: 4 callbacks suppressed [ 126.833539][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 126.878968][ T40] audit: type=1400 audit(1753073514.208:723): avc: denied { cmd } for pid=13390 comm="syz.8.1179" path="socket:[40583]" dev="sockfs" ino=40583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 127.020875][ T40] audit: type=1326 audit(1753073514.348:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13407 comm="syz.8.1185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca0b8e9a9 code=0x7ffc0000 [ 127.030628][ T40] audit: type=1326 audit(1753073514.348:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13407 comm="syz.8.1185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca0b8e9a9 code=0x7ffc0000 [ 127.038566][ T40] audit: type=1326 audit(1753073514.348:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13407 comm="syz.8.1185" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ca0b8e9a9 code=0x7ffc0000 [ 127.051050][T13414] netlink: 'syz.7.1184': attribute type 13 has an invalid length. [ 127.052789][ T40] audit: type=1326 audit(1753073514.348:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13407 comm="syz.8.1185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca0b8e9a9 code=0x7ffc0000 [ 127.055967][T13414] macvtap0: entered promiscuous mode [ 127.061604][ T40] audit: type=1326 audit(1753073514.348:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13407 comm="syz.8.1185" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ca0b8e9a9 code=0x7ffc0000 [ 127.070183][T13414] macvtap0: refused to change device tx_queue_len [ 127.070484][ T40] audit: type=1326 audit(1753073514.348:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13407 comm="syz.8.1185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca0b8e9a9 code=0x7ffc0000 [ 127.080125][ T40] audit: type=1326 audit(1753073514.348:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13407 comm="syz.8.1185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca0b8e9a9 code=0x7ffc0000 [ 127.244470][ T6018] usb 9-1: USB disconnect, device number 16 [ 127.470118][T13455] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1191'. [ 127.628338][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 127.768044][T13499] FAT-fs (nullb0): bogus number of reserved sectors [ 127.771378][T13499] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 127.813625][T13503] SET target dimension over the limit! [ 127.863471][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 127.926159][T13520] netlink: 14601 bytes leftover after parsing attributes in process `syz.7.1207'. [ 128.031288][T13535] xt_hashlimit: size too large, truncated to 1048576 [ 128.165519][T13546] program syz.4.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.207760][T13548] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 128.381651][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803e420800: rx timeout, send abort [ 128.549616][T13605] ip6t_srh: unknown srh match flags 4000 [ 128.665150][T13609] netlink: 'syz.7.1225': attribute type 4 has an invalid length. [ 128.726271][T13610] dlm: no local IP address has been set [ 128.728293][T13610] dlm: cannot start dlm midcomms -107 [ 128.773642][ T5958] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 128.830350][T13628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.833000][T13628] IPv6: NLM_F_CREATE should be set when creating new route [ 128.884280][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803e420800: abort rx timeout. Force session deactivation [ 128.903548][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 129.314323][T13646] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 129.369985][T13652] 8021q: VLANs not supported on ip6tnl0 [ 129.371949][T13652] sock: sock_timestamping_bind_phc: sock not bind to device [ 129.444620][T13668] team0: Port device ip6gretap1 added [ 129.517355][ T5958] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 129.520148][ T5958] Bluetooth: Wrong link type (-22) [ 129.520504][T13683] openvswitch: netlink: Missing valid actions attribute. [ 129.525186][T13683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.529283][T13683] tmpfs: Bad value for 'mpol' [ 129.732620][T13700] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÜÝ$)²% Ä‚L [ 129.764282][T13706] fuse: Unknown parameter 'gòoup_ÿd' [ 129.817641][T13715] bond2: entered promiscuous mode [ 129.819510][T13715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.822230][T13712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.944994][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 130.182123][T13781] nbd: must specify a size in bytes for the device [ 130.279127][T13805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13805 comm=syz.7.1264 [ 130.524991][T13834] SELinux: failed to load policy [ 130.636874][T13842] cdrom: dropping to single frame dma [ 130.733476][ T6019] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 130.885925][ T6019] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.889274][ T6019] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 130.892946][ T6019] usb 11-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 130.903646][ T6019] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.914371][ T6019] usb 11-1: config 0 descriptor?? [ 130.916353][T13832] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 130.993486][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 131.124561][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.127414][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.142610][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.153804][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.167940][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.171846][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.174927][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.187892][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.190844][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.195080][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.216563][T13895] nbd: couldn't find a device at index -1605786504 [ 131.218612][ T6019] usbhid 11-1:0.0: can't add hid device: -71 [ 131.220698][ T6019] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 131.227093][ T6019] usb 11-1: USB disconnect, device number 3 [ 131.482692][T13918] __nla_validate_parse: 14 callbacks suppressed [ 131.482704][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1284'. [ 131.488184][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1284'. [ 131.490934][T13918] netlink: 'syz.8.1284': attribute type 13 has an invalid length. [ 131.502816][T13918] netlink: 'syz.8.1284': attribute type 1 has an invalid length. [ 131.508432][T13918] netlink: 'syz.8.1284': attribute type 2 has an invalid length. [ 131.546163][T13923] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1286'. [ 131.686448][T13928] macvtap1: entered allmulticast mode [ 131.688291][T13928] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 131.693011][T13928] mac80211_hwsim hwsim19 wlan0: left allmulticast mode [ 131.757192][T13935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.829216][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 131.829228][ T40] audit: type=1326 audit(1753073519.158:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.7.1292" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ac638e9a9 code=0x0 [ 131.895866][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'. [ 131.897314][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'. [ 131.899086][T13965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'. [ 131.901778][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'. [ 131.901798][T13971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1293'. [ 131.907734][T13972] vlan2: entered promiscuous mode [ 131.908922][T13965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1293'. [ 131.911130][T13972] bridge0: entered promiscuous mode [ 132.033497][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 132.220830][T13994] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1298'. [ 132.493520][ T838] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 132.506847][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.626866][T14008] Driver unsupported XDP return value 0 on prog (id 147) dev N/A, expect packet loss! [ 132.663930][ T838] usb 11-1: Using ep0 maxpacket: 32 [ 132.667004][ T838] usb 11-1: config 155 has an invalid interface number: 123 but max is 3 [ 132.669704][ T838] usb 11-1: config 155 has an invalid interface number: 39 but max is 3 [ 132.672619][ T838] usb 11-1: config 155 has an invalid descriptor of length 1, skipping remainder of the config [ 132.682699][ T838] usb 11-1: config 155 has 2 interfaces, different from the descriptor's value: 4 [ 132.686017][ T838] usb 11-1: config 155 has no interface number 0 [ 132.688031][ T838] usb 11-1: config 155 has no interface number 1 [ 132.690452][ T838] usb 11-1: config 155 interface 123 altsetting 13 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 132.694376][ T838] usb 11-1: config 155 interface 123 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 132.697881][ T838] usb 11-1: config 155 interface 123 altsetting 13 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 132.701340][ T838] usb 11-1: config 155 interface 123 altsetting 13 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 132.705155][ T838] usb 11-1: config 155 interface 123 altsetting 13 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 132.711382][ T838] usb 11-1: config 155 interface 39 altsetting 190 has a duplicate endpoint with address 0x9, skipping [ 132.718710][ T838] usb 11-1: config 155 interface 39 altsetting 190 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 132.723637][ T838] usb 11-1: config 155 interface 39 altsetting 190 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 132.729636][ T838] usb 11-1: config 155 interface 123 has no altsetting 0 [ 132.732589][ T838] usb 11-1: config 155 interface 39 has no altsetting 0 [ 132.745463][ T838] usb 11-1: New USB device found, idVendor=0e8d, idProduct=7101, bcdDevice=ae.91 [ 132.746549][ T40] audit: type=1400 audit(1753073520.078:751): avc: denied { write } for pid=14019 comm="syz.8.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.748551][ T5958] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 132.754866][ T838] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.759645][ T838] usb 11-1: Product: 変뫛澘쇭ë˜à²¿ç¸²ã¸ë˜™ë–¬æªí™‘걪é‰ê„§æ¨ÕŠá¸«ä¦–㯯촭솋 [ 132.762719][ T838] usb 11-1: Manufacturer: ည [ 132.764355][ T838] usb 11-1: SerialNumber: syz [ 132.872117][T14053] netlink: 'syz.7.1313': attribute type 3 has an invalid length. [ 132.887867][T14053] pimreg3: entered allmulticast mode [ 132.937296][T14063] fuse: Bad value for 'fd' [ 132.979163][ T838] option 11-1:155.123: GSM modem (1-port) converter detected [ 133.000959][ T838] usb 11-1: USB disconnect, device number 4 [ 133.005370][ T838] option 11-1:155.123: device disconnected [ 133.026295][ T6018] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 133.032218][T14086] xt_l2tp: v2 tid > 0xffff: 150994944 [ 133.063477][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 133.157403][T14101] netlink: 'syz.7.1319': attribute type 4 has an invalid length. [ 133.173579][ T6018] usb 13-1: Using ep0 maxpacket: 16 [ 133.176558][ T6018] usb 13-1: config 0 has an invalid interface number: 145 but max is 0 [ 133.179492][ T6018] usb 13-1: config 0 has no interface number 0 [ 133.183058][ T6018] usb 13-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 133.186133][ T6018] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.188667][ T6018] usb 13-1: Product: syz [ 133.190081][ T6018] usb 13-1: Manufacturer: syz [ 133.191658][ T6018] usb 13-1: SerialNumber: syz [ 133.195934][ T6018] usb 13-1: config 0 descriptor?? [ 133.198942][ T6018] hub 13-1:0.145: bad descriptor, ignoring hub [ 133.200881][ T6018] hub 13-1:0.145: probe with driver hub failed with error -5 [ 133.205695][ T6018] input: bcm5974 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.145/input/input17 [ 133.344893][ T40] audit: type=1400 audit(1753073520.678:752): avc: denied { create } for pid=14120 comm="syz.4.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 133.496185][T14127] netlink: 'syz.8.1308': attribute type 23 has an invalid length. [ 133.553703][ T836] usb 13-1: USB disconnect, device number 3 [ 133.626289][T14148] NILFS (loop4): device size too small [ 133.687298][T14150] XFS (nullb0): Invalid superblock magic number [ 133.735192][ T6018] libceph: connect (1)[c::]:6789 error -101 [ 133.736954][T14162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1552 sclass=netlink_route_socket pid=14162 comm=syz.4.1331 [ 133.737382][ T6018] libceph: mon0 (1)[c::]:6789 connect error [ 133.744922][ T40] audit: type=1400 audit(1753073521.058:753): avc: denied { append } for pid=14161 comm="syz.4.1331" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 133.770657][ T6018] libceph: connect (1)[b::]:6789 error -101 [ 133.772637][ T6018] libceph: mon0 (1)[b::]:6789 connect error [ 133.780249][ T40] audit: type=1400 audit(1753073521.108:754): avc: denied { create } for pid=14166 comm="syz.7.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 133.818368][T14157] ceph: No mds server is up or the cluster is laggy [ 133.818450][T14165] ceph: No mds server is up or the cluster is laggy [ 133.988157][ T40] audit: type=1400 audit(1753073521.318:755): avc: denied { ioctl } for pid=14166 comm="syz.7.1332" path="socket:[44401]" dev="sockfs" ino=44401 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 134.088788][ T40] audit: type=1400 audit(1753073521.418:756): avc: denied { connect } for pid=14212 comm="syz.8.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 134.103483][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 135.017491][T14170] lo: entered allmulticast mode [ 135.025433][T14213] smc: net device bond0 applied user defined pnetid SYZ2 [ 135.058393][T14225] binder: 14224:14225 ioctl c018620c 200000000540 returned -22 [ 135.108439][T14230] Bluetooth: MGMT ver 1.23 [ 135.110942][T14230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.143500][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 135.189295][T14250] binder: 14227:14250 ioctl c0306201 200000000080 returned -14 [ 135.191916][T14250] binder: 14227:14250 ioctl c0306201 200000000540 returned -22 [ 135.492194][ T7596] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.556363][T14296] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 135.563469][T14296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.823458][ T6019] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 135.953529][ T6019] usb 13-1: device descriptor read/64, error -71 [ 136.088847][T14340] ptrace attach of "/syz-executor exec"[6434] was attempted by "/syz-executor exec"[14340] [ 136.154412][T14348] netlink: 'syz.6.1355': attribute type 1 has an invalid length. [ 136.166068][T14348] syzkaller0: entered promiscuous mode [ 136.168043][T14348] syzkaller0: entered allmulticast mode [ 136.183498][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 136.199078][ T6019] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 136.203788][ T40] audit: type=1400 audit(1753073523.538:757): avc: denied { read } for pid=14346 comm="syz.6.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 136.353889][ T6019] usb 13-1: device descriptor read/64, error -71 [ 136.519428][ T6019] usb usb13-port1: attempt power cycle [ 136.867459][T14367] netlink: 'syz.7.1358': attribute type 1 has an invalid length. [ 136.869893][T14367] netlink: 'syz.7.1358': attribute type 4 has an invalid length. [ 136.872271][T14367] __nla_validate_parse: 6 callbacks suppressed [ 136.872292][T14367] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1358'. [ 136.893465][ T6019] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 136.909649][T14372] netlink: 'syz.7.1360': attribute type 2 has an invalid length. [ 136.911991][T14372] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1360'. [ 136.916912][T14372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14372 comm=syz.7.1360 [ 136.918727][ T6019] usb 13-1: device descriptor read/8, error -71 [ 136.940810][T14376] nfs: Unknown parameter ' [ 136.940810][T14376] ' [ 136.998186][T14385] ipvlan2: entered promiscuous mode [ 137.000221][T14385] bridge0: port 3(ipvlan2) entered blocking state [ 137.002425][T14385] bridge0: port 3(ipvlan2) entered disabled state [ 137.005929][T14385] ipvlan2: entered allmulticast mode [ 137.007623][T14385] bridge0: entered allmulticast mode [ 137.010299][T14385] ipvlan2: left allmulticast mode [ 137.012000][T14385] bridge0: left allmulticast mode [ 137.051830][T14389] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1365'. [ 137.086276][ T40] audit: type=1400 audit(1753073524.418:758): avc: denied { getopt } for pid=14395 comm="syz.6.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.145385][T14399] netlink: 'syz.7.1367': attribute type 4 has an invalid length. [ 137.183928][ T6019] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 137.211192][T14407] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1369'. [ 137.215668][ T6019] usb 13-1: device descriptor read/8, error -71 [ 137.218859][T14407] xt_hashlimit: size too large, truncated to 1048576 [ 137.223491][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 137.283679][T14410] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1369'. [ 137.286616][T14410] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 137.305178][T14412] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1370'. [ 137.323703][ T6019] usb usb13-port1: unable to enumerate USB device [ 137.361596][T14414] syzkaller1: entered promiscuous mode [ 137.363690][T14414] syzkaller1: entered allmulticast mode [ 137.367313][ T40] audit: type=1400 audit(1753073524.698:759): avc: denied { connect } for pid=14413 comm="syz.6.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.669414][T14440] binder: 14438:14440 ioctl 4018620d 0 returned -22 [ 137.850266][T14457] xt_policy: output policy not valid in PREROUTING and INPUT [ 137.914191][T14467] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 137.916468][T14468] netlink: 'syz.4.1385': attribute type 4 has an invalid length. [ 137.918391][ T40] audit: type=1400 audit(1753073525.248:760): avc: denied { relabelto } for pid=14465 comm="syz.7.1384" name="166" dev="tmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 137.920879][T14468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1385'. [ 137.932975][ T40] audit: type=1400 audit(1753073525.248:761): avc: denied { associate } for pid=14465 comm="syz.7.1384" name="166" dev="tmpfs" ino=901 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 137.942791][ T40] audit: type=1400 audit(1753073525.258:762): avc: denied { add_name } for pid=14465 comm="syz.7.1384" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 137.954340][ T40] audit: type=1400 audit(1753073525.258:763): avc: denied { create } for pid=14465 comm="syz.7.1384" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 137.960742][ T40] audit: type=1400 audit(1753073525.258:764): avc: denied { associate } for pid=14465 comm="syz.7.1384" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.968789][ T40] audit: type=1400 audit(1753073525.268:765): avc: denied { read } for pid=14465 comm="syz.7.1384" name="file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 137.977151][ T40] audit: type=1400 audit(1753073525.278:766): avc: denied { remove_name } for pid=9500 comm="syz-executor" name="file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 137.987645][ T40] audit: type=1400 audit(1753073525.278:767): avc: denied { unlink } for pid=9500 comm="syz-executor" name="file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 138.263616][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 138.518985][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1394'. [ 138.522779][T14498] ptrace attach of "/syz-executor exec"[9500] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 138.524805][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1394'. [ 138.722857][T14540] netlink: 'syz.7.1399': attribute type 10 has an invalid length. [ 138.732857][T14540] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 138.810440][T14549] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 138.957975][T14564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1405'. [ 139.127648][T14575] syz.6.1408: attempt to access beyond end of device [ 139.127648][T14575] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 139.131811][T14575] befs: (nbd6): unable to read superblock [ 139.313465][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 139.586193][T14584] netlink: 'syz.8.1411': attribute type 7 has an invalid length. [ 139.645061][T14584] netlink: 'syz.8.1411': attribute type 9 has an invalid length. [ 139.703533][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 139.731429][T14591] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 140.053146][T14639] block device autoloading is deprecated and will be removed. [ 140.166857][T14659] Bluetooth: hci0: invalid len left 7, exp >= 195 [ 140.168896][T14655] ISOFS: Unable to identify CD-ROM format. [ 140.343470][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 140.645166][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.650348][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.653452][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.656732][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.659629][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.818127][T14673] chnl_net:caif_netlink_parms(): no params data found [ 140.822841][T14787] random: crng reseeded on system resumption [ 140.843131][T14787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.857867][T14787] Restarting kernel threads ... [ 140.859818][T14787] Done restarting kernel threads. [ 140.967021][T14944] bridge1: entered promiscuous mode [ 140.973634][T14986] bridge2: entered promiscuous mode [ 140.975805][T14673] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.978230][T14673] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.980775][T14673] bridge_slave_0: entered allmulticast mode [ 140.986841][T14673] bridge_slave_0: entered promiscuous mode [ 140.990170][T14673] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.992367][T14673] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.995000][T14673] bridge_slave_1: entered allmulticast mode [ 140.997673][T14673] bridge_slave_1: entered promiscuous mode [ 141.089613][T14673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.109847][T14673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.131852][T15163] loop2: detected capacity change from 0 to 7 [ 141.152282][T15163] Dev loop2: unable to read RDB block 7 [ 141.158223][T15163] loop2: unable to read partition table [ 141.160089][T15163] loop2: partition table beyond EOD, truncated [ 141.171781][T15163] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 141.176139][T14673] team0: Port device team_slave_0 added [ 141.178965][T15274] netlink: 'syz.6.1449': attribute type 1 has an invalid length. [ 141.180526][T14673] team0: Port device team_slave_1 added [ 141.259584][T14673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.260421][T15345] 9pnet_fd: Insufficient options for proto=fd [ 141.261811][T14673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.273092][T14673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.278405][T14673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.280545][T14673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.288495][T14673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.337501][T14673] hsr_slave_0: entered promiscuous mode [ 141.340841][T14673] hsr_slave_1: entered promiscuous mode [ 141.346610][T14673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.349640][T14673] Cannot create hsr debugfs directory [ 141.383469][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 141.441534][T15625] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 141.649515][T14673] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 141.658182][T14673] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 141.668642][T15788] netlink: 'syz.6.1463': attribute type 2 has an invalid length. [ 141.674809][T14673] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 141.686395][T14673] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 141.746565][T15809] xt_SECMARK: invalid mode: 0 [ 141.761269][T14673] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.763556][T14673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.765855][T14673] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.768108][T14673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.782156][T15812] bond0: entered promiscuous mode [ 141.785842][T15812] bond_slave_0: entered promiscuous mode [ 141.788251][T15812] bond_slave_1: entered promiscuous mode [ 141.802106][T15812] bond0: left promiscuous mode [ 141.803994][T15812] bond_slave_0: left promiscuous mode [ 141.805751][T15812] bond_slave_1: left promiscuous mode [ 141.862905][T14673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.869093][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.879241][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.914245][T14673] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.928990][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.931206][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.936772][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.939100][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.123287][T14673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.182750][T15866] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 142.186966][T15866] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 142.242519][T15874] netlink: 'syz.7.1475': attribute type 15 has an invalid length. [ 142.248602][T15874] __nla_validate_parse: 11 callbacks suppressed [ 142.248617][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1475'. [ 142.295148][T15883] tmpfs: Bad value for 'mpol' [ 142.308742][T14673] veth0_vlan: entered promiscuous mode [ 142.329681][T14673] veth1_vlan: entered promiscuous mode [ 142.386413][T14673] veth0_macvtap: entered promiscuous mode [ 142.392777][T14673] veth1_macvtap: entered promiscuous mode [ 142.408909][T14673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.419633][T14673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.424910][T14673] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.427639][T14673] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.430352][T14673] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.433089][T14673] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.433511][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 142.493146][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.498389][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.522936][ T7579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.523927][T15907] binder: BINDER_SET_CONTEXT_MGR already set [ 142.527222][T15907] binder: 15899:15907 ioctl 4018620d 200000000040 returned -16 [ 142.527251][T15908] binder: BINDER_SET_CONTEXT_MGR already set [ 142.528765][ T7579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.534003][T15908] binder: 15899:15908 ioctl 4018620d 200000000040 returned -16 [ 142.542720][T15907] binder: 15899:15907 ioctl c0306201 200000000240 returned -11 [ 142.611505][T15915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.662988][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 142.663000][ T40] audit: type=1400 audit(1753073529.988:783): avc: denied { mount } for pid=15914 comm="syz.7.1483" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 142.673336][T15916] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1483'. [ 142.677168][T15916] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1483'. [ 142.753556][ T5955] Bluetooth: hci3: command tx timeout [ 142.982289][ T40] audit: type=1804 audit(1753073530.308:784): pid=15958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1488" name="/newroot/218/file0" dev="tmpfs" ino=1180 res=1 errno=0 [ 143.106512][ T40] audit: type=1400 audit(1753073530.438:785): avc: granted { setsecparam } for pid=15964 comm="syz.6.1490" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 143.348391][T15989] overlay: ./file1 is not a directory [ 143.463534][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 143.634302][ T40] audit: type=1326 audit(1753073530.968:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.8.1497" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca0b8e9a9 code=0x7ffc0000 [ 143.641308][ T40] audit: type=1326 audit(1753073530.968:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.8.1497" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca0b8e9a9 code=0x7ffc0000 [ 143.641334][ T40] audit: type=1326 audit(1753073530.968:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.8.1497" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ca0b8e9a9 code=0x7ffc0000 [ 143.661287][ T40] audit: type=1326 audit(1753073530.968:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.8.1497" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca0b8e9a9 code=0x7ffc0000 [ 143.668310][ T40] audit: type=1326 audit(1753073530.968:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.8.1497" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca0b8e9a9 code=0x7ffc0000 [ 143.675506][ T40] audit: type=1326 audit(1753073530.968:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.8.1497" exe="/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9ca0b8e9a9 code=0x7ffc0000 [ 143.682344][ T40] audit: type=1326 audit(1753073530.968:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.8.1497" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca0b8e9a9 code=0x7ffc0000 [ 143.752628][T16019] netlink: 'syz.7.1502': attribute type 9 has an invalid length. [ 143.763443][T16019] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1502'. [ 143.989521][T16064] fuse: Bad value for 'fd' [ 144.004690][T16065] 9pnet: p9_errstr2errno: server reported unknown error œª°@˜’œª°@ [ 144.009561][T16067] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1511'. [ 144.028774][T16067] bridge1: port 1(ip6gretap2) entered blocking state [ 144.031229][T16067] bridge1: port 1(ip6gretap2) entered disabled state [ 144.033170][T16073] netlink: 'syz.7.1512': attribute type 1 has an invalid length. [ 144.033489][T16067] ip6gretap2: entered allmulticast mode [ 144.038870][T16067] ip6gretap2: entered promiscuous mode [ 144.087560][T16067] veth3: entered promiscuous mode [ 144.089313][T16067] bridge1: port 2(veth3) entered blocking state [ 144.091221][T16067] bridge1: port 2(veth3) entered disabled state [ 144.093252][T16067] veth3: entered allmulticast mode [ 144.178567][T16181] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1516'. [ 144.193666][ T6449] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 144.217370][T16185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.221129][T16185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.365779][ T6449] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.369238][ T6449] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 144.372189][ T6449] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.375308][ T6449] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.381421][T16059] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 144.389419][ T6449] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.454749][ T53] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 144.503530][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 144.613603][ T53] usb 13-1: Using ep0 maxpacket: 32 [ 144.616851][ T53] usb 13-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 144.619747][ T53] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.625831][ T53] usb 13-1: config 0 descriptor?? [ 144.637197][ T6449] usb 11-1: USB disconnect, device number 5 [ 144.646208][ T53] as10x_usb: device has been detected [ 144.649599][ T53] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 144.682760][ T53] usb 13-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 144.714699][ T53] as10x_usb: error during firmware upload part1 [ 144.716999][ T53] Registered device nBox DVB-T Dongle [ 144.803882][T16258] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1524'. [ 144.824299][ T5955] Bluetooth: hci3: command tx timeout [ 144.832197][ T59] usb 13-1: USB disconnect, device number 8 [ 144.833480][T16258] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1524'. [ 144.836941][T16258] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1524'. [ 144.851913][ T59] Unregistered device nBox DVB-T Dongle [ 144.852897][ T59] as10x_usb: device has been disconnected [ 145.052490][T16280] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.059239][T16280] netlink: zone id is out of range [ 145.060942][T16280] netlink: zone id is out of range [ 145.064793][T16280] netlink: zone id is out of range [ 145.066432][T16280] netlink: zone id is out of range [ 145.077583][T16280] netlink: set zone limit has 4 unknown bytes [ 145.081683][T16280] overlayfs: failed to clone upperpath [ 145.087485][T16280] overlay: Unknown parameter 'appraise_type' [ 145.133651][ T6449] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 145.226209][ T5955] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 145.229775][ T5955] CPU: 0 UID: 0 PID: 5955 Comm: kworker/u33:2 Not tainted 6.16.0-rc6-syzkaller-00287-g990b11a523a8 #0 PREEMPT(full) [ 145.229791][ T5955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.229799][ T5955] Workqueue: hci0 hci_rx_work [ 145.229846][ T5955] Call Trace: [ 145.229851][ T5955] [ 145.229856][ T5955] dump_stack_lvl+0x16c/0x1f0 [ 145.229878][ T5955] sysfs_warn_dup+0x7f/0xa0 [ 145.229917][ T5955] sysfs_create_dir_ns+0x24b/0x2b0 [ 145.229942][ T5955] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 145.229953][ T5955] ? find_held_lock+0x2b/0x80 [ 145.229972][ T5955] ? do_raw_spin_unlock+0x172/0x230 [ 145.230003][ T5955] kobject_add_internal+0x2c4/0x9b0 [ 145.230020][ T5955] kobject_add+0x16e/0x240 [ 145.230049][ T5955] ? __pfx_kobject_add+0x10/0x10 [ 145.230063][ T5955] ? do_raw_spin_unlock+0x172/0x230 [ 145.230090][ T5955] ? kobject_put+0xab/0x5a0 [ 145.230107][ T5955] device_add+0x288/0x1a70 [ 145.230137][ T5955] ? __pfx_dev_set_name+0x10/0x10 [ 145.230154][ T5955] ? __pfx_device_add+0x10/0x10 [ 145.230182][ T5955] ? mgmt_send_event_skb+0x2fb/0x460 [ 145.230219][ T5955] hci_conn_add_sysfs+0x17e/0x230 [ 145.230232][ T5955] le_conn_complete_evt+0x1075/0x1d70 [ 145.230269][ T5955] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 145.230288][ T5955] ? hci_event_packet+0x459/0x11c0 [ 145.230324][ T5955] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 145.230357][ T5955] ? skb_pull_data+0x166/0x210 [ 145.230390][ T5955] hci_le_meta_evt+0x357/0x5e0 [ 145.230402][ T5955] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 145.230435][ T5955] hci_event_packet+0x685/0x11c0 [ 145.230454][ T5955] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 145.230478][ T5955] ? __pfx_hci_event_packet+0x10/0x10 [ 145.230511][ T5955] ? kcov_remote_start+0x3c9/0x6d0 [ 145.230524][ T5955] ? lockdep_hardirqs_on+0x7c/0x110 [ 145.230561][ T5955] hci_rx_work+0x2c5/0x16b0 [ 145.230574][ T5955] ? rcu_is_watching+0x12/0xc0 [ 145.230603][ T5955] process_one_work+0x9cf/0x1b70 [ 145.230623][ T5955] ? __pfx_process_one_work+0x10/0x10 [ 145.230651][ T5955] ? assign_work+0x1a0/0x250 [ 145.230664][ T5955] worker_thread+0x6c8/0xf10 [ 145.230692][ T5955] ? __kthread_parkme+0x19e/0x250 [ 145.230732][ T5955] ? __pfx_worker_thread+0x10/0x10 [ 145.230757][ T5955] kthread+0x3c5/0x780 [ 145.230769][ T5955] ? __pfx_kthread+0x10/0x10 [ 145.230793][ T5955] ? rcu_is_watching+0x12/0xc0 [ 145.230809][ T5955] ? __pfx_kthread+0x10/0x10 [ 145.230821][ T5955] ret_from_fork+0x5d4/0x6f0 [ 145.230849][ T5955] ? __pfx_kthread+0x10/0x10 [ 145.230876][ T5955] ret_from_fork_asm+0x1a/0x30 [ 145.230898][ T5955] [ 145.230932][ T5955] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 145.263452][ T6449] usb 14-1: device descriptor read/64, error -71 [ 145.266317][ T5955] Bluetooth: hci0: failed to register connection device [ 145.371277][T16310] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16310 comm=syz.8.1535 [ 145.472234][T16321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.523528][ T6449] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 145.543489][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 145.653622][ T6449] usb 14-1: device descriptor read/64, error -71 [ 145.702766][T16375] netlink: 'syz.8.1547': attribute type 1 has an invalid length. [ 145.775632][ T6449] usb usb14-port1: attempt power cycle [ 145.907316][T16389] xt_l2tp: v2 doesn't support IP mode [ 146.123641][ T6449] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 146.144217][ T6449] usb 14-1: device descriptor read/8, error -71 [ 146.276507][T16401] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 146.383685][ T6449] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 146.421104][ T6449] usb 14-1: device descriptor read/8, error -71 [ 146.425004][T16414] SELinux: failed to load policy [ 146.543704][ T6449] usb usb14-port1: unable to enumerate USB device [ 146.628678][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1562'. [ 146.903647][ T5958] Bluetooth: hci3: command tx timeout [ 147.576360][T16480] SELinux: policydb magic number 0xe does not match expected magic number 0xf97cff8c [ 147.580362][T16480] SELinux: failed to load policy [ 147.582654][T16481] SELinux: policydb magic number 0xe does not match expected magic number 0xf97cff8c [ 147.587094][T16481] SELinux: failed to load policy [ 147.623481][ C2] net_ratelimit: 1 callbacks suppressed [ 147.623491][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 147.680294][ T40] kauditd_printk_skb: 535 callbacks suppressed [ 147.680311][ T40] audit: type=1400 audit(1753073535.008:1328): avc: denied { read write } for pid=11182 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.696387][ T40] audit: type=1400 audit(1753073535.008:1329): avc: denied { read write open } for pid=11182 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.708163][ T40] audit: type=1400 audit(1753073535.008:1330): avc: denied { ioctl } for pid=11182 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.716641][ T40] audit: type=1400 audit(1753073535.028:1331): avc: denied { prog_load } for pid=16498 comm="syz.8.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 147.722438][ T40] audit: type=1400 audit(1753073535.028:1332): avc: denied { bpf } for pid=16498 comm="syz.8.1579" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.729294][ T40] audit: type=1400 audit(1753073535.028:1333): avc: denied { perfmon } for pid=16498 comm="syz.8.1579" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.732983][T16505] fuse: Bad value for 'fd' [ 147.735792][ T40] audit: type=1400 audit(1753073535.028:1334): avc: denied { create } for pid=16498 comm="syz.8.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.744064][ T40] audit: type=1400 audit(1753073535.028:1335): avc: denied { read write } for pid=16498 comm="syz.8.1579" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.751271][ T40] audit: type=1400 audit(1753073535.028:1336): avc: denied { open } for pid=16498 comm="syz.8.1579" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.758475][ T40] audit: type=1400 audit(1753073535.028:1337): avc: denied { ioctl } for pid=16498 comm="syz.8.1579" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.873623][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 147.944283][ T836] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 148.095025][ T836] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.098439][ T836] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 148.101465][ T836] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.104364][ T836] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.108986][T16499] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 148.114287][ T836] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 148.193472][ T5958] Bluetooth: hci0: command 0x041b tx timeout [ 148.234262][T16549] bridge_slave_0: invalid flags given to default FDB implementation [ 148.240108][T16549] x_tables: duplicate underflow at hook 3 [ 148.242490][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1588'. [ 148.315774][ T836] usb 13-1: USB disconnect, device number 9 [ 148.493010][T16575] infiniband syz1: set down [ 148.497584][T16575] infiniband syz1: added syz_tun [ 148.530777][T16575] RDS/IB: syz1: added [ 148.532404][T16575] smc: adding ib device syz1 with port count 1 [ 148.534820][T16575] smc: ib device syz1 port 1 has pnetid [ 148.663475][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 148.938288][T16615] autofs: Unknown parameter '/dev/fuse' [ 148.969422][T16619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.973459][T16619] batadv_slave_0: entered promiscuous mode [ 148.988514][ T5958] Bluetooth: hci3: command tx timeout [ 149.009690][T16623] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 100 [ 149.083464][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1610'. [ 149.103968][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1608'. [ 149.120542][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1611'. [ 149.123410][T16640] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1611'. [ 149.131994][T16640] overlayfs: failed to clone upperpath [ 149.197001][T16650] netlink: 'syz.6.1614': attribute type 11 has an invalid length. [ 149.207890][T16650] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1614'. [ 149.271184][T16660] overlayfs: failed to clone upperpath [ 149.286379][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1618'. [ 149.297349][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1619'. [ 149.348515][ T5958] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 149.351934][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: kworker/u33:3 Not tainted 6.16.0-rc6-syzkaller-00287-g990b11a523a8 #0 PREEMPT(full) [ 149.351969][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.351978][ T5958] Workqueue: hci3 hci_rx_work [ 149.352009][ T5958] Call Trace: [ 149.352013][ T5958] [ 149.352018][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 149.352051][ T5958] sysfs_warn_dup+0x7f/0xa0 [ 149.352089][ T5958] sysfs_create_dir_ns+0x24b/0x2b0 [ 149.352100][ T5958] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 149.352123][ T5958] ? find_held_lock+0x2b/0x80 [ 149.352141][ T5958] ? do_raw_spin_unlock+0x172/0x230 [ 149.352190][ T5958] kobject_add_internal+0x2c4/0x9b0 [ 149.352207][ T5958] kobject_add+0x16e/0x240 [ 149.352236][ T5958] ? __pfx_kobject_add+0x10/0x10 [ 149.352251][ T5958] ? do_raw_spin_unlock+0x172/0x230 [ 149.352276][ T5958] ? kobject_put+0xab/0x5a0 [ 149.352293][ T5958] device_add+0x288/0x1a70 [ 149.352323][ T5958] ? __pfx_dev_set_name+0x10/0x10 [ 149.352340][ T5958] ? __pfx_device_add+0x10/0x10 [ 149.352368][ T5958] ? mgmt_send_event_skb+0x2fb/0x460 [ 149.352392][ T5958] hci_conn_add_sysfs+0x17e/0x230 [ 149.352424][ T5958] le_conn_complete_evt+0x1075/0x1d70 [ 149.352460][ T5958] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 149.352478][ T5958] ? hci_event_packet+0x459/0x11c0 [ 149.352515][ T5958] hci_le_conn_complete_evt+0x23c/0x370 [ 149.352550][ T5958] hci_le_meta_evt+0x357/0x5e0 [ 149.352563][ T5958] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 149.352599][ T5958] hci_event_packet+0x685/0x11c0 [ 149.352629][ T5958] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 149.352643][ T5958] ? __pfx_hci_event_packet+0x10/0x10 [ 149.352673][ T5958] ? kcov_remote_start+0x3c9/0x6d0 [ 149.352688][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 149.352722][ T5958] hci_rx_work+0x2c5/0x16b0 [ 149.352735][ T5958] ? rcu_is_watching+0x12/0xc0 [ 149.352767][ T5958] process_one_work+0x9cf/0x1b70 [ 149.352787][ T5958] ? __pfx_process_one_work+0x10/0x10 [ 149.352816][ T5958] ? assign_work+0x1a0/0x250 [ 149.352829][ T5958] worker_thread+0x6c8/0xf10 [ 149.352859][ T5958] ? __pfx_worker_thread+0x10/0x10 [ 149.352872][ T5958] kthread+0x3c5/0x780 [ 149.352895][ T5958] ? __pfx_kthread+0x10/0x10 [ 149.352908][ T5958] ? rcu_is_watching+0x12/0xc0 [ 149.352935][ T5958] ? __pfx_kthread+0x10/0x10 [ 149.352947][ T5958] ret_from_fork+0x5d4/0x6f0 [ 149.352976][ T5958] ? __pfx_kthread+0x10/0x10 [ 149.352988][ T5958] ret_from_fork_asm+0x1a/0x30 [ 149.353020][ T5958] [ 149.353074][ T5958] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 149.390518][T16676] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.1620'. [ 149.391980][ T5958] Bluetooth: hci3: failed to register connection device [ 149.393263][T16676] netlink: zone id is out of range [ 149.448704][T16676] netlink: zone id is out of range [ 149.450344][T16676] netlink: zone id is out of range [ 149.451898][T16676] netlink: zone id is out of range [ 149.453475][T16676] netlink: zone id is out of range [ 149.455048][T16676] netlink: zone id is out of range [ 149.456616][T16676] netlink: zone id is out of range [ 149.506458][T16687] geneve4: entered promiscuous mode [ 149.508135][T16687] geneve4: entered allmulticast mode [ 149.596749][T16697] netlink: 'syz.9.1628': attribute type 1 has an invalid length. [ 149.723766][T16712] netlink: 'syz.6.1632': attribute type 32 has an invalid length. [ 150.345272][T16740] overlay: Unknown parameter 'audit' [ 150.409533][T16751] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1642'. [ 150.734455][T16805] tipc: Cannot configure node identity twice [ 150.874503][T16828] xt_CT: No such helper "pptp" [ 151.135460][T16917] netlink: 'syz.8.1677': attribute type 2 has an invalid length. [ 151.137991][T16917] netlink: 'syz.8.1677': attribute type 1 has an invalid length. [ 151.219600][T16931] random: crng reseeded on system resumption [ 151.565128][T16956] netlink: 'syz.8.1686': attribute type 3 has an invalid length. [ 151.569196][T16956] netlink: 'syz.8.1686': attribute type 2 has an invalid length. [ 151.844690][T16972] af_packet: tpacket_rcv: packet too big, clamped from 102 to 4294967272. macoff=96 [ 151.881839][T16978] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 152.111578][T17002] netlink: 'syz.7.1698': attribute type 2 has an invalid length. [ 152.282789][ T53] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 152.432747][ T53] usb 13-1: Using ep0 maxpacket: 16 [ 152.436575][ T53] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.439840][ T53] usb 13-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 152.442973][ T53] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.453935][ T53] usb 13-1: config 0 descriptor?? [ 152.462916][ T53] input: bcm5974 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input19 [ 152.543062][ T5958] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 152.543081][ T5955] Bluetooth: hci0: command 0x041b tx timeout [ 152.721119][ T5349] bcm5974 13-1:0.0: could not read from device [ 152.727364][ T40] kauditd_printk_skb: 727 callbacks suppressed [ 152.727379][ T40] audit: type=1400 audit(1753597828.027:2065): avc: denied { read write } for pid=16990 comm="syz.8.1695" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 152.729820][ T40] audit: type=1400 audit(1753597828.027:2066): avc: denied { ioctl open } for pid=16990 comm="syz.8.1695" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 152.745244][ T40] audit: type=1400 audit(1753597828.037:2067): avc: denied { read } for pid=16990 comm="syz.8.1695" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 152.749588][ T53] usb 13-1: USB disconnect, device number 10 [ 152.756388][T16994] bcm5974 13-1:0.0: could not read from device [ 152.759232][ T40] audit: type=1400 audit(1753597828.037:2068): avc: denied { open } for pid=16990 comm="syz.8.1695" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 152.759243][ T5349] bcm5974 13-1:0.0: could not read from device [ 152.767716][ T40] audit: type=1400 audit(1753597828.037:2069): avc: denied { ioctl } for pid=16990 comm="syz.8.1695" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 152.786105][ T40] audit: type=1400 audit(1753597828.087:2070): avc: denied { create } for pid=16990 comm="syz.8.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.792729][ T40] audit: type=1400 audit(1753597828.087:2071): avc: denied { write } for pid=16990 comm="syz.8.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.799111][ T40] audit: type=1400 audit(1753597828.087:2072): avc: denied { read } for pid=16990 comm="syz.8.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.806504][ T40] audit: type=1400 audit(1753597828.087:2073): avc: denied { write } for pid=16990 comm="syz.8.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.813117][ T40] audit: type=1400 audit(1753597828.087:2074): avc: denied { ioctl } for pid=16990 comm="syz.8.1695" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 152.855438][ C2] net_ratelimit: 209 callbacks suppressed [ 152.855502][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 153.585666][T17073] overlayfs: failed to clone lowerpath [ 153.703179][T17086] __nla_validate_parse: 13 callbacks suppressed [ 153.703194][T17086] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1717'. [ 153.737794][T17088] netlink: 'syz.6.1718': attribute type 10 has an invalid length. [ 153.740463][T17088] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1718'. [ 153.756186][T17088] team0: Port device geneve0 added [ 153.874372][T17098] overlayfs: failed to clone upperpath [ 153.903053][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 153.999812][T17109] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1725'. [ 154.027142][T17109] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1725'. [ 154.065744][ T5958] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 154.068502][ T5958] Bluetooth: hci1: Injecting HCI hardware error event [ 154.074301][ T5958] Bluetooth: hci1: hardware error 0x00 [ 154.432507][T17149] overlayfs: failed to clone upperpath [ 154.464602][T17151] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 154.530919][T17157] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.1739'. [ 154.952856][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 155.049472][T17203] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1751'. [ 155.052418][T17203] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1751'. [ 155.082442][T17206] netlink: 'syz.6.1752': attribute type 6 has an invalid length. [ 155.241166][T17232] autofs: Bad value for 'fd' [ 155.416633][T17288] netlink: 'syz.9.1768': attribute type 9 has an invalid length. [ 155.419702][T17288] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1768'. [ 155.424054][T17288] netlink: 'syz.9.1768': attribute type 9 has an invalid length. [ 155.427123][T17288] netlink: 212012 bytes leftover after parsing attributes in process `syz.9.1768'. [ 155.469717][T17294] netlink: 'syz.8.1769': attribute type 63 has an invalid length. [ 155.833909][T17423] overlayfs: conflicting options: userxattr,redirect_dir=on [ 155.900666][T17436] futex_wake_op: syz.9.1791 tries to shift op by 32; fix this program [ 155.942547][T17443] xt_l2tp: v2 tid > 0xffff: 150994944 [ 156.001336][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 156.159421][ T5958] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 156.577634][T17519] netfs: Couldn't get user pages (rc=-14) [ 156.586992][T17519] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1812'. [ 156.729937][T17526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=17526 comm=syz.7.1814 [ 157.045282][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 157.262949][T17571] netlink: 'syz.6.1828': attribute type 1 has an invalid length. [ 157.319897][T17582] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 157.324151][T17582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.332718][T17586] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 157.335280][T17586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.352084][T17589] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 157.359592][T17589] netlink: 'syz.8.1837': attribute type 13 has an invalid length. [ 157.785880][ T40] kauditd_printk_skb: 738 callbacks suppressed [ 157.785926][ T40] audit: type=1400 audit(1753597833.041:2813): avc: denied { execmem } for pid=17606 comm="syz.7.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 157.797563][T17629] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 157.797795][ T40] audit: type=1400 audit(1753597833.041:2814): avc: denied { execute } for pid=17606 comm="syz.7.1836" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=48860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 157.808453][ T40] audit: type=1400 audit(1753597833.041:2815): avc: denied { unlink } for pid=14673 comm="syz-executor" name="file0" dev="tmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.815462][ T40] audit: type=1400 audit(1753597833.051:2816): avc: denied { read write } for pid=17628 comm="syz.8.1841" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 157.823008][ T40] audit: type=1400 audit(1753597833.051:2817): avc: denied { open } for pid=17628 comm="syz.8.1841" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 157.830291][ T40] audit: type=1400 audit(1753597833.051:2818): avc: denied { ioctl } for pid=17628 comm="syz.8.1841" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x5629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 157.850383][ T40] audit: type=1400 audit(1753597833.051:2819): avc: denied { create } for pid=17628 comm="syz.8.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.851683][T17634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17634 comm=syz.9.1842 [ 157.858760][ T40] audit: type=1400 audit(1753597833.051:2820): avc: denied { execmem } for pid=17606 comm="syz.7.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 157.867142][ T40] audit: type=1400 audit(1753597833.051:2821): avc: denied { execute } for pid=17606 comm="syz.7.1836" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=50701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 157.880834][ T40] audit: type=1400 audit(1753597833.101:2822): avc: denied { read write } for pid=11182 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.102467][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 158.229709][T17666] vivid-000: ================= START STATUS ================= [ 158.232967][T17666] vivid-000: Test Pattern: 75% Colorbar [ 158.236490][T17666] vivid-000: Fill Percentage of Frame: 100 [ 158.239000][T17666] vivid-000: Horizontal Movement: No Movement [ 158.241542][T17666] vivid-000: Vertical Movement: Move Down Slow [ 158.244586][T17666] vivid-000: OSD Text Mode: All [ 158.246537][T17666] vivid-000: Show Border: false [ 158.248360][T17666] vivid-000: Show Square: false [ 158.250002][T17666] vivid-000: Sensor Flipped Horizontally: false [ 158.251971][T17666] vivid-000: Sensor Flipped Vertically: false [ 158.254113][T17666] vivid-000: Insert SAV Code in Image: false [ 158.256036][T17666] vivid-000: Insert EAV Code in Image: false [ 158.259373][T17666] vivid-000: Insert Video Guard Band: false [ 158.261261][T17666] vivid-000: Reduced Framerate: false [ 158.262955][T17666] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 158.265569][T17666] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 158.268058][T17666] vivid-000: Enable Capture Cropping: false [ 158.270169][T17666] vivid-000: Enable Capture Composing: true [ 158.272017][T17666] vivid-000: Enable Capture Scaler: true [ 158.273889][T17666] vivid-000: Timestamp Source: End of Frame [ 158.275753][T17666] vivid-000: Colorspace: SMPTE 170M [ 158.277500][T17666] vivid-000: Transfer Function: Default [ 158.279225][T17666] vivid-000: Y'CbCr Encoding: Default [ 158.280921][T17666] vivid-000: HSV Encoding: Hue 0-179 [ 158.282614][T17666] vivid-000: Quantization: Default [ 158.284372][T17666] vivid-000: Apply Alpha To Red Only: false [ 158.286233][T17666] vivid-000: Standard Aspect Ratio: 4x3 [ 158.288016][T17666] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 158.290475][T17666] vivid-000: DV Timings: 640x480p59 inactive [ 158.292390][T17666] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 158.294814][T17666] vivid-000: Maximum EDID Blocks: 2 [ 158.296502][T17666] vivid-000: Limited RGB Range (16-235): false [ 158.298402][T17666] vivid-000: Rx RGB Quantization Range: Automatic [ 158.300402][T17666] vivid-000: Power Present: 0x00000001 [ 158.302113][T17666] tpg source WxH: 720x576 (R'G'B) [ 158.303695][T17666] tpg field: 3 [ 158.304877][T17666] tpg crop: (0,0)/720x576 [ 158.306247][T17666] tpg compose: (0,0)/16x16 [ 158.307686][T17666] tpg colorspace: 1 [ 158.308900][T17666] tpg transfer function: 0/1 [ 158.310353][T17666] tpg quantization: 0/1 [ 158.311652][T17666] tpg RGB range: 0/2 [ 158.312888][T17666] vivid-000: ================== END STATUS ================== [ 158.374686][T17679] team0: Device gtp0 is of different type [ 158.408949][T17685] team0: Device gtp0 is of different type [ 158.647212][T17723] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20000 [ 158.702834][T17735] netlink: 'syz.9.1863': attribute type 29 has an invalid length. [ 158.792000][T17747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.149561][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 159.153823][T17753] /dev/nullb0: Can't lookup blockdev [ 159.566363][T17765] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 159.570040][T17765] bond2: left promiscuous mode [ 159.602643][T17770] __nla_validate_parse: 10 callbacks suppressed [ 159.602654][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1873'. [ 159.607415][T17770] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 159.610201][T17770] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (5) [ 159.668857][T17748] delete_channel: no stack [ 159.781669][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1878'. [ 159.809585][T17788] Process accounting resumed [ 159.898661][T17806] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1880'. [ 159.899372][T17807] netlink: 'syz.8.1880': attribute type 7 has an invalid length. [ 159.904655][T17807] netlink: 'syz.8.1880': attribute type 8 has an invalid length. [ 159.909548][T17807] BIDI support in bsg has been removed. [ 160.069932][T17830] Cannot find map_set index 0 as target [ 160.196477][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 160.709609][T17856] delete_channel: no stack [ 161.136878][T17876] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1901'. [ 161.233357][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 161.268240][T17887] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1904'. [ 161.401803][T17900] netlink: 'syz.8.1906': attribute type 12 has an invalid length. [ 161.656535][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1911'. [ 161.689969][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1912'. [ 161.693043][T17927] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1912'. [ 161.696799][T17930] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1913'. [ 161.699605][T17930] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1913'. [ 161.710166][T17927] netlink: 'syz.6.1912': attribute type 4 has an invalid length. [ 161.759709][T17935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.762739][T17935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.765054][T17935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.776486][T17935] bridge0: port 4(batadv0) entered disabled state [ 162.272602][T17903] overlayfs: statfs failed on './file0' [ 162.290106][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.630072][T18009] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 162.757672][T18021] netlink: 'syz.7.1943': attribute type 6 has an invalid length. [ 162.794966][T18025] netlink: 'syz.6.1945': attribute type 1 has an invalid length. [ 162.852504][ T40] kauditd_printk_skb: 727 callbacks suppressed [ 162.852515][ T40] audit: type=1400 audit(1753597838.078:3550): avc: denied { create } for pid=18031 comm="syz.6.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.862885][ T40] audit: type=1400 audit(1753597838.088:3551): avc: denied { write } for pid=18031 comm="syz.6.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.869417][ T40] audit: type=1400 audit(1753597838.088:3552): avc: denied { allowed } for pid=18031 comm="syz.6.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.875524][ T40] audit: type=1400 audit(1753597838.088:3553): avc: denied { create } for pid=18031 comm="syz.6.1948" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.881938][ T40] audit: type=1400 audit(1753597838.088:3554): avc: denied { map } for pid=18031 comm="syz.6.1948" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.889595][ T40] audit: type=1400 audit(1753597838.088:3555): avc: denied { read write } for pid=18031 comm="syz.6.1948" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.897263][ T40] audit: type=1400 audit(1753597838.088:3556): avc: denied { create } for pid=18031 comm="syz.6.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.903368][ T40] audit: type=1400 audit(1753597838.108:3557): avc: denied { read } for pid=18031 comm="syz.6.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.909351][ T40] audit: type=1400 audit(1753597838.128:3558): avc: denied { module_request } for pid=18031 comm="syz.6.1948" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 162.915968][ T40] audit: type=1400 audit(1753597838.148:3559): avc: denied { create } for pid=18031 comm="syz.6.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.995441][T18040] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.998746][T18040] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 163.081923][T18040] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.085323][T18040] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 163.159805][T18040] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.163108][T18040] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 163.231951][T18040] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.235294][T18040] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 163.313911][T18040] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.320126][T18040] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.326705][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 163.327154][T18040] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.331441][T18040] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.339810][T18040] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.343612][T18040] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.351748][T18040] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.354435][T18040] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.358385][T18063] netlink: 'syz.9.1955': attribute type 4 has an invalid length. [ 163.374070][T18070] netlink: 'syz.8.1956': attribute type 7 has an invalid length. [ 163.479133][T18087] tipc: MTU too low for tipc bearer [ 163.922553][T18162] 9pnet_virtio: no channels available for device syz [ 164.239357][T18191] fuse: Unknown parameter 'ÏK@½$L陋±B+ _ʳ [ 164.239357][T18191] –»<AŠíù¿ÉqmäsjO½/η`}­3;*†¸(}Nòc´~]€“Ë[£ia(y”1T¹y_'@3‡Œäø' [ 164.350865][T18198] Cannot find add_set index 4 as target [ 164.383129][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 164.624791][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 164.715470][T18205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=69 sclass=netlink_route_socket pid=18205 comm=syz.7.1989 [ 164.753837][T18207] netlink: 'syz.9.1990': attribute type 9 has an invalid length. [ 165.059416][T18230] netlink: 'syz.8.1994': attribute type 2 has an invalid length. [ 165.319909][T18265] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.329096][T18265] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 165.355837][T18263] loop2: detected capacity change from 0 to 7 [ 165.362256][ T5952] Dev loop2: unable to read RDB block 7 [ 165.364293][ T5952] loop2: unable to read partition table [ 165.364784][T18272] new mount options do not match the existing superblock, will be ignored [ 165.366215][ T5952] loop2: partition table beyond EOD, truncated [ 165.375879][T18263] Dev loop2: unable to read RDB block 7 [ 165.378050][T18263] loop2: unable to read partition table [ 165.380109][T18263] loop2: partition table beyond EOD, truncated [ 165.389243][T18263] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 165.395001][T18265] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.398445][T18265] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 165.420080][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 165.504985][T18265] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.508170][T18265] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 165.523471][T18282] __nla_validate_parse: 8 callbacks suppressed [ 165.523486][T18282] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2005'. [ 165.531183][T18282] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2005'. [ 165.554081][T18265] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.557205][T18265] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 166.043578][T18304] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2011'. [ 166.047535][T18304] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2011'. [ 166.129602][T18318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2082 sclass=netlink_route_socket pid=18318 comm=syz.7.2015 [ 166.143291][T18321] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 166.218205][T18334] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2021'. [ 166.307323][T18344] fuse: blksize only supported for fuseblk [ 166.369759][T18338] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2022'. [ 166.374722][T18338] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2022'. [ 166.477489][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 166.486088][T18379] netlink: 'syz.9.2033': attribute type 10 has an invalid length. [ 166.486277][T18375] syz_tun: entered allmulticast mode [ 166.490927][T18379] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.493407][T18379] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.501688][T18379] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.503958][T18379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.506421][T18379] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.508645][T18379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.513932][T18379] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 166.522769][T18388] SET target dimension over the limit! [ 166.662673][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2039'. [ 166.666215][T18445] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2039'. [ 166.726229][T18457] openvswitch: netlink: Duplicate key (type 0). [ 166.792392][T18466] ip6gretap1: entered promiscuous mode [ 166.794140][T18466] ip6gretap1: entered allmulticast mode [ 166.795060][T18473] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2045'. [ 166.805672][T18469] delete_channel: no stack [ 167.013635][T18499] netlink: 'syz.9.2051': attribute type 4 has an invalid length. [ 167.075829][T18502] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 167.118226][T18265] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.121207][T18265] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.129315][T18265] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.133317][T18265] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.141552][T18265] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.144183][T18265] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.151663][T18265] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.154397][T18265] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.277675][T18541] unsupported nlmsg_type 40 [ 167.470077][T18559] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.474062][T18559] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 167.511370][T18565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.511955][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.537357][T18559] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.540468][T18559] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 167.615574][T18559] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.619128][T18559] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 167.685927][T18559] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.689206][T18559] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 167.953782][ T40] kauditd_printk_skb: 692 callbacks suppressed [ 167.953792][ T40] audit: type=1400 audit(1753597843.147:4252): avc: denied { read write } for pid=11182 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.964283][ T40] audit: type=1400 audit(1753597843.147:4253): avc: denied { open } for pid=11182 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.972250][ T40] audit: type=1400 audit(1753597843.147:4254): avc: denied { ioctl } for pid=11182 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.019454][ T40] audit: type=1400 audit(1753597843.217:4255): avc: denied { read write } for pid=11182 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.029135][ T40] audit: type=1400 audit(1753597843.217:4256): avc: denied { open } for pid=11182 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.039553][ T40] audit: type=1400 audit(1753597843.217:4257): avc: denied { ioctl } for pid=11182 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.041827][T18590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=18590 comm=syz.8.2074 [ 168.048233][ T40] audit: type=1400 audit(1753597843.237:4258): avc: denied { bpf } for pid=18589 comm="syz.8.2074" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.057809][ T40] audit: type=1400 audit(1753597843.237:4259): avc: denied { map_create } for pid=18589 comm="syz.8.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.064195][ T40] audit: type=1400 audit(1753597843.237:4260): avc: denied { create } for pid=18589 comm="syz.8.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.070455][ T40] audit: type=1400 audit(1753597843.246:4261): avc: denied { connect } for pid=18589 comm="syz.8.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.345068][T18609] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 168.568174][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 169.255924][T18650] xt_l2tp: unknown flags: f1 [ 169.440508][T18687] netlink: 'syz.8.2095': attribute type 3 has an invalid length. [ 169.443023][T18687] netlink: 'syz.8.2095': attribute type 1 has an invalid length. [ 169.473006][T18678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18678 comm=syz.9.2094 [ 169.531095][T18699] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 0, id = 0 [ 169.605036][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 169.729504][T18724] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 169.731735][T18724] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 169.733901][T18724] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 169.735322][T18725] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 169.736290][T18724] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 169.738258][T18725] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 169.740356][T18724] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 169.742433][T18725] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 169.819439][T18729] netlink: 'syz.8.2102': attribute type 30 has an invalid length. [ 170.631750][T18758] bridge: RTM_NEWNEIGH with invalid ether address [ 170.658534][T18765] __nla_validate_parse: 15 callbacks suppressed [ 170.658546][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2115'. [ 170.667103][T18765] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2115'. [ 170.735525][T18773] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2118'. [ 170.738549][T18774] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2118'. [ 170.802970][T18782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2121'. [ 170.806245][T18782] geneve0: default FDB implementation only supports local addresses [ 170.836294][T18784] netlink: 1347 bytes leftover after parsing attributes in process `syz.9.2122'. [ 170.896144][T18559] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.898875][T18559] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.912406][T18559] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.914948][T18559] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.932910][T18559] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.936570][T18559] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.949592][T18559] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.953642][T18559] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 171.067128][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2126'. [ 171.075149][T18809] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2126'. [ 171.127811][T18814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2128'. [ 171.130704][T18814] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2128'. [ 171.264817][T18820] nfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 171.299687][T18822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.452108][T18826] x_tables: duplicate underflow at hook 2 [ 171.543314][T18832] binder: BINDER_SET_CONTEXT_MGR bad uid 3327 != 0 [ 171.546832][T18832] binder: 18831:18832 ioctl 4018620d 200000000040 returned -1 [ 171.767154][T18853] CIFS mount error: No usable UNC path provided in device string! [ 171.767154][T18853] [ 171.770854][T18853] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 171.776656][T18848] fuse: Bad value for 'user_id' [ 171.778273][T18848] fuse: Bad value for 'user_id' [ 171.956487][T18879] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18879 comm=syz.7.2149 [ 172.106690][ T5958] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 172.110216][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: kworker/u33:3 Not tainted 6.16.0-rc6-syzkaller-00287-g990b11a523a8 #0 PREEMPT(full) [ 172.110240][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.110248][ T5958] Workqueue: hci2 hci_rx_work [ 172.110277][ T5958] Call Trace: [ 172.110282][ T5958] [ 172.110287][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 172.110307][ T5958] sysfs_warn_dup+0x7f/0xa0 [ 172.110329][ T5958] sysfs_create_dir_ns+0x24b/0x2b0 [ 172.110340][ T5958] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 172.110350][ T5958] ? find_held_lock+0x2b/0x80 [ 172.110367][ T5958] ? do_raw_spin_unlock+0x172/0x230 [ 172.110381][ T5958] kobject_add_internal+0x2c4/0x9b0 [ 172.110398][ T5958] kobject_add+0x16e/0x240 [ 172.110411][ T5958] ? __pfx_kobject_add+0x10/0x10 [ 172.110425][ T5958] ? do_raw_spin_unlock+0x172/0x230 [ 172.110439][ T5958] ? kobject_put+0xab/0x5a0 [ 172.110455][ T5958] device_add+0x288/0x1a70 [ 172.110469][ T5958] ? __pfx_dev_set_name+0x10/0x10 [ 172.110484][ T5958] ? __pfx_device_add+0x10/0x10 [ 172.110498][ T5958] ? mgmt_send_event_skb+0x2fb/0x460 [ 172.110519][ T5958] hci_conn_add_sysfs+0x17e/0x230 [ 172.110532][ T5958] le_conn_complete_evt+0x1075/0x1d70 [ 172.110553][ T5958] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 172.110570][ T5958] ? hci_event_packet+0x459/0x11c0 [ 172.110591][ T5958] hci_le_conn_complete_evt+0x23c/0x370 [ 172.110612][ T5958] hci_le_meta_evt+0x357/0x5e0 [ 172.110623][ T5958] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 172.110643][ T5958] hci_event_packet+0x685/0x11c0 [ 172.110660][ T5958] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 172.110672][ T5958] ? __pfx_hci_event_packet+0x10/0x10 [ 172.110691][ T5958] ? kcov_remote_start+0x3c9/0x6d0 [ 172.110703][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 172.110724][ T5958] hci_rx_work+0x2c5/0x16b0 [ 172.110736][ T5958] ? rcu_is_watching+0x12/0xc0 [ 172.110753][ T5958] process_one_work+0x9cf/0x1b70 [ 172.110771][ T5958] ? __pfx_process_one_work+0x10/0x10 [ 172.110787][ T5958] ? assign_work+0x1a0/0x250 [ 172.110799][ T5958] worker_thread+0x6c8/0xf10 [ 172.110817][ T5958] ? __pfx_worker_thread+0x10/0x10 [ 172.110829][ T5958] kthread+0x3c5/0x780 [ 172.110840][ T5958] ? __pfx_kthread+0x10/0x10 [ 172.110852][ T5958] ? rcu_is_watching+0x12/0xc0 [ 172.110866][ T5958] ? __pfx_kthread+0x10/0x10 [ 172.110878][ T5958] ret_from_fork+0x5d4/0x6f0 [ 172.110894][ T5958] ? __pfx_kthread+0x10/0x10 [ 172.110905][ T5958] ret_from_fork_asm+0x1a/0x30 [ 172.110924][ T5958] [ 172.110938][ T5958] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 172.196177][ T5958] Bluetooth: hci2: failed to register connection device [ 172.570798][T18946] fuse: Bad value for 'fd' [ 172.656831][T18861] ================================================================== [ 172.660270][T18861] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 172.662980][T18861] Read of size 1 at addr ffff888052483ab0 by task syz.8.2145/18861 [ 172.666892][T18861] [ 172.668511][T18861] CPU: 3 UID: 0 PID: 18861 Comm: syz.8.2145 Not tainted 6.16.0-rc6-syzkaller-00287-g990b11a523a8 #0 PREEMPT(full) [ 172.668538][T18861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.668551][T18861] Call Trace: [ 172.668559][T18861] [ 172.668567][T18861] dump_stack_lvl+0x116/0x1f0 [ 172.668601][T18861] print_report+0xcd/0x610 [ 172.668620][T18861] ? __virt_addr_valid+0x81/0x610 [ 172.668644][T18861] ? __phys_addr+0xe8/0x180 [ 172.668666][T18861] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 172.668694][T18861] kasan_report+0xe0/0x110 [ 172.668713][T18861] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 172.668741][T18861] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 172.668768][T18861] __kasan_check_byte+0x36/0x50 [ 172.668786][T18861] lock_acquire+0xfc/0x350 [ 172.668805][T18861] ? find_held_lock+0x2b/0x80 [ 172.668829][T18861] _raw_spin_lock_irqsave+0x3a/0x60 [ 172.668854][T18861] ? remove_wait_queue+0x25/0x180 [ 172.668877][T18861] remove_wait_queue+0x25/0x180 [ 172.668901][T18861] poll_freewait+0xd5/0x250 [ 172.668929][T18861] do_sys_poll+0x698/0xdf0 [ 172.668959][T18861] ? __pfx_do_sys_poll+0x10/0x10 [ 172.668985][T18861] ? __pfx___schedule+0x10/0x10 [ 172.669029][T18861] ? __futex_wait+0x24c/0x2f0 [ 172.669051][T18861] ? __pfx_pollwake+0x10/0x10 [ 172.669076][T18861] ? __pfx_pollwake+0x10/0x10 [ 172.669115][T18861] ? __pfx_do_futex+0x10/0x10 [ 172.669138][T18861] ? find_held_lock+0x2b/0x80 [ 172.669157][T18861] ? handle_mm_fault+0x2ab/0xd10 [ 172.669182][T18861] ? __x64_sys_futex+0x1e0/0x4c0 [ 172.669207][T18861] ? __x64_sys_futex+0x1e9/0x4c0 [ 172.669233][T18861] __x64_sys_poll+0xfe/0x450 [ 172.669255][T18861] ? __pfx___x64_sys_poll+0x10/0x10 [ 172.669282][T18861] do_syscall_64+0xcd/0x4c0 [ 172.669299][T18861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.669318][T18861] RIP: 0033:0x7f9ca0b8e9a9 [ 172.669333][T18861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.669353][T18861] RSP: 002b:00007f9ca1aaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 172.669373][T18861] RAX: ffffffffffffffda RBX: 00007f9ca0db5fa0 RCX: 00007f9ca0b8e9a9 [ 172.669386][T18861] RDX: 00000000fffffff2 RSI: 0000000000000002 RDI: 0000200000000000 [ 172.669409][T18861] RBP: 00007f9ca0c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 172.669422][T18861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.669434][T18861] R13: 0000000000000000 R14: 00007f9ca0db5fa0 R15: 00007ffe52df8cb8 [ 172.669449][T18861] [ 172.669454][T18861] [ 172.749335][T18861] Allocated by task 17666: [ 172.750726][T18861] kasan_save_stack+0x33/0x60 [ 172.752205][T18861] kasan_save_track+0x14/0x30 [ 172.753701][T18861] __kasan_kmalloc+0xaa/0xb0 [ 172.755134][T18861] comedi_device_postconfig+0x2cb/0xc80 [ 172.756812][T18861] comedi_device_attach+0x3cf/0x900 [ 172.758445][T18861] do_devconfig_ioctl+0x1a7/0x580 [ 172.760015][T18861] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 172.761710][T18861] __x64_sys_ioctl+0x18e/0x210 [ 172.763219][T18861] do_syscall_64+0xcd/0x4c0 [ 172.764650][T18861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.766481][T18861] [ 172.767250][T18861] Freed by task 18868: [ 172.768668][T18861] kasan_save_stack+0x33/0x60 [ 172.770160][T18861] kasan_save_track+0x14/0x30 [ 172.771624][T18861] kasan_save_free_info+0x3b/0x60 [ 172.773221][T18861] __kasan_slab_free+0x51/0x70 [ 172.774717][T18861] kfree+0x2b4/0x4d0 [ 172.775970][T18861] comedi_device_detach+0x2a4/0x9e0 [ 172.777595][T18861] do_devconfig_ioctl+0x46c/0x580 [ 172.779141][T18861] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 172.780845][T18861] __x64_sys_ioctl+0x18e/0x210 [ 172.782350][T18861] do_syscall_64+0xcd/0x4c0 [ 172.783785][T18861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.785651][T18861] [ 172.786418][T18861] The buggy address belongs to the object at ffff888052483a00 [ 172.786418][T18861] which belongs to the cache kmalloc-256 of size 256 [ 172.790646][T18861] The buggy address is located 176 bytes inside of [ 172.790646][T18861] freed 256-byte region [ffff888052483a00, ffff888052483b00) [ 172.794838][T18861] [ 172.795602][T18861] The buggy address belongs to the physical page: [ 172.797613][T18861] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52482 [ 172.800328][T18861] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 172.802915][T18861] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 172.805431][T18861] page_type: f5(slab) [ 172.806761][T18861] raw: 00fff00000000040 ffff88801b842b40 ffffea00012c9400 dead000000000005 [ 172.809421][T18861] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 172.812068][T18861] head: 00fff00000000040 ffff88801b842b40 ffffea00012c9400 dead000000000005 [ 172.814910][T18861] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 172.817592][T18861] head: 00fff00000000001 ffffea0001492081 00000000ffffffff 00000000ffffffff [ 172.820260][T18861] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 172.822924][T18861] page dumped because: kasan: bad access detected [ 172.824921][T18861] page_owner tracks the page as allocated [ 172.826689][T18861] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10830, tgid 10830 (syz-executor), ts 107211802635, free_ts 106474651250 [ 172.834042][T18861] post_alloc_hook+0x1c0/0x230 [ 172.835684][T18861] get_page_from_freelist+0x1321/0x3890 [ 172.837504][T18861] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 172.839360][T18861] alloc_pages_mpol+0x1fb/0x550 [ 172.840890][T18861] new_slab+0x23b/0x330 [ 172.842216][T18861] ___slab_alloc+0xd9c/0x1940 [ 172.843719][T18861] __slab_alloc.constprop.0+0x56/0xb0 [ 172.845393][T18861] __kmalloc_noprof+0x2f2/0x510 [ 172.846909][T18861] security_inode_init_security+0x13f/0x390 [ 172.848768][T18861] shmem_symlink+0x135/0x9f0 [ 172.850227][T18861] vfs_symlink+0x400/0x680 [ 172.851628][T18861] do_symlinkat+0x261/0x310 [ 172.853046][T18861] __x64_sys_symlinkat+0x93/0xc0 [ 172.854589][T18861] do_syscall_64+0xcd/0x4c0 [ 172.856015][T18861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.857841][T18861] page last free pid 5952 tgid 5952 stack trace: [ 172.859771][T18861] __free_frozen_pages+0x7fe/0x1180 [ 172.861391][T18861] __put_partials+0x16d/0x1c0 [ 172.862859][T18861] qlist_free_all+0x4d/0x120 [ 172.864985][T18861] kasan_quarantine_reduce+0x195/0x1e0 [ 172.867351][T18861] __kasan_slab_alloc+0x69/0x90 [ 172.869495][T18861] __kmalloc_noprof+0x1d4/0x510 [ 172.871609][T18861] tomoyo_realpath_from_path+0xc2/0x6e0 [ 172.874035][T18861] tomoyo_path_perm+0x274/0x460 [ 172.876166][T18861] security_inode_getattr+0x116/0x290 [ 172.878508][T18861] vfs_fstat+0x4b/0xe0 [ 172.880310][T18861] __do_sys_newfstat+0x87/0x100 [ 172.882382][T18861] do_syscall_64+0xcd/0x4c0 [ 172.884330][T18861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.886927][T18861] [ 172.888010][T18861] Memory state around the buggy address: [ 172.890456][T18861] ffff888052483980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 172.893949][T18861] ffff888052483a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.897415][T18861] >ffff888052483a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.900787][T18861] ^ [ 172.903124][T18861] ffff888052483b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 172.906580][T18861] ffff888052483b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 172.910030][T18861] ================================================================== [ 172.913457][T18861] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 172.916746][T18861] CPU: 3 UID: 0 PID: 18861 Comm: syz.8.2145 Not tainted 6.16.0-rc6-syzkaller-00287-g990b11a523a8 #0 PREEMPT(full) [ 172.921921][T18861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.926583][T18861] Call Trace: [ 172.928069][T18861] [ 172.929374][T18861] dump_stack_lvl+0x3d/0x1f0 [ 172.931430][T18861] panic+0x71c/0x800 [ 172.933219][T18861] ? __pfx_panic+0x10/0x10 [ 172.935197][T18861] ? __pfx__printk+0x10/0x10 [ 172.937255][T18861] ? end_report+0x4c/0x170 [ 172.939231][T18861] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 172.941551][T18861] check_panic_on_warn+0xab/0xb0 [ 172.943753][T18861] end_report+0x107/0x170 [ 172.945676][T18861] kasan_report+0xee/0x110 [ 172.947640][T18861] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 172.950046][T18861] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 172.952420][T18861] __kasan_check_byte+0x36/0x50 [ 172.954577][T18861] lock_acquire+0xfc/0x350 [ 172.956569][T18861] ? find_held_lock+0x2b/0x80 [ 172.958749][T18861] _raw_spin_lock_irqsave+0x3a/0x60 [ 172.961061][T18861] ? remove_wait_queue+0x25/0x180 [ 172.963292][T18861] remove_wait_queue+0x25/0x180 [ 172.965464][T18861] poll_freewait+0xd5/0x250 [ 172.967445][T18861] do_sys_poll+0x698/0xdf0 [ 172.969457][T18861] ? __pfx_do_sys_poll+0x10/0x10 [ 172.971657][T18861] ? __pfx___schedule+0x10/0x10 [ 172.973853][T18861] ? __futex_wait+0x24c/0x2f0 [ 172.975943][T18861] ? __pfx_pollwake+0x10/0x10 [ 172.978055][T18861] ? __pfx_pollwake+0x10/0x10 [ 172.980165][T18861] ? __pfx_do_futex+0x10/0x10 [ 172.982254][T18861] ? find_held_lock+0x2b/0x80 [ 172.984353][T18861] ? handle_mm_fault+0x2ab/0xd10 [ 172.986558][T18861] ? __x64_sys_futex+0x1e0/0x4c0 [ 172.988602][T18861] ? __x64_sys_futex+0x1e9/0x4c0 [ 172.990557][T18861] __x64_sys_poll+0xfe/0x450 [ 172.992512][T18861] ? __pfx___x64_sys_poll+0x10/0x10 [ 172.994767][T18861] do_syscall_64+0xcd/0x4c0 [ 172.996740][T18861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.999018][T18861] RIP: 0033:0x7f9ca0b8e9a9 [ 173.000744][T18861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.006726][T18861] RSP: 002b:00007f9ca1aaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 173.009291][T18861] RAX: ffffffffffffffda RBX: 00007f9ca0db5fa0 RCX: 00007f9ca0b8e9a9 [ 173.011586][T18861] RDX: 00000000fffffff2 RSI: 0000000000000002 RDI: 0000200000000000 [ 173.014037][T18861] RBP: 00007f9ca0c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 173.016507][T18861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.019356][T18861] R13: 0000000000000000 R14: 00007f9ca0db5fa0 R15: 00007ffe52df8cb8 [ 173.022482][T18861] [ 173.024428][T18861] Kernel Offset: disabled [ 173.026150][T18861] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:44:08 Registers: info registers vcpu 0 CPU#0 RAX=fffffbfff21528aa RBX=fffffbfff21528ab RCX=ffffffff81c3ba1f RDX=fffffbfff21528ab RSI=0000000000000008 RDI=ffffffff90a94550 RBP=fffffbfff21528aa RSP=ffffffff8e207d00 R8 =0000000000000000 R9 =fffffbfff21528aa R10=ffffffff90a94557 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8221353c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2786da CR3=0000000032f9c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4b8b2650 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f908cc11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f908cc11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f908cc11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f908cc11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f908cc11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f908cc11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732064616200786c 6c36313025783000 657a697320780004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5605414447005d49 49131415005d1500 405f4c56055d404d 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000ac ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001bddb1 RBX=0000000000000001 RCX=ffffffff8b867c99 RDX=0000000000000000 RSI=ffffffff8de2ffee RDI=ffffffff8c157460 RBP=ffffed1003bd8488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90a94550 R15=0000000000000000 RIP=ffffffff8b8667ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f908da7cf98 CR3=0000000048378000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000316e616c77 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ac6411d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ac6411d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ac6411d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ac6411d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ac6411de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ac6411ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ac6586488 00007f8ac6586480 00007f8ac6586478 00007f8ac6586450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ac70ed100 00007f8ac6586440 00007f8ac6580004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ac6586498 00007f8ac6586490 00007f8ac6586488 00007f8ac6586480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff914c095e RBX=ffffffff90c36d4c RCX=dffffc0000000000 RDX=ffffffff8217c45c RSI=0000000000000000 RDI=ffffffff90c36d3c RBP=ffffffff90c36d3c RSP=ffffc900006487c8 R8 =ffffffff914c0994 R9 =0000000000000000 R10=0000000000000000 R11=00000000000117c4 R12=ffffffff90c36d48 R13=ffffffff8217c44a R14=ffffffff90c36d3c R15=ffffffff90c36d3c RIP=ffffffff816acd62 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0b8732c6c0 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f02b4e72e9c CR3=000000005dff3000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e77e2a51a9a514a9 5935f42e992983a0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef9af01c7d35a271 987110e11c4a7a82 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 30c4f2867f4cd1d4 e1259f97c4e2f257 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9a72ebf8640bb347 2c04f7ad3500a806 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c600 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006900000069 0080010000000069 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b902646eb906a75e b9884b6c00000069 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00800100b903fe14 0000006900800100 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b95f332e00800100 00800100b8e677da ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5ec5ec66b906bd16 2497c321c4d498f7 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fae21af652062ad4 d1101a1f4f6f32dd ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a5665 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc90022fa7260 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0b9e20 R15=ffffffff855a5600 RIP=ffffffff855a568f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9ca1aaf6c0 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000005df99000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4b8b28b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f908cc11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f908cc11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f908cc11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f908cc11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f908cc11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f908cc11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ac ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000ac ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000