last executing test programs: 1m19.905290406s ago: executing program 0 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000700001000000000000cb196a00000007", @ANYRES32=r3, @ANYBLOB="10000180040004800800010000400300"], 0x28}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x2, 0x6, 0x40, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast1, 0xa7, 0x7800, 0xf32, 0xfffffffe}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1f, 0x803, 0xfffffffc) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x58}}, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x309940, 0x20) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 1m19.904483176s ago: executing program 0 (id=319): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20800808}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x1411, 0x300, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000011}, 0x40) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000680)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) (async) io_uring_enter(r2, 0x786, 0xc1040000, 0x43, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000700)='./file1\x00') (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000040)={0x1, 'vlan0\x00'}) 1m19.685585328s ago: executing program 0 (id=324): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) write$sndseq(r1, &(0x7f0000000100)=[{0x9, 0x37, 0x7, 0x9, @tick=0x5, {0x1, 0x8b}, {0x9}, @raw8={"c2ebca87a5fa93953e8ef923"}}], 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x1e, 0x1, 0x0) (async) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) (async) bind$inet(r2, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) write$sndseq(r1, &(0x7f0000000100)=[{0x9, 0x37, 0x7, 0x9, @tick=0x5, {0x1, 0x8b}, {0x9}, @raw8={"c2ebca87a5fa93953e8ef923"}}], 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) 1m19.424202128s ago: executing program 0 (id=329): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chdir(&(0x7f0000000280)='./file0/file0/..\x00') write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}]}}) setxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440), 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r6, 0x29, 0xcf, 0x0, &(0x7f0000000100)) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc004ae02, &(0x7f0000000040)={0x400000000000026a}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0xffff0006}, 0x8) modify_ldt$write(0x1, &(0x7f0000000300)={0x7, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000040)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='block_bio_remap\x00', r0, 0x0, 0x3}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1m19.241395372s ago: executing program 0 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0xa}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@OVL_FILEID_V1={0x18, 0x300fb, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547"}}}, 0x830200) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000280)={[&(0x7f0000000040)=':\x00', &(0x7f0000000180)='#!\x00', &(0x7f00000001c0)='nfs_export=on', &(0x7f0000000200)='nfs_export=on', &(0x7f0000000240)='^)\x00']}, &(0x7f00000003c0)={[&(0x7f00000002c0)='\x00']}) 1m15.975955216s ago: executing program 0 (id=354): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4048040) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 1m15.887794861s ago: executing program 32 (id=354): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4048040) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 36.74253391s ago: executing program 1 (id=922): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 36.680022567s ago: executing program 1 (id=924): r0 = fsmount(0xffffffffffffffff, 0x0, 0x70) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x8, @link='syz1\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x40090) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x6d}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x801) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000003c0)={0x7, r1, 'id0\x00'}) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@newqdisc={0xc8, 0x24, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x4}, {0xb, 0xf}, {0xa, 0x9}}, [@q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x100}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x36}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffe}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x24008041) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000740), 0x40000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2d683166}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x834}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x45) r6 = socket$netlink(0x10, 0x3, 0x15) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000008c0)={0x1, 0x0, [{0x80000008, 0x7, 0xdd, 0xc1, 0xffffff60}]}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000900)={0x2e, 0x6, 0x0, {0x3, 0x4, 0x5, 0x0, 'syz1\x00'}}, 0x2e) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000a40)={0x4, 0x5a}) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000ac0)=[r7, r8, r7, r0, r0, r3], 0x6) socket$igmp(0x2, 0x3, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r1) sendmsg$NL80211_CMD_DEL_MPATH(r9, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r10, 0xa7e5ff6efc9b15b4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x430, 0x180, 0x0, 0x218, 0x218, 0x180, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, &(0x7f0000000c80), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0xff, 0x0, 'veth0_macvtap\x00', 'ip_vti0\x00', {0xff}, {}, 0x5c}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}, {{@ip={@local, @multicast2, 0xff, 0xff, 'vxcan1\x00', 'batadv0\x00', {0xff}, {0xff}, 0x92, 0x1, 0x10}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000011c0), 0x1, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000001200)={0x4, 0x7}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r11, 0x29, 0x45, &(0x7f0000001240)={'HL\x00'}, &(0x7f0000001280)=0x1e) 36.620913064s ago: executing program 1 (id=926): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff8) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) (async) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) close_range(r0, r0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 36.619842s ago: executing program 1 (id=927): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000002640)=0x7fff, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000b80)="1a816649d5bf265d732360c99fc72bbf", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x4004041) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xef}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x79, 0x0, 0x0, 0xe7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1}, 0x2}], 0x1, 0x10100, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 35.71001536s ago: executing program 1 (id=944): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b0400000000000000010065787468647200002c000280080004420000000208000740000000090800064000000001050002000000000008000340000022040900020073797a32000000000900010073797a30001100010000000000000000000000000a00000000000000"], 0x94}}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_tracing={0x1a, 0x12, &(0x7f00000008c0)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x16}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], &(0x7f00000007c0)='GPL\x00', 0x312f0252, 0x1b, &(0x7f0000000980)=""/27, 0x40f00, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0xa, 0x4}, 0x10, 0x2e58, 0xffffffffffffffff, 0x7, &(0x7f0000000ec0), &(0x7f0000000f00)=[{0x4, 0x2, 0x2, 0x9}, {0x4, 0x3, 0x3, 0x7}, {0x1, 0x2, 0x7, 0x4}, {0x1, 0x5, 0x1, 0x5}, {0x2, 0x1, 0x7, 0x5}, {0x2, 0x5, 0x0, 0x2}, {0x2, 0x4, 0x9}], 0x10, 0x7}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0xa}]}}}]}, 0x40}}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x4, 0x0}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r5, &(0x7f0000000300)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000400)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x74}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40}], &(0x7f0000000440)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x12, '\x00', r2, @fallback=0x2e, r3, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x3, 0x0, 0x9}, 0x10, r4, r5, 0x6, &(0x7f0000000600)=[r6, 0xffffffffffffffff, 0x1], &(0x7f0000000640)=[{0x1, 0x2, 0x1, 0xa}, {0x5, 0x4, 0x4, 0x4}, {0x5, 0x4, 0xc, 0x8}, {0x3, 0x3, 0x8, 0xe}, {0x3, 0x3, 0xb, 0x6}, {0x1, 0x1, 0xf, 0x9}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2, 0x989, 0x0, 0x10}, 0x9c) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000003380)) r9 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, &(0x7f00000001c0)={0x0, r9}) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f00000000c0)=0x1) write(r9, &(0x7f0000000000)="7a66c4160bb0bf24aeebf099ed3b1866f07d8cae438411db4aa9eb2cdb1590307a8a54e338226b4724866b70f32b284e9399abf12ce9b69d55b5545efd2f94e70d705b55519348c23d00b72aeb1acbb663d08a48858e8e9cd43c45786d34d7a5a54ef95ce038f1db2ab340477d", 0x6d) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000780)={'team0\x00', 0xe761}) 35.649548535s ago: executing program 1 (id=947): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002040)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f0000002140)=0xe8) (async) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000002180)={0x8, @empty, 0x4e20, 0x4, 'none\x00', 0x20, 0x5, 0x41}, 0x2c) (async) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000021c0)) (async, rerun: 64) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) (rerun: 64) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000002200)={0x6, 0x3, 0x6}) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002240)}, {&(0x7f0000002280)=""/115, 0x73}, {&(0x7f0000002300)=""/206, 0xce}, {&(0x7f0000002400)=""/161, 0xa1}, {&(0x7f00000024c0)=""/176, 0xb0}, {&(0x7f0000002580)=""/35, 0x23}, {&(0x7f00000025c0)=""/206, 0xce}], 0x7, &(0x7f0000002740)=""/239, 0xef}, 0x70a}], 0x1, 0x2002, &(0x7f0000002880)={0x77359400}) (async) ioctl$TCGETS(r3, 0x5401, &(0x7f00000028c0)) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002900)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$nl_route(r4, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)=@ipmr_getroute={0x1c, 0x1a, 0x200, 0x70bd26, 0x25dfdbfc, {0x80, 0x10, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x7, 0x800}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8804) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002a40), 0x2, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002a80)={0xb0, 0x0, 0x0, [{{0x5, 0x2, 0x9, 0x9, 0x1, 0xffff, {0x5, 0x3, 0x7, 0xed2a, 0x4, 0x9, 0x2, 0x2, 0x5855, 0x8000, 0xbc, r2, r0, 0x9, 0xe}}, {0x1, 0xc, 0x5, 0xfffffff8, 'none\x00'}}]}, 0xb0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000002b40)={'filter\x00', 0x4}, 0x68) (async, rerun: 64) write(r4, &(0x7f0000002bc0)="8732f4466e084ba37ca799e7bf4b42b727ea43f3dab2f7d2095aa35f6d9e90e76da4abf6193fd9a6f971b294d02d61a9cca0ddf4cd0e9c6eecdadafe21942f87c95f4d9b16745e2eaf37c6ad78ce293cdb142f80cc875c8813f21245ad6aa4d31a213b52306051383aae87720b047b297999afec3b1e487f7175", 0x7a) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000002c80)={'sit0\x00', &(0x7f0000002c40)={@multicast1, 0x1, 0x0, 0x30, 0x0, [{@empty}, {@broadcast}, {@multicast1}]}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000002cc0)) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000002ec0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f40), r4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002f80)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000003040)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x1c, r7, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000003080)={0x0, 0x2, 0x3, [0x8, 0x5, 0x7f]}, &(0x7f00000030c0)=0xe) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000003100)={r9, 0x24, "f7a1dc58416fd4c3cf4d070321857831e24a3cb2fb9072f1994398b878609c4619d0b502"}, &(0x7f0000003140)=0x2c) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000003180)={0x3}, 0x1) ioctl$TIOCSBRK(r4, 0x5427) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r10, &(0x7f0000003340)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x60, r11, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) (async) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x5) 20.625934283s ago: executing program 33 (id=947): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002040)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f0000002140)=0xe8) (async) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000002180)={0x8, @empty, 0x4e20, 0x4, 'none\x00', 0x20, 0x5, 0x41}, 0x2c) (async) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000021c0)) (async, rerun: 64) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) (rerun: 64) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000002200)={0x6, 0x3, 0x6}) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002240)}, {&(0x7f0000002280)=""/115, 0x73}, {&(0x7f0000002300)=""/206, 0xce}, {&(0x7f0000002400)=""/161, 0xa1}, {&(0x7f00000024c0)=""/176, 0xb0}, {&(0x7f0000002580)=""/35, 0x23}, {&(0x7f00000025c0)=""/206, 0xce}], 0x7, &(0x7f0000002740)=""/239, 0xef}, 0x70a}], 0x1, 0x2002, &(0x7f0000002880)={0x77359400}) (async) ioctl$TCGETS(r3, 0x5401, &(0x7f00000028c0)) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002900)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$nl_route(r4, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)=@ipmr_getroute={0x1c, 0x1a, 0x200, 0x70bd26, 0x25dfdbfc, {0x80, 0x10, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x7, 0x800}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8804) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002a40), 0x2, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002a80)={0xb0, 0x0, 0x0, [{{0x5, 0x2, 0x9, 0x9, 0x1, 0xffff, {0x5, 0x3, 0x7, 0xed2a, 0x4, 0x9, 0x2, 0x2, 0x5855, 0x8000, 0xbc, r2, r0, 0x9, 0xe}}, {0x1, 0xc, 0x5, 0xfffffff8, 'none\x00'}}]}, 0xb0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000002b40)={'filter\x00', 0x4}, 0x68) (async, rerun: 64) write(r4, &(0x7f0000002bc0)="8732f4466e084ba37ca799e7bf4b42b727ea43f3dab2f7d2095aa35f6d9e90e76da4abf6193fd9a6f971b294d02d61a9cca0ddf4cd0e9c6eecdadafe21942f87c95f4d9b16745e2eaf37c6ad78ce293cdb142f80cc875c8813f21245ad6aa4d31a213b52306051383aae87720b047b297999afec3b1e487f7175", 0x7a) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000002c80)={'sit0\x00', &(0x7f0000002c40)={@multicast1, 0x1, 0x0, 0x30, 0x0, [{@empty}, {@broadcast}, {@multicast1}]}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000002cc0)) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000002ec0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f40), r4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002f80)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000003040)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x1c, r7, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000003080)={0x0, 0x2, 0x3, [0x8, 0x5, 0x7f]}, &(0x7f00000030c0)=0xe) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000003100)={r9, 0x24, "f7a1dc58416fd4c3cf4d070321857831e24a3cb2fb9072f1994398b878609c4619d0b502"}, &(0x7f0000003140)=0x2c) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000003180)={0x3}, 0x1) ioctl$TIOCSBRK(r4, 0x5427) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r10, &(0x7f0000003340)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x60, r11, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) (async) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x5) 2.369930256s ago: executing program 3 (id=1423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.790218218s ago: executing program 2 (id=1436): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xea\xf2\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\xb05\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x866\xedpm\xccr\xd1\x16\xd7\xbd\x1b\x18\xe9+.6\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq'}, {0x20, 'cgroup.stat\x00'}, {0x20, '-,%\']\'\xb7'}, {0x20, '\x00x\xca)n\xd5\x01\x00\x00\x00\x00'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d5bf33639adc46109626b2ed71cd479ebddcbfda19e0e6ca9eb13d38b474591444d6d8cd2a19a6fac0ffe438fdc3ea98cb85e6c5efde436c765f41a756412d3e1313b12b8fe28392a16247bf698245c9a62a81049f9fb454ee5b079d185fb5fed191ccb57c7e6bc776ac44449b547d9638178ee672c8294fea94754c20d5f3a19cfd9b8c36883323e8b625e517fcb8b12"}, 0x180) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000200300"}}) 1.790013188s ago: executing program 2 (id=1437): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000228bd700000000000ac1e0901000000000000000000000000ac1414aa0000000000000000000000004e230000000020000a0000002b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000000000100000000320000002001000000000000000000000000000100000000000000000000000000000000080000000000000001000000010000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff1ff624f4fcffffff0000000027bd700001000000020000020000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.682146967s ago: executing program 2 (id=1438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000100)="b9ff0307684426", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000140)={0x6, 0x0, @ioapic={0x0, 0x9fc, 0x0, 0x8000, 0x0, [{0x4, 0x8, 0xc7, '\x00', 0x81}, {0x4, 0x4, 0x4, '\x00', 0xc}, {0x1, 0x8, 0xf0, '\x00', 0xd}, {0x4, 0xe, 0x6, '\x00', 0x1f}, {0xf, 0xff, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0xb, 0x6, 0x8, '\x00', 0x4c}, {0x6, 0x6, 0x9, '\x00', 0x1}, {0x2, 0x8, 0x40, '\x00', 0x6}, {0x9, 0x1, 0x1, '\x00', 0x3}, {0x7f, 0x9, 0xff, '\x00', 0x2c}, {0x6, 0x1, 0x6, '\x00', 0x7f}, {0x5, 0x7, 0x7, '\x00', 0x2}, {0x7, 0x10, 0x5, '\x00', 0x9}, {0x2, 0x8, 0x4c, '\x00', 0x7}, {0xe, 0x5, 0x4}, {0x4, 0x2, 0x4f, '\x00', 0xb}, {0x5, 0x4, 0x2, '\x00', 0x40}, {0x2, 0x6, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x12, '\x00', 0x8}, {0x2, 0x2, 0x99, '\x00', 0x85}, {0x6, 0x8, 0x9b, '\x00', 0x4}, {0x7e, 0x3, 0x7d, '\x00', 0xd3}, {0x0, 0x8, 0x38, '\x00', 0x5}]}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05075a0c"], 0x8) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x16a}, &(0x7f0000002000), &(0x7f0000000440)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_enter(r4, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) 1.51157586s ago: executing program 2 (id=1439): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x106, 0x1, @buffer={0x0, 0x47, &(0x7f0000000040)=""/71}, &(0x7f0000000180)="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", 0x0, 0x10, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xfcc, &(0x7f0000000240)={@link_local, @dev, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@mpls_uc={0x8847, {[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x10, 0xfba, 0x68, 0x0, 0x7e, 0x11, 0x0, @loopback, @empty}, {0x4e24, 0x4e23, 0xfa6, 0x0, @opaque="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"}}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha384-avx)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x2000c885) accept4$alg(r4, 0x0, 0x0, 0x80800) listen(r2, 0x7fffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xb, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0xfffffffc, 0x10000, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0xffffffff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xb, @empty=0x4000000}]}, {0x4}, {0xc}, {0xffffffffffffff1a}}}]}]}, 0x70}}, 0x0) 1.34118091s ago: executing program 2 (id=1441): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x40) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x2, 0x2, 0x9}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x4, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000600)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x4}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x6, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, &(0x7f0000000180), &(0x7f00000006c0), &(0x7f0000000580)=[r9], &(0x7f0000000040)}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x48, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f00000001c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r12}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000380)={0x1, 0x1, &(0x7f0000000440)=[r12], &(0x7f0000000200), &(0x7f00000000c0)=[r13], &(0x7f0000000040), 0x0, 0x300}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000007c0)={0x600, 0x1, &(0x7f0000000080)=[0x0], &(0x7f00000000c0), &(0x7f0000000740)=[0x0, r3, 0x0, r9, r6, 0x0, r7, r9, r13], &(0x7f0000000780)=[0x7fff, 0xcd65], 0x0, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x1, 0x4105, 0x6}) 1.270979281s ago: executing program 3 (id=1443): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001200)={0x18, 0xef9, 0x1}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r1, 0xffffffffffffffff, 0x400000000000000) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048004}, 0x4000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r5, 0x101, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x4804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x18) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x2c80, 0x0) r7 = socket$kcm(0x2, 0x3, 0x106) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_CHANINFO(r8, 0x80306403, &(0x7f0000000280)={0x2, &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) sendmsg$inet(r7, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="b5fa4fc5061100ffffff970386", 0xfdef}], 0x1}, 0x0) r9 = socket(0x2, 0x80805, 0x0) r10 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) r12 = socket(0x10, 0x803, 0x0) fstat(r12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r13, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r9, 0x1, 0x2b, &(0x7f0000000380)=0xbf9f, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) 1.270770759s ago: executing program 2 (id=1444): syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100109054433d83ef8530549090212000100000400090484000003e10200"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) 1.192215583s ago: executing program 3 (id=1445): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xea\xf2\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\xb05\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x866\xedpm\xccr\xd1\x16\xd7\xbd\x1b\x18\xe9+.6\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq'}, {0x20, 'cgroup.stat\x00'}, {0x20, '-,%\']\'\xb7'}, {0x20, '\x00x\xca)n\xd5\x01\x00\x00\x00\x00'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d5bf33639adc46109626b2ed71cd479ebddcbfda19e0e6ca9eb13d38b474591444d6d8cd2a19a6fac0ffe438fdc3ea98cb85e6c5efde436c765f41a756412d3e1313b12b8fe28392a16247bf698245c9a62a81049f9fb454ee5b079d185fb5fed191ccb57c7e6bc776ac44449b547d9638178ee672c8294fea94754c20d5f3a19cfd9b8c36883323e8b625e517fcb8b12"}, 0x180) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd00fffb0300"}}) 1.191715733s ago: executing program 3 (id=1446): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (async) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xffffff7f, 0x0, 0x3, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000240)=0xfffffffd, 0x0, 0x4) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x400caed0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x2}) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000080)) (async) r9 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r9, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r9, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) (async, rerun: 32) bind$rds(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687d", 0x4}], 0x1}}], 0x1, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) (async) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x20054050) 971.281803ms ago: executing program 3 (id=1447): r0 = socket(0x27, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x9}, {0xa, 0xffff}, {0x0, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x90b}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40002}, 0x441c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2fa, 0xf5fa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8045}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340), &(0x7f0000000380)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x100000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, 0x0, 0x0}, 0x20) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35b", 0x6) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 530.628133ms ago: executing program 4 (id=1454): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x8001}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7fff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008014}, 0x24000040) write(r0, &(0x7f00000006c0)="38cd4a84c5", 0x5) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x49}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x25, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r6) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0504000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x88, r7, 0x60e, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x81}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8000000000000000}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r6) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x240080}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)={0x58, r10, 0x3, 0x70bd2a, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008010}, 0x4000001) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060064680000080008000000000008000b0073"], 0x54}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@gettfilter={0x6c, 0x2e, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r16, {0x1, 0x10}, {0xe, 0x4}, {0x3, 0xc}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5000000}, {0x8, 0xb, 0x2c1c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) 430.647948ms ago: executing program 4 (id=1457): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2b70026, &(0x7f00000000c0)=ANY=[@ANYBLOB="44410c43664313bbd7afe06e1e9351db1a5b95380ef59c1cbbf166fa68e22203c44ccfda77ddc9d22da61bd6b4d2a9e7", @ANYRES16=r2]) 371.392718ms ago: executing program 5 (id=1458): r0 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0x2, &(0x7f00000000c0)={0x4, 0x2400000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r2 = syz_io_uring_setup(0x288b, &(0x7f0000000080)={0x0, 0x0, 0x13181, 0x42, 0x2b2}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r2, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fchmod(r0, 0x3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r5, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x110, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5f7, 0x47}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040101}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={r5}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098423fedc676c6774ab0e6a72bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5267c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18da58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdc41357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa29486aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39bc5ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49985e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fca77a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a26900000000726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2dbc86f97115ff0a364b70f96918e6ed354c97e59ea5e2c7b149cd51d7c85a27ac658e78b99326857858df0ac0ee240cbb6ee9d9ee6c2c2ff7c29dd25fd337dc08bddeb50305ed48b9f5d89c55ffedde29ce0412ea8e2c976f961eb0c4966d2a8be0b657a5e51048a8a10005c488e1f637ce208a35b5aed0c2067465191dc42ebf6e4853cc89998bdf2ef755f38a3cd985b62df36a5ebc3b47df32423ee46857f9db9d756ff69ecd4ef2f307dcaefd4a1f399543952df972269c28200df8ebacad4eed1c00b9ce9841799bea583cafdeaa8d4a371a8ae55d8ffe4846833985975d8b234adff63eace9d2c4d1680c370827ebe1831ef311077607e8c4920506e03528861085dcfdb918f1efe91420c390fbca0a38377e1635c402ec1c34eddae986ffa8756b27f6c340907bae99f4a6b328fca8177b4dfaceea5ad3ceb901dbcefc15ded322bece4e750969e81935764ebe88749464af7e692e3d324c519b456013daae93bd63215540380a7fe08f0e050cdeb25db2a8b9b6f5720ad1e7d2c5b6d609712eccd321d6211fb642a4cdf72504aabd017a9b4827d1e0e0264435a5e1045dbe33834968d2db503972995559b1efe1b9ce475405118346b63f637b1abf8e8374e7100d6b41c9c672d2b244c7a82ffb882522efd9e903fc69db14c469685780005843856c6623591f305d383eae55a1a1d5619dfff0027413f26fa6a793a348ba8b192e1b088745a2175d55517a75d4b63cce41cc0dcaca9002cd37a1ccc6710ba2a099297b0824f976919e8abf3b1510b1305a95241fefbd036afa9d4538affc82f005d29b9f2c0e60d6c20f673b8ca28cb088e1e89efe334f25ffe1a3fb3581e5aa63b9a4a49f269b5538788aacbbc04d49902ae2af1f59d2484ab6ba7a9b477be0d92e221fc48cdbc00bef7125bfe36f9afb1cbd58fef21625ec99ffd2e35fb00767e3f22dba7d36163203cfaf1860a8b1afe0d878ea00fe08f68fd592a6395fb357acbdc2834c8ac85571527dbf1dbaaccede3d583e2b9bf076737716785f44aebc7ba917fb426d5541adff1e75836ab70fb0b43565ab5e24c5902879f31701cc006b4ee2f57be0916cf0b6cd489c4fa9129031a4af75a00048f20eb962f0c6f68cda0d7756a4e83f7d065c4a00b8263d95f6b979507b7ca01735e83a5e5ff0b76f077ef6e4c1150f9202b5311a231b76111d48a387e09075edb2448fb19d2869ae420ada8ee7577fe980ed7e057dc963c0a98db790bb5b7920220f8a55213b6530637b832abdf3c6fefdefb712a2c2c9eba8087ce39335ddabdadb86f493061e593981c6b2d70b4bac3b58885787c46f85c1022f5ff6cec16ba227aa5dac2e0be30522c08369f18d170b9cb454f3ebf86d1e923fdd65245d8e0c476bfedddcb772453f4d0e70d059e79b8811c379c9eff6e45d99f81186930b32b24cdcb906a41fe29c147ed834b37e77800a33c15e65d121ee85a924ef6bbc1c8f4a423fbc5d14645a08178227f4c7f111fa318823a6c075ddf9e131c9bca8d56dec4a68fbab9a0c1a128880d8b4dec59b89ec33c19eb76f09f31ad730cba735b60deba54c399119949e45af4de5c758281945fe6b6a25ac1cd57a81b48f11a6575e79b82e529d4ba1b2a1175cfa03ef6d149b165195fa64736b302e28ee6444368fb395a2d89c8747348b546a07ed0306682971539f0031d88ffa020d0b3d40369e0a3d2238293a75a155eb5c0749f64ed37a9af5be26d5a4322a55a23c33d176280bd0e4c5168f2e66bca925304d0f32074f5e68d7c43f9e2e3f14a6bcf3e77e6b71737131c3e90208072e37c8a6cad1cabd756aa694e85b86256ce13b43541a26438374b6029ee461d223ed34ed1e9a3e580cec7b2b41bc9823b3729e683f079a498636d022799dd94c5e870b6aa7f3d36fb51ffb6c5e317fcde6b5ae45073f8e90ee0fc1fa0641ff6f0b789dcc6df2fe9a3b5e6ed9d2be3403f5af96e7c6019b0a0ce4f8342323638a52c121956de068069fe5c44946b5023e1db7742fec29cb749bcdc09d795b683c553dbae1298540b2cf1bc3e5e52adf252bca47ba2182c80541daf1d11b1c67675171e69c1abe3c0bc3a0f2d1a6e2165ca1647c394970a404a6002621a258cef01e2ca12a138888dace9ad06d2f0c0209f286c11b289626aa557cc201560651054a6042e84c6fc5e345e2f702d61851fed5ffa36ade652f76db815dabb7b8eee016ea0836d0086f2a2f7bd1c4a4ceb1d706817b41347a891c34b45eb06a9ecb19041d5a39f050cb0413662dc4700385fac2e1823e1ce4d08c66692fde0862a057f2aa2425d511735fff53d0e3d88bfb245e7724ba4ba8452e469862d333dad5c63bfa778809c043132db3a57e122d0495441f7a07034a3ac1024b8fc063694d8316c29639cb6605ff362a853f976c763f6d10e4e0972760e60f08acdd8a73607e7311819fe24ad8b670bbf0adede086f91bd0839ce37927f43a263e3e8369932db9ab786ba66e1bba664bfa8aa50d98ed18fc90e560933c2e8da72757a4539756740a73c41180cf97fde47cf3e9e6005302459d831eea7a03157e0c3178776e4d4add3999b9a1efca7c99b8234ff9d33492431dd9bd0814301ee49260e30b8b6afc46ce8a733bc9d7850c789e5e98cdefbfb11131a85bc24e75453a16c6780ab4229b985d1fe7a255f71cfe18398e881d493ded88300b54f6c4a5567fd84a6e1f11835433448a00420ab1b3a49fcc0e9938da52b68f9409c94a0de61f0beb69532c4f7a11fae6a9ffd10db7de01e3272448b517ad795a06f3fef8148b7196cb81a80aed42e395c1ac346dd27f9bce87661e19f957a17d54d59b68e023c1516ae9ba4d75f18d4b8fc7e9fe6f74e38597b0e520000000000"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "263170b5cd05e6fc471e6a6d47c441262cc5a6bea4536de48f876bb3e18f2770592169ec48ed1eb2ab7f45d3d09f256c9df523648002907bd759f9b49046b49bbf690528ee245a9984bfb6b549cbc0cc10c70b8822c02fdbdb97b1eac5040be1d4810de8d03036886825e1707f605ad694187e989b1028fe859e75495455b24efcb7edecd7ec594b754487807288227b9f8d4d50cefb31adfc2cbf174b21cbd848f97bb3938b8634f2d009f49a1b7c21c834007aba0ae45a160b137906d131353ff1c29b4a2e25bd592a32dd283d538bbaafcb2f39cfc886ee844e580c527b6e251428c7f49b0f8aa2787c9a664db867c35b5443e512f6cec18cfb353b47e0e040488f44d5e628feb3cc3f19d8ad4039e092abdc46e7013c6b84260c014c82f25f9a8bae6daf139eb3b415876f78a86746b45763ee3f9f805a92b2e2089630b1ecefc435a089df8e7062595f2278ed8d2f88e761281eef63081cedd34a3b6c9a70f3cf21e12822aa96b868829dcaea9bbc9741d06ca535984fc0795c6d5b1e6bd529d993b8e6f758ba1816d8a8dd8bb723d1e082832c23c122ed608d8f047957ec5158b253c9807649609a19042ac21bed5d6b06604cb4fe91160345fd8afdc2855e82be5165164fb58344d5df35b88b44ed301430604d842124bda146cf109c7d2a00443ea3cc8482c52bd81f20a11a1bce3a74a2ff26d1982717f1ee8d9e6c8c927b80901440041bc53e8ab6b832787d7c9ff002ba1671936365e75aa54fde03d25d8c55ecf2b7cf651542933085ca86da84b46a6559154486ac5f087b7b54f3f24fd2ff3c8f08b7bcb23aa06f73ca6257bec8b06e0f91131845a026c10414be9f3db4660f1b3682738a35978b62986017b273754f0db231026b4912c53b44bd268389bd8b58e017959349fc93c7ba61f88d5a964862cfb1b3cda61e5c784b2028f9cfa7ddc5a781d9a2a9594fd1891ff7da7b7382a55b0dfa4b5f1e0f0c979dfa463c3696d51c23728683a5586191da03f61dce79639cee2bcd982a9183b44231da08018aacc3c9a8a52f29684ab029ca7bcf406f51c8b042dc77faeaf8e9139682cd00283319a1a21cb20d6aae66a18c0c358b756f57102e3f455be7ed71694018e91e28786f9bc6418e25ad300a8dce02975c1e73e03b1ebd21950e9fabdeafa2785079f0fc8ec12013acc0e23faf473634e4f50a5095b3f2ed81814fb313f29b94afd96cc35d52311d4e66fbe5a66a7c849c674b86bba8808c821a7ec133ecc61f2389eec0664689dbc1ba2c81f9148972c95d0cb272c9779be02c44b4aa252e2ee375d6d2310a12ef1e0ce9a7d4088922ee9640cec46facece5c5ea427dee19bca3952c3c13767de82909abc92edecab3e16c2f24dd9dcef4dec3c336bab497ae04c6d11db505037575b649a68622b45d35244bceb129363434a3bf3602827dce99c0e59b294a5ce1a2bc06e5467e9de31ab426c42fa5e7193d0a2d33c5234a5e9ba2c425db54041e7a1472315f9a5449496cad9a945967875d3549ad348e12403b28a3f6a666f7dc423629ba7a18244477764b8923a6b30fa04a2d6ed22ac8c64924fa2616d43da8a5b3f9cc30b2e29e4fc64b0027c33a8bc39d45feb704f7d2708f1f1bebd0eb13bd08e4049cb7a130847d9e334613a591563d0e207448e689ae5866c36f2503180b53f7a70b68eede9df307e9eb77aa39b12320a84711bdf03109cdc2414fa44478475e4b5a2f628e0cb0475e3e7ebf8fad644d69efb268883e394c46b971e6ca87a67e242f480f2ef7679583d182ab21d2ee026acf80f25b3afacccda853d38f84052cdf2edcfdf0513e1cf39574aa7af1ae53a3e08dbad47aefd14a37b6288c719e9c0737bb4119d7fe3eb350a8ec2fb0fec9b4633aa256d3f52f76423a8891f0a7e67378af5d53af8cf1543883def1c73a1f3c51fde6246dab90ec2b3f59c07a4eb1cefbdf60533cb97c0a555519998f9325630d489b00c6c736e6c768515f38f3a7d3cdb99c54f0e46f5a3aa9f280225cb3c3b33e2ff2aa757a2df467265252397dbd68aa7dca7fb9a8fb77611385995a070a99a7fc9db80ab7653c1c94f9a0ad09c713c39559587d8f886bc2db265ef6099138204e8517fa71aea4c75a8149dae6467d792431e54aecbf0f300dc7f6cc5a28495d77f3a4cd39c78de472ca2ebc95d67258a2e0f27bc9903c5540b9546f47aacd4898a0857e7b2f69125dd4839d788181aa409c40a914afe805aa075035d557bcce6a45e0a81cf3b8541e62e6f9a54fd71797d87b1fc4e0a0786fbd34b0dee8f5f57ef71495271b9f946480adcd2066bbefe000d99470bf92125996cba78276f1463dfbf501de575e597394ad02c484fe6291e56d7362ca402ff0af9582a1dc61dffad77d94da15c1328634b64b172edcd782a769f5fe9dd3a777c69d80a84fe83071c6ef7ae0becfb509b938932738bc7c454b63030ade2877a85897e5abc0cb0a9606e877987b5856d5992f43fba549d950d302b62db8c14a59b0bf58fb5a8f6402d3894c0e5be41348181aee736590383b14e7abb7253e381d24ee4e64dde82f48d3e9bf3e0be0e099b800b3bba1d92fd6a451cddcb9ae29a20b39d1066834e9337ed58defcd20cfd032adce59049fcbfc62ac762bed756475f150e86374cfc973d2d247ec6c347308f4c2618f0dc5f3e5cf363088bd90490f552f017000f376c35af0aadfa776ba9eca3567afb932325f14fa34b42f004b88249276b727bea1b865db9deaa405c9c1e1567cf6198cbf33aa646fe81398a0234d6fd687682bc2fcf052f9e129dd2d68f1154e4ea32e4984ad806b843513e94e994c5df73580587c0c1399ead2477ad7e04c3eb8787a685f86eb58d2d3254bd7f7f5e206aee379cbfa497ce32120e79cacea3c1663050c2f818d324786bcf799e27322f80d0c8cd6f41e9e10f441d331bea07e89a1507947aacdbc07f8af0944f3c228b5ee9ec27b808108aaebe61f1884e1581b19c9c14cfffe2e96c7fe07f6a36116bea130e63db9d1e82fa4ade6bfd6cc72a9654d9bd829c1752d5d640a0b5d555d936b4eb160f2cfee1d92f3a783f2ab33120404045ac7ad20c2ee000abe6b889d7840bd16276d831fae6e1e37c68e3f567934859f7e8a1d7486f6923565ec0f0bb6473f8b8a87a8fd20d11b903c42570bc2d584c2b8743c36c3339998c53fe96b457aae5ec3e38f877dfc9c11e2f597123eea7f75642a0138296c63ed1b1a58753fdc1bc56e9405ab808d420c11e286662034ef471ab7c997ae392c928cff9476d31ffb6df1173bc6b0d1769b5bb58952d839f7297d396bea2bc8a37db8e18236857218e9f5a000a255363baaae8ecd13fcb7a5cb7a3dcadbb96a44e17aa7e8e42ca565d81c31134746b1b5726d86db9d2ba54ce70c7cf2ee0c1df212c3a705154693248ca6b80a5b2d2d101face58c2c01e5382a6b0f1b71f95764f910b7dcdeb2e791f3d17a967d536fbc590f5d3785ff25b6e9039dd1f910fe5782ac9658b2284b7b720cb2fe2569485721422adff4daec78c8491bd1b7534fd38c9030b91b66b280636a2e2edb01f99a4851f77249803fae628dc42f17ab10735338a196507819876a196af3c31a80e95907a8d98c1fa34c03d9073429f9ef63ca753ca48256722ed171f8e43189c4887b35ba481823538b80a304008960fc2f6dd0db0d065eebd3e1fbc4b342cb78075cf5334ae2bd70cbebbc1aecd89a4b1941599207990d453488ed9a246788a3a75a447fb41865b9d8ad5ed928ac29bad4ad7f7a13b29149445cdc4e5024acdd15088a64268fb7960c6c3674741153dd3755126e0d411aa0a7b4abed17c65ddf767c7df110f8f77ba9def3d0a82c445177b3fd7074f6262f0cf4a2d585019dbee516587808021776e7539bce272b82cd53637e9887725f289ed9bb1909ef4a46f7567f3c64cb1f6ab6da2a174ff0c9010358b4da94ea893d55d5d011e3dd86c94839e278f80f84feb905f437df79b9acb64e4516b390d45f2fd68a810554fa147fa00dcc486758da35e645ae2ea865225c4dbb1e268e93d2b24e64328c7e86fc0e126267ee4bf0de60380cfdfddcaf2e6523764ea889bfd836397fc2c56c65dd572a24dff827cefd8d4f40b732d3a1b5353359d8f587376127c9c499a0d97e9f552f6208cceceb8972c19547387bec505acdea0c9bab01cf80020d3717ca488e87e6e3df810af9bf6c22f176c8d130a1c0f12466d53c9d5d54c50f0717efdefac3e53ad90e9f9c7217187195c3911f90d0a8be5e8e4f953b038e0ca529555992ecff480bc4895798530ae8d68a0246ae40070d5c1a16b2b15e8855c195a260865b13b6eb5f941040265973a20af4dcdd4cf4d03a2a215bff70c5b8f25c48c211cdf978240b8e7d4c2778f15c3858a4cda110d1c6e8ae19d83ea015748930a1ff6bae442d67a6cd41354012944a388ff95046b4f8b7676577487aa200c0175d99886dcb50dbc72c0bdc0f41b4ebbf5bc9a8cd67c9624f9afccfff4725e9bb9729306beda2f119dbc2e2cacec52300d6ae0d250b700e2bd7bf6b6d86498a03f3f4ad500134ef581ccdbb3d1cf90fb11562d0e078eb788f4f2e485abd15dd5175d7fc0570d87f3bf6750ab29f37b441aab2a7435f4d8ba0e9e0cff366c1b9706e34985a0ce4ed46e5a2a8390381b77d3391e7fe6e564ddf2aff4cfef7009de8e2bd2bbdf91e5412925b8f5258feeedaf4d73a59842be186c31c34c92ef8a3a7b2c1f4a46dd93c419843530c94e01ede1516744c9100976bb61b25e391fa4b829f9c24204c35910819d0b369b765655332a5582088d918f1e323170551f672d002d73332beac073c651e7d3cb1817a7ac313e7cd847ee0af275ce267914609e6d3db6ab59aaf30ba2ad0e214ad76cd4edef476eb89133084eb8e1147fd5a44a9fde4c06f8df9bcfe0938f8776b83263a315918249fa9beae3153073bffe265758f6d8cf4c07112468ddc7e8911efe97e06aa0a55de6560b69d1d3fce4c3f1132e1ffe10a4b2c3a77295ba1653b9e3da6c1c9028367a890ef1666a4b5701a4b000cbb77cbdef060469f96213d75c0d1cd8aa3ae5024ce5af26fe6219f5970eeccd4b8bc743292cb7df8db34a65ef289c237836ab202fc28d27d9bd260b2bd3678710216bd575689ef030a260eb91cfd9131dfa3327c674b44b97859082a4c07c5da8eb80e0be86e28310a7d8ba75beb4eae4ecc046ce9ce633cd6e3352f0ec93c8b910c60f2900c5efc4ed5d4c3c99faeb475eb3b7c825e4a926870f88936a76e4e4aa2bb19f1bafdc620ce24dc4792d3a34d2b75684560217651b39a782c9b83d3bac7e3747a71ebb90d6348efeba1c13f373af4bd22c0ad425cdcc5aefbaa80a83616f8f7cf7e3c7980e80d947040e7e1ee24ec7a5a58123795c927afc6a2319b6e1903b85601adbdd1a3c1ae80cc6162dc9cf0b65780b075e8f0de53521146a586a81e29a30a50677999c1d70eb1987f7bfb1cc2bd33b45ec8ce9b671863f8f7d0de7796f0420e7525d5d5e16a3b690959008414a535b3ee50091d0e5605e04f5d9d9d50d079dea049cab2071827fc9d14e73c3aed6e314566d4ab834b029e10a3f239dda92a66a690e378154eeddf53ffde9e608afbc37a223266cf0e4c3e4ad89538700d8a781b45d1285eef89da14a66a2b9531e29d21de251f1a4e1895aad67fe9216f81c63ff48e651cf2a65e97bb884b62552a98479b74f48ff9d1759ca9edd4a3eedceb7e2571893c7b4989741e229f0c2700000000"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$tun(r8, &(0x7f0000000280)={@val={0x0, 0x8809}, @val={0x2, 0x3, 0xfffc, 0x9, 0x1, 0x8}, @llc={@llc={0x80, 0x2, "b9"}}}, 0x11) r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000200)=0x1, 0x4) 370.324216ms ago: executing program 4 (id=1459): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="0e000000", @ANYRES16=r1, @ANYBLOB="01002dbd70041a0000002b0000000a0001007770616e310000000c0005"], 0x2c}}, 0xc8) 310.819887ms ago: executing program 4 (id=1460): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async, rerun: 64) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x0, &(0x7f0000f4d000/0x1000)=nil, 0x0) (async) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async, rerun: 32) munmap(&(0x7f0000f62000/0x1000)=nil, 0x1000) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000eb0000/0x3000)=nil, 0x3000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x3) (async, rerun: 64) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x1, "072b20d017bbf2bd1632992e8c5c357cb8507e8dfa0a347a2852e54a4b71ab3a", 0x1, 0x1, 0x100, 0xff06ff, 0x8}) (async) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) mremap(&(0x7f0000e65000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000c8d000/0x1000)=nil) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)) (async) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000280)={0x29, 0x2}) write$binfmt_elf32(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3, 0x0, 0x3, 0x0, 0x2, 0x6, 0x10, 0x301, 0x38, 0xffffffff, 0xf, 0x0, 0x20, 0x3f, 0x4, 0x0, 0x4}}, 0x58) (async, rerun: 64) close(r2) (rerun: 64) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)=@v2={0x2000000, [{0x7a, 0x7f}, {0x809, 0x9}]}, 0x14, 0x3) 310.156774ms ago: executing program 5 (id=1461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 309.511561ms ago: executing program 4 (id=1462): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40345410, &(0x7f00000004c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x80605414, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xfc8}}, [0x12, 0x7, 0x6, 0x4, 0x4, 0x4, 0x7, 0x8000, 0x8000, 0x0, 0x4, 0x1000, 0x7f, 0x11, 0x7f]}, &(0x7f0000000280)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={r2, 0x9}, 0x8) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) sendto$inet6(r3, &(0x7f0000000480)="e9521ce1df0ff33cfe575a5db502889e6c0ad5606ca6f556b549d03daef42924ee6843f98832917e29adad34ef46d24cb7d65cf3a570e0c0c7489719da58c63ebf17886349876fa4242638e0c766cae853a0f9bc0374820a1baaf870604bfcd0bb9453346b99e8842b1320acd3887d8135248eabae69573d7690d4e89b20b5c697cb9aa292e1a708cbf3ce33d580fb722d3d8b8c68506470ab0c754a525f9001c6be4c62c0c42bb1cd15a26e6c13dff5e2ceb037043a676416f5629391af2f7fac03a59824879922d9a6371b701db5e31dc3c3fd966726ab904f7ca6004721eb73dd3d3f3c7030c7b0d7b1f4544624d774d9cf7c310210b49676e9a9db5f19d124", 0x101, 0x4000010, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmsg(r3, &(0x7f0000000300)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xe5da}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000040)={0x0, 0x56595559, 0x2, @stepwise={0x8, 0x8, 0x7ff, 0x4, 0xaeae, 0x84a}}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000400)={0x2e, @multicast2, 0x4e22, 0x20003, 'sh\x00', 0x2b, 0x4, 0x6d}, 0x2c) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x16, 0x24048841, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/153, 0x99}, 0x9}], 0x1, 0x40002041, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x12000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x8) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r9, 0x800448d2, &(0x7f0000000240)={0x2, &(0x7f0000001380)=[{}, {@none}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r10, 0x0, 0x0, 0x800) 181.595819ms ago: executing program 5 (id=1463): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x90) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x90) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000300)={0x9, 0x3fe, 0xfffffffd, 0xe, 0x3, "04ae080000000000007800000500080100", 0x4, 0x203}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) cachestat(r0, &(0x7f0000000000)={0x4, 0x5}, &(0x7f00000000c0), 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36104001a0038001d004231a0e69ee581ffffffffffffff00a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407163ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) (async) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) write$eventfd(r4, &(0x7f00000001c0)=0x7, 0x8) eventfd2(0x6, 0x180801) (async) r5 = eventfd2(0x6, 0x180801) read$eventfd(r5, &(0x7f0000000040), 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x1000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x0, 0x401, 0x3}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd2d, 0x70bd2b, 0x70bd2a, 0xa5d}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) 121.487821ms ago: executing program 4 (id=1464): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x8}}}}}}, 0x0) 120.209028ms ago: executing program 5 (id=1465): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xea\xf2\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\xb05\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x866\xedpm\xccr\xd1\x16\xd7\xbd\x1b\x18\xe9+.6\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq'}, {0x20, 'cgroup.stat\x00'}, {0x20, '-,%\']\'\xb7'}, {0x20, '\x00x\xca)n\xd5\x01\x00\x00\x00\x00'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d5bf33639adc46109626b2ed71cd479ebddcbfda19e0e6ca9eb13d38b474591444d6d8cd2a19a6fac0ffe438fdc3ea98cb85e6c5efde436c765f41a756412d3e1313b12b8fe28392a16247bf698245c9a62a81049f9fb454ee5b079d185fb5fed191ccb57c7e6bc776ac44449b547d9638178ee672c8294fea94754c20d5f3a19cfd9b8c36883323e8b625e517fcb8b12"}, 0x180) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd00fbff0300"}}) 119.85703ms ago: executing program 3 (id=1466): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x155000, 0x0) (async) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000080)={0x0, r1}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0xdd, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9909d4, 0x100, '\x00', @value64=0x1}}) (async) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x8000000) (async) syz_emit_ethernet(0x7e, &(0x7f0000000180)={@broadcast, @broadcast, @void, {@mpls_mc={0x8848, {[{0x9, 0x0, 0x1}], @ipv6=@tipc_packet={0x8, 0x6, ',2\b', 0x44, 0x6, 0xff, @mcast2, @remote, {[@routing={0x73, 0x4, 0x1, 0x58, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}]}], @payload_conn={{{0x1c, 0x0, 0x0, 0x1, 0x1, 0x6, 0x2, 0x2, 0x562, 0x0, 0x2, 0x2, 0x7, 0x0, 0xfeb3, 0x3, 0x4, 0x4e23, 0x4e22}}, [0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) (async) r3 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x15805516bc3c2b99) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000240)={0x6, 0x1000000000000, 0x9, 0x80000000, 0x3, 0xffff, "eae56f7efa4c42709dad998de2f3b745", 0x1, 0xf3, 0x2, 0x3, 0x3, 0x8, 0x30}) (async) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000280)='\xff\xff\xff\xff\xff\xff') (async) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) r4 = socket(0xf, 0x3, 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000002c0)) (async) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x0, @win={{0x10001, 0x1, 0xd, 0xfffffff8}, 0x5, 0x3ff, &(0x7f0000000300)={{0xfec, 0xffff4ba6, 0x3, 0x3}}, 0x7aa, &(0x7f0000000340)="36a93813b43e309b949ddf1c4decc9d6d768699ce4168f3be9fe4378d7b78af54e207ff93578630778f29d1770681d1b5b9a8dedfa1ea5b295ad977527dc07bf81fe54ade3a742872bbab2018f1b9c0ac4c86acd271421b812d81ed1f39124e3bb465a2ead64ae662991b9662484ca9b6027b3c2cab956aa5f38", 0xa}}) (async) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f00000004c0)='\xff\xff\xff\xff\xff\xff') (async) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000500)=0x9, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540)={0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000005c0)={r5, 0x2, r6, 0x2}) (async, rerun: 32) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) (rerun: 32) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000600)={0x1, 0x8}) close(r7) read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002680)={0x50, 0x0, r8, {0x7, 0x2b, 0xfffffff9, 0xffffffff80400000, 0x1, 0x3ff, 0xf12, 0xffffffff, 0x0, 0x0, 0x1, 0x4}}, 0x50) (async) r9 = accept4(r2, &(0x7f0000002700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000002780)=0x80, 0x1000) readv(r9, &(0x7f00000037c0)=[{&(0x7f00000027c0)=""/4096, 0x1000}], 0x1) (async) syz_extract_tcp_res$synack(&(0x7f0000003800), 0x1, 0x0) (async) readv(r1, &(0x7f00000048c0)=[{&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/120, 0x78}], 0x2) socket(0x22, 0x800, 0x1) (async) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r10, 0x4b6c, &(0x7f0000004d00)={0x7c, 0x0, &(0x7f0000004900)="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"}) 51.569204ms ago: executing program 5 (id=1467): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414"], 0x1c) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000200)={@private0, 0x0}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x9c}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x2, 0x3, 0x6, 0x8, 0xfffffbff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x7f, &(0x7f00000003c0)=""/127, 0x41100, 0x2, '\x00', r5, 0x25, r2, 0x8, &(0x7f0000000340)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[r2], &(0x7f0000000600)=[{0x5, 0x2, 0x7, 0x4}, {0x4, 0x5, 0xb, 0x2}, {0x4, 0x1, 0xa, 0x7}, {0x0, 0x2, 0x2, 0x5}, {0x0, 0x1, 0xf, 0x8}, {0x1, 0x3, 0xc, 0xa}, {0x1, 0x1, 0x2, 0xc}], 0x10, 0x5}, 0x94) accept$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000740)=0x1c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000040)="6e038511e57ff79b7ea4f5a47cbd66a6a2da0ff42f6a44334fcc388bfded412036efb5a9077f2fe710546d0a8a785565854d955d0e7737ab811a1882fa2b1b1e3f18675ffe9d2ce27d8e1c353e546e19fddf31bd8cd7b33bff797e71443ed0efd5feef82e6f57e083cb673") 0s ago: executing program 5 (id=1468): creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ftruncate(r4, 0x5) sendfile(r3, r4, 0x0, 0x7ffff000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet(0x2, 0x1, 0x100) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x460000) (async) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x460000) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="fae8f68bc424dab7f2afc42177c140c855ba1a504737997365f246b733fa203d737dc53f0b3c6aefb8a3699b559b09da6c6f41051409a8ae0af338403f98daf16e9d09f41f59bf27ef0995da7e3d4149a6ab6ca1b75a621363569793f8f1fc61cc02d3693d7fe33c46f7793e376df7d0f696a0d47a4b7b657816f8ddafe258d14c5c3591a4ce4bfb7ecbb13467c0d48896198afe274161cb7e117701ac624b7e17a21fca5538e31091ead47c", 0xac}, {&(0x7f0000000340)="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", 0x1000}], 0x2) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c561f067f58000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x4d}, {&(0x7f0000000240)="de57367299109d8bc9a223bc19bc7c254606fda5582de35180e3dc6c49d39fdb3756d71c8c7e14d01756d85b43aea28def780df2cbc0d737aa28058bd85252848879828feac8404fb66619cfe7f1f4d4f6a28fff1d78a3819c9151ae169af1edca2c0f09790eeb6ec1045ad57a0efe35b054015832384932c13f2d7dd8bc5733bd9c0060e4faf2bf40d9e881ad1164d1a054eb617b19f2a4cd95ae4168353b05fc9679a81f5ce0f7346006e28761130d3661a165acb682b9b5408960d5019efe9a4c161c5670d0b3c1af050b22498006be3b43cbae0190", 0xd7}], 0x2) (async) writev(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c561f067f58000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x4d}, {&(0x7f0000000240)="de57367299109d8bc9a223bc19bc7c254606fda5582de35180e3dc6c49d39fdb3756d71c8c7e14d01756d85b43aea28def780df2cbc0d737aa28058bd85252848879828feac8404fb66619cfe7f1f4d4f6a28fff1d78a3819c9151ae169af1edca2c0f09790eeb6ec1045ad57a0efe35b054015832384932c13f2d7dd8bc5733bd9c0060e4faf2bf40d9e881ad1164d1a054eb617b19f2a4cd95ae4168353b05fc9679a81f5ce0f7346006e28761130d3661a165acb682b9b5408960d5019efe9a4c161c5670d0b3c1af050b22498006be3b43cbae0190", 0xd7}], 0x2) kernel console output (not intermixed with test programs): .0004: unexpected long global item [ 101.593517][ T6009] hid-generic 7FFF:0000:0046.0004: probe with driver hid-generic failed with error -22 [ 101.679007][ T7821] Bluetooth: MGMT ver 1.23 [ 101.906680][ T40] audit: type=1400 audit(1754353872.929:539): avc: denied { execute_no_trans } for pid=7829 comm="syz.4.487" path="/40/file0" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.967951][ T40] audit: type=1400 audit(1754353872.989:540): avc: denied { ioctl } for pid=7834 comm="syz.1.489" path="socket:[18174]" dev="sockfs" ino=18174 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 102.028113][ T7840] XFS (nbd4): SB validate failed with error -5. [ 102.190043][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.221666][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 102.378040][ T7869] SELinux: syz.3.498 (7869) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 102.669218][ T40] audit: type=1400 audit(1754353873.693:541): avc: denied { bind } for pid=7876 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.841314][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 102.841317][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 102.845566][ T7897] IPv6: sit1: Disabled Multicast RS [ 102.846439][ T7897] sit1: entered allmulticast mode [ 102.907657][ T7899] ata1.00: invalid multi_count 128 ignored [ 102.957641][ T1107] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 102.960440][ T1107] ata1: failed to read log page 10h (errno=-5) [ 103.096555][ T40] audit: type=1400 audit(1754353874.110:542): avc: denied { read } for pid=7907 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.107480][ T7910] xt_hashlimit: size too large, truncated to 1048576 [ 103.114825][ T40] audit: type=1400 audit(1754353874.130:543): avc: denied { write } for pid=7909 comm="syz.4.506" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 103.115343][ T7910] syz.4.506: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 103.133072][ T7910] CPU: 3 UID: 0 PID: 7910 Comm: syz.4.506 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 103.133098][ T7910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.133109][ T7910] Call Trace: [ 103.133116][ T7910] [ 103.133123][ T7910] dump_stack_lvl+0x16c/0x1f0 [ 103.133167][ T7910] warn_alloc+0x248/0x3a0 [ 103.133196][ T7910] ? __pfx_warn_alloc+0x10/0x10 [ 103.133232][ T7910] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 103.133252][ T7910] ? __vmalloc_node_noprof+0xad/0xf0 [ 103.133281][ T7910] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 103.133313][ T7910] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 103.133335][ T7910] ? __lock_acquire+0x622/0x1c90 [ 103.133353][ T7910] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.133377][ T7910] ? __alloc_pages_noprof+0xb/0x1b0 [ 103.133392][ T7910] ? ___kmalloc_large_node+0x84/0x1e0 [ 103.133420][ T7910] __kvmalloc_node_noprof+0x30a/0x620 [ 103.133446][ T7910] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 103.133465][ T7910] ? net_generic+0xea/0x2a0 [ 103.133480][ T7910] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 103.133504][ T7910] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 103.133521][ T7910] hashlimit_mt_check_common+0x8bb/0x1460 [ 103.133546][ T7910] hashlimit_mt_check+0x71/0x90 [ 103.133562][ T7910] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 103.133580][ T7910] xt_check_match+0x283/0xa50 [ 103.133597][ T7910] ? __schedule+0x1ed2/0x5dd0 [ 103.133617][ T7910] ? __pfx_xt_check_match+0x10/0x10 [ 103.133637][ T7910] ? xt_find_target+0x1f2/0x290 [ 103.133666][ T7910] ? xt_find_match+0x1f6/0x290 [ 103.133699][ T7910] find_check_entry.constprop.0+0x34e/0xa20 [ 103.133724][ T7910] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 103.133750][ T7910] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.133775][ T7910] ? kfree+0x2b4/0x4d0 [ 103.133797][ T7910] ? translate_table+0xc0e/0x17b0 [ 103.133818][ T7910] translate_table+0xd0b/0x17b0 [ 103.133846][ T7910] ? __pfx_translate_table+0x10/0x10 [ 103.133871][ T7910] do_ip6t_set_ctl+0x570/0xb00 [ 103.133888][ T7910] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 103.133920][ T7910] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 103.133940][ T7910] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.133980][ T7910] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 103.134008][ T7910] nf_setsockopt+0x8a/0xf0 [ 103.134035][ T7910] ipv6_setsockopt+0x135/0x170 [ 103.134080][ T7910] rawv6_setsockopt+0xc2/0x510 [ 103.134105][ T7910] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 103.134129][ T7910] ? selinux_socket_setsockopt+0x6a/0x80 [ 103.134161][ T7910] ? sock_common_setsockopt+0x2e/0xf0 [ 103.134187][ T7910] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 103.134215][ T7910] do_sock_setsockopt+0xf3/0x1d0 [ 103.134243][ T7910] __sys_setsockopt+0x1a0/0x230 [ 103.134264][ T7910] __x64_sys_setsockopt+0xbd/0x160 [ 103.134284][ T7910] ? do_syscall_64+0x91/0x4c0 [ 103.134304][ T7910] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.134324][ T7910] do_syscall_64+0xcd/0x4c0 [ 103.134347][ T7910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.134366][ T7910] RIP: 0033:0x7f8ad2d8e9a9 [ 103.134380][ T7910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.134396][ T7910] RSP: 002b:00007f8ad3b7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.134413][ T7910] RAX: ffffffffffffffda RBX: 00007f8ad2fb5fa0 RCX: 00007f8ad2d8e9a9 [ 103.134424][ T7910] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 103.134434][ T7910] RBP: 00007f8ad2e10d69 R08: 0000000000000588 R09: 0000000000000000 [ 103.134444][ T7910] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 103.134454][ T7910] R13: 0000000000000000 R14: 00007f8ad2fb5fa0 R15: 00007ffff08f1e28 [ 103.134478][ T7910] [ 103.134523][ T7910] Mem-Info: [ 103.285464][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.290446][ T7910] active_anon:25289 inactive_anon:0 isolated_anon:0 [ 103.290446][ T7910] active_file:14999 inactive_file:41306 isolated_file:0 [ 103.290446][ T7910] unevictable:1768 dirty:35 writeback:0 [ 103.290446][ T7910] slab_reclaimable:11765 slab_unreclaimable:72422 [ 103.290446][ T7910] mapped:24571 shmem:18758 pagetables:1071 [ 103.290446][ T7910] sec_pagetables:298 bounce:0 [ 103.290446][ T7910] kernel_misc_reclaimable:0 [ 103.290446][ T7910] free:433356 free_pcp:15424 free_cma:0 [ 103.307231][ T7910] Node 0 active_anon:101148kB inactive_anon:0kB active_file:56504kB inactive_file:165024kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98284kB dirty:140kB writeback:0kB shmem:71496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14512kB pagetables:4104kB sec_pagetables:1192kB all_unreclaimable? yes Balloon:0kB [ 103.322404][ T7910] Node 1 active_anon:8kB inactive_anon:0kB active_file:3492kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 103.336460][ T7910] Node 0 DMA free:14472kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:220kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:44kB local_pcp:16kB free_cma:0kB [ 103.349214][ T7910] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 103.351686][ T7910] Node 0 DMA32 free:129088kB boost:6144kB min:33660kB low:40536kB high:47412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:101048kB inactive_anon:0kB active_file:56284kB inactive_file:165024kB unevictable:3536kB writepending:140kB present:2080628kB managed:1263964kB mlocked:0kB bounce:0kB free_pcp:34948kB local_pcp:9772kB free_cma:0kB [ 103.368808][ T7910] lowmem_reserve[]: 0 0 0 0 0 [ 103.370911][ T7910] Node 1 Normal free:1589832kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:3492kB inactive_file:200kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:27288kB local_pcp:9956kB free_cma:0kB [ 103.373636][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'. [ 103.387535][ T7910] lowmem_reserve[]: 0 0 0 0 0 [ 103.392431][ T7910] Node 0 DMA: 24*4kB (UM) 21*8kB (UME) 16*16kB (UME) 22*32kB (UME) 11*64kB (UM) 12*128kB (UME) 9*256kB (UME) 3*512kB (UME) 3*1024kB (ME) 2*2048kB (UM) 0*4096kB = 14472kB [ 103.400019][ T7910] Node 0 DMA32: 1050*4kB (UME) 39*8kB (UME) 102*16kB (UME) 660*32kB (UME) 234*64kB (UME) 52*128kB (UM) 36*256kB (UME) 32*512kB (M) 24*1024kB (ME) 11*2048kB (UME) 2*4096kB (U) = 129792kB [ 103.407397][ T7910] Node 1 Normal: 28*4kB (ME) 38*8kB (UME) 41*16kB (UME) 113*32kB (UME) 50*64kB (UME) 13*128kB (UME) 6*256kB (UME) 7*512kB (ME) 4*1024kB (ME) 1*2048kB (U) 383*4096kB (M) = 1589584kB [ 103.415041][ T7910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.419156][ T7910] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.422967][ T7910] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.427163][ T7910] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.429813][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'. [ 103.433589][ T7910] 75061 total pagecache pages [ 103.436634][ T7910] 0 pages in swap cache [ 103.438279][ T7910] Free swap = 124996kB [ 103.440330][ T7910] Total swap = 124996kB [ 103.442151][ T7910] 1048443 pages RAM [ 103.443774][ T7910] 0 pages HighMem/MovableOnly [ 103.445621][ T7910] 283123 pages reserved [ 103.447299][ T7910] 0 pages cma reserved [ 103.499405][ T7928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.503272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.507207][ T7928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.511085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.515927][ T7928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.520440][ T40] audit: type=1400 audit(1754353874.537:544): avc: denied { getopt } for pid=7930 comm="syz.4.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.520717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.605455][ T7941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.627517][ T7946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.516'. [ 103.655079][ T40] audit: type=1400 audit(1754353874.676:545): avc: denied { write } for pid=7948 comm="syz.1.517" path="socket:[19044]" dev="sockfs" ino=19044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 103.678892][ T40] audit: type=1400 audit(1754353874.696:546): avc: denied { bind } for pid=7950 comm="syz.4.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 103.682270][ T7951] netlink: 'syz.4.518': attribute type 10 has an invalid length. [ 103.691000][ T7951] syz_tun: entered promiscuous mode [ 103.700510][ T7951] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 103.898342][ T7969] slcan: can't register candev [ 103.906573][ T7969] Falling back ldisc for ptm0. [ 104.139402][ T7987] input: syz1 as /devices/virtual/input/input10 [ 104.178897][ T7987] devpts: Bad value for 'max' [ 104.195099][ T7991] netlink: 'syz.3.531': attribute type 2 has an invalid length. [ 104.202789][ T7993] netlink: 'syz.3.531': attribute type 2 has an invalid length. [ 104.229600][ T7996] loop8: detected capacity change from 0 to 8 [ 104.233477][ T7996] Dev loop8: unable to read RDB block 8 [ 104.238711][ T7996] loop8: unable to read partition table [ 104.242635][ T7996] loop8: partition table beyond EOD, truncated [ 104.245420][ T7996] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 104.401439][ T8009] input: syz0 as /devices/virtual/input/input11 [ 104.521301][ T8000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.533970][ T8000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.541899][ T8015] process 'syz.3.540' launched './file0' with NULL argv: empty string added [ 104.555937][ T8000] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 104.562199][ T8000] bond0 (unregistering): Released all slaves [ 104.632910][ T8024] loop8: detected capacity change from 0 to 8 [ 104.636018][ T8024] Dev loop8: unable to read RDB block 8 [ 104.638681][ T8024] loop8: unable to read partition table [ 104.642532][ T8024] loop8: partition table beyond EOD, truncated [ 104.644967][ T8024] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 104.730953][ T8032] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 104.959839][ T8047] SELinux: failed to load policy [ 105.131649][ T8064] loop8: detected capacity change from 0 to 8 [ 105.135018][ T8064] Dev loop8: unable to read RDB block 8 [ 105.138463][ T8064] loop8: unable to read partition table [ 105.144884][ T8064] loop8: partition table beyond EOD, truncated [ 105.149457][ T8064] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 105.294572][ T8076] netlink: 'syz.4.556': attribute type 6 has an invalid length. [ 105.298324][ T8076] __nla_validate_parse: 4 callbacks suppressed [ 105.298339][ T8076] netlink: 36 bytes leftover after parsing attributes in process `syz.4.556'. [ 105.308879][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.313523][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.330855][ T8078] netlink: 44 bytes leftover after parsing attributes in process `syz.1.558'. [ 105.587143][ T8093] syz_tun: refused to change device tx_queue_len [ 105.820915][ T8116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.889758][ T8118] overlayfs: failed to resolve './file1': -2 [ 105.911836][ T8125] tipc: Failed to remove unknown binding: 66,1,1/0:2416178397/2416178399 [ 105.923044][ T8125] tipc: Failed to remove unknown binding: 66,1,1/0:2416178397/2416178399 [ 105.927139][ T8125] tipc: Failed to remove unknown binding: 66,1,1/0:2416178397/2416178399 [ 105.969557][ T8127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.575'. [ 106.460131][ T34] net_ratelimit: 5 callbacks suppressed [ 106.460148][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.172888][ T8133] netlink: 60 bytes leftover after parsing attributes in process `syz.2.576'. [ 107.179161][ T8147] netlink: 52 bytes leftover after parsing attributes in process `syz.4.579'. [ 107.184993][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 107.286046][ T8163] trusted_key: encrypted_key: insufficient parameters specified [ 107.324701][ T8171] pim6reg1: entered promiscuous mode [ 107.327138][ T8171] pim6reg1: entered allmulticast mode [ 107.493120][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'. [ 107.504516][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.528531][ T8187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.592'. [ 107.532294][ T8187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.592'. [ 107.556946][ T8183] overlay: ./file1 is not a directory [ 107.632086][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 107.632101][ T40] audit: type=1400 audit(1754353878.622:567): avc: denied { ioctl } for pid=8194 comm="syz.1.594" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 107.670798][ T8200] netlink: 'syz.2.596': attribute type 1 has an invalid length. [ 107.674505][ T8200] netlink: 'syz.2.596': attribute type 3 has an invalid length. [ 107.678445][ T8200] netlink: 224 bytes leftover after parsing attributes in process `syz.2.596'. [ 107.682410][ T8200] NCSI netlink: No device for ifindex 0 [ 107.763478][ T40] audit: type=1400 audit(1754353878.751:568): avc: denied { map } for pid=8203 comm="syz.4.598" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 107.776065][ T40] audit: type=1400 audit(1754353878.751:569): avc: denied { execute } for pid=8203 comm="syz.4.598" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 107.955944][ C2] ata1: illegal qc_active transition (00000000->04000000) [ 107.966233][ T40] audit: type=1400 audit(1754353878.950:570): avc: denied { setattr } for pid=8220 comm="syz.2.603" path="/dev/net/tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 108.155151][ T8226] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 108.175780][ T8226] cramfs: wrong magic [ 108.223742][ T8230] BIDI support in bsg has been removed. [ 108.283295][ T1107] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 108.290620][ T1107] ata1.00: configured for UDMA/100 [ 108.399987][ T8245] xt_cgroup: path and classid specified [ 108.541349][ T8249] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20004 [ 108.550464][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.688260][ T8260] loop8: detected capacity change from 0 to 8 [ 108.698528][ T8260] Dev loop8: unable to read RDB block 8 [ 108.702299][ T8260] loop8: unable to read partition table [ 108.704935][ T8260] loop8: partition table beyond EOD, truncated [ 108.712565][ T8260] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 108.747637][ T8264] tipc: Enabling of bearer rejected, failed to enable media [ 108.752204][ T8264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=8264 comm=syz.1.618 [ 108.757923][ T8264] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 108.791181][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.977928][ T8268] /dev/sr0: Can't open blockdev [ 109.034905][ T40] audit: type=1400 audit(1754353880.024:571): avc: denied { mounton } for pid=8274 comm="syz.1.621" path="/162/file0" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 109.082683][ T8280] binder: 8279:8280 ioctl c0306201 200000000080 returned -22 [ 109.090724][ T8281] binder: 8279:8281 ioctl c0306201 200000000080 returned -22 [ 109.103177][ T8280] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=108 sclass=netlink_tcpdiag_socket pid=8280 comm=syz.3.622 [ 109.195145][ T8283] CUSE: unknown device info "" [ 109.197552][ T8283] CUSE: zero length info key specified [ 109.250674][ T8283] 9pnet: Could not find request transport: v [ 109.279137][ T40] audit: type=1326 audit(1754353880.263:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.3.625" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ffc0000 [ 109.302392][ T40] audit: type=1326 audit(1754353880.263:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.3.625" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ffc0000 [ 109.324085][ T40] audit: type=1326 audit(1754353880.263:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.3.625" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ffc0000 [ 109.353918][ T40] audit: type=1326 audit(1754353880.263:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.3.625" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ffc0000 [ 109.367607][ T40] audit: type=1326 audit(1754353880.263:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.3.625" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ffc0000 [ 109.430105][ T8295] cgroup: Need name or subsystem set [ 109.542413][ T8298] netlink: 'syz.2.629': attribute type 4 has an invalid length. [ 109.607196][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.617060][ T8308] bond0: entered allmulticast mode [ 109.619083][ T8308] bond_slave_0: entered allmulticast mode [ 109.621032][ T8308] bond_slave_1: entered allmulticast mode [ 109.687316][ T8322] SELinux: Context system_u:object_r:system_dbusd_var_lib_t:s0 is not valid (left unmapped). [ 109.773478][ T8330] loop8: detected capacity change from 0 to 8 [ 109.780093][ T8330] Dev loop8: unable to read RDB block 8 [ 109.782281][ T8330] loop8: unable to read partition table [ 109.784598][ T8330] loop8: partition table beyond EOD, truncated [ 109.788028][ T8330] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 110.304114][ T8381] loop8: detected capacity change from 0 to 79 [ 110.389038][ T8381] loop8: detected capacity change from 79 to 78 [ 110.651066][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.897201][ T8416] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=59924 sclass=netlink_tcpdiag_socket pid=8416 comm=syz.4.664 [ 110.941678][ T8421] program syz.1.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.092401][ T8425] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 111.218542][ T8447] __nla_validate_parse: 7 callbacks suppressed [ 111.218560][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 111.232539][ T8447] netlink: 'syz.3.674': attribute type 19 has an invalid length. [ 111.251630][ T8447] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.255528][ T8447] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.259407][ T8447] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.263490][ T8447] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.266068][ T8448] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 111.271119][ T8448] overlayfs: failed to set xattr on upper [ 111.275146][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 111.276373][ T8448] overlayfs: ...falling back to redirect_dir=nofollow. [ 111.279190][ T8455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.279273][ T8447] netlink: 'syz.3.674': attribute type 19 has an invalid length. [ 111.282082][ T8448] overlayfs: ...falling back to index=off. [ 111.285908][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.290167][ T8448] overlayfs: ...falling back to uuid=null. [ 111.294846][ T8450] sctp: [Deprecated]: syz.4.676 (pid 8450) Use of int in max_burst socket option deprecated. [ 111.294846][ T8450] Use struct sctp_assoc_value instead [ 111.318296][ T8448] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 111.368647][ T8461] @: renamed from vlan0 (while UP) [ 111.391790][ T8463] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 111.435322][ T8463] tipc: Enabled bearer , priority 10 [ 111.514575][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 111.684629][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.757662][ T8499] __vm_enough_memory: pid: 8499, comm: syz.4.691, bytes: 21200023838720 not enough memory for the allocation [ 111.854516][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.868147][ T8507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.876653][ T8507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.889287][ T8507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.893728][ T8507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.898392][ T8507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.904583][ T8507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.908233][ T8507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.911568][ T8507] program syz.2.694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.178669][ T8523] tipc: Started in network mode [ 112.180720][ T8523] tipc: Node identity 3eb27bc280ca, cluster identity 4711 [ 112.183781][ T8523] tipc: Enabled bearer , priority 0 [ 112.187679][ T8521] vlan0: entered promiscuous mode [ 112.217567][ T8523] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 112.248989][ T8523] tipc: Resetting bearer [ 112.385933][ T8521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.699'. [ 112.461540][ T6009] tipc: Node number set to 1584567748 [ 112.613901][ T8529] random: crng reseeded on system resumption [ 112.691327][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.899893][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 112.899911][ T40] audit: type=1326 audit(1754353883.867:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8542 comm="syz.3.707" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x0 [ 113.069044][ T8556] CUSE: unknown device info "" [ 113.071267][ T8556] CUSE: zero length info key specified [ 113.119711][ T8556] 9pnet: Could not find request transport: v [ 113.230739][ T1331] tipc: Node number set to 3195567042 [ 113.417365][ T40] audit: type=1400 audit(1754353884.385:637): avc: denied { ioctl } for pid=8570 comm="syz.1.715" path="socket:[23652]" dev="sockfs" ino=23652 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.719319][ T8523] tipc: Disabling bearer [ 113.769262][ T8574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.773456][ T8574] IPv6: NLM_F_CREATE should be set when creating new route [ 113.776806][ T8574] IPv6: NLM_F_CREATE should be set when creating new route [ 113.790046][ T8574] 9pnet_fd: p9_fd_create_unix (8574): problem connecting socket: éq‰Y’3aK: -91 [ 113.791559][ T40] audit: type=1400 audit(1754353884.754:638): avc: denied { mounton } for pid=8573 comm="syz.2.716" path=2F3138392FE91F7189591E9233614B dev="tmpfs" ino=1042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 113.795790][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.716'. [ 113.803678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.814072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.817489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.818290][ T40] audit: type=1400 audit(1754353884.764:639): avc: denied { create } for pid=8573 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 113.821461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.829189][ T40] audit: type=1400 audit(1754353884.764:640): avc: denied { write } for pid=8573 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 113.833702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 113.872997][ T40] audit: type=1400 audit(1754353884.834:641): avc: denied { read } for pid=8583 comm="syz.4.719" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 113.885741][ T8586] tipc: Enabled bearer , priority 0 [ 113.888976][ T40] audit: type=1400 audit(1754353884.834:642): avc: denied { open } for pid=8583 comm="syz.4.719" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 113.902503][ T40] audit: type=1400 audit(1754353884.854:643): avc: denied { ioctl } for pid=8583 comm="syz.4.719" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 113.924001][ T8582] tipc: Disabling bearer [ 113.941007][ T40] audit: type=1400 audit(1754353884.904:644): avc: denied { mounton } for pid=8588 comm="syz.2.721" path="/190/file0" dev="tmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 113.997031][ T40] audit: type=1400 audit(1754353884.963:645): avc: denied { mount } for pid=8588 comm="syz.2.721" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 114.024621][ T8606] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 114.031979][ T8606] netlink: 84 bytes leftover after parsing attributes in process `syz.4.726'. [ 114.040838][ T8604] netlink: 'syz.1.725': attribute type 2 has an invalid length. [ 114.221989][ T8619] ufs: You didn't specify the type of your ufs filesystem [ 114.221989][ T8619] [ 114.221989][ T8619] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 114.221989][ T8619] [ 114.221989][ T8619] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 114.238496][ T8619] ufs: failed to set blocksize [ 114.332247][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 114.341582][ T8630] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 114.346794][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 114.351028][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 114.358244][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 114.374577][ T8633] 9pnet: Could not find request transport: Ud [ 114.413481][ T8635] 9pnet: Could not find request transport: Ud [ 114.507276][ T8646] xt_SECMARK: invalid mode: 0 [ 114.588685][ T8653] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 114.593589][ T8653] qnx6: wrong signature (magic) in superblock #1. [ 114.596483][ T8653] qnx6: unable to read the first superblock [ 114.726567][ T1464] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 114.732861][ T8588] delete_channel: no stack [ 114.877254][ T1464] usb 6-1: device descriptor read/64, error -71 [ 115.127315][ T1464] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 115.141575][ T8690] random: crng reseeded on system resumption [ 115.181562][ T8689] SET target dimension over the limit! [ 115.184057][ T8689] SET target dimension over the limit! [ 115.186478][ T8689] SET target dimension over the limit! [ 115.189424][ T8689] SET target dimension over the limit! [ 115.191938][ T8689] SET target dimension over the limit! [ 115.194412][ T8689] SET target dimension over the limit! [ 115.196750][ T8689] SET target dimension over the limit! [ 115.202307][ T8689] SET target dimension over the limit! [ 115.258514][ T1464] usb 6-1: device descriptor read/64, error -71 [ 115.369720][ T1464] usb usb6-port1: attempt power cycle [ 115.659915][ T8708] mkiss: ax0: crc mode is auto. [ 115.709454][ T1464] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 115.730914][ T1464] usb 6-1: device descriptor read/8, error -71 [ 115.764903][ T8712] 9pnet_virtio: no channels available for device syz [ 115.850657][ T5972] IPVS: starting estimator thread 0... [ 115.950287][ T8717] IPVS: using max 42 ests per chain, 100800 per kthread [ 115.980315][ T1464] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 116.002358][ T1464] usb 6-1: device descriptor read/8, error -71 [ 116.122458][ T1464] usb usb6-port1: unable to enumerate USB device [ 116.390215][ T8737] sctp: [Deprecated]: syz.4.768 (pid 8737) Use of int in max_burst socket option. [ 116.390215][ T8737] Use struct sctp_assoc_value instead [ 116.468547][ T8739] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 116.985899][ T1464] net_ratelimit: 15 callbacks suppressed [ 116.985916][ T1464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.993456][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.179467][ T8760] bond0: (slave bond_slave_0): Releasing backup interface [ 117.189089][ T8760] bond0: (slave bond_slave_1): Releasing backup interface [ 117.209088][ T8760] team0: Port device team_slave_0 removed [ 117.220026][ T8760] team0: Port device team_slave_1 removed [ 117.223308][ T8760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.227909][ T8760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.232752][ T8760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.237083][ T8760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.263343][ T8761] vxcan1: entered promiscuous mode [ 117.273677][ T8760] netlink: 'syz.3.774': attribute type 10 has an invalid length. [ 117.289878][ T8760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.295485][ T8760] team0: Port device bond0 added [ 117.496705][ T8774] netlink: 'syz.3.778': attribute type 8 has an invalid length. [ 117.638287][ T8772] /dev/sg0: Can't lookup blockdev [ 117.887002][ T8808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.887297][ T8807] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 117.895497][ T8807] overlayfs: missing 'lowerdir' [ 117.900478][ T8808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.918294][ T8808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.923888][ T8808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.929701][ T8808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.933490][ T8808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.944255][ T8799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.956375][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.114936][ T8825] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.163900][ T8831] syz.1.794 (8831) used greatest stack depth: 20248 bytes left [ 118.211832][ T8836] SELinux: syz.1.795 (8836) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 118.367158][ T6051] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 118.462311][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 118.462326][ T40] audit: type=1400 audit(1754353889.409:651): avc: denied { watch watch_reads } for pid=8844 comm="syz.1.799" path="/dev/pts/2" dev="devpts" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 118.476246][ T8845] Bluetooth: hci4: Frame reassembly failed (-84) [ 118.478645][ T7599] Bluetooth: hci4: Frame reassembly failed (-84) [ 118.482069][ T7586] Bluetooth: hci4: Frame reassembly failed (-84) [ 118.508032][ T6051] usb 9-1: device descriptor read/64, error -71 [ 118.748832][ T6051] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 118.878663][ T6051] usb 9-1: device descriptor read/64, error -71 [ 119.005982][ T6051] usb usb9-port1: attempt power cycle [ 119.080832][ T8845] syz.1.799 (8845): drop_caches: 2 [ 119.361494][ T6051] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 119.390837][ T6051] usb 9-1: device descriptor read/8, error -71 [ 119.540219][ T8855] __nla_validate_parse: 64 callbacks suppressed [ 119.540237][ T8855] netlink: 112 bytes leftover after parsing attributes in process `syz.2.802'. [ 119.650604][ T6051] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 119.680935][ T6051] usb 9-1: device descriptor read/8, error -71 [ 119.760123][ T8859] tmpfs: Bad value for 'huge' [ 119.791220][ T6051] usb usb9-port1: unable to enumerate USB device [ 120.041119][ T40] audit: type=1400 audit(1754353890.985:652): avc: denied { listen } for pid=8865 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.049372][ T40] audit: type=1400 audit(1754353890.985:653): avc: denied { accept } for pid=8865 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.097351][ T40] audit: type=1400 audit(1754353891.045:654): avc: denied { ioctl } for pid=8865 comm="syz.2.806" path="socket:[24169]" dev="sockfs" ino=24169 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.098874][ T8867] netlink: 152 bytes leftover after parsing attributes in process `syz.2.806'. [ 120.513332][ T5974] Bluetooth: hci4: command 0x1003 tx timeout [ 120.513348][ T5965] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 120.774337][ T8874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.808'. [ 120.833596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.843441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.846202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.849266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.375523][ T8898] netlink: 164 bytes leftover after parsing attributes in process `syz.2.815'. [ 121.555214][ T5972] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 121.715397][ T5972] usb 9-1: Using ep0 maxpacket: 8 [ 121.720320][ T5972] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 121.735397][ T5972] usb 9-1: can't read configurations, error -61 [ 121.792809][ T40] audit: type=1400 audit(1754353892.731:655): avc: denied { map } for pid=8902 comm="syz.1.817" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 121.865724][ T5972] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 122.026157][ T5972] usb 9-1: Using ep0 maxpacket: 8 [ 122.031607][ T5972] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 122.035630][ T5972] usb 9-1: can't read configurations, error -61 [ 122.039703][ T5972] usb usb9-port1: attempt power cycle [ 122.196592][ T1464] net_ratelimit: 16 callbacks suppressed [ 122.196610][ T1464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.196624][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.386757][ T5972] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 122.407567][ T5972] usb 9-1: Using ep0 maxpacket: 8 [ 122.412296][ T5972] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 122.415624][ T5972] usb 9-1: can't read configurations, error -61 [ 122.415910][ T8915] bridge2: entered promiscuous mode [ 122.547135][ T5972] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 122.578345][ T5972] usb 9-1: Using ep0 maxpacket: 8 [ 122.582403][ T5972] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 122.585555][ T5972] usb 9-1: can't read configurations, error -61 [ 122.590363][ T5972] usb usb9-port1: unable to enumerate USB device [ 122.759461][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.242030][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.255623][ T1464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.469154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.473115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.040658][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.282959][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.291125][ T1464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.428438][ T8957] random: crng reseeded on system resumption [ 124.564926][ T8969] macvlan2: entered promiscuous mode [ 124.568648][ T8971] xt_hashlimit: size too large, truncated to 1048576 [ 124.572868][ T8969] autofs: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 124.693787][ T1331] hid-generic 0000:0004:0009.0005: unknown main item tag 0x0 [ 124.696674][ T1331] hid-generic 0000:0004:0009.0005: unknown main item tag 0x0 [ 124.699459][ T1331] hid-generic 0000:0004:0009.0005: unknown main item tag 0x0 [ 124.711085][ T8978] binder: BINDER_SET_CONTEXT_MGR already set [ 124.713778][ T8978] binder: 8977:8978 ioctl 4018620d 200000000040 returned -16 [ 124.725737][ T1331] hid-generic 0000:0004:0009.0005: hidraw1: HID v0.04 Device [syz0] on syz1 [ 124.751984][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 124.789980][ T8981] fido_id[8981]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 124.802217][ T8983] tmpfs: User quota block hardlimit too large. [ 125.000870][ T9005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.852'. [ 125.052924][ T9005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9005 comm=syz.1.852 [ 125.058690][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 125.064627][ T9011] binder: BINDER_SET_CONTEXT_MGR already set [ 125.067361][ T9011] binder: 9010:9011 ioctl 4018620d 2000000001c0 returned -16 [ 125.106078][ T9014] tmpfs: Bad value for 'mpol' [ 125.124597][ T40] audit: type=1400 audit(1754353896.065:656): avc: denied { append } for pid=9010 comm="syz.2.854" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 125.226038][ T9022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.857'. [ 125.305805][ T40] audit: type=1326 audit(1754353896.244:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.3.860" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x0 [ 125.770271][ T40] audit: type=1400 audit(1754353896.704:658): avc: denied { map } for pid=9043 comm="syz.1.865" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.036157][ T40] audit: type=1400 audit(1754353896.973:659): avc: denied { remove_name } for pid=9052 comm="syz.1.869" name="file0" dev="9p" ino=37617736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.047690][ T40] audit: type=1400 audit(1754353896.973:660): avc: denied { unlink } for pid=9052 comm="syz.1.869" name="file0" dev="9p" ino=37617736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.057652][ T40] audit: type=1400 audit(1754353896.973:661): avc: denied { create } for pid=9052 comm="syz.1.869" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 126.138388][ T9055] bio_check_eod: 16 callbacks suppressed [ 126.138406][ T9055] syz.4.871: attempt to access beyond end of device [ 126.138406][ T9055] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 126.150139][ T9055] gfs2: error -5 reading superblock [ 126.199195][ T9059] netlink: 68 bytes leftover after parsing attributes in process `syz.3.872'. [ 126.508231][ T9065] 9pnet_fd: p9_fd_create_tcp (9065): problem connecting socket to 127.0.0.1 [ 126.645135][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.882'. [ 126.651031][ T9094] netlink: 'syz.3.882': attribute type 2 has an invalid length. [ 126.654307][ T9094] netlink: 'syz.3.882': attribute type 1 has an invalid length. [ 126.682624][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 126.773515][ T9101] IPVS: Unknown mcast interface: nicvf0 [ 126.812995][ T9108] input: syz1 as /devices/virtual/input/input12 [ 126.905279][ T9114] netlink: 48 bytes leftover after parsing attributes in process `syz.2.888'. [ 127.098427][ T9128] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 127.361173][ T9135] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 127.382929][ T9135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.392008][ T40] audit: type=1400 audit(1754353898.321:662): avc: denied { create } for pid=9134 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 127.406439][ T6880] net_ratelimit: 15 callbacks suppressed [ 127.406454][ T6880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.406461][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.421769][ T9135] bond1: (slave gretap2): making interface the new active one [ 127.425843][ T40] audit: type=1400 audit(1754353898.341:663): avc: denied { write } for pid=9134 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 127.425939][ T9135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.438584][ T9135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.442165][ T9135] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 127.485297][ T40] audit: type=1400 audit(1754353898.411:664): avc: denied { write } for pid=9134 comm="syz.2.898" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.500007][ T40] audit: type=1400 audit(1754353898.431:665): avc: denied { map } for pid=9142 comm="syz.4.901" path="/dev/full" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 127.545217][ T9145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.808168][ T9167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=9167 comm=syz.2.908 [ 128.127169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.131557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.313201][ T9189] qrtr: Invalid version 0 [ 128.447595][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.460196][ T6880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.489347][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.692889][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.024503][ T9218] netlink: 'syz.1.927': attribute type 13 has an invalid length. [ 129.077689][ T9218] gretap0: refused to change device tx_queue_len [ 129.216928][ T9222] netlink: 116 bytes leftover after parsing attributes in process `syz.2.929'. [ 129.577136][ T9248] 8021q: VLANs not supported on ip_vti0 [ 129.635048][ T9256] overlay: filesystem on ./bus not supported as upperdir [ 129.812369][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.943'. [ 129.831634][ T9270] netlink: 88 bytes leftover after parsing attributes in process `syz.1.944'. [ 129.842011][ T9270] veth1_macvtap: left promiscuous mode [ 129.844451][ T9270] macsec0: entered promiscuous mode [ 129.856303][ T9270] veth1_macvtap: entered promiscuous mode [ 129.859483][ T9270] macsec0: left promiscuous mode [ 129.955910][ T9278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9278 comm=syz.2.946 [ 129.969654][ T1331] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 129.995389][ T9282] NILFS (nbd2): device size too small [ 130.119892][ T1331] usb 9-1: Using ep0 maxpacket: 8 [ 130.124566][ T1331] usb 9-1: config 0 has no interfaces? [ 130.126919][ T1331] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.139610][ T1331] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.152660][ T1331] usb 9-1: config 0 descriptor?? [ 130.290983][ T9297] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 130.296882][ T9297] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 130.358692][ T9264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=9264 comm=syz.4.942 [ 130.366329][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 130.375144][ T1331] usb 9-1: USB disconnect, device number 10 [ 130.555345][ T9311] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 130.558130][ T9311] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 130.563584][ T9311] vhci_hcd vhci_hcd.0: Device attached [ 130.571307][ T9311] random: crng reseeded on system resumption [ 130.595164][ T9311] vhci_hcd vhci_hcd.0: port 0 already used [ 130.599822][ T9312] vhci_hcd: connection closed [ 130.602433][ T7558] vhci_hcd: stop threads [ 130.606087][ T7558] vhci_hcd: release socket [ 130.607925][ T7558] vhci_hcd: disconnect device [ 130.636261][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 130.974442][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 130.974458][ T40] audit: type=1400 audit(1754353901.906:671): avc: denied { relabelfrom } for pid=9319 comm="syz.4.959" name="" dev="pipefs" ino=27145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 132.196049][ T9341] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.200156][ T9341] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.209143][ T9341] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.213679][ T9341] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.263054][ T9341] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.267746][ T9341] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.272200][ T9341] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.276168][ T9341] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.291537][ T9346] dummy0: entered allmulticast mode [ 132.360786][ T9353] netlink: 40 bytes leftover after parsing attributes in process `syz.4.971'. [ 132.409418][ T40] audit: type=1326 audit(1754353903.334:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.3.972" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x0 [ 132.470790][ T9357] virtio-fs: tag not found [ 132.508876][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.972'. [ 132.618627][ T6009] net_ratelimit: 19 callbacks suppressed [ 132.618645][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.719597][ T40] audit: type=1400 audit(1754353903.644:673): avc: denied { create } for pid=9362 comm="syz.4.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 132.742633][ T40] audit: type=1400 audit(1754353903.644:674): avc: denied { ioctl } for pid=9362 comm="syz.4.974" path="socket:[26429]" dev="sockfs" ino=26429 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 132.759171][ T40] audit: type=1400 audit(1754353903.644:675): avc: denied { accept } for pid=9362 comm="syz.4.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 132.825180][ T40] audit: type=1400 audit(1754353903.754:676): avc: denied { setattr } for pid=9366 comm="syz.4.975" name="ALG" dev="sockfs" ino=27939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 132.993128][ T7558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.087031][ T9384] netlink: 32 bytes leftover after parsing attributes in process `syz.2.982'. [ 133.185833][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.415212][ T9413] netlink: 76 bytes leftover after parsing attributes in process `syz.2.988'. [ 133.421112][ T9415] input: syz1 as /devices/virtual/input/input13 [ 133.436552][ T9413] batman_adv: batadv0: Adding interface: ipvlan2 [ 133.439295][ T9413] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.449797][ T9413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.455141][ T9413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.459347][ T9413] batman_adv: batadv0: Interface activated: ipvlan2 [ 133.654750][ T9425] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 133.660323][ T40] audit: type=1400 audit(1754353904.583:678): avc: denied { connect } for pid=9424 comm="syz.2.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.669484][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.670539][ T40] audit: type=1400 audit(1754353904.583:677): avc: denied { connect } for pid=9424 comm="syz.2.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.680339][ T40] audit: type=1400 audit(1754353904.593:679): avc: denied { write } for pid=9424 comm="syz.2.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.723773][ T55] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 133.863940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.866806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.884117][ T55] usb 9-1: Using ep0 maxpacket: 8 [ 133.889468][ T55] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.893508][ T55] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.898241][ T55] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.902780][ T55] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.910025][ T55] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.914240][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.923459][ T55] usbtmc 9-1:16.0: bulk endpoints not found [ 134.116640][ T7558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.187700][ T9434] loop6: detected capacity change from 0 to 63 [ 134.192166][ T40] audit: type=1400 audit(1754353905.113:680): avc: denied { map } for pid=9433 comm="syz.2.995" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.193201][ T9434] buffer_io_error: 11 callbacks suppressed [ 134.193217][ T9434] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.214459][ T9434] Buffer I/O error on dev loop6, logical block 1, async page read [ 134.219995][ T9434] Buffer I/O error on dev loop6, logical block 2, async page read [ 134.223577][ T9434] Buffer I/O error on dev loop6, logical block 3, async page read [ 134.229413][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.233472][ T5978] Buffer I/O error on dev loop6, logical block 1, async page read [ 134.239434][ T5978] Buffer I/O error on dev loop6, logical block 2, async page read [ 134.243008][ T5978] Buffer I/O error on dev loop6, logical block 3, async page read [ 134.247281][ T9435] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.250005][ T9435] Buffer I/O error on dev loop6, logical block 1, async page read [ 134.297988][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.996'. [ 134.301082][ T9437] netlink: 192 bytes leftover after parsing attributes in process `syz.2.996'. [ 134.477888][ T9444] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 134.481170][ T9444] overlayfs: failed to set xattr on upper [ 134.483509][ T9444] overlayfs: ...falling back to redirect_dir=nofollow. [ 134.486310][ T9444] overlayfs: ...falling back to index=off. [ 134.488209][ T9444] overlayfs: ...falling back to uuid=null. [ 134.490576][ T9444] overlayfs: ...falling back to xino=off. [ 134.492961][ T9444] overlayfs: conflicting lowerdir path [ 134.500320][ T9446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9446 comm=syz.2.997 [ 134.507562][ T9446] overlayfs: conflicting options: userxattr,redirect_dir=on [ 134.514271][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.519311][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.554993][ T1025] usb 9-1: USB disconnect, device number 11 [ 134.616502][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.618073][ T9450] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 134.690408][ T9455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=9455 comm=syz.2.1000 [ 134.704932][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.848486][ T9469] netlink: 'syz.2.1005': attribute type 39 has an invalid length. [ 135.092385][ T9486] binder: 9485:9486 ioctl 400c620e 200000001580 returned -22 [ 135.531976][ T9512] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 135.758769][ T9519] batman_adv: batadv0: Adding interface: ipvlan2 [ 135.761509][ T9519] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.772529][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.778295][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.782433][ T9519] batman_adv: batadv0: Interface activated: ipvlan2 [ 135.852594][ T9521] overlay: filesystem on ./bus not supported as upperdir [ 135.859027][ T9521] overlay: filesystem on ./file1 not supported as upperdir [ 135.969306][ T9528] lo: entered promiscuous mode [ 136.229733][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 136.229748][ T40] audit: type=1400 audit(1754353907.151:684): avc: denied { append } for pid=9538 comm="syz.4.1029" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 136.341510][ T9548] netlink: 129704 bytes leftover after parsing attributes in process `syz.4.1031'. [ 136.389076][ T40] audit: type=1400 audit(1754353907.311:685): avc: denied { write } for pid=9556 comm="syz.2.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.500158][ T9569] netlink: 'syz.4.1039': attribute type 10 has an invalid length. [ 136.501941][ T9571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1037'. [ 136.517763][ T9569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.521052][ T9569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.533595][ T9569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.539874][ T9569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.543840][ T9569] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 136.546955][ T9569] batman_adv: batadv0: Removing interface: ipvlan2 [ 136.815351][ T9578] netlink: 'syz.3.1042': attribute type 10 has an invalid length. [ 136.819389][ T9578] bond0: (slave wlan1): Opening slave failed [ 136.836252][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'. [ 136.869462][ T40] audit: type=1400 audit(1754353907.790:686): avc: denied { write } for pid=9579 comm="syz.2.1043" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 137.254465][ T9612] netlink: 'syz.4.1053': attribute type 10 has an invalid length. [ 137.266216][ T9612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1053'. [ 137.360579][ T40] audit: type=1400 audit(1754353908.280:687): avc: denied { firmware_load } for pid=9614 comm="syz.4.1054" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 137.402604][ T9615] syz.4.1054 (9615) used greatest stack depth: 19624 bytes left [ 137.498285][ T40] audit: type=1400 audit(1754353908.410:688): avc: denied { setattr } for pid=9618 comm="syz.4.1057" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 137.512390][ T9619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9619 comm=syz.4.1057 [ 137.817604][ T6009] net_ratelimit: 12 callbacks suppressed [ 137.817620][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.027890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.031918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.247288][ T9633] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 138.387721][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.462961][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.465570][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.641167][ T7585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.787978][ T40] audit: type=1400 audit(1754353909.699:689): avc: denied { watch_sb } for pid=9662 comm="syz.3.1069" path="/209" dev="tmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 138.794979][ T40] audit: type=1400 audit(1754353909.699:690): avc: denied { setopt } for pid=9662 comm="syz.3.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 138.805904][ T9668] syz.4.1070: attempt to access beyond end of device [ 138.805904][ T9668] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 138.816190][ T9668] vxfs: unable to read disk superblock at 1 [ 138.819485][ T40] audit: type=1400 audit(1754353909.699:691): avc: denied { mount } for pid=9662 comm="syz.3.1069" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 138.821270][ T9668] syz.4.1070: attempt to access beyond end of device [ 138.821270][ T9668] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 138.833073][ T9668] vxfs: unable to read disk superblock at 8 [ 138.833269][ T40] audit: type=1400 audit(1754353909.759:692): avc: denied { unmount } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 138.835441][ T9668] vxfs: can't find superblock. [ 138.873769][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.888125][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 138.996471][ T9685] program syz.3.1074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.031964][ T40] audit: type=1400 audit(1754353909.948:693): avc: denied { node_bind } for pid=9687 comm="syz.4.1075" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 139.048538][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 139.056868][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.068247][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.078796][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 139.083326][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.095783][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.107254][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.111343][ T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.114737][ T10] usb 7-1: Manufacturer: syz [ 139.119891][ T10] usb 7-1: config 0 descriptor?? [ 139.248887][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1077'. [ 139.252730][ T9703] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 139.268824][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.392385][ T10] rc_core: IR keymap rc-hauppauge not found [ 139.395131][ T10] Registered IR keymap rc-empty [ 139.400758][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 139.418677][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.422648][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 139.427164][ T9713] tmpfs: Group quota inode hardlimit too large. [ 139.440102][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 139.451094][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input15 [ 139.460239][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 139.479152][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 139.502014][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 139.508621][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 139.541111][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 139.552782][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 139.556006][ T9724] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1086'. [ 139.559167][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 139.589263][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 139.609314][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 139.630365][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 139.649305][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 139.670625][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 139.699678][ T10] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 139.702834][ T10] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 139.712893][ T10] usb 7-1: USB disconnect, device number 11 [ 139.763112][ T9744] xt_l2tp: missing protocol rule (udp|l2tpip) [ 139.770475][ T7586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.789246][ T9749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1093'. [ 140.150765][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'. [ 141.239998][ T40] kauditd_printk_skb: 4963 callbacks suppressed [ 141.240016][ T40] audit: type=1326 audit(1754353912.147:5657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.3.1103" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ff00000 [ 141.255598][ T40] audit: type=1326 audit(1754353912.157:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.3.1103" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ff00000 [ 141.265438][ T40] audit: type=1326 audit(1754353912.157:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.3.1103" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ff00000 [ 141.277407][ T40] audit: type=1326 audit(1754353912.157:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.3.1103" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ff00000 [ 141.287039][ T40] audit: type=1326 audit(1754353912.157:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.3.1103" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ff00000 [ 141.311436][ T40] audit: type=1326 audit(1754353912.157:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.3.1103" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ff00000 [ 141.327681][ T40] audit: type=1326 audit(1754353912.157:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.3.1103" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ff00000 [ 141.349941][ T40] audit: type=1326 audit(1754353912.157:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.3.1103" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ff00000 [ 141.359474][ T40] audit: type=1326 audit(1754353912.157:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.3.1103" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ff00000 [ 141.385434][ T40] audit: type=1326 audit(1754353912.157:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.3.1103" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x7ff00000 [ 142.598777][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.603193][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.606531][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.609584][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.612670][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.617344][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.620318][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.623463][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.626488][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.629452][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.632712][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.635619][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.638573][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.641814][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.644772][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.647618][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.650740][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.653788][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.656734][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.659679][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.662790][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.665801][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.668774][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.671864][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.674878][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.678053][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.681770][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.684715][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.687711][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.690799][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.693825][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.696792][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.699707][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.702808][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.705933][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.709107][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.712134][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.714999][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.717917][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.720951][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.724060][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.727081][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.729995][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.733043][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.735982][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.740864][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.744614][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.747424][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.750251][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.753375][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.756293][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.759694][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.762775][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.765737][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.768796][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.773350][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.776326][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.779317][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.782470][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.785421][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.788404][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.791468][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.794418][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.797252][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 142.800238][ T5965] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 143.024970][ T54] net_ratelimit: 24 callbacks suppressed [ 143.024988][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.172616][ T7558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.581148][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.585918][ T9818] kvm: kvm [9817]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc1) = 0xffff [ 143.590238][ T9818] kvm: kvm [9817]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc2) = 0xffff [ 143.763390][ T9824] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 143.767310][ T9824] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 143.808905][ T9832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.812602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.814575][ T9825] kvm: pic: non byte write [ 143.986106][ T9840] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 143.989634][ T9840] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1119'. [ 144.062192][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.178091][ T9849] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 144.208046][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 144.212230][ T9849] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 144.215374][ T9849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.223520][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.227731][ T9850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1121'. [ 144.303298][ T7585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.345755][ T9852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9852 comm=syz.3.1123 [ 144.385977][ T9854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1124'. [ 144.405476][ T9854] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 144.443862][ T9863] netlink: 'syz.3.1126': attribute type 1 has an invalid length. [ 144.460725][ T9864] macvlan2: entered promiscuous mode [ 144.463332][ T9864] macvlan2: entered allmulticast mode [ 144.466667][ T9864] bond1: entered promiscuous mode [ 144.468809][ T9864] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.473646][ T9864] bond1: left promiscuous mode [ 144.720138][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 144.952820][ T9888] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1133'. [ 145.133150][ T5974] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.137864][ T5974] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.142680][ T5974] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.155124][ T5974] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.160380][ T5974] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.264642][ T7585] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.268685][ T7585] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.360510][ T7585] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.367047][ T7585] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.377518][ T9898] chnl_net:caif_netlink_parms(): no params data found [ 145.407124][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'. [ 145.455117][ T9913] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (8), value rounded to 0 ms [ 145.508037][ T7585] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.512586][ T7585] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.550065][ T54] libceph: connect (1)[c::]:6789 error -1 [ 145.557241][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 145.563030][ T9898] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.566352][ T9898] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.569443][ T9898] bridge_slave_0: entered allmulticast mode [ 145.573624][ T9898] bridge_slave_0: entered promiscuous mode [ 145.578329][ T9898] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.581462][ T9898] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.586225][ T9898] bridge_slave_1: entered allmulticast mode [ 145.590586][ T9898] bridge_slave_1: entered promiscuous mode [ 145.608915][ T7585] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.614208][ T7585] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.684547][ T9898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.698499][ T9898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.774216][ T9898] team0: Port device team_slave_0 added [ 145.780287][ T9898] team0: Port device team_slave_1 added [ 145.825947][ T54] libceph: connect (1)[c::]:6789 error -1 [ 145.828758][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 145.870582][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.882226][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.896285][ T9898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.918133][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.921158][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.932322][ T9898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.037995][ T7585] bridge_slave_1: left allmulticast mode [ 146.043928][ T7585] bridge_slave_1: left promiscuous mode [ 146.049755][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.076336][ T7585] bridge_slave_0: left allmulticast mode [ 146.080121][ T7585] bridge_slave_0: left promiscuous mode [ 146.083973][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.174635][ T7558] Bluetooth: Error in BCSP hdr checksum [ 146.250289][ T9941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1147'. [ 146.263481][ T9941] loop6: detected capacity change from 0 to 524287999 [ 146.274682][ T5978] buffer_io_error: 26 callbacks suppressed [ 146.274700][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.283807][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.287240][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.290812][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.294605][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.314761][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.332920][ T54] libceph: connect (1)[c::]:6789 error -1 [ 146.335659][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 146.354970][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.359954][ T9916] ceph: No mds server is up or the cluster is laggy [ 146.372548][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.377706][ T5978] ldm_validate_partition_table(): Disk read failed. [ 146.380474][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.396744][ T5978] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.400275][ T5978] Dev loop6: unable to read RDB block 0 [ 146.410016][ T5978] loop6: unable to read partition table [ 146.423535][ T9941] ldm_validate_partition_table(): Disk read failed. [ 146.426486][ T9941] Dev loop6: unable to read RDB block 0 [ 146.429177][ T9941] loop6: unable to read partition table [ 146.432986][ T9941] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 146.438165][ T9942] ldm_validate_partition_table(): Disk read failed. [ 146.441327][ T9942] Dev loop6: unable to read RDB block 0 [ 146.443514][ T7599] Bluetooth: Error in BCSP hdr checksum [ 146.477168][ T9942] loop6: unable to read partition table [ 146.480043][ T9942] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 146.704945][ T40] kauditd_printk_skb: 11961 callbacks suppressed [ 146.704961][ T40] audit: type=1400 audit(1754353917.614:17628): avc: denied { read } for pid=9947 comm="syz.4.1149" path="socket:[30296]" dev="sockfs" ino=30296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.705168][ T13] Bluetooth: Error in BCSP hdr checksum [ 146.771956][ T9960] overlayfs: conflicting options: userxattr,redirect_dir=on [ 146.932743][ T9979] netlink: 696 bytes leftover after parsing attributes in process `syz.3.1155'. [ 146.973331][ T7586] Bluetooth: Error in BCSP hdr checksum [ 147.194257][ T5965] Bluetooth: hci4: command tx timeout [ 147.204730][ T7585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.209758][ T7585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.215634][ T7585] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 147.219505][ T7585] bond0 (unregistering): Released all slaves [ 147.235956][ T7586] Bluetooth: Error in BCSP hdr checksum [ 147.294451][ T7585] bond1 (unregistering): Released all slaves [ 147.302288][ T7585] bond2 (unregistering): Released all slaves [ 147.310091][ T7585] bond3 (unregistering): Released all slaves [ 147.320815][ T9898] hsr_slave_0: entered promiscuous mode [ 147.325026][ T9898] hsr_slave_1: entered promiscuous mode [ 147.328182][ T9898] debugfs: 'hsr0' already exists in 'hsr' [ 147.330888][ T9898] Cannot create hsr debugfs directory [ 147.393441][ T9984] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.396122][ T9984] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.493154][ T7594] Bluetooth: Error in BCSP hdr checksum [ 147.497249][ T9984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.513238][ T9984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.581661][ T9984] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.585747][ T9984] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.589569][ T9984] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.596670][ T9984] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.626374][ T9984] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 147.637242][ T9986] 8021q: VLANs not supported on rose0 [ 147.669310][ T7585] tipc: Left network mode [ 147.742199][ T40] audit: type=1400 audit(1754353918.654:17629): avc: denied { recv } for pid=5948 comm="syz-executor" saddr=127.0.0.1 src=40728 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 147.782485][ T40] audit: type=1400 audit(1754353918.694:17630): avc: denied { allowed } for pid=10001 comm="syz.4.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 147.802061][ T40] audit: type=1400 audit(1754353918.714:17631): avc: denied { recv } for pid=10001 comm="syz.4.1160" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=40728 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 147.860742][ T40] audit: type=1400 audit(1754353918.774:17632): avc: denied { ioctl } for pid=10006 comm="syz.4.1163" path="socket:[32795]" dev="sockfs" ino=32795 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.861609][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1162'. [ 147.897906][ T40] audit: type=1400 audit(1754353918.814:17633): avc: denied { setattr } for pid=9998 comm="syz.3.1161" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 147.978306][ T40] audit: type=1400 audit(1754353918.894:17634): avc: denied { mounton } for pid=9998 comm="syz.3.1161" path="/251/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 147.989208][ T5974] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.030586][ T40] audit: type=1400 audit(1754353918.944:17635): avc: denied { remount } for pid=9998 comm="syz.3.1161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 148.047508][ T9898] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.066415][ T7585] hsr_slave_0: left promiscuous mode [ 148.069424][ T7585] hsr_slave_1: left promiscuous mode [ 148.071966][ T7585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.075005][ T7585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.078098][ T7585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.080524][ T7585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.107306][ T7585] veth1_macvtap: left promiscuous mode [ 148.109254][ T7585] veth0_macvtap: left promiscuous mode [ 148.111138][ T7585] veth1_vlan: left promiscuous mode [ 148.274339][ T40] audit: type=1400 audit(1754353919.183:17636): avc: denied { name_bind } for pid=10027 comm="syz.2.1169" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 149.128177][ T7585] team0 (unregistering): Port device team_slave_1 removed [ 149.220286][ T7585] team0 (unregistering): Port device team_slave_0 removed [ 149.263704][ T5974] Bluetooth: hci4: command tx timeout [ 149.958418][ T9898] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.975973][ T9898] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.982892][ T9898] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.993139][ T40] audit: type=1400 audit(1754353920.903:17637): avc: denied { getopt } for pid=10038 comm="syz.4.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.077376][ T9898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.097045][ T9898] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.109331][ T7594] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.112554][ T7594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.132136][T10058] fuse: Bad value for 'rootmode' [ 150.132469][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.137538][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.145262][T10058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10058 comm=syz.3.1176 [ 150.185920][T10061] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 150.232231][ T9898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.345508][T10076] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 150.346590][T10080] netlink: 'syz.3.1183': attribute type 39 has an invalid length. [ 150.381380][ T9898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.393664][T10084] binder: 10083:10084 ioctl c0306201 2000000003c0 returned -14 [ 150.450442][T10089] bridge69: the hash_elasticity option has been deprecated and is always 16 [ 150.615111][ T9898] veth0_vlan: entered promiscuous mode [ 150.622580][ T9898] veth1_vlan: entered promiscuous mode [ 150.638412][ T9898] veth0_macvtap: entered promiscuous mode [ 150.642392][ T9898] veth1_macvtap: entered promiscuous mode [ 150.652783][ T9898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.659346][ T9898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.664768][ T9898] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.667690][ T9898] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.670610][ T9898] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.673552][ T9898] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.716299][ T7599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.719022][ T7599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.734649][ T1331] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 150.734847][ T7599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.741339][ T7599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.795638][T10102] vlan2: entered promiscuous mode [ 150.797470][T10102] vlan2: entered allmulticast mode [ 150.799401][T10102] hsr_slave_1: entered allmulticast mode [ 150.864363][ T1331] usb 7-1: device descriptor read/64, error -71 [ 151.104862][ T1331] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 151.234639][ T1331] usb 7-1: device descriptor read/64, error -71 [ 151.344499][ T5974] Bluetooth: hci4: command tx timeout [ 151.349635][ T1331] usb usb7-port1: attempt power cycle [ 151.493603][T10135] dummy0: entered promiscuous mode [ 151.684586][ T1331] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 151.706836][ T1331] usb 7-1: device descriptor read/8, error -71 [ 151.722234][ T7585] IPVS: stop unused estimator thread 0... [ 151.804877][ T837] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 151.944641][ T837] usb 10-1: device descriptor read/64, error -71 [ 151.944667][ T1331] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 151.966638][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 151.966654][ T40] audit: type=1400 audit(1754353922.882:17648): avc: denied { write } for pid=10146 comm="syz.4.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 151.979155][ T1331] usb 7-1: device descriptor read/8, error -71 [ 151.981965][ T40] audit: type=1400 audit(1754353922.892:17649): avc: denied { write } for pid=10146 comm="syz.4.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 152.085322][ T1331] usb usb7-port1: unable to enumerate USB device [ 152.184818][ T837] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 152.205683][ T6051] libceph: connect (1)[c::]:6789 error -101 [ 152.208472][ T6051] libceph: mon0 (1)[c::]:6789 connect error [ 152.314712][ T837] usb 10-1: device descriptor read/64, error -71 [ 152.425058][ T837] usb usb10-port1: attempt power cycle [ 152.475225][ T6051] libceph: connect (1)[c::]:6789 error -101 [ 152.477939][ T6051] libceph: mon0 (1)[c::]:6789 connect error [ 152.628397][T10172] syz.3.1210: attempt to access beyond end of device [ 152.628397][T10172] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 152.634035][T10172] (syz.3.1210,10172,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 152.638684][T10172] (syz.3.1210,10172,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 152.641743][T10172] (syz.3.1210,10172,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 152.645326][T10172] (syz.3.1210,10172,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 152.690221][T10174] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1211'. [ 152.765379][ T837] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 152.785796][ T837] usb 10-1: device descriptor read/8, error -71 [ 152.907382][ T40] audit: type=1400 audit(1754353923.822:17650): avc: denied { ioctl } for pid=10180 comm="syz.3.1214" path="/274/file0" dev="tmpfs" ino=1471 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 152.928054][T10183] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 152.996634][ T6051] libceph: connect (1)[c::]:6789 error -101 [ 152.998897][ T6051] libceph: mon0 (1)[c::]:6789 connect error [ 153.001243][T10155] ceph: No mds server is up or the cluster is laggy [ 153.024850][ T837] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 153.034983][T10185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1215'. [ 153.046666][ T837] usb 10-1: device descriptor read/8, error -71 [ 153.165662][ T837] usb usb10-port1: unable to enumerate USB device [ 153.250593][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1221'. [ 153.254698][T10201] nbd: illegal input index 1879048192 [ 153.255648][T10212] use of bytesused == 0 is deprecated and will be removed in the future, [ 153.260692][T10212] use the actual size instead. [ 153.425074][ T5974] Bluetooth: hci4: command tx timeout [ 153.434156][ T40] audit: type=1400 audit(1754353924.342:17651): avc: denied { sqpoll } for pid=10226 comm="syz.4.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 153.436933][T10227] overlayfs: maximum fs stacking depth exceeded [ 153.444086][ T40] audit: type=1400 audit(1754353924.352:17652): avc: denied { mounton } for pid=10226 comm="syz.4.1229" path="/270/file0" dev="hugetlbfs" ino=31723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 153.494917][T10231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1230'. [ 153.523774][T10233] net_ratelimit: 1042 callbacks suppressed [ 153.523795][T10233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.559920][T10237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1233'. [ 153.577386][T10239] program syz.4.1234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.609954][ T40] audit: type=1800 audit(1754353924.522:17653): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1234" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 153.614431][T10239] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1234'. [ 153.674824][T10250] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1238'. [ 153.676354][ T40] audit: type=1326 audit(1754353924.592:17654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.3.1237" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0f4b8e9a9 code=0x0 [ 153.783712][T10254] cgroup: subsys name conflicts with all [ 153.849989][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 153.927240][T10265] tmpfs: Unknown parameter '00000000000000000000001' [ 154.019802][T10276] binder_alloc: 10275: binder_alloc_buf, no vma [ 154.445894][T10297] netlink: 'syz.4.1253': attribute type 7 has an invalid length. [ 154.463426][ T7581] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 154.466396][T10297] SELinux: security_context_str_to_sid (0 0 0 0 0 0 0 0 0 0 ) failed with errno=-22 [ 154.473152][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1253'. [ 154.520789][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'. [ 154.524816][T10299] netlink: 'syz.4.1254': attribute type 13 has an invalid length. [ 154.611454][T10306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10306 comm=syz.4.1257 [ 155.026260][T10347] netlink: 'syz.2.1267': attribute type 1 has an invalid length. [ 155.069786][T10347] bond4 (unregistering): Released all slaves [ 155.103813][T10352] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.132700][ T1025] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 155.295872][ T1025] usb 9-1: Using ep0 maxpacket: 8 [ 155.301190][ T1025] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 155.306055][ T1025] usb 9-1: config 179 has no interface number 0 [ 155.308774][ T1025] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 155.313338][ T1025] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 155.318058][ T1025] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.322202][ T1025] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 155.327630][ T1025] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 155.331094][ T1025] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.339420][T10338] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 155.563645][ T1025] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input17 [ 155.568605][ T40] audit: type=1400 audit(1754353926.481:17655): avc: denied { read } for pid=10369 comm="syz.2.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 155.693233][T10384] ubi31: attaching mtd0 [ 155.696631][T10384] ubi31 error: ubi_attach_mtd_dev: bad VID header (1073807368) or data offsets (1073807432) [ 155.708644][T10384] evm: overlay not supported [ 155.842536][T10390] binder_alloc: 10389: binder_alloc_buf, no vma [ 155.965858][ T40] audit: type=1400 audit(1754353926.881:17656): avc: denied { write } for pid=10398 comm="syz.5.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 156.170620][T10403] sd 0:0:0:0: PR command failed: 1026 [ 156.173081][T10403] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 156.175971][T10403] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 156.334457][ T40] audit: type=1400 audit(1754353927.241:17657): avc: denied { setattr } for pid=10411 comm="syz.2.1289" name="SCTPv6" dev="sockfs" ino=34164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.334929][T10412] sctp: [Deprecated]: syz.2.1289 (pid 10412) Use of int in max_burst socket option. [ 156.334929][T10412] Use struct sctp_assoc_value instead [ 156.629309][T10444] netlink: 'syz.5.1299': attribute type 2 has an invalid length. [ 156.633484][T10444] netlink: 'syz.5.1299': attribute type 2 has an invalid length. [ 157.117397][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 157.117610][ T40] audit: type=1400 audit(1754353928.031:17664): avc: denied { shutdown } for pid=10457 comm="syz.5.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 157.128589][ T7608] tipc: Subscription rejected, illegal request [ 157.453995][T10475] geneve2: entered promiscuous mode [ 157.454348][ T40] audit: type=1400 audit(1754353928.361:17665): avc: denied { cmd } for pid=10476 comm="syz.3.1311" path="socket:[34228]" dev="sockfs" ino=34228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 157.456809][T10475] geneve2: entered allmulticast mode [ 157.468162][T10479] tipc: Enabling of bearer rejected, already enabled [ 157.474470][T10479] tipc: Enabling of bearer rejected, already enabled [ 157.925251][ T1331] usb 9-1: USB disconnect, device number 12 [ 157.925346][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 157.931421][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 157.981054][T10509] macsec0: entered promiscuous mode [ 157.983312][T10509] macsec0: entered allmulticast mode [ 157.985636][T10509] veth1_macvtap: entered allmulticast mode [ 157.988948][ T40] audit: type=1400 audit(1754353928.901:17666): avc: denied { listen } for pid=10510 comm="syz.3.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.000343][T10509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10509 comm=syz.4.1317 [ 158.085563][T10523] netem: incorrect gi model size [ 158.091289][T10523] netem: change failed [ 158.146511][ T40] audit: type=1400 audit(1754353929.061:17667): avc: denied { mounton } for pid=10530 comm="syz.3.1324" path="/313/file0" dev="9p" ino=37617735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.156817][T10531] 9pnet_virtio: no channels available for device syz [ 158.168463][ T40] audit: type=1400 audit(1754353929.081:17668): avc: denied { write open } for pid=10530 comm="syz.3.1324" path="/313/file0/file0" dev="9p" ino=37617811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.209443][T10529] QAT: failed to copy from user. [ 158.302877][T10539] netlink: 'syz.2.1326': attribute type 1 has an invalid length. [ 158.309751][T10539] netlink: 'syz.2.1326': attribute type 3 has an invalid length. [ 158.314368][T10539] __nla_validate_parse: 14 callbacks suppressed [ 158.314384][T10539] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1326'. [ 158.322802][T10539] NCSI netlink: No device for ifindex 0 [ 158.554607][T10548] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1330'. [ 158.558755][T10548] 0·: renamed from hsr0 [ 158.564191][T10548] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.569630][T10548] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.574810][T10548] 0·: entered allmulticast mode [ 158.577610][T10548] hsr_slave_0: entered allmulticast mode [ 158.581432][T10548] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 158.626260][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 158.634423][T10550] pim6reg9: entered allmulticast mode [ 158.652160][T10552] tipc: Failed to remove unknown binding: 66,1,1/0:1369685055/1369685057 [ 158.656049][T10552] tipc: Failed to remove unknown binding: 66,1,1/0:1369685055/1369685057 [ 158.668092][T10552] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1331'. [ 158.815530][T10564] tipc: Started in network mode [ 158.823125][T10564] tipc: Node identity ac1414aa, cluster identity 4711 [ 158.828623][T10564] tipc: Enabled bearer , priority 10 [ 158.898201][T10567] overlayfs: failed to get inode (-116) [ 158.901896][T10567] overlayfs: failed to look up (bus) for ino (-116) [ 158.926484][T10568] sctp: [Deprecated]: syz.3.1335 (pid 10568) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.926484][T10568] Use struct sctp_sack_info instead [ 159.090315][ T40] audit: type=1400 audit(1754353930.000:17669): avc: denied { listen } for pid=10573 comm="syz.3.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.190492][T10584] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 159.196353][ T40] audit: type=1400 audit(1754353930.100:17670): avc: denied { unmount } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 159.210503][T10584] netlink: 'syz.4.1343': attribute type 10 has an invalid length. [ 159.213812][T10584] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1343'. [ 159.218225][ T34] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 159.253373][T10584] team0: Port device geneve0 added [ 159.304463][ T40] audit: type=1400 audit(1754353930.210:17671): avc: denied { bind } for pid=10587 comm="syz.3.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 159.381890][T10597] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1347'. [ 159.386355][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 159.387324][T10597] syz.5.1347 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 159.388112][ T40] audit: type=1400 audit(1754353930.300:17672): avc: denied { append } for pid=10596 comm="syz.5.1347" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 159.514218][T10602] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 159.669847][ T40] audit: type=1400 audit(1754353930.580:17673): avc: denied { write } for pid=10606 comm="syz.4.1351" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 159.691941][T10608] overlay: filesystem on ./bus is read-only [ 159.724040][T10610] 9p: Unknown Cache mode or invalid value fs [ 159.776809][T10611] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 159.782436][T10611] exFAT-fs (nullb0): invalid boot record signature [ 159.785403][T10611] exFAT-fs (nullb0): failed to read boot sector [ 159.790582][T10611] exFAT-fs (nullb0): failed to recognize exfat type [ 159.836539][ T1464] tipc: Node number set to 2886997162 [ 159.977019][ T34] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 160.065550][ T34] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 160.076748][ T34] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 160.080882][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 160.088834][ T34] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 160.092765][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.095965][ T34] usb 7-1: Product: syz [ 160.097907][ T34] usb 7-1: Manufacturer: syz [ 160.099822][ T34] usb 7-1: SerialNumber: syz [ 160.104408][ T34] usb 7-1: config 0 descriptor?? [ 160.282457][T10638] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 160.322231][ T34] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input20 [ 160.329914][ T5352] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 160.337334][ T5352] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 160.345472][ T5352] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 160.353211][ T5352] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 160.380659][T10640] SELinux: failed to load policy [ 160.389581][ T9086] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 160.393726][ T5352] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 160.400905][ T5352] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 160.409564][ T5352] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 160.417600][ T5352] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 160.430907][T10645] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1363'. [ 160.450673][T10646] trusted_key: syz.4.1362 sent an empty control message without MSG_MORE. [ 160.540725][T10650] sp0: Synchronizing with TNC [ 160.577019][T10570] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 160.578908][T10651] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.1338'. [ 160.591388][ T1464] usb 7-1: USB disconnect, device number 16 [ 161.066747][T10681] loop4: detected capacity change from 0 to 2560 [ 161.085314][T10683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10683 comm=syz.3.1377 [ 161.087397][T10681] buffer_io_error: 39 callbacks suppressed [ 161.087413][T10681] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 161.094664][T10683] netlink: 'syz.3.1377': attribute type 1 has an invalid length. [ 161.111459][T10681] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 161.114937][T10681] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 161.122789][T10681] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 161.126290][T10681] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 161.131294][T10681] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 161.135028][T10681] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 161.138983][T10681] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 161.142390][T10681] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 161.145603][T10681] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 161.155064][T10687] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 161.253617][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 161.266808][T10697] bridge_slave_1: left allmulticast mode [ 161.269342][T10697] bridge_slave_1: left promiscuous mode [ 161.272095][T10697] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.277229][T10697] bridge_slave_0: left allmulticast mode [ 161.279473][T10697] bridge_slave_0: left promiscuous mode [ 161.281908][T10697] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.318261][T10700] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1382'. [ 161.563157][T10720] openvswitch: netlink: Message has 24 unknown bytes. [ 161.566133][T10720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.661219][T10731] netlink: 'syz.5.1390': attribute type 7 has an invalid length. [ 161.670154][T10731] smc: net device bond0 applied user defined pnetid SYZ2 [ 161.671393][T10733] block nbd2: NBD_DISCONNECT [ 161.673396][T10731] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1390'. [ 161.719094][T10738] usb usb2: usbfs: interface 0 claimed by hub while 'syz.2.1393' sets config #7 [ 161.809807][T10731] smc: removing net device bond0 with user defined pnetid SYZ2 [ 161.824525][T10731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.833642][T10731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.841397][T10731] bond0 (unregistering): Released all slaves [ 162.066278][T10768] syz.3.1402 uses old SIOCAX25GETINFO [ 162.171556][T10775] binder: 10774:10775 unknown command 0 [ 162.173822][T10775] binder: 10774:10775 ioctl c0306201 200000000080 returned -22 [ 162.188834][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 162.188851][ T40] audit: type=1400 audit(1754353933.100:17688): avc: denied { call } for pid=10774 comm="syz.4.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 162.189201][T10775] ocfs2: Unknown parameter 'aclinderfs/binder0' [ 162.528339][T10793] IPVS: length: 225 != 24 [ 162.660591][ T40] audit: type=1400 audit(1754353933.570:17689): avc: denied { append } for pid=10806 comm="syz.2.1415" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 162.726133][T10811] bond4: entered promiscuous mode [ 162.728633][T10811] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.772117][T10815] dlm: Unknown command passed to DLM device : 255 [ 162.772117][T10815] [ 162.848877][T10817] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 162.994497][ T40] audit: type=1400 audit(1754353933.900:17690): avc: denied { read } for pid=10822 comm="syz.5.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 163.131220][T10828] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 163.220931][T10830] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 163.228418][T10830] SELinux: failed to load policy [ 163.230873][T10831] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 163.234222][T10831] SELinux: failed to load policy [ 163.671477][ T40] audit: type=1400 audit(1754353934.580:17691): avc: denied { setopt } for pid=10859 comm="syz.2.1433" lport=52534 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 163.682614][ T40] audit: type=1400 audit(1754353934.580:17692): avc: denied { getopt } for pid=10859 comm="syz.2.1433" lport=52534 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 163.700611][ T40] audit: type=1400 audit(1754353934.610:17693): avc: denied { listen } for pid=10864 comm="syz.4.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.771803][T10870] __nla_validate_parse: 3 callbacks suppressed [ 163.771820][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1435'. [ 163.806571][T10872] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1437'. [ 164.206359][ T40] audit: type=1400 audit(1754353935.109:17694): avc: denied { setopt } for pid=10888 comm="syz.2.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 164.215685][ T40] audit: type=1400 audit(1754353935.129:17695): avc: denied { mount } for pid=10888 comm="syz.2.1441" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 164.225792][ T40] audit: type=1400 audit(1754353935.129:17696): avc: denied { unmount } for pid=10888 comm="syz.2.1441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 164.416959][T10892] warn_alloc: 1 callbacks suppressed [ 164.416971][T10892] syz.5.1442: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 164.425289][T10892] CPU: 1 UID: 0 PID: 10892 Comm: syz.5.1442 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 164.425312][T10892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.425319][T10892] Call Trace: [ 164.425325][T10892] [ 164.425330][T10892] dump_stack_lvl+0x16c/0x1f0 [ 164.425362][T10892] warn_alloc+0x248/0x3a0 [ 164.425381][T10892] ? __pfx_warn_alloc+0x10/0x10 [ 164.425406][T10892] ? packet_set_ring+0xb07/0x18d0 [ 164.425418][T10892] ? __vmalloc_node_noprof+0xad/0xf0 [ 164.425435][T10892] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 164.425456][T10892] ? packet_set_ring+0xb07/0x18d0 [ 164.425470][T10892] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.425485][T10892] ? alloc_pages_mpol+0x25a/0x550 [ 164.425498][T10892] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 164.425512][T10892] ? packet_set_ring+0xb07/0x18d0 [ 164.425522][T10892] __vmalloc_node_noprof+0xad/0xf0 [ 164.425537][T10892] ? packet_set_ring+0xb07/0x18d0 [ 164.425549][T10892] packet_set_ring+0xb07/0x18d0 [ 164.425565][T10892] packet_setsockopt+0x121b/0x33c0 [ 164.425579][T10892] ? sock_has_perm+0x259/0x2f0 [ 164.425601][T10892] ? __pfx_packet_setsockopt+0x10/0x10 [ 164.425613][T10892] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 164.425626][T10892] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 164.425646][T10892] ? find_held_lock+0x2b/0x80 [ 164.425664][T10892] ? selinux_socket_setsockopt+0x6a/0x80 [ 164.425681][T10892] ? __pfx_packet_setsockopt+0x10/0x10 [ 164.425694][T10892] do_sock_setsockopt+0xf3/0x1d0 [ 164.425713][T10892] __sys_setsockopt+0x1a0/0x230 [ 164.425728][T10892] __x64_sys_setsockopt+0xbd/0x160 [ 164.425740][T10892] ? do_syscall_64+0x91/0x4c0 [ 164.425754][T10892] ? lockdep_hardirqs_on+0x7c/0x110 [ 164.425767][T10892] do_syscall_64+0xcd/0x4c0 [ 164.425781][T10892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.425793][T10892] RIP: 0033:0x7f069c58e9a9 [ 164.425803][T10892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.425814][T10892] RSP: 002b:00007f069d32b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 164.425825][T10892] RAX: ffffffffffffffda RBX: 00007f069c7b6080 RCX: 00007f069c58e9a9 [ 164.425832][T10892] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000008 [ 164.425838][T10892] RBP: 00007f069c610d69 R08: 000000000000001c R09: 0000000000000000 [ 164.425845][T10892] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 164.425851][T10892] R13: 0000000000000000 R14: 00007f069c7b6080 R15: 00007ffce221ac08 [ 164.425864][T10892] [ 164.425869][T10892] Mem-Info: [ 164.518652][T10892] active_anon:45575 inactive_anon:0 isolated_anon:0 [ 164.518652][T10892] active_file:10531 inactive_file:46684 isolated_file:0 [ 164.518652][T10892] unevictable:1768 dirty:60 writeback:0 [ 164.518652][T10892] slab_reclaimable:8749 slab_unreclaimable:75446 [ 164.518652][T10892] mapped:24655 shmem:37217 pagetables:1241 [ 164.518652][T10892] sec_pagetables:303 bounce:0 [ 164.518652][T10892] kernel_misc_reclaimable:0 [ 164.518652][T10892] free:405985 free_pcp:15176 free_cma:0 [ 164.535375][T10892] Node 0 active_anon:171548kB inactive_anon:0kB active_file:38632kB inactive_file:186524kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:87904kB dirty:228kB writeback:0kB shmem:135000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14416kB pagetables:4408kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB [ 164.537459][ T6129] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 164.548796][T10892] Node 1 active_anon:10752kB inactive_anon:0kB active_file:3492kB inactive_file:212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:10716kB dirty:12kB writeback:0kB shmem:13868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:240kB pagetables:556kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB [ 164.548872][T10892] Node 0 DMA free:7408kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2156kB inactive_anon:0kB active_file:220kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:272kB local_pcp:124kB free_cma:0kB [ 164.548919][T10892] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 164.548954][T10892] Node 0 DMA32 free:68492kB boost:34816kB min:62332kB low:69208kB high:76084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:169392kB inactive_anon:0kB active_file:38412kB inactive_file:186512kB unevictable:3536kB writepending:228kB present:2080628kB managed:1263964kB mlocked:0kB bounce:0kB free_pcp:27300kB local_pcp:8184kB free_cma:0kB [ 164.549001][T10892] lowmem_reserve[]: 0 0 0 0 0 [ 164.549035][T10892] Node 1 Normal free:1547976kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10752kB inactive_anon:0kB active_file:3492kB inactive_file:212kB unevictable:3536kB writepending:12kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:33464kB local_pcp:28200kB free_cma:0kB [ 164.610897][T10892] lowmem_reserve[]: 0 0 0 0 0 [ 164.613008][T10892] Node 0 DMA: 27*4kB (UM) 20*8kB (UM) 21*16kB (UM) 7*32kB (UM) 3*64kB (UME) 2*128kB (ME) 4*256kB (UME) 2*512kB (ME) 4*1024kB (UME) 0*2048kB 0*4096kB = 7420kB [ 164.620039][T10892] Node 0 DMA32: 149*4kB (UME) 101*8kB (UME) 187*16kB (UE) 135*32kB (UME) 144*64kB (UME) 93*128kB (UME) 39*256kB (UME) 28*512kB (UME) 12*1024kB (UM) 1*2048kB (M) 0*4096kB = 68492kB [ 164.628058][T10892] Node 1 Normal: 5*4kB (UE) 6*8kB (UME) 14*16kB (UE) 6*32kB (UME) 15*64kB (ME) 26*128kB (ME) 26*256kB (ME) 36*512kB (UME) 16*1024kB (ME) 11*2048kB (UM) 361*4096kB (UME) = 1547428kB [ 164.636011][T10892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.640110][T10892] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 164.643915][T10892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.648366][T10892] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.652383][T10892] 94429 total pagecache pages [ 164.654375][T10892] 0 pages in swap cache [ 164.656126][T10892] Free swap = 124996kB [ 164.658265][T10892] Total swap = 124996kB [ 164.660021][T10892] 1048443 pages RAM [ 164.661706][T10892] 0 pages HighMem/MovableOnly [ 164.663700][T10892] 283123 pages reserved [ 164.665535][T10892] 0 pages cma reserved [ 164.678887][ T6129] usb 7-1: device descriptor read/64, error -71 [ 164.758431][ T40] audit: type=1400 audit(1754353935.659:17697): avc: denied { read } for pid=10906 comm="syz.3.1447" name="file0" dev="9p" ino=37617811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.771331][T10915] Driver unsupported XDP return value 0 on prog (id 369) dev N/A, expect packet loss! [ 164.877563][ T5974] Bluetooth: hci3: command tx timeout [ 164.929332][ T6129] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 164.985198][T10924] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.064720][ C2] ata1: illegal qc_active transition (00000000->00100000) [ 165.077426][ T6129] usb 7-1: device descriptor read/64, error -71 [ 165.083054][T10929] IPVS: persistence engine module ip_vs_pe_s not found [ 165.183748][T10939] mmap: syz.5.1458 (10939): VmData 37466112 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 165.189528][ T6129] usb usb7-port1: attempt power cycle [ 165.272330][T10952] xt_hashlimit: size too large, truncated to 1048576 [ 165.333831][T10954] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 165.390859][ T1107] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 165.394942][ T1107] ata1.00: configured for UDMA/100 [ 165.438809][T10960] xt_hashlimit: size too large, truncated to 1048576 [ 165.537861][ T6129] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 165.570115][ T6129] usb 7-1: device descriptor read/8, error -71 [ 165.576502][T10972] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 165.580445][T10972] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 165.584423][T10972] CPU: 0 UID: 0 PID: 10972 Comm: syz.5.1468 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 165.589946][T10972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.593850][T10972] RIP: 0010:iter_file_splice_write+0xa4e/0x1150 [ 165.596203][T10972] Code: 00 48 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 1a 05 00 00 4d 8b 65 10 49 c7 45 10 00 00 00 00 49 8d 7c 24 08 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 ee 04 00 00 49 8b 54 24 08 4c 89 ee 4c 89 f7 83 [ 165.603863][T10972] RSP: 0018:ffffc9000f7df918 EFLAGS: 00010202 [ 165.606085][T10972] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff8243f3b5 [ 165.608848][T10972] RDX: 0000000000000001 RSI: ffffffff8243f256 RDI: 0000000000000008 [ 165.611449][T10972] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000000 [ 165.613872][T10972] R10: 7ffffffffffffffa R11: 0000000000000002 R12: 0000000000000000 [ 165.616669][T10972] R13: ffff888033b28828 R14: ffff88802950f000 R15: 7ffffffffffffffa [ 165.619081][T10972] FS: 00007f069d34c6c0(0000) GS:ffff8880d66f9000(0000) knlGS:0000000000000000 [ 165.621996][T10972] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.624441][T10972] CR2: 0000200000001900 CR3: 0000000033acb000 CR4: 0000000000352ef0 [ 165.627022][T10972] Call Trace: [ 165.628127][T10972] [ 165.629116][T10972] ? __pfx_iter_file_splice_write+0x10/0x10 [ 165.631227][T10972] ? __pfx_iter_file_splice_write+0x10/0x10 [ 165.633631][T10972] direct_splice_actor+0x192/0x6c0 [ 165.635627][T10972] splice_direct_to_actor+0x345/0xa30 [ 165.637920][T10972] ? __pfx_direct_splice_actor+0x10/0x10 [ 165.640268][T10972] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 165.642705][T10972] do_splice_direct+0x174/0x240 [ 165.644669][T10972] ? __pfx_do_splice_direct+0x10/0x10 [ 165.646790][T10972] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 165.649171][T10972] ? rw_verify_area+0xcf/0x680 [ 165.651143][T10972] do_sendfile+0xb06/0xe50 [ 165.653113][T10972] ? __pfx_do_sendfile+0x10/0x10 [ 165.655241][T10972] ? __x64_sys_futex+0x1e0/0x4c0 [ 165.657302][T10972] ? __x64_sys_futex+0x1e9/0x4c0 [ 165.659231][T10972] __x64_sys_sendfile64+0x1d8/0x220 [ 165.661281][T10972] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 165.663515][T10972] do_syscall_64+0xcd/0x4c0 [ 165.665388][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.667874][T10972] RIP: 0033:0x7f069c58e9a9 [ 165.669676][T10972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.677325][T10972] RSP: 002b:00007f069d34c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 165.680579][T10972] RAX: ffffffffffffffda RBX: 00007f069c7b5fa0 RCX: 00007f069c58e9a9 [ 165.683683][T10972] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000a [ 165.686813][T10972] RBP: 00007f069c610d69 R08: 0000000000000000 R09: 0000000000000000 [ 165.690002][T10972] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 165.693326][T10972] R13: 0000000000000000 R14: 00007f069c7b5fa0 R15: 00007ffce221ac08 [ 165.696639][T10972] [ 165.698017][T10972] Modules linked in: [ 165.699819][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.702529][T10972] ---[ end trace 0000000000000000 ]--- [ 165.723707][T10972] RIP: 0010:iter_file_splice_write+0xa4e/0x1150 [ 165.725713][T10972] Code: 00 48 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 1a 05 00 00 4d 8b 65 10 49 c7 45 10 00 00 00 00 49 8d 7c 24 08 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 ee 04 00 00 49 8b 54 24 08 4c 89 ee 4c 89 f7 83 [ 165.731948][T10972] RSP: 0018:ffffc9000f7df918 EFLAGS: 00010202 [ 165.733911][T10972] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff8243f3b5 [ 165.736699][T10972] RDX: 0000000000000001 RSI: ffffffff8243f256 RDI: 0000000000000008 [ 165.740104][T10972] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000000 [ 165.742905][T10972] R10: 7ffffffffffffffa R11: 0000000000000002 R12: 0000000000000000 [ 165.745589][T10972] R13: ffff888033b28828 R14: ffff88802950f000 R15: 7ffffffffffffffa [ 165.749458][T10972] FS: 00007f069d34c6c0(0000) GS:ffff8880d66f9000(0000) knlGS:0000000000000000 [ 165.752764][T10972] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.755479][T10972] CR2: 00007fa0f58e7d60 CR3: 0000000033acb000 CR4: 0000000000352ef0 [ 165.760507][T10972] Kernel panic - not syncing: Fatal exception [ 165.763464][T10972] Kernel Offset: disabled [ 165.765123][T10972] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:49:53 Registers: info registers vcpu 0 CPU#0 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8560d865 RDI=ffffffff9b0e1160 RBP=ffffffff9b0e1120 RSP=ffffc9000f7df310 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=000000000000005d R14=ffffffff9b0e1120 R15=ffffffff8560d800 RIP=ffffffff8560d88f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f069d34c6c0 ffffffff 00c00000 GS =0000 ffff8880d66f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001900 CR3=0000000033acb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069c611d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069c611d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069c611d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069c611d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069c611de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069c611ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069c786488 00007f069c786480 00007f069c786478 00007f069c786450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069d2ed100 00007f069c786440 00007f069c786458 00007f069c7864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069c786498 00007f069c786490 00007f069c786488 00007f069c786480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=000000000004751b RCX=ffffffff822cea98 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9000c34f738 R8 =0000000000000006 R9 =0000000000001000 R10=0000000000000000 R11=1ffffffff1cb9fa9 R12=ffff88801c800000 R13=ffff88817ffef400 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bbf2a0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c29103f CR3=000000002adaa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000005c4 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060271a0028808 0002100014100006 0070ee0c0000013a 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003180802b00301 000004080602a803 0000000725dfdbff 0070bd290401001c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002828080280 0302800406800306 8004200300080010 030fffffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0400030801a00405 01800404a4e60800 0100000208060601 3be80000305f6576 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c735f65676469 726201ffffffffff ffffffdf08018003 0008000610002010 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000008060a01 6de601a008000280 0304c0a081801000 0004010000020806 ZMM25=7a2a60d87a2a60d8 7a2a60d87a2a60d8 7a2a60d87a2a60d8 7a2a60d87a2a60d8 7a2a60d87a2a60d8 7a2a60d87a2a60d8 7a2a60d87a2a60d8 7a2a60d87a2a60d8 ZMM26=28a6e10928a6e109 28a6e10928a6e109 28a6e10928a6e109 28a6e10928a6e109 28a6e10928a6e109 28a6e10928a6e109 28a6e10928a6e109 28a6e10928a6e109 ZMM27=10a7b67310a7b673 10a7b67310a7b673 10a7b67310a7b673 10a7b67310a7b673 10a7b67310a7b673 10a7b67310a7b673 10a7b67310a7b673 10a7b67310a7b673 ZMM28=000000600000005f 0000005e0000005d 0000005c0000005b 0000005a00000059 0000005800000057 0000005600000055 0000005400000053 0000005200000051 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=fb060000fb060000 fb060000fb060000 fb060000fb060000 fb060000fb060000 fb060000fb060000 fb060000fb060000 fb060000fb060000 fb060000fb060000 info registers vcpu 2 CPU#2 RAX=00000000000aab84 RBX=0000000000000002 RCX=ffffffff8b8d1c99 RDX=ffffed100d4c6646 RSI=ffffffff8c15bea0 RDI=ffffffff81921e61 RBP=ffffed1003c53910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000000 R12=0000000000000002 R13=ffff88801e29c880 R14=ffffffff90a96150 R15=0000000000000000 RIP=ffffffff8b8d07ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8ad3b5cd58 CR3=0000000034406000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d1cbd74600 000055d1cbd74600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcafb33540 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 205d31235b203030 3030203a31303030 3030303030306366 6666666478302073 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4954504f4e204e41 53414b20504d5320 5d31235b20303030 30203a3130303030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030303030636666 6666647830207373 6572646461206c61 63696e6f6e61632d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f6e20726f6620 796c6261626f7270 202c746c75616620 6e6f69746365746f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7270206c6172656e 6567203a73706f4f 205d323739303154 5b5d323035363735 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffea00016fc580 RCX=ffffffff822cf8fc RDX=1ffffd40002df8b1 RSI=0000000000000000 RDI=0000000000000000 RBP=ffffffff8df3b440 RSP=ffffc9000312f760 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffea00016fc5c8 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bbf490 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f248d4e7d60 CR3=000000003a609000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f248c9866a3 00007f248c9866a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe461524f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558ebd1578 000055558ebd0190 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558ebcaf3a 000055558ebcae00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9dfe5f67183f1e1b 2bfa82181a81ab37 770e5d954d856555 788a0a6d5410e72f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101800402ad8208 0001000004080606 01219c73b63c087e f5e682effed5efd0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e44717e79ff3bb3 d78cbd31dffd196e 543e351c8e7de22c 9dfe5f67183f1e1b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2bfa82181a81ab37 770e5d954d856555 788a0a6d5410e72f 7f07a9b5ef362041 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 edfd8b38cc4f3344 6a2ff40fdaa2a666 bd7ca4f5a47e9bf7 7fe51185036e01d6 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000