last executing test programs: 1m21.327868222s ago: executing program 2 (id=68): connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, 0x6e) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000300)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/usb/usbmon/0s\x00', 0x0, 0x0) pread64$ublk_ch(r1, 0x0, 0x0, 0x4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x3a, &(0x7f00000004c0)=@any_dev={0x4, 0xda9, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x8a}}}, &(0x7f0000000480)=0x0) io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0xe1}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r3, '\x00', {0xfff7, 0x4, 0x0, 0x0}}, 0x0) 1m21.020682865s ago: executing program 2 (id=77): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x2000400c) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e23, 0xfffffffe, @mcast1, 0x87}}, 0x0, 0x0, 0x3a, 0x0, "276148cd1259e41d8f0ffd4be8b6d180a19ecb3e60c92e9fe908c95534a69b91fe9e2770ba387440609895d7fbb1c08bdfd96493f4fc1810d150cc3f2bbd548044dcec63bc8b2168c59e27175814071e"}, 0xd8) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x44, r4, 0x1, 0x804, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffa}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20881}, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000600)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000002000010025bd7000fcdbdf25021014010900000313000100080001000000000008000200e000000208000e000080000005afb4871102692c9157bffbb0424e533c59bbfdd4aead05fb5060bd1995c58e9a3593ae2d75dd52d6136f4229ebf6f53d"], 0x34}}, 0x40800) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @random="95000a1100", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df342", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x6, 0x400, 0x0, 0x0, {[@md5sig={0x13, 0x12, "6d84a22012be73afefa596f1a731aeae"}]}}}}}}}}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/cgroups\x00', 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f0000001880)="8a73534e0918ac83d3e42d3b808ee55644632dd5f0a4ce9352541e4522721cd47c9d7fb6399933f3a1f7130670b96456010b2e208501253d838b9b6b7f247e3c6f39283fa3aff13df54d13013115da9fd6a36118665f3f8b4976df5cf6f97303ffd54274b06aa7f0bfa77d8ddf90ea3dd1534d9ff43238d4abfd61beec1f89beb5d64aa156c96725af768133ab2c3f9cf15297a35aeb794870efe1ca476af8f0a00bb39c70ad897dae4d090d6dad4b1ffbc15c7e67601b3806c5896f70a195cc9508f23521e1f22ddb02243924c28c6bc6c298fd07cc6cea03552cab85b81dead34df19e6797a19c33c9095615efbad9b331aaaa59a1e67bb297d1171a535c02347259ceb6adbadf7e096dab110b28e32164aac469eb53ad060ed7d710381d2db3c6e0a2be852a278dd64d96f5344ab3d778580c9ddaea545f755681673941d638e04b159bcf02544cc48a6adb6a400e8706c688d9e19a552adf8cfa361766bdb490eab20064d832a0970b8a043430a8cf12012aac649331db624136335c49f9a7a7c6b017159e9416abb0d8035f4bcf4bf71477a790529c8b444b788584fbeb55cf8093d0405dccc76535618a0c377f19e016bf1e2615b245c5c88074350da8074133ce37de9b02dabaa9ba4759c356301ccceb6c77a607dda65f574715e013bd34d3d75e2ee02bfae1991391fa8def46eafd67c76fe9195117b050145ee592a81c244794ad194dea661ae12d696715b211e993264f12eeab3ff18a6766392a4158b6bf11860d4713eb0bb43f87d103210fc0e34d30f35369ebfce5738f74b3b0afd103004c8d7f658b6724c4b4c3cc3be6ab8bb75933ba1294e18040f602ca82db55d0a186646e3a571b0c891b6eaa21e265db56cef72a86bedc2dfd2109ad454fc83ac3df573528ef68b1f097b34b05d5c74bb23c532120b2162ffd829bbb087337b72798ce47ea9f457d8e5f24d18fb6e8e6f210cba742a7c12b5bfd0f37555c55c729c617d45ac353a8115e73dffc54e128006fb247003b7896d9d018792d7abd23b4d39d567e5ed90b8487b2d26555d72ec3d776501bdcabe07e89eb2efaf9866e1550ec98665a251efe607de153059a8ba7afe61f1373d68b83c236fd1ea4470a74187ceef0d079164cf3d200ecda56bd8c7e71109d4097916c5c72a45112ad277aeecc271c734211d52e6927e45a5a2ba4e6c7401737a2817721b7f73e94b561397139b1c47f40f28b68da242e2da0bebcf4346a7c112e2b45a64922710284246181f58400d454d16248d5e0259e5b6615ad34b7ab7e70d0ea326dec2b50ea631bb5919fe6aa1cf2993d9022c1cffc1198c1eef92776997c95f41dd8627a69e84bca426c3f4e32c65f8ba6df495686012bbdf7f2379bfa87055a581a86c305f83d9f04c8f3b0137cf6259f637141f165b4076f299acad75e907f7307a2e5e8a86f20a33eb6503d35ecb609040f10b8a5942a03315e2fda99540c08842387d3d16943b1c0dabd2e1de54619661aeb8fb3821b2059945027c02b2d079034c0b2b4eb6caa6cf13653288bf94bb88f4e7a759664071e3eccc3576fbac0124308a1eed9bd34b2a63218cfeade3769092828dbb04c60e4f0b509a858c5921c7de5ecb145c93c475688c56eb316aa6b3131e6d25454d45f70fdb9c761d6fb858ff7a15cb2a32d9a4212a33584aefea9d2d6dca2bc4e6fa334c82a5de99c0713fd179f9d97fc2f295142832398039e3fbac856bfb642f5c92a1b7b30e76938eb2f12914ae182f220e1a04cea1fb9a65ef04e0fb83590c1247a09df10fe91e0a8d7a8f918fd824f59c8e04765bdb45102be8accdab83bc8e6e5787c9833fced5e6164d8e16babff5df5b2d7ecf8c7eb05d904afd3411c8ab1fc525308eefdc047e0d80e448620719eb86d5cab47deff6ce50cee758c62bdc6489d17d2b2762746b215bd8fc683fd6d7863ebc2b7ed9c1317de94499ebfdd47257dbe9c9220dc560e50329cf42d3a51b469cb569c2bc67ff7d3a27830b7d9d987ed1931ca25bafc7edf5961c0217bf0d2b30e8ef5cbfee0e0e92345437ae344d1e4931a573ca63d3d88371614f6ff342374bab6c6c3c036409ed55b92cb67ac3a806ec8c9e12610423fecb740acc7f69d7eedde78bd495e898b79a6f815399d9f5270371c8da5d1aedbb12a6dc730a7ce97fc784e8eb4a277d4b992daec7c76d0625ddc59db8db37c287317a5fba70734183edc24d9dc37b4e766039f639e36f9ef39dd4750e272c8dffded7245e57d6210ce492d8e603189d23dc34cf6490c688fcbec2abae6a151cdb55d9630a1741686d30388bb7b36576abb51bac9b45b9c53fd40cec071bf9beaaffe8c507fb704549aa3e3ac86f6419e04b5b81486cea1dc2af783a3bbfb3fa9888ee5da23cb10db15a52a15de494bf854f0c5c73fbabd960a7e49b6dd41e982d8fc03772c8a77eab47df98fa5af656563e86274daf0e92d1d137b58e03e1c2d4f1b24ce13bd35ffee21de744c57422811410c150c38f356464fb47443d9552be82c4a25b07caf4287f5e61b3678a88b7d6e79dd6b646ff8f4e51555a2b2b91671518f0a15cdb95485f5e0f81a487cd2e72a5a9bc4d122b04826455cc50b4a46324786918480d746d95896edaed2c0d797337d33695f874121ccdb0e3638d982ea3a459b5012edaff589a17cbda52c1ea86d985e1687ec931f06007519dc9a2f4c27fdba27aa0d743ff507b9c64bc34abef11a17027c09585c88a0a3f367ce50e28bd529b23f3cfe8772d6830fa0072d1f14f1a3a06b6927adc71b525c905f08881a73c235b81ea958c26be5caf41f7dcb76bce0be52073586479ed5e5b400980257159cc58f5ab584b93e42d8d711bea680d2fea89aaa4e31b9479970ca369b89d2638806deeb02e43c1ab35423c279702ba62d6a8161425cdf318c587300e0a1916479118ed92aafbaa9d68ce2508f71031df6b7504d271c4fd606085d87698a28d621926150108ec1e48eba4e97c3ec2a5dc02f23d2487df6e63bbf5dad720204faaddb37f783ba6f5b90b1ae0c9315c427c11220754a8c4e642f303acd9f364e6940654a9f2b6f43e0dcadcec40132ec8b9cf1209947518646ea2b8e2ac0383037ff94648cd8a28a1701d47c390b132f811f351bcf07ebb22dbd25616ebd8bb5449217b7f23c2b35839688b3fb1b5a43e4281ed20b1be92683dda465dfcf7c58c73b97c3a6a2d869f324cb2752044dba6c9c6b676c85ad075cfa3d1781994d8b5bf5c9b876c0f35ccf25e3bbc38a8c4f99a342c374f6802ef2f7f43da59b7674a2d3b8e26c16c0566ed73bbdd964c803053f6afbbcf63e2b138a14a810a0aa96d230b3ec4f3c49fbc4235d4a8599aa963de25985b7965f4335276710797fef37500d3cde655a3d64121cb467e82be07ce265124b30ec69cfc5fe436bc57ee5a4cf3c8fcc75fa3f6d477f77ac0cb5c990ea2d1188fbe852b49fa5e8f714f648b97d0f1cc866739fe874f5bdec66c2f3b664a05f1ca6ada57e994d39aeff234559cbd23222cac4918d2eea635180172a24135a19044a11432bab9c7323e2474357fd0cd32b474b11f1e0492967b09dc0966fc9b8a11b032b780ce78b9978359023e31edba765f3f8848b6c9b4545a0ad3e2efb6133e023880fae2bb543c44ba50012cf5b606dcdb8ec13bcec14bb711232546125c017f25d5e2b548b3c55dbbcdea0cacfc5b140b07d6dec612567b6217d947acb5e3b81f5909535ed94e60f6b0e1e43c145889cd37af6894a2a8aeaab9665bb8f9d21c2396ff06a90b4478abc45f6f3f4eb75e0a713a651e194fb3682029b868cdcf3914a167450dcff1597dea0b17c8e619889a936425af47fbb0120a679ac33ee10e469862433536b5e69c7ee633fd857a0601c010e4afb454215e86d1bddf3a76c5713f6bc5f2430f1b665936478a5b92fba542307586b37251534cff3ee2c6c7298d158db0cd85328e8cef796042e447abd8d4279e164c4a48c6411431939aaaf51a62541b0ce0902d155f1d046b3536f0b590ba637deb05f1e8f8a2930a1677c56f33cc9b722cce337cad96dec24cc62ef5c5183f67cdd41a396287a0c313b4b5e470d77ab03e3bfb4427c725e33411e2fddc4b579f0b11f735f05b16107363b08cac672ebc7f0c5005e4d691d9dfbb4e118a8462c286919108ec28460eeb0e2b40bba9dbafaf135a6cd54324f72dc183d8d0e39d29a6298c02e1c830b0246f8f8cdde5daa6b6effab3871b3b58b98484e487ba2d89a3b963ee6a953768a09430a30e1ff52b6c0c327bab7aaaaaa68a2acc55a76330b31e6bb464fc17601a0a1816ef4c9f0507f2d6dceb1de0fb793df1281464e98f83f161c9e3298f521d4f11f3c268fb38f64e8eae52fe3753b046e41ded510a4024e202df5694cea4afe65b23604a8195bc0f8a3758c96fc5ce8b28e47d485f21fd26aa4cd39a3258e40cf8d6869390f90f512d1c6794756b3972f43e3d37912f149836cf37078d4911365a63e8cef6abdb4fdc47371d40dc27403f4f4de835fff8262d832b3ae8eddb4ee114043fdd1687e45d5ee2e8d54269ff0933179a6ffe061a7562362cffdadae5e0dcd23432766817204ce4d6044508ae3cc73c468a8d4f559aa419d2c4353ac5b82bd38e6338de2c65383dc9c476200e9ea1dd633e0e6b1f74529553d37879efaedc339aa533220c9c45cf8cc4fd89a2a4ab7b14ebe700c804e14475e11fec8774998a579a10356a8dd0a0272714cc1340e204b718bf8d179d157010dd71da85c82379a3435d5f30486c15ae2f1a379b9b9d63e5d135080d62c72697bc369ce8184e622e05d4648ba389c643ed16a08fe5dcfe24a9ed4348177e30993800063e8d5692583481cf41ad95ec4b72c28001ebeb2e4c3cd1b1cd28c4f9da176753ecbf730be96a52be3b92cb19fa0d35b40a44b63c33a79afaa21dbfd693bbf8f71fe38a0a924aae29f16e9d296c0023fcbdd3bd1839c34d885f4d10a80ae677a8b93ad93e5af2f999af5b8f8abbbc93e078e732b03640f9ca6f35415083d8bf745b4f4a5bb902ed11b58c5995ca4b0139fdb87fbfd0b45b5cbe1f7e0df03ce96d192f728155bb92d6fb7b9c0c7fde9aa4716c0c53b7d14dd99958f865e78fc7b90cb65f01f9d274cbbf8338801abb73fbf5521dcaecd4067bcaf4bd682d0e39244fb27ada02fae937eeea4dd5179325648e102ca34bbd89d5c65586b35595fa55c283a835f95da02bc1f67a7c77fcf856fa4c6ab79c985973c211042aaae012b8db355c35bfe1e8e13c04819e699fe5f27cd12cbb6b0b6779688876655c52f132ace0cb49cd2ca6ec27be85544bfee56beb4e10b1abb16f4650c095a4a6a5216a4721cc7c1ee5ae9d64a6842df8e70dc7e80878c1644aeb1fc72276ca73a997e2d19cfb728d5cd8de17be282a25c632ae8d8e66d4cba719078727b27695a515e72ada9ab3f2472c727cfaf4440245358799d05bb91be2faf861af956ec0a509606cad4f9ab6e0af7a3ed186b22a6dbfd647ae93b240084d944012289c638325539ac185b8701ff6030800b43a2d2a97dbc8fb3d8fc5f9fba14cd02ec3c6277face927aa844d6bf2f45396f5bdda7a620da6b4985f4eb8dab7c8e7668b49e9c77e1f2dc60e0af9f789bc3e36b249c527be4468a94206e4f9f643f32b295a903cde0acb335ac14f7fe32cf24eba426303711879defff3aa7fff0395ff1e8c5c0523f941d068e62d80a0f3f6ace11769253346225008b8e0976bc629905e45503afa775b04622bc70926b2824c70c7a95d922787c92f2a28477aebd784bbe61ecd42921788f92f79d10a6624411e76b991d3bad7f2c4774fdf7bcf9d930f2a89edfec2731eb6bc057caa43f12a412b64958247af5d75dba0bb1eaf70221a8ad9e20b2591fa4cc52d1a031099b7f2d774cd230c1a81566cdb7ca412861ea4670687a10b4b8c834b68c0f71cd8dcae9250dbf118f57b62658b359c4d5bfced3da2236ec3f5b69221c3749a4b01778146cdd5ccd03ce8a2e20165c27e799663b082e97760bf42ac3cf02ce8d091d832bc7004baee377e8f184b154638b3a5a4503cb8c604b0bfd84d93d631e57e02671b74a30f6054097d014f9142c1f81157c13a120068a2680ffaa1d1d37057c7f9fe2b42b7db94167f7d834061af28e798d3b8ec0a72f2d1865bd1046f39612bd0badb8aa880b2c934ba8eb031cb0bd8f7c3a813e905775401ba25dd441243bb8be63841d5f73b3472f1a72533ccbabb9deab357671f4311ead2b48ed2ccd7aa57d0bd886f898c76c5f3de34a12ad3104d97fd5be7fda6ce83ad994df9af16ca20e9ac9e21816704987636513296a247ad53abc1389e5880324314f5646dd40e274afd786b1d57a8069a6f67c4ac739ddb147c21708e55e568b2e8147dc322a3b39e585eb2629e4f0896389169b90f559e6a3c2cfdd298cbbbeb0b4f78dd3e61701ec24a6f7a9d100e81185b9f295c095c50d2f2c22d3662046708d95d80f8aa6b1cf8e8666901f46ef4e49825d69b71129a2af95d830efed7beed666d53fde33a0bd739f48451e2c530cbc01805388fa82ccfff73fa612bbf524b3fa42867ecf060f8db6a1b55800cf25191936db2a200ec1132c9310bad604a0acdd7c6192b834738457eeee8724c031a3f6aaa519380669e002a771285a63fc4d89ad57be1870739c116cff07b45c38d050d874215f4aad79b5094901db09de2d09523c0f36301e93e08d7fbde6bd30e23a4e48fee99012cf89e0d17947d33a472786e6466755fd19f2d8b1fbc52342f9c36f3e1d70aca15f969fdff218a71572fbe4295adf7ff462d45e35dfb214710978cc4da1baf2232210e55312f31d205b2a69090dd402a369fc30f15d95405dccb47c7176c6aee06605915bbbe316f11cd78c7bece2d929ee5e794f19e0722c423af2109923376c49d3eb5342a2069070db58617af9b2cdfcf6fd7f3de3cfef38df19c49cfbe2a82f9441c73658aaed42501eb25aca03c3ed90e6d477b1ae38a7c6d00bda1ff4c2342c871b06ece1d178978dbc6224e5bf14680ed40474024eff6a3a6ae63b53f1b22d69e23f2256b90c1275142de0c3cfcad929bd9031f57b326ad5fef6ede1669404d5bf9d6a11051d0e07c8ed7cf56998c721a83dd885b68559d5b7ea20e62abc99cd4499359eb82194b4dce02b0b768477ac0f28797c0c299c6608a32f193b07ecb9e63803e363c84f550c301569c9aad4e560d37c9a139ca6f1a3e6be1bc4ba72e28e47e8c3c1a5a9e7a7adafab34cb8d2f764c44469f08b86781d4d3869cf8cc87050ad8902724d00dd9289a0f5b12417dbc542ab48c49627018f73f07e1fa1fc964a084545c8511efa46a4dca712e9625600e25a6f46fa0b9d6c4846db359c5c1d5c2f39f859f7d06ae3e7bdd67627c71a6485af99ed2f9eb16b7e5f1e5b6540f208ffa98b54842f1b939ed4ae0a853e2c2e20f486fd343ee9f343ba2d7fb5de9e39395d2a259aecb68b62a6166be83f35ce35d9cb5fcc8b42001f4e5d56b40394a02a0d5d34032b093d05a94833c2998d4f8f56d6f08f908d63b2bd8842c8ec0aeeb3258a9167bd8753fd44dac1c956b76cdf534c59e169853f6c02839528ba55fa7a7b6e13b228c380a3bbc35b79223dd546b2bbd8515e8051859510bca6a6c228ef35ab89aece1c16154c7e970570166b71f4a9a9ff01eaf941abe326cf79490b0714b10b6b36c7eedf9e370de2a1027f9e1e120110282656b192e3176c0f1e0442417c3cbfb1ba6b89dad5b11d214dbb6351fe2c0928d9fd275e7263b4dd0b4494eea6a7a2b5a650f69b3eedbb4d44c045fead19562068db41c957974e91a191a8dfc8bbff2f6496938ff8f68e132619442cd796929b9a688aaed9592459ffa48c52f154d8a841745e7b3fa3e79143dbf04eed53d7a9c97cf234c46b0a50bd8f74faf7a827d0d35b6fffaa35e564c51dfe1ae8b14ec79cf62203ae2b1f15509e1dffb52d4a6df86d0eb2ac0017433e2382c5d3c3b10da7659f06679ce84d7bd13f3234c5139f1c83023d0d582767a959c0a00845401f585f17b90cfd5293e396a9b8212eaf5fd4ec5fde368075257680c4a85e8b6a756533d09bd9de3c0b9580fbda387caf9a92f15174df9bfa6363e258ac31f7b337df0793f39a62899d81fb3465c43b2ce6bb63ae2d1f967b90a24dffdda34cdea4351a5174bad0da51874d058bc6fe2840771db7f8dc410994a283ec1816c2b79c8bacdd6eb59542ab7f55434c86df66fd8f82165124f1104ebe7544264010e38a03cfc36cc6a4f4d9aa43857ba37172e33d6841903f4999367eee83fbe82bd701d427158d6f6004739dfe6b1830739df5430fac486f866a44d39677d94f81a88c7e07ab6c195013abf35820dff9d6eeba4aad1ee73a3a26758d0b281632c4659102df409a8fc64432466c7f4b417ff2d7634593f28ac6441a00b2f9e6021298249f30fed3736f3acb2ff0fc32cc00a43e0608ff93e7430069e0dc43b7b289cb2fec189662218642cc8c43180435e0c5df5df444128aafd2900903efde1fc34d07dffd0f8153ef1fc49ba952a0e91e73969314a888729d71ecc1255b279ce7165ea728a09b10484027a8e4c56844d67461f81587a32fd2b69056d2a741688ff840eab6e098c4d9de2b835363eadde2c689db0a5af24a71e239a9e0422294f991ebce8f21a9378deb3ac827be4ca7e74b3ba867a71e83ed833a8ce22b42bed31f386dddae759193e059e96fe9692e2839f9f0cc72eb0ff0f16787e3a71e33d180b8373cd1d352448ae40501f62fbe5aa548fc62defad0652b0940447757fc90379fcd9549422d99eba4b82ea2bf135c7090819de39ae38aa278fea2c6cff68d0e5b93a50f5730df808c4b101e888cc618e7b2fe4593ca58fdfc164cf3204985f01e2e65ad510fed43c636a2bc110cbf1311f42fdb4611c90496455051a12c4393d8ca63a07266aea9176dcd0f83a43c71b94ff89d80370aaba40a01910750081e53699c091215b960489b9b487b8c8566b3a498d3f03f307a706973211727bc970ba43c7f05c324d37986bf7c1910cd4a09097687fdea31228dceb43fd50f6f73d6e875d66ca3c688f28fd02ea22215c09eba842ec376b1d2aedf2d96398a11a24db9c439498ff4daabbb0d6f4a8fa6c4be1078cd112ceb7b09c288fdee4b956c797011f03e5ad4e8c907bb6cb7db9a858a9f79ddb8c887eecf3b2ff7f240bbe8fea83cf9fcfaf726a5c12f82c0a6e53758f8b28c498157451d976326414cf2672bc6f398d55a0e8b4458959844904c5d6353c2582827540744793098ce33a4e3a242e2f34eb55c84248731832db1d07199e1b9f787c5771889e3b174b20d6f5c6dc1e65acf0679d727f71205c6f815d76c47bdae83b1f859794c8b79583ec99d36a0b41a27ef4f050629cc141a25ab432a104cb4f1a34501949ed1e708f0371be131aa0198462a68cb72841c74ab83c16bec6029063f6a66efd5271197222a66bb459b1ce3ad54dd55f24318741c509b8d4814b683cb723e749bfd2ff4442192834d4222049f0826433170c5a5d596c104e12720742bee1f75ab230e1b8aead2f3584dff7f5cb8e1d83f2499261a7aa5d9bb1b1809fdfc6eae89683db692279d7e85da85de9e1c3b5a1f9d92e4abf23b539e95ee693a7507db88cffd94d4c7ec2af8ad0485c202f8bf732befbc1ab4357530367de6c957c582d74e0189aac02c153ee111385745f353aa023a017826570f6c177a2517f465fd74ea325f4cf823f5d1e50eae70f5be802bf89c761751db81668c0a3bf0f3d54a667b7d306db9741d8dc0cf2ba04c5c7f61ae658b3571e06bd9df3a38a2e1de62cd039b7c8cb9d73af7e5723ebfafa2f27b2da29e2c88de1b44299b4c2417d546c9236a4020a36c3fb9c72a89b89eebb534080640b18e3a9bf9c5300c45b195f4f76145d505497da97ac783c44ab4e09f45d9c520314b898d77871166313f57c105d55e1337ccb86fadf464a80ec89819abe8b2cd6d56e5bdf752eba2ca0925fdd31d7bde7a086bbb758ec4494e133e1f86e577d93f6a528ba4c665dd0da0d233df6b2e3067f3a2dda23a3378ddfffd96a25a1ea86ee21914c7cb3aa28fac638ac6d04386f3ef421e02f4ecd423a338be831d2ed29baa5b87c83a1d2602784a37c0b4b6d01afb041e7469cabf9885286c8bf9992f10ef5355d785488492b8d64020e65072fa91dfb24234ae40b27a19c584d2ca838254262ef8a67934370918ef7de475e157c9cf8ecf6e518a9b292dff02ed3d8feb73cd7c8c7ec8cddeba338a971b110677dd7f7c460b6d7636ae7d187913e5f158d6b55a19a3cdb33ea194c5c65770f74a9806cf28847acecb1e854a041e496a63d34a00745488201a3d4d3416dbed06eeffda22f019577abaf05c577ea8c341754b1d5cd29602f0375d88e932850102b4025dbac99445b285ff790158789148bb1ddd6df8ca3421653cae86fee000a0d00c50aeef5d99c8cecb06831859b4ef793f42d0a3f16e27593b7ec18e80a203aa77c54424ccbfdf390b27bd53a070d18450603454f24094175e07ffba9d7333ef3cf49246f8bdafda961c80426ae7d8a941a13bd9bc59b63518778ebfc722177bb659f813f744fa39e59934e81a6a9d43334b360ac9aa427e7073846a702d9b496f814b4d5b9a691a2b399528fc9656786839594b8044006805014a1c148062bb3011bd4f8bd28d62d1a41fe368f59d8028a35af8c3d09ee690555e7d6e6e6a1dd012f3d7aeee40bf05e2714c1d1cae95299bd3f83015ad3c40e553c8c48dd89ae2f48814566a5da517fccec307b5324e3d8fc531eb0a76e1edb07ed6a68bd905638d7b625d7232fa0d565a6fb1ad6e07b5ca47f1db0063d1e4c8e9a094383ef7e4eab86f784aac3a974b05b70659d16dfcf36a1a9a99bd700b3f072871e0d8d5272e127e886b2e8414e4aa49c945e2160851cc5d819b4d5c4e20d35095f1dbb7fb5fa430c6808d697dd6faabee99bdb1c74e1222212d5762741d59f99eea85984751cf9fc57932c796dd0f7e03af3e7aacc568d085e03d21e07b6a7b797f80e8482a8b9de9c0f68a71da861ce69802c6d16f0a53c8c009967bb12204695a4d575fa772b94a4e6bc8048f684baafe49dddb4caf72906cbcfaf290799c5d13847c0495e1df55b64c4bb9596e67aec5e6af404d0e3be219990f39ddb326340effca550cb859acb9c5857737c49d1010ffbc4f7401dfea7d9c6047316d265cb89c6de1e8ca515945bb543e4c478273e5bd7a0531bd4e72687209c3708d8ab8091dd3bba7cd0e505d2facf91c877fc9ba9bf6a28526eca2b9d06b229be38a4a7a25fe76a74119e75a6a1852d1493d15756b0b0adc03a59eede9b8d83f558b4de23435870b62eed20056529a31610a6a706ed5f88ba6b1e0698090df8697acf1479e7b7f3f0c518e35bad33e70cdc5535228c28983f437f7a0061ef2008a4d3f0e03c920d972f1a8b2f9ff3fa0a93c6ef69d70a285a23c638cbcec4b98f9e8694647b96f2689fb1cf976e83487b97622a38bfcb56dd16", 0x2000, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003940)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m20.921134136s ago: executing program 2 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400042) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000100)={{0x3, 0x2, 0x800, 0x0, 0x1}, 0x1, 0x7}) lseek(0xffffffffffffffff, 0x851, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="b95e0300000f32b9800000c00f3235000800000f30c4e1c55d760b99ea00000000f50026360f78c80f781c2d01000000d9f10fc76d4966baa10066ed", 0x3c}], 0x1, 0x60, &(0x7f0000000000)=[@cstype0={0x4, 0xe}, @flags={0x3, 0x211000}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m20.77035408s ago: executing program 2 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000280)='./file0/file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1) getdents64(r0, &(0x7f0000000300)=""/172, 0xac) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m20.767953013s ago: executing program 2 (id=80): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1, 0x3, 0x2}) (async) r3 = syz_ublk_setup_io_uring(0x1297, &(0x7f0000000180)={0x0, 0xa836, 0x400, 0x1, 0x1d0}, &(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) (async) r5 = mmap$IORING_OFF_CQ_RING(0x0, 0x6, 0x6, 0x10, 0xffffffffffffffff, 0x8000000) (async, rerun: 32) r6 = syz_ublk_setup_io_uring(0xfa3, &(0x7f00000002c0)={0x0, 0xdf03, 0x2000, 0x2, 0x175}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) (async, rerun: 32) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, r7, &(0x7f0000000400)=@IORING_OP_TEE={0x21, 0x43, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x2, 0x1, {0x0, r8, r2}}) close_range(r3, r1, 0x2) (async) ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0xa) (async) mmap$KVM_DIRTY_RING(&(0x7f0000ffa000/0x4000)=nil, 0xa0000, 0x2000002, 0x4081831, r6, 0x40000) r9 = dup2(r2, r6) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x10, 0x1, 0x6, 0x4, {{0x10, 0x4, 0x2, 0x9, 0x40, 0x65, 0x0, 0x6, 0x4, 0x0, @remote, @remote, {[@rr={0x7, 0x27, 0x1a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010100, @loopback, @loopback, @broadcast, @empty]}, @ra={0x94, 0x4}]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r9, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x220, r10, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1c, 0x4, "f24e28470bf98caf9acc98ffec95c12c31a6fbeadf6e8e79"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x30, 0x4, "02b91df83229d6f65ee236f699c90d644f226baef30669c278c0f036eca61abb31a3b18d3c45e09ea98a201d"}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/custom1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff00}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/custom1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@!)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x43, 0x4, "daa28c3a64f318b71f62ad6bbc6d90f021116dbdea099d6ecc9b9508f96f03f0b96f38b526151b88a05f7bff2bacbe9527ddfd4f97929e9b797698e6ae6522"}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_WOL_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000084}, 0x40000) setsockopt$inet6_tcp_int(r9, 0x6, 0x2, &(0x7f0000000940)=0xdcd, 0x4) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a80)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000980)="e5c5395639e691abb98b5d5423e0f13def96900ebe95a88ea0a1ecbf87783e1dcb3b055df0cb34d1afa9f4abc78d30f8f10d578efe2d3fa61594675c1217ea1807c929e833e5e43c60e05182de05974f248481bfa360b3892f2de3d4721f910eea26eafc9a59ed88cabe794c23fb0a7bf4610eddcb97055d38ee58e965ca1ca5724608db241fb45ffa69f011561853998027cb9f679c772bf3b95e03919ec80c557ccd9ee5e9cfa3c61fbda982945ccdf1335dafb80a12e9ca414805de43592d8d19a3a760d2e3fb53bdf3af03066a94149d975f549e0256d25bd3114de0f8a61f6d5c86bda834b7ada5f00133dd2e22bfd9", 0xf2, r0}, 0x68) write$P9_RUNLINKAT(r9, &(0x7f0000000b00)={0x7, 0x4d, 0x1}, 0x7) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r9, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c00)={0x26c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xc4, 0xac, "270188ddaec60a97a4f0edbffd644eb34584c54bc8e1f1aa07b782854d3bbd34c3176f42448818ee177512fcdeafcd667b606578260283fbd2563aaf88efc88a3290893e80d3671628c424cbc317df9206aa8593b1c38501b4c6cc9699fb7127c6b7d3dee8755b9bcae8607c442b64d55b80670ff640c593dc0b9ee3d522dacfbd79c0ee51cf80befd6ff8d8b5c593195c8584edd2340e09b99a5614b70d03db1c60d39a548de75a924154180c5ff9ba9dce4471a6a9770d6e818c30fb4ba65f"}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r14}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd0, 0xbe, "d50b7f75fd5827f3c9942499ecd371d609ede90f7b00d198ba79f6ae8b5bd23886a372d225d4e9decd55f24de1842bdbdf2f3e03c1f1d08a4f7624f119a853cf23960af7f4aec436805f6e71c62fe995a50ad7f61b636524d572eb62e3201954fcf9208a123340192dd2f5aa290b08be8109aceacbd16c3edca2d796467a17cd47d886b2b41d82e1a40fcbcb72d2ab5ac955435731a517f360a2c1bfb98c1d860e0e7903535a3de90b13754c246e6e4f2f1a39ec4d13c8e42e5bb464adff5b2658473deb60fdd568b6a4be4d"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x68, 0xbe, "c4ee6727ac9e58d16407af4ee2a354bf70daac082d91cd8cf30ac9a0b96f289813bb4754b67ca12a957bb14b26e17c2c5ea7c0f2ad838e1c6bf4408cfc62a83e5a7a5ef0af7ce9f69c3e32deee5e08ad76dea2df99a43441e1cbfcaf354b69a209fe93e6"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x61}}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2c, 0xbe, "6ef102fa76b371e0f8e2c84c5bb69954fd97eabf2d0c98aae8e2d8bd933313646cfec71a0791c47b"}, @NL80211_ATTR_MAC={0xa}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4004}, 0x1) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000fc0)={'sit0\x00', &(0x7f0000000f40)={'gretap0\x00', 0x0, 0x7800, 0x8000, 0xfe6, 0xa, {{0x13, 0x4, 0x3, 0x7, 0x4c, 0x67, 0x0, 0x5, 0x2f, 0x0, @private=0xa010100, @local, {[@timestamp_prespec={0x44, 0x1c, 0xb5, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0xc5ac}, {@multicast2, 0x3}, {@broadcast, 0x9}]}, @timestamp_addr={0x44, 0x1c, 0xbb, 0x1, 0x4, [{@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x5}, {@broadcast, 0x81}]}]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={r9, 0x58, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r15, &(0x7f00000019c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001980)={&(0x7f00000010c0)={0x8bc, r10, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2f0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/custom1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/custom1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd5e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '/^]\'!/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_VALUE={0xce, 0x4, "3600dd7575a573d9a6309f8cf0430285e0f26057bc4decfc99c1ffe33c76166df0dd35436c7913902a12ce8b10146997c7977b0137d5079152d2f795d086ff678328bf9ee7be1e578703b736c9f5324f261c2266972556a21e285fe6ebeb791b7a709aea3f3be77faa9f8f38e11bfa4eadae2a2665161dbc8fd168710b56e7dee68d26697e6675f78a6878e42b465075a4e8f1b437bc75638fa2cccaa25a5e4f7fad609ea31404b32e45cc8650208255d3966b0ce0d7647aecf651ea0fa3d196af58e456dc80cc74ce65"}, @ETHTOOL_A_BITSET_VALUE={0x44, 0x4, "adf6e634e91a33c6ac5cb12b1ddfc48cdf704cd5660fbab66895520c33d54bb432a885201b2a781525d192950cbb1e6cf0ee0c95d84a7ff8221015a897cae005"}, @ETHTOOL_A_BITSET_MASK={0xfb, 0x5, "a30953c54804775e35048057a5d138b42fb448f4779937390e002d1de9cdee545ceb4dbd45e1ef7d1230b1cf283f7c36c9450ece5832c4bfddd007f5dc73413515d8d222da52e480b28fa586e4c18d5d3eb733909ea612c3364c79c7c1b098ab908762d3cc838824e698a923d3cceedd3c1ebe7a77e367b45807f19ba8141c9811d7d72bebf300ac24941158ccf988f9358ef7aa1ce598630b7aa612bbf66e305e0081a76c5b6417bf2306f7a827ecb35b226d11dd39639f5b44842d8a3603eedcd9384ee2dcb09d4186f476cda5d4e4f432d329a56b655691f832b925fab16d9ea7b18bdec440a6068d60cdaeb07c6885a1da1cd56cc5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_FEATURES_WANTED={0x1e4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0xdf, 0x5, "fc12fb43569b40a1da11b8e91a05fd0daed9d75a716769d6f93c01fe04512622989b3ea9dfd8e0148ad87e98c0f2208a14d0e56b5119b40ebb0971aeca95e606938106dea00e7a5ad8783374db1d28312629ae0b2d2aab3cbb9a305edd98f1bcad2f24240ba2f56e8ff1b60f476a671cdc30b13a8fd33bef98da8e61b5e833fc4ab134be641ede9b53b7569008d1127f85eb40fdfb3256b009a011df4e775f666cd2311d0e3e0a70ebf3d682e8904a7e41d1ab96099d79e66741b1330e230112e56fe62b0561494883d49ff347c6c3a610a69258c90eb521cdec7e"}, @ETHTOOL_A_BITSET_VALUE={0xde, 0x4, "23ccd98e87e1e372972b07e5109680aca89c89ebc6da0b6aa8f904314e29f14451a6f36fc34969cccd4f400cc50194ba6c5fd0aa6556f70a6f64c51cf050b23f575ef7769cdf7efbcacf960bc06f931386a8d3822957d8379bee272f8ad22574571fbaf548bcbd628151762528caeb86ea27d717553d2fa2ccf0ccab142c295f44137cf98286978a78e0124e5aab226d7d5763a0416b3b7d5d4ae8d407473724d10c247bc5e814c2bab5e046359ac2a1d196f54cc15d96cfe456fda3cc075ff84dacf196a7c3dd12dc6d9568725df70f8fa5fd0beb7a292f656b"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x90, 0x5, "abd13d4c226289c6f96db6a27459da7746a4e602d1ccf4c542e303518475646a846bda05d933d38dd9a3b344b98bd5b5cf8fb0e5bb1e4bc753b77b3cf572baa56356f9c6749259821804fea9954e2806c3f7de130c050f73de22815918a03c5bf5bcbf4c4695eee119c59a3b7f7e476ae0212de533ddc7d098692d5b767038b22d03c7fd822d7d7357f71840"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_FEATURES_WANTED={0x270, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xdf, 0x5, "694162766552a5568902e29355d5efdb4645011fc3b2b0c0a3ced3acd77a5813198ee8890ab7cc7b419abc5e5a586f68eacd0a397f2544b7219dd7eda043953e2b6e645be154ae8832c6b5d5f0e7c9f897d6cd2796f3016f6e3771a1f444443a6cecdf7d78629254d7605460c2262d950d0f498d06b6dbff3a90ef93cb0f2948ad96a75cbcab06164445eaf31f845a371ab80aa2ad6821f893122107b4b521adf96e3eb8fd231c3a48aeb5d3d5490051d35e6fa83c4dc792e8d3ec84c1a31f20876b5fa16853566e011516520f7d90376c2818ad2dc28d87cafcaf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401000}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x36}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/\'\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '],&#!+#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\xbe$\x8c@&\'%\x1b%\',!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf383}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/custom1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^!%!\\\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5b10}, @ETHTOOL_A_BITSET_MASK={0x48, 0x5, "3d674cbf2ea4e3c9e618e7277e8b8e376a404451c49278f3fd05fff9215f168ea21669d22300a4824fc9f2eca7157de33c6a0d95fa053b628b4f413cd5cb3f05668f3ff6"}]}]}, 0x8bc}, 0x1, 0x0, 0x0, 0x20080084}, 0x44090) (async, rerun: 64) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) (rerun: 64) signalfd(r1, &(0x7f0000001a40)={[0x5]}, 0x8) 1m20.431069287s ago: executing program 2 (id=81): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000240)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000002280)={0x14}, 0x14) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) (rerun: 64) close_range(r3, 0xffffffffffffffff, 0x0) 1m20.43033089s ago: executing program 32 (id=81): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000240)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000002280)={0x14}, 0x14) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) (rerun: 64) close_range(r3, 0xffffffffffffffff, 0x0) 1m18.47254118s ago: executing program 3 (id=108): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000440)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)=ANY=[], 0x310) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./virtfs_dir\x00', 0x777) (rerun: 32) mount(0x0, &(0x7f0000000540)='./virtfs_dir\x00', &(0x7f0000000580)='virtiofs\x00', 0x0, &(0x7f00000005c0)='dax\x00') syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (rerun: 32) 1m17.443007565s ago: executing program 3 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/thread-self/fail-nth\x00', 0x1ab) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4000044, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f00000002c0)="73e226481a966ab38d2dfeed54a478575348b9a7d785c26b7e569707cc54ecb737aacf534cdbd218ee9c242f630b8b3550a9270e1c8d0b8879f195a7f4df1f0413fcd4dcc5a7750f8b9950e87a9e5e59c156a96a560390f6d5a98ab84251bff4c16c901954540d530444a83c0b16d01f2c6412bf809bbda1cd9d3feb9fcaaeaaa0e36727", 0x84, 0x8880, &(0x7f0000000380)=@file={0x0, './proc\x00'}, 0x6e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000400)=@ethtool_per_queue_op={0x4b, 0xf, [0xfffffff1, 0x9, 0x9, 0x4, 0x7, 0x8, 0x4, 0x7, 0x5, 0x1, 0x0, 0x0, 0xc, 0xffff, 0x101, 0x1000, 0x2, 0x6, 0x1, 0xfffffff6, 0x2, 0x1000, 0x80000001, 0x8418, 0x0, 0x173, 0x6, 0x9, 0x8001, 0x80000001, 0x5, 0x0, 0x26d, 0x0, 0x8, 0x8000, 0x2, 0x58c, 0x9, 0x401, 0x4, 0x300000, 0x0, 0x7, 0x6f, 0x2, 0x9, 0x100, 0x2, 0x5, 0xdaa, 0x3, 0x1, 0x7, 0x3, 0xe48d, 0x7, 0x100, 0x0, 0x5cba063c, 0x40, 0x7, 0x200, 0x7, 0x40, 0x5, 0xfff, 0x80000001, 0x0, 0x80, 0x9, 0x0, 0xf389, 0x5, 0x9, 0xe, 0x8, 0x6, 0x6, 0x7fff, 0x6, 0x4, 0x3, 0x8, 0xfffffffb, 0x3, 0x8, 0xab, 0x2, 0x7f, 0x98f6, 0xd066, 0x101, 0x8, 0xfffffff2, 0x10, 0x0, 0x6, 0x8, 0xb56, 0x80000000, 0x7fffffff, 0x7, 0x2, 0x1000, 0x5, 0x2, 0x4, 0x80000001, 0x18, 0x9, 0x4, 0xffff, 0x7fff, 0x9, 0x9277, 0x5c, 0x5, 0xa29, 0x10001, 0x9, 0xdd15, 0x400, 0x1, 0x4b14, 0x80000001, 0xffffffff, 0x5]}}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='27', 0x2) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xfff2, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x2}}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000880), 0x4000000000001f2, 0xfc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='R\x10rust\xe3c*sgrVdx:De', 0x0) 1m17.368841686s ago: executing program 3 (id=121): r0 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000940)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000980)={0x1, 0x0, [{0x10a, 0xec000000, 0x4}]}) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x0, 0x3, 0xa, 0x20, 0x20}, {0x20000000, 0x7fffffffffffffff, 0x0, 0xffffffffffff0dac, 0x0, 0x14d, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffff6, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x6}}]}, 0xc4}}, 0x2c000010) (async) write(r1, &(0x7f0000000740)='r', 0x1) (async) r6 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x40580) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000400)={'netdevsim0\x00', &(0x7f0000000440)=@ethtool_sfeatures={0x51, 0x1, [{0xffffffff, 0x4}]}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0) (async) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x107642, 0x85) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r9 = io_uring_setup(0x1d31, &(0x7f00000001c0)={0x0, 0xc8a3, 0xc001, 0x8, 0xc1, 0x0, r8}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) io_uring_enter(r9, 0x63a, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys/bus/serio/devices/serio1/drvctl\x00', &(0x7f0000000300)='openpromfs\x00', 0x1008200, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/fs/o2cb/logmask/TCP\x00', 0x2, 0x0) write(r10, &(0x7f0000000580)='off\n', 0x4) (async) write(r10, &(0x7f00000005c0)='deny\n', 0x5) 1m16.281135987s ago: executing program 3 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys\x00', 0x1ed) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@hopopts={0x33}, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x2b, 0x0, 0x0) getpgid(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x40, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000280)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x280402, 0x9) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x7, 0x180062) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x800) write(r1, &(0x7f0000000680)='byd', 0x3) 1m15.977438046s ago: executing program 3 (id=133): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='io\x00') lseek(r0, 0x1000000, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000740)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000780)={'comedi_parport\x00', [0x4f24, 0xfffffffc, 0x10000, 0xff, 0x5, 0xcc8, 0x6, 0x7, 0x9, 0x100, 0x3, 0xffffffff, 0x1, 0x9, 0x3, 0x2, 0x0, 0x7, 0x3, 0x40000003, 0x3, 0x6, 0x4, 0x20001e58, 0x1, 0x1, 0x7c, 0x207, 0x6, 0x0, 0xb]}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000004, 0x50, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000980)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000009c0)='hybla', 0x5) shutdown(r7, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x1, 0x1a6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x168}}}, &(0x7f0000000440)=0x0) r10 = memfd_create(0x0, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r10, 0x4058587a, &(0x7f00000006c0)={{r1, &(0x7f0000000080)='\x9e\x16\\', 0x40, &(0x7f0000000500)={@_ha_fsid={[0x7ff, 0xba0]}, {0x7, 0xfbff, 0x8, 0x7}}, 0x7, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x10}, {[0xaed, 0x9, 0x7, 0x2]}, 0x7, 0xc3, &(0x7f00000005c0)=""/195}) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000880)='./config\x00', &(0x7f00000008c0)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000900)='./config\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./config/usb_gadget/g1/os_desc/c.1\x00') r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r12, 0x800448d4, &(0x7f0000000000)={0x1, 0x200, "f0ffe3", 0xff, 0xb}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9a0000000000000004b73a6300", @ANYRES32=r4, @ANYBLOB="060065d18ddce022190100942a6c6fe17a40000004000000000000000000001d6986f42674816f589583f6ec8181f828b9f0c208674790c4f958d3481f157291c7e5fd264bad40ff28ed1e9947cdb65450196e4bf1b525b083af1e42f681536a198b778175668376a971b815f444c47a85d8faa412dd40a1c742e0d1d786feec3e9aa13481b68faa82c2abcf00b0ab6b785da255346f637214371a3d0335c294d403717f1be5fea09e7f9a", @ANYRESOCT=0x0, @ANYRESDEC=r8], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) 1m15.680457518s ago: executing program 3 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./dev\x00', &(0x7f0000000cc0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./mnt\x00', 0x1ff) bind$netlink(0xffffffffffffffff, &(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc) mount(&(0x7f0000000d80)=@filename='./dev/sda1\x00', &(0x7f0000000dc0)='./mnt\x00', &(0x7f0000000e00)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000e40)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000e80)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) read$FUSE(r0, &(0x7f0000000ec0)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfe99) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000580)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)="06c37127bd146834e177aae5c34b20e023a9eac0a37d847a4dd32cf3778fc0031d746b106dbb10d7644d50f8c4c96806dcb3ba4fa4181b7fa29e1ad2ff35dfa9e76b899322d13b773aff9f6ab00b14037f544cd126afce859a70d1db4d2ae358bd87243d44f3217d7e", 0x69}, {&(0x7f0000000680)="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", 0x5df}], 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}}, 0x0) 1m15.637872515s ago: executing program 33 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./dev\x00', &(0x7f0000000cc0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./mnt\x00', 0x1ff) bind$netlink(0xffffffffffffffff, &(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc) mount(&(0x7f0000000d80)=@filename='./dev/sda1\x00', &(0x7f0000000dc0)='./mnt\x00', &(0x7f0000000e00)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000e40)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000e80)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) read$FUSE(r0, &(0x7f0000000ec0)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfe99) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000580)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)="06c37127bd146834e177aae5c34b20e023a9eac0a37d847a4dd32cf3778fc0031d746b106dbb10d7644d50f8c4c96806dcb3ba4fa4181b7fa29e1ad2ff35dfa9e76b899322d13b773aff9f6ab00b14037f544cd126afce859a70d1db4d2ae358bd87243d44f3217d7e", 0x69}, {&(0x7f0000000680)="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", 0x5df}], 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}}, 0x0) 1m11.130550422s ago: executing program 5 (id=186): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read(r0, &(0x7f0000001000), 0x1000) 1m11.070098403s ago: executing program 5 (id=188): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000001780)='4', 0x1}], 0x1) mprotect(&(0x7f0000224000/0x2000)=nil, 0x2000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/rom\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0/rom\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0x80000000, 0x12) syz_clone3(&(0x7f0000000400)={0x24800000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000001780)='4', 0x1}], 0x1) (async) mprotect(&(0x7f0000224000/0x2000)=nil, 0x2000, 0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/rom\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0/rom\x00', 0x2, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000100)=0x80000000, 0x12) (async) syz_clone3(&(0x7f0000000400)={0x24800000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 1m10.850964215s ago: executing program 5 (id=190): io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000080)="b1", 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='9', 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000b80)='./sec\x00', &(0x7f0000000bc0)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r3, &(0x7f0000000c40)=' //\\{_domain\n', 0x15) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) mount(&(0x7f0000000180)=@filename='./proc/sys/net/sctp/udp_port\x00', &(0x7f00000001c0)='./proc/sys/net/sctp/udp_port\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x2142c8c, &(0x7f0000000300)='\\B,-\\-}\x00\x96PA\xc4\f\x8b\xbauJ\xfd\x96D>\xf7g\xd6\xfc\xe0t\xf3sV\xb97\x1e\x0e:\xed\xdf\x19\x06\xf8@\xc2\xde\xe9\x19l\x9e\xa5\x84N\x9aC/\xd4K!)\x11\xf8\\!`\xe60\x8ew\xf8\b\x9e\x9e\x92\xf3\xd6{\xf8\xea\xa9O\x15\xb7\xcaL\xb9C\xa5\xa8\xbf\xe8\xbbK\xd5\xd6\xd9\xe0\xf3\x0e\xb4-\x8eh\xef\xf5\xa0\xfa\f\x1a\x12g\xdd\xa8z\x983\x04\xad\xebi+\xe7I\xe0fA\xb2\xaa\xc1\x02;\xf4\xe9\x14\xe9\t%er\\7\xedo\xb0\xf8') ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r1) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000ac0)="7800000018002507b9409b14ffff00000202be04020506050e1304095c0009003f0020480a0000000d0085a168d0bf46c92345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f5000000000c902000000004a3200040016000b000a0000000000e0ddf66ed538f25232529c28bf00", 0x78, 0x40, 0x0, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f0000000a80)={&(0x7f00000002c0)=0x9, 0x5bc8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000a40)}) 1m10.765451163s ago: executing program 5 (id=191): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x6, 0x0, 0x3}, &(0x7f0000000080)=[{}, {}, {}]) r1 = socket(0x22, 0x4, 0x8) rt_tgsigqueueinfo(r0, r0, 0x4, &(0x7f0000000200)={0x27, 0xd, 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1_virt_wifi\x00'}) rt_tgsigqueueinfo(r0, r0, 0x3d, &(0x7f00000002c0)={0xb, 0xb9d, 0x4}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x82900) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ppoll(&(0x7f0000000380), 0x0, &(0x7f0000000400)={r3, r4+10000000}, &(0x7f0000000440)={[0xf]}, 0x8) r5 = dup(r2) waitid(0x1, r0, &(0x7f0000000480), 0x40000000, &(0x7f0000000500)) r6 = dup2(r1, r5) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x0) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f00000005c0)=0xf7b) ioctl$UBLK_U_CMD_START_DEV(r5, 0xc0207506, &(0x7f0000000600)={0x0, 0xffff, 0x0, 0x0, r0}) waitid(0x0, r7, 0x0, 0x2, &(0x7f0000000680)) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r2}, 0x8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1dc, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3b, 0x4, "d673cdb888d3b81880be38be77d88575a479c07523feb8d3bfdacf9db486f681269940eba3097e85c630e9b25318e0945400f29660e894"}, @ETHTOOL_A_BITSET_VALUE={0x1e, 0x4, "e59697ee98bcd73d959634692b190a735310ec022e9634fa624a"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3d}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd3, 0x4, "75ad4fb13b5b92e7d373639e04678b4fc220951d74fa54e21e8b382119d201196716656a305bdea410a0d9bf539f7a84a057417a05cd91d8188ee04e1b938cdfc78b2a6ac6014fdab535a1eb5a1e6bd4b98668c44366603a11f78d37e7d474e7d6a55ca0161a51a9a7ad720dfcc43c5f15cd8db44fc06290565507cf2ea5cd7b948fb3c1b0b8a4289bd8b7a489462f8005b1ce915354ded25bf12c01773af07e03c0dee3ce6f22644dc3d1bcc392bb7ef9458769ffb89db23850de8efc3aa8e56e8712bbd7a5c78585f5dab8115016"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x64, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4b, 0x5, "e408ee126a288419d3eb5089137d63dffc3c6e7b95c966ad2c3b17d65e80c1f126245c76aeec14ad6afb55d967f1516844821761f9c04ac9ba9397f0114a7665cce9ad7cc4cb39"}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20048084}, 0x800) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000a40)) ioctl$MEMREADOOB(r5, 0xc0104d04, &(0x7f0000000b80)={0x4, 0xcc, &(0x7f0000000a80)="a07bdd5f71943faca2a703fb32bf20a18968580a1ee7bff122311017f18173d9a4bf93373efc276850a286204434dd0c075b304611265ef405d0d9184cc42e4d9e0880a8a185b70404786948e671314bf36023e62c019c27dee4f4c59c21b1792192a2cca7c37f02cf61a80c6dab45016c498eb81d1be19c193e662e885356cc8d9758b28173c5d17bbf91916e6e2b2a4e41f777c8e76a9aa687be12f533852aa9439e6481f37165a578318546f82ebaac148677846ad2a22158da6ddca64bdc38a87b8de2998f919fa95e23"}) r9 = inotify_init1(0x80800) fsetxattr$security_ima(r9, &(0x7f0000000bc0), &(0x7f0000000c00), 0x1, 0x3) getsockname$packet(r2, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c80)=0x14) ioctl$KIOCSOUND(r8, 0x4b2f, 0x68ea) rt_sigtimedwait(&(0x7f0000000cc0)={[0x88e]}, &(0x7f0000000d00), &(0x7f0000000d80), 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)=@newtclass={0x78, 0x28, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xffe0, 0x7}, {0x9, 0xfff2}, {0xa, 0x2}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x8, 0x2, [@TCA_HTB_OFFLOAD={0x4}]}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x1}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_cake={0x9}]}, 0x78}}, 0x0) r12 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000f00)={'syzkaller0\x00'}) 1m9.710318498s ago: executing program 5 (id=203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000080)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000080)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r3, 0x1, 0x0, 0xffffffff, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x2c}}, 0x0) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1\x00', 0x10) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x109000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0xb0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0xb0) write(r8, &(0x7f0000000600)='1', 0x1) (async) write(r8, &(0x7f0000000600)='1', 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r6}, [@cache={0x0, 0x80, 0x0, 0x70, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '512', 0x20, '1 metadata2', 0x20, 'default 0'}}]}) syz_emit_ethernet(0x36, 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) file_getattr(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840), 0x18, 0x1500) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000340)='f2fs\x00', 0x0, &(0x7f0000000240)='acl') (async) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000340)='f2fs\x00', 0x0, &(0x7f0000000240)='acl') socket$nl_route(0x10, 0x3, 0x0) 1m9.305146373s ago: executing program 5 (id=205): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x7, 0x4) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/88, 0x58, 0x0, &(0x7f0000000100)=""/253, 0xfd}, &(0x7f0000000240)=0x40) write$sndseq(r0, &(0x7f0000000300)=[{0xa, 0x4, 0x8, 0x2, @tick=0xb11, {0x8, 0x4a}, {0x3, 0x21}, @connect={{0x59, 0x3}, {0xc3, 0x2}}}, {0x1, 0xff, 0x0, 0x0, @time={0x4, 0x6}, {0x8, 0x1}, {0xf, 0x7}, @ext={0x37, &(0x7f0000000280)="eb24112858dc1ed600596bf350d400af31db3e8e65be38fbafd39e89602ccd67adea833b6e05007230292aadf8c6cf3449ef52c514ff48"}}, {0xb4, 0x3, 0x8, 0x2f, @time={0x2, 0x8}, {0x6, 0x7}, {0x5, 0x6}, @raw32={[0x4, 0xaf, 0xb]}}, {0x9d, 0x2, 0x7, 0x81, @time={0x5, 0x5}, {0xc0, 0xb}, {0x5, 0x7}, @quote={{0xc9, 0x5}, 0x100, &(0x7f00000002c0)={0x5, 0xfe, 0x3, 0x9, @time={0x0, 0x3ff}, {0x0, 0x9}, {0x3, 0x3}, @time=@tick=0x8}}}, {0x8, 0x2, 0x3, 0x8, @tick=0x2, {0x7, 0x5}, {0x6f, 0xff}, @addr={0x6, 0x1}}, {0x9, 0xcd, 0x6, 0x7, @time={0x5, 0x9}, {0x5, 0x5}, {0x8, 0x7}, @addr={0x6, 0x3}}, {0x6, 0x54, 0xf, 0xca, @tick=0x9, {0x0, 0x1}, {0x3, 0x4}, @quote={{0xc0, 0x1}, 0x5}}, {0x7, 0xff, 0x70, 0x1, @time={0x9, 0xd}, {0x10, 0x7f}, {0x40, 0xc4}, @queue={0x1, {0xd74d, 0x40}}}], 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000400)="3c0a0b55587a381a0c63903b43c159aa98e717adc7db2a3c5dfd821da16bd9884e1abe832dd6198c12ef8a51dbb901987eee651a7d36baf10fe8a0227d1e5af9fbaef62f858543df939efe94ee4563dec22be218d1f541200fc7de1dc5a1c87a32ccaaa4184c639dc72021ba60a1cc1a4ca2093a0dd73320439d4af1eba09ea192a0e1e4380a587ded413baad3026bfc955e97f08085c5791b043ce8e4126b8e6c6240f8993107d907b4ef622937b274240c5524796bc3a4c667d12f2de3fed50056ebc97b3fe014b0f52f6e473199a147789375046493181771d7769d4ee5111a25218d", 0xe4) pwritev(r1, &(0x7f0000000680)=[{&(0x7f0000000500)="3a6dc94fdbbb07b860c53c5e6d838b1ab70b39c728ce84ef046531b45898f413e854a4f35b9360cf553407f5662aea079bd40165646e315d9b06685f8f1e9962e618c3d106c5f376e122aabd7e2b317077c1f7e70f22a600f62f62ec7dcaf7844f233fe881da3a18ad6e6a4001af32eec402659c0c8f35ef5745f187f50fe591c497ad45bfab1974faac532e7ba2e86d6504aa92677366d4eab34acc9f2d5fe1a91023a8afae5c267f7a7ac9003e1e120f516ee120457a9ddd0e8852b8a6c53a330fdf345cb75bde8d35abed15e1fd6845c618a1e130a8c610d78f8a840920e5f36348de8e82f1cf02745693f9fd", 0xee}, {&(0x7f0000000600)="312438b0378f27aedf4dda063959916f8361455990d4a35c2a3f0e27beeaae857c6c9b928a9a14fe82782ea7b8ba18e31aa8ae2f04743a90eda367ac5fd1da767025fa12bb9f90cbfb48bf4e5c3764cfbdb4ef7a7e1d3f3e0957585f4a237c267abb11325870d01195bc519fe059f5b057ab32", 0x73}], 0x2, 0x3, 0x4) sendto$x25(r0, &(0x7f00000006c0)="d9557332bad1fa7b44718b985dea7d4ad46b602bb44373a5977abf1a13b26cc8ed8232010d9cde7f565bea05e4f310ace4a921c5f99beaef1d4bb9daa5be", 0x3e, 0x20009004, &(0x7f0000000700)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000740)={0x9, 0x2, 0x1, 0x7, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000780), 0x214001, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000007c0)={0x7, 0x2, 0xc}) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xa8, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x58}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4005}, 0x80) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000980)='$,.:)(Y\x00', 0x0, r0) sendto$inet6(r2, &(0x7f00000009c0)="c01865493ca0bdda568b5b21674d0e530d7c", 0x12, 0x20002080, &(0x7f0000000a00)={0xa, 0x4e22, 0x9, @empty, 0x400}, 0x1c) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000a40)) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) r3 = epoll_create1(0x80000) open_by_handle_at(r3, &(0x7f0000000a80)=@OVL_FILEID_V0={0x31, 0xfb, {0x0, 0xfb, 0x31, 0x6, 0x3, "189a0a270a64cb1949867f9be06ace5f", "76a66ed4b85e4b8f0c4643221963f0142a20d8ce7389b725e90c07ad"}}, 0x4000) mount(&(0x7f0000000ac0)=@sr0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='ext3\x00', 0x400a8, &(0x7f0000000b80)='/dev/vcsa#\x00') r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$CDROMPLAYBLK(r2, 0x5317, &(0x7f0000000c00)={0x7, 0x81}) socket$kcm(0x29, 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r4, 0xc0386447, &(0x7f0000000cc0)={{0x8, 0xa, &(0x7f0000000c40)=[{0x8, 0x0, 0x3}, {0x74, 0x0, 0x6}, {0x5, 0x0, 0x3}, {0x5, 0x0, 0xffffffff}, {0x3, 0x0, 0x3}, {0xd1, 0x0, 0x7323}, {0x4, 0x0, 0xe4f}, {0x7}, {0x5, 0x0, 0x6}, {0xe1, 0x0, 0x3}]}, 0x9, 0x8, 0x1, 0x2, 0x0, 0x1ff, 0x8, 0xfffffffffffffff7, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000d00)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000000d80)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000dc0)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000e00)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000e40)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r4, 0xc0186449, &(0x7f0000001440)={r5, 0x0, {0x28, 0x6, &(0x7f0000001340)=[{0xd, 0x9752bae8, 0x1ff13b33ebcb1340, 0x8001, 0x0, {0x10, 0x2, &(0x7f0000000d40)=[{0x0, 0x0, 0xeabe}, {0x1, r6, 0xffffffff}]}}, {0x2, 0x447e16e8, 0xb40701bbead76480, 0x0, 0x0, {0x10, 0x5, &(0x7f0000000e80)=[{0x1, r7, 0x6}, {0x0, r8, 0x8}, {0x0, 0x0, 0xe}, {0x80000000, r9, 0x6}, {0x80000000, r10, 0x2}]}}, {0x0, 0xa94909e8, 0x66218d8b56acc940, 0xe, 0x0, {0x10, 0x2, &(0x7f0000000f00)=[{0x0, 0x0, 0x1}, {}]}}, {0xa4, 0xc4715310, 0xae4f8531cdf46a40, 0x8, 0x0, {0x10, 0x4, &(0x7f0000001040)=[{0x1, 0x0, 0x8001}, {0x80000000, 0x0, 0xfd}, {0x1, 0x0, 0x4}, {0x1, 0x0, 0x5}]}}, {0xdf7, 0xc8c3d7b0, 0x7acbe0e46beaac40, 0x9, 0x0, {0x10, 0x5, &(0x7f0000001180)=[{}, {0xff, 0x0, 0x6}, {0x80000000, 0x0, 0x4}, {0x80000000, 0x0, 0x7}, {0x1, 0x0, 0x1}]}}, {0x1, 0x8423a598, 0xd1c0e3c77c2489c0, 0x30, 0x0, {0x10, 0x4, &(0x7f0000001300)=[{0x80000000, 0x0, 0x140}, {0x0, 0x0, 0xd}, {0x80000000}, {0x0, 0x0, 0x9}]}}]}}) 54.070846381s ago: executing program 34 (id=205): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x7, 0x4) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/88, 0x58, 0x0, &(0x7f0000000100)=""/253, 0xfd}, &(0x7f0000000240)=0x40) write$sndseq(r0, &(0x7f0000000300)=[{0xa, 0x4, 0x8, 0x2, @tick=0xb11, {0x8, 0x4a}, {0x3, 0x21}, @connect={{0x59, 0x3}, {0xc3, 0x2}}}, {0x1, 0xff, 0x0, 0x0, @time={0x4, 0x6}, {0x8, 0x1}, {0xf, 0x7}, @ext={0x37, &(0x7f0000000280)="eb24112858dc1ed600596bf350d400af31db3e8e65be38fbafd39e89602ccd67adea833b6e05007230292aadf8c6cf3449ef52c514ff48"}}, {0xb4, 0x3, 0x8, 0x2f, @time={0x2, 0x8}, {0x6, 0x7}, {0x5, 0x6}, @raw32={[0x4, 0xaf, 0xb]}}, {0x9d, 0x2, 0x7, 0x81, @time={0x5, 0x5}, {0xc0, 0xb}, {0x5, 0x7}, @quote={{0xc9, 0x5}, 0x100, &(0x7f00000002c0)={0x5, 0xfe, 0x3, 0x9, @time={0x0, 0x3ff}, {0x0, 0x9}, {0x3, 0x3}, @time=@tick=0x8}}}, {0x8, 0x2, 0x3, 0x8, @tick=0x2, {0x7, 0x5}, {0x6f, 0xff}, @addr={0x6, 0x1}}, {0x9, 0xcd, 0x6, 0x7, @time={0x5, 0x9}, {0x5, 0x5}, {0x8, 0x7}, @addr={0x6, 0x3}}, {0x6, 0x54, 0xf, 0xca, @tick=0x9, {0x0, 0x1}, {0x3, 0x4}, @quote={{0xc0, 0x1}, 0x5}}, {0x7, 0xff, 0x70, 0x1, @time={0x9, 0xd}, {0x10, 0x7f}, {0x40, 0xc4}, @queue={0x1, {0xd74d, 0x40}}}], 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000400)="3c0a0b55587a381a0c63903b43c159aa98e717adc7db2a3c5dfd821da16bd9884e1abe832dd6198c12ef8a51dbb901987eee651a7d36baf10fe8a0227d1e5af9fbaef62f858543df939efe94ee4563dec22be218d1f541200fc7de1dc5a1c87a32ccaaa4184c639dc72021ba60a1cc1a4ca2093a0dd73320439d4af1eba09ea192a0e1e4380a587ded413baad3026bfc955e97f08085c5791b043ce8e4126b8e6c6240f8993107d907b4ef622937b274240c5524796bc3a4c667d12f2de3fed50056ebc97b3fe014b0f52f6e473199a147789375046493181771d7769d4ee5111a25218d", 0xe4) pwritev(r1, &(0x7f0000000680)=[{&(0x7f0000000500)="3a6dc94fdbbb07b860c53c5e6d838b1ab70b39c728ce84ef046531b45898f413e854a4f35b9360cf553407f5662aea079bd40165646e315d9b06685f8f1e9962e618c3d106c5f376e122aabd7e2b317077c1f7e70f22a600f62f62ec7dcaf7844f233fe881da3a18ad6e6a4001af32eec402659c0c8f35ef5745f187f50fe591c497ad45bfab1974faac532e7ba2e86d6504aa92677366d4eab34acc9f2d5fe1a91023a8afae5c267f7a7ac9003e1e120f516ee120457a9ddd0e8852b8a6c53a330fdf345cb75bde8d35abed15e1fd6845c618a1e130a8c610d78f8a840920e5f36348de8e82f1cf02745693f9fd", 0xee}, {&(0x7f0000000600)="312438b0378f27aedf4dda063959916f8361455990d4a35c2a3f0e27beeaae857c6c9b928a9a14fe82782ea7b8ba18e31aa8ae2f04743a90eda367ac5fd1da767025fa12bb9f90cbfb48bf4e5c3764cfbdb4ef7a7e1d3f3e0957585f4a237c267abb11325870d01195bc519fe059f5b057ab32", 0x73}], 0x2, 0x3, 0x4) sendto$x25(r0, &(0x7f00000006c0)="d9557332bad1fa7b44718b985dea7d4ad46b602bb44373a5977abf1a13b26cc8ed8232010d9cde7f565bea05e4f310ace4a921c5f99beaef1d4bb9daa5be", 0x3e, 0x20009004, &(0x7f0000000700)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000740)={0x9, 0x2, 0x1, 0x7, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000780), 0x214001, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000007c0)={0x7, 0x2, 0xc}) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xa8, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x58}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4005}, 0x80) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000980)='$,.:)(Y\x00', 0x0, r0) sendto$inet6(r2, &(0x7f00000009c0)="c01865493ca0bdda568b5b21674d0e530d7c", 0x12, 0x20002080, &(0x7f0000000a00)={0xa, 0x4e22, 0x9, @empty, 0x400}, 0x1c) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000a40)) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) r3 = epoll_create1(0x80000) open_by_handle_at(r3, &(0x7f0000000a80)=@OVL_FILEID_V0={0x31, 0xfb, {0x0, 0xfb, 0x31, 0x6, 0x3, "189a0a270a64cb1949867f9be06ace5f", "76a66ed4b85e4b8f0c4643221963f0142a20d8ce7389b725e90c07ad"}}, 0x4000) mount(&(0x7f0000000ac0)=@sr0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='ext3\x00', 0x400a8, &(0x7f0000000b80)='/dev/vcsa#\x00') r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$CDROMPLAYBLK(r2, 0x5317, &(0x7f0000000c00)={0x7, 0x81}) socket$kcm(0x29, 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r4, 0xc0386447, &(0x7f0000000cc0)={{0x8, 0xa, &(0x7f0000000c40)=[{0x8, 0x0, 0x3}, {0x74, 0x0, 0x6}, {0x5, 0x0, 0x3}, {0x5, 0x0, 0xffffffff}, {0x3, 0x0, 0x3}, {0xd1, 0x0, 0x7323}, {0x4, 0x0, 0xe4f}, {0x7}, {0x5, 0x0, 0x6}, {0xe1, 0x0, 0x3}]}, 0x9, 0x8, 0x1, 0x2, 0x0, 0x1ff, 0x8, 0xfffffffffffffff7, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000d00)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000000d80)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000dc0)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000e00)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000e40)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r4, 0xc0186449, &(0x7f0000001440)={r5, 0x0, {0x28, 0x6, &(0x7f0000001340)=[{0xd, 0x9752bae8, 0x1ff13b33ebcb1340, 0x8001, 0x0, {0x10, 0x2, &(0x7f0000000d40)=[{0x0, 0x0, 0xeabe}, {0x1, r6, 0xffffffff}]}}, {0x2, 0x447e16e8, 0xb40701bbead76480, 0x0, 0x0, {0x10, 0x5, &(0x7f0000000e80)=[{0x1, r7, 0x6}, {0x0, r8, 0x8}, {0x0, 0x0, 0xe}, {0x80000000, r9, 0x6}, {0x80000000, r10, 0x2}]}}, {0x0, 0xa94909e8, 0x66218d8b56acc940, 0xe, 0x0, {0x10, 0x2, &(0x7f0000000f00)=[{0x0, 0x0, 0x1}, {}]}}, {0xa4, 0xc4715310, 0xae4f8531cdf46a40, 0x8, 0x0, {0x10, 0x4, &(0x7f0000001040)=[{0x1, 0x0, 0x8001}, {0x80000000, 0x0, 0xfd}, {0x1, 0x0, 0x4}, {0x1, 0x0, 0x5}]}}, {0xdf7, 0xc8c3d7b0, 0x7acbe0e46beaac40, 0x9, 0x0, {0x10, 0x5, &(0x7f0000001180)=[{}, {0xff, 0x0, 0x6}, {0x80000000, 0x0, 0x4}, {0x80000000, 0x0, 0x7}, {0x1, 0x0, 0x1}]}}, {0x1, 0x8423a598, 0xd1c0e3c77c2489c0, 0x30, 0x0, {0x10, 0x4, &(0x7f0000001300)=[{0x80000000, 0x0, 0x140}, {0x0, 0x0, 0xd}, {0x80000000}, {0x0, 0x0, 0x9}]}}]}}) 6.450820075s ago: executing program 6 (id=411): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000004580), 0x10) (async) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000280)={'wlan0\x00'}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r0, 0x84, 0x7d, &(0x7f00000002c0)={0x2, 0x460}, &(0x7f0000000440)=0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) (async) listen(r0, 0x0) socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) r5 = socket(0x28, 0x5, 0x0) (rerun: 32) connect$vsock_stream(r5, &(0x7f00000045c0), 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000004600)={0x1, 0x5}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x80) write(r6, &(0x7f0000000100)='bRequestType= -', 0xf) sendmmsg(r5, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000004680)=[{&(0x7f00000046c0)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) (async) accept4$unix(r0, 0x0, 0x0, 0x0) shutdown(r5, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.550891619s ago: executing program 6 (id=416): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bb0b1250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e4000044febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a8014000700"/30], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.300035972s ago: executing program 1 (id=417): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x405, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x405, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x4c}}, 0x0) 5.095159075s ago: executing program 6 (id=418): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) (async) listen(r0, 0x5) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) (async) ioctl$TCSETS(r2, 0x80044704, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) 4.740932128s ago: executing program 6 (id=421): syz_usbip_server_init(0x3) semget$private(0x0, 0x3, 0x1) 4.170174053s ago: executing program 6 (id=422): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000001c0)=""/184) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000100)=0xa40, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) r4 = socket$inet_sctp(0x2, 0x4, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000580)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x40980, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000002380)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x4) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000023c0)=0x31) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x83, &(0x7f0000000600)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r1, 0x84, 0x25, &(0x7f0000000640)={0x2, @in6={{0xa, 0x4e22, 0x10000, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7}}, 0x470, 0x6, 0x2}, &(0x7f0000000700)=0x90) sendmmsg$inet_sctp(r4, &(0x7f0000002200)=[{&(0x7f0000000280)=@in6={0xa, 0x4e24, 0x81, @local, 0x9}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="ce17bebe7b99fe75d6e0f6def2a46a30f0b3c5fdc929cd238886e93c7510232ebdab359454ffd0e1977a17c38f8a10661d8dd341ded2cb1de7b70a2eef9f2f4f34a1ab655cea03deea53ed92119db1364765766db64accc4ed38156c0dde915501b87a995536e4e65704ba12f1bcbe82068634edc2eb4908843be3debebce7d94539ef1ec33d2b95f254d692c88eaf7672329a2a60af1a7d4eef7102f4d6d3431f63c705c21045286672", 0xaa}], 0x1, &(0x7f00000003c0)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x20}, {&(0x7f0000000400)=@in6={0xa, 0x4e20, 0x8, @mcast2, 0x5}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)="53a8d9b5be8851d845b65c05e87ccf56242baa2c813c0f27985ace230361daf0f2f45cf227d7eec9b9745bb64ff98918ba9b9fda9de7e8f8055a6119c7cc873b6644a6c56c2e72e19e2b72ad415e9700920e752477a6dcf600d13532bf9b91d091016207b6faae3abc5ea6f912f304b86172b10d2211660cc391af313f7565dc662b11275a63b4daab2fa4ac8c752a0fc634a1396f381af09ae583c374e2a33596f1fac70260fe775918ed4e024c0a63b544fc645ff8393dc946a49679990e8dfe300a55accd471ebfc821fb33b546a5183d9a9369b48e09be53402c2ff0606a1249135d1f95eae16fc6ba0bdebab912", 0xf0}], 0x1, &(0x7f0000000740)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8004, 0x7fff, 0x2, r7}}, @init={0x18, 0x84, 0x0, {0x1, 0x0, 0x1, 0x8}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x7, 0x201, 0x3ff, 0x6, 0xffff01c5, 0x0, 0x6, r9}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0xb8, 0x40000}, {&(0x7f0000000800)=@in6={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000000840)="41924d74362f1e37fc24ddc04d31f9935351ad56f324db4add19623f5556371385adeffce1fbdb2dc342b647a498cb58891eb50628b62117a50f11d831dff7d29920b6ce5c1b8b2ca8e3466b78cc40b057f972b7ddd79e8f536a712b8823200ecfd74fa773a3603991493a88cf737a00e9f5c2d6c7c3893723719fd9ee1d4dce31812a4c995a37b0f4ac107de2494c5519c9e2192b1072977622f537", 0x9c}, {&(0x7f0000000900)="21fb58ba004743e5b424ffc53447f38c1cca5305b6b50f0c8fb76421716d0e25b5e617cfdb00461ed96dc0baac30b44161c9400f7a61d24d1f9f04", 0x3b}, {&(0x7f0000000940)="7b31c847597683332d130c4707d4632b305c9ca105fd9e419f586c0550", 0x1d}, {&(0x7f0000000980)="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", 0x1000}], 0x4, 0x0, 0x0, 0x40000}, {&(0x7f00000019c0)=@in6={0xa, 0x4e21, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001a00)="85d9a77ff17906a9d70e8d161c1a1d2346ed50fe66c98440d4718223c3529ae17fa22cb8010d49d935fbb858db0eb9223ea9cb2125e06a3be8c569cfa1badc78560f719587da1dbef6a7a1e3774fb8d46fad3d769bbe8854e4749536fbc7fa92e2cd177eac339f9847a8bc25f1", 0x6d}, {&(0x7f0000001a80)="37a6de9df65f1d14660fc5074503636349c4bd4521d7f21deb", 0x19}], 0x2, &(0x7f0000001b00)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x40}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x5}}], 0x70, 0x8000}, {&(0x7f0000001b80)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000002100)=[{&(0x7f0000001bc0)="062ba50deba95871b94064c0f2164e97b8a5976c1a8b69b70725f2b97aada118bf0fab2158067cbf3b410322948807e7af851b66c88b493660924d15c88cc98474a896480ff4e95204393a2587c5f3adce18f0f2bba539722637a1fa2c5fe71349a818949f2280781b865cd6c9d25f44c70713bf25fbbe1d540b24218e5c128b52ce3e9d8df6684680037af8c37f1c3bee6b12fc66a6d709ddec449fb9346ad5be9a48b8950953c3", 0xa8}, {&(0x7f0000001c80)="bed83d7206d2c2bb35477bcf3bca8d82f7589023e1855c829f4158e67370144645a3de4790fe9dc4ecd3cd1820e6c393c8952063a77c1a3e9f2097b1f16411316a0c55f446c0fe2dad2f5d1e714eb5c6eb59c4200259b646b93f4c1d0fea06dd54af5ac5c652e883ebfe379330d6ad8d7c422b3f3f08068903d5a6467719ed781bde658f2f0815a2092a123c338b25ad65f2815eb468774d60e27b195212849ac4402dee129a65d5f0118e0292881fd91d10b0310a259e83ceb000703519ad1607e5c36e614c360735e0a0c5", 0xcc}, {&(0x7f0000001d80)="3461ffc2fb0009f38903318d8a075f4774c868cff4e39630d3470b12d00fc5727d81a29a8daa510a86301fad93270743b5c8e08da6edf882ede39a15ac7f7c796316970e382a5faed0755885249a5def6eec3341558db026165e1797685708f8ee63049a86e87475ec7dc1427a569782811c1c7a94f9dd78e138320265c86f1145d102", 0x83}, {&(0x7f0000001e40)="6bb239eac76604fc0f4414e300bfd4e6099eb9aa1d8910db540bddcf729aa1b3c2e9fa2550d2fd48c0c1ca72054c2b311485de961c2cc2301a826443d38baa43bedee6a159a6d7406c9d8c638232cf8934ef2d42e9260964e2030690944ad5f53d4073c09a6a00bcd3ede0cc345e47e9afbc0b9e5a1ab7785b0c6691b486dc2e71f8575f3b5d6001ced9a6c9e906a9aa862459528e7bc3ea99ac5c3c543154688c2d78e33cf465d449ff98054695475cc2", 0xb1}, {&(0x7f0000001f00)="d6591fb95fa93ee228c7a1ef9510178c051b8dc806d84f2ce8f7520031726df67117a379a68110fc4945cca85befc4a45580dde95b83f1b1e321d6745486715323", 0x41}, {&(0x7f0000001f80)="42db223a51875053942630774285c5dd1e3ccf1e0e745ad07327e8806596a2ce8a913c6d7424a059428b3dfa0203fc81ef9b5180aeb92b9f5186d6cdf269f3e40c548a609368f3a84b5224fe2ecd1e27424bed7098c8d2", 0x57}, {&(0x7f0000002000)="8b15ff771826f53389e528a334293f7aa86c8e0735f36ac058b5ea5a1027dec12b71f82e9ad66a606a22f8739e50f039c0e144a192d065d42744f644b5e444130181727890eb267c3e984a47bb1122d3843ccda8cdd56f34719c6a4344efce611e8a723f86edf4231da8b578a06dfb4610ad42468f386675b123a59628ed269c46f72dcaa8634c3b394eefe4f75bf3ba769f83fb1e03c01a4a78cc3d2863d92f36cfb72690a25bd904934b71cb277edab79100b7bf539bf8a402c8f87448d68109cb8cee0442578152662d479fb97f439d40068a31ffbef87e6faecab1517f59ea55926b5b057adefe551b", 0xeb}], 0x7, &(0x7f0000002180)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xfffff8b1}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @authinfo={0x18, 0x84, 0x6, {0x92}}, @authinfo={0x18, 0x84, 0x6, {0x841a}}], 0x60, 0x40084}], 0x5, 0x8c4) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000000000014f194e20002b"], 0x65) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 4.013483328s ago: executing program 4 (id=423): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) (async) mount(0x0, &(0x7f0000000040)='./gadget\x00', &(0x7f0000000080)='gadgetfs\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./gadget/dummy_udc\x00', 0x2, 0x84) (rerun: 64) write(r1, &(0x7f0000000100)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) 3.832141855s ago: executing program 4 (id=424): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32], 0x7) 3.257387053s ago: executing program 4 (id=425): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x9b}, @nested_create_vm={0x12d, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x1fe5, 0x6}}, @nested_amd_vmsave={0x183, 0x18}, @wrmsr={0x65, 0x20, {0x288, 0x9}}, @wr_drn={0x68, 0x20, {0x5, 0xfffffffffffffff9}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x9, 0x1, 0x1}}, @in_dx={0x69, 0x20, {0x9e0b, 0x4}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro32=0x440a, 0x9, 0x8, 0x6}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x77, 0x0, 0x5, 0x1}}, @uexit={0x0, 0x18, 0x7}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x60, 0x2, 0xd, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro32=0x440c, 0x1, 0x8, 0x3}}, @cpuid={0x64, 0x18, {0x1, 0x4}}], 0x268}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000600)={0x80000000000000, 0x30000, 0x1, 0x8, 0x6}) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001980), 0x620000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xcaf9, 0x60000) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000001740)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001780)='./proc/thread-self/fail-nth\x00', 0x10003, 0x10b) socket$inet(0xa, 0x801, 0x84) chdir(0x0) r4 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000001800)={0x1, 'vlan1\x00', {}, 0x5832}) ioctl$SET_ARRAY_INFO(0xffffffffffffffff, 0x40480923, &(0x7f00000018c0)={0x1, 0x2, 0x0, 0x9, 0x1, 0x9f0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) mount(0x0, &(0x7f0000001840)='./mnt\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000017c0)='./sys\x00', 0x40) mount(0x0, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', &(0x7f0000001a00)='sysfs\x00', 0x80020, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000001a80)='1', 0x1) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001880)={'full', 0x20, 0x8, 0x20, 0x4}, 0x2f) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x204) ioctl$ADD_NEW_DISK(0xffffffffffffffff, 0x40140921, &(0x7f0000001940)={0x16, {0x1, 0x0}, 0x2, 0x9}) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bfd000/0x400000)=nil) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x20000) 1.973439475s ago: executing program 1 (id=426): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1d2) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001880)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f00000018c0)='./sys\x00', &(0x7f0000001900)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000001940)='./sys/class/net/syz_tun/gro_flush_timeout\x00', 0x1, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000001980)='fd/3\x00') sendfile(r0, r0, 0x0, 0x7a01) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/206, 0xce, 0x2000005) lsetxattr$security_selinux(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)='/usr/sbin/cupsd\x00', 0x10, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f0000001800)={&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f0000001700)=[{&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/195, 0xc3}, {&(0x7f00000016c0)=""/34, 0x22}], 0x4, &(0x7f0000001740)=""/163, 0xa3}, 0x40000003) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x40200, 0x10b) openat2(r3, &(0x7f00000003c0)='./bus\x00', &(0x7f0000001840)={0x100, 0x1, 0x10}, 0x18) (async) mkdirat(r1, &(0x7f00000004c0)='./bus\x00', 0x16) mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540), 0x8, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.69698097s ago: executing program 4 (id=429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @random="d8be17d19221", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0x9}}}}}}, 0x0) syz_emit_ethernet(0x5f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa6562d03279ef0800450e00510060000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000090780009ef2500800000e34002002dd07c4d64ea790cc0397748575a464ae6755d086a239e6a64000000000000"], 0x0) readv(r0, &(0x7f0000000f40)=[{&(0x7f0000000280)=""/118, 0x76}, {&(0x7f0000000300)=""/140, 0x8c}, {&(0x7f0000000e00)=""/167, 0xa7}, {&(0x7f0000000ec0)=""/77, 0x4d}], 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@random="65dddddd5741", @random="2c7aaa2b7de7", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @random="8ebb9cc049e0", @broadcast}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='wlan1\x00', 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x9d8, [0x0, 0x200000000400, 0x200000000d78, 0x200000000da8], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x32, 0x8808, 'veth0_vlan\x00', 'ip6gre0\x00', 'pimreg\x00', 'ip6erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x918, 0x918, 0x948, [@among={{'among\x00', 0x0, 0x880}, {{@zero, @offset=0x45c, 0x1, {[0x5, 0xd7bf, 0x5, 0x0, 0x4, 0x3, 0x77bdcac1, 0x7, 0x7f, 0xfffffff8, 0x1f1f, 0x1, 0x8322, 0xd, 0x8, 0x7, 0x2, 0x1, 0x6f5, 0x4, 0xe, 0x7, 0x2, 0x9, 0x0, 0x1, 0x9, 0x7, 0xe301, 0x3, 0x4, 0x5, 0x5, 0x6, 0x4, 0x9, 0x7, 0x4, 0x5, 0x0, 0x0, 0x40000000, 0x9, 0x1, 0x9, 0xfffffff7, 0x8, 0x8e9a, 0xf, 0x5c7, 0x0, 0x6, 0x9, 0x7ff, 0xe, 0x0, 0x1ff, 0xfffffffc, 0x200, 0x4, 0xffffffe8, 0x7fff, 0x2f1, 0x5, 0x5, 0x7, 0x6, 0x0, 0xb2e5, 0x1, 0x8, 0x0, 0x1, 0x81, 0x2, 0x9, 0xffffff87, 0x8001, 0x7, 0x80, 0x7, 0x3, 0x8000, 0x4bd6, 0x9, 0x2, 0x9, 0xb, 0xffffff98, 0x7, 0x4, 0xffff, 0x7ff, 0x3, 0x1, 0x6, 0x5, 0x101, 0x7f, 0x800, 0x81, 0x2, 0x4, 0x5, 0x4, 0x400, 0xfff, 0x4, 0x2, 0x2, 0x80000000, 0x2, 0x4, 0xe, 0x6, 0xfffff801, 0x401, 0x0, 0x9, 0x6, 0x6, 0x9, 0x8000000, 0x7, 0xd, 0x5b, 0xd4, 0x9, 0xb, 0x5, 0xfffffff0, 0xbbec, 0x9, 0x1, 0x4, 0x7, 0x6, 0xffffff2c, 0x9, 0x7f, 0x1c5, 0x8, 0x4, 0x2, 0x8, 0x4, 0x3ff, 0x46, 0x8, 0x6, 0x100, 0x9, 0x7873, 0x2, 0x7fffffff, 0x80000000, 0x3, 0x9, 0x7, 0x8e, 0x1, 0x6, 0x1, 0x5, 0xfffffff7, 0x9fc5, 0x6, 0x4, 0x5, 0x6, 0x2, 0x80000000, 0xfffffffc, 0x1, 0x1000, 0x6, 0x9, 0x0, 0x1849, 0x9, 0x6, 0x101, 0x9, 0xb7a, 0xa, 0x2, 0xc, 0x6, 0xffff5b5d, 0x8, 0x1ff, 0x9, 0x4, 0x9, 0x1, 0x0, 0x4, 0x0, 0x103fc00, 0x80000000, 0x2, 0xa4, 0x8, 0xbbc, 0x40000, 0x401, 0x7b2, 0xf, 0x0, 0xdd3, 0x1, 0x6, 0x9, 0x1, 0x5, 0xcd82, 0x4, 0x6, 0xfffffffe, 0x18, 0x8, 0x4, 0x101, 0x2, 0x3, 0x7f, 0x1, 0xfffffffa, 0x2, 0x8000, 0xffff, 0x8, 0xfffffffe, 0x4, 0x3, 0x800, 0x9, 0x9, 0x8, 0x298, 0x6, 0x7, 0x36, 0x5, 0x1, 0x3, 0x7, 0x7, 0xb2b, 0x1, 0x4, 0x6, 0x9, 0x9, 0xb, 0xc], 0x6, [{[0x8, 0x80], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0xfffffffc, 0x7], @remote}, {[0x164, 0x19], @multicast2}, {[0x3, 0x101], @empty}, {[0x0, 0x5], @dev={0xac, 0x14, 0x14, 0x2a}}, {[0xffffffff, 0x4], @empty}]}, {[0x34c5, 0x6, 0xe2, 0x0, 0xfffffe00, 0x1, 0x5, 0x10000, 0x9, 0x7, 0x400, 0x1, 0x8, 0x5, 0x6560, 0xe, 0x2, 0x2, 0x4, 0x40, 0xd84, 0x101, 0x4, 0x80000000, 0x1, 0x1e9, 0x0, 0x8, 0xf, 0x6, 0x4, 0x3, 0x8, 0x10200000, 0x1000, 0x5, 0xced9dfb, 0x3, 0xd, 0x9, 0x5, 0x2, 0x5, 0x7d, 0x6, 0x4, 0x1, 0xb, 0x7, 0x4, 0x200, 0x4, 0x1, 0x8, 0x6, 0x2, 0x2, 0xd75, 0x200, 0x0, 0xff, 0x5, 0x7fffffff, 0xfffffff4, 0x4, 0x8000, 0x8, 0x7, 0x101, 0x0, 0x80, 0x10000, 0x7f, 0x6, 0x0, 0x6, 0x9, 0x6, 0x6, 0x8f6, 0x3, 0x1, 0x3, 0x54, 0x8000, 0x1ff, 0x0, 0x1, 0x5b3, 0x740a, 0x8, 0x9, 0x9, 0x0, 0x0, 0xfffffffa, 0x2, 0x2, 0x1, 0xff, 0x2, 0x8a, 0x8b4, 0x9, 0x10000, 0x7fff, 0x7, 0xffff, 0x100, 0x2, 0x4, 0x401, 0x100, 0x3, 0x3, 0x8, 0x2, 0x4, 0x9, 0x6, 0x1000, 0x3, 0x8, 0xb7f2, 0x4, 0x9, 0x7ff, 0x1, 0xf, 0x1, 0x1f2, 0x6, 0x7, 0x7, 0x2, 0x55ff78f3, 0x6, 0x6, 0xfff, 0xffffffd7, 0xff, 0x1000000, 0xb, 0x0, 0x3, 0x7f, 0x80000001, 0xf, 0x1, 0x100, 0x1, 0x9d1, 0x0, 0x6, 0x3, 0x101, 0x5ad, 0x6, 0xc, 0x40, 0x6, 0x3c4dfc5e, 0x6, 0x10, 0x3, 0x4, 0xff, 0x3, 0x11, 0xfff, 0x5, 0x4, 0x8, 0xfff, 0xb, 0x5, 0x3, 0x1, 0x2, 0xffffffff, 0xa, 0x7, 0x400, 0x7fffffff, 0x24, 0x0, 0x1, 0x48, 0x10, 0x2bb6, 0xe7, 0x0, 0x2, 0x9, 0x28000, 0x100, 0x7, 0x2, 0x7fff, 0xffffff80, 0x3, 0x2, 0xd4aa, 0x3, 0xfffffff9, 0x7, 0x800, 0x6, 0x8, 0x7f, 0x7, 0x6, 0x1000, 0xfffffb2b, 0xfeff, 0x4, 0xa, 0x80, 0xffffffff, 0x7, 0xff, 0x1, 0xf, 0x2, 0x7, 0xe33a, 0x6, 0x9ff, 0xf1, 0x6, 0x80000000, 0xffffffc3, 0x9, 0xf3, 0xb0, 0x3, 0x0, 0x6, 0x3, 0x0, 0x4, 0x9, 0xfffffff7, 0x5539, 0xb, 0x4, 0xbbb, 0x9, 0x6, 0x4, 0x4, 0x6, 0x6, 0x4, 0x6, 0x3, 0x8], 0x2, [{[0x80000001, 0x5], @local}, {[0x0, 0x4], @rand_addr=0x64010100}]}}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0xa50) 1.696519773s ago: executing program 1 (id=430): r0 = socket$kcm(0x10, 0x2, 0x0) (async) timer_create(0x4, &(0x7f0000000280)={0x0, 0x31, 0x4, @thr={&(0x7f0000000180)="5d18", &(0x7f0000000200)="d2dd55277b9c552b2b1cd3a657ba9666747f7cad9b5c18689078e593dae65aa15899ec966eb162f95bc078a351e4536e96ee54957ace510152a3c8c4e503e75876091badd69b0de61e48579d565eac0be75c8f3b118c306d6cd7b50c33a9a70d27015ce6344535e3c27272780ef22f56104a5f05365a0611347afb1fd2"}}, &(0x7f00000002c0)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1fb) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/ieee80211/phy0/reset\x00', 0x1, 0x0) write(r1, 0x0, 0x118c) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) 1.559092182s ago: executing program 0 (id=431): ioctl$KVM_CAP_HYPERV_VP_INDEX(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xe34ac4bdf470026c, 0x8, 0x3, 0xf0f, 0x2, 0x1}, 0x30, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x321900, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000100)={0x2040, r1}, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x30db, 0xfffffffa, 0x8a4, 0xfff00000]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xb8d}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x240400c0}, 0x20000000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x80) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0xc011, r0}, 0x1) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000380), 0x490800, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000003c0)={0x1, 0x36314d4e, 0x1, @discrete={0x0, 0xb186}}) renameat2(r2, &(0x7f0000000400)='./file0\x00', r2, &(0x7f0000000440)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f00000006c0)={0xf74, 0x9, 0x417f8415, 0x400, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c040}, 0x4000081) syz_clone3(&(0x7f0000000b80)={0x80, &(0x7f0000000880)=0xffffffffffffffff, &(0x7f00000008c0), &(0x7f0000000900)=0x0, {0x41}, &(0x7f0000000940)=""/239, 0xef, &(0x7f0000000a40)=""/199, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r2}}, 0x58) kcmp(0x0, r7, 0x1, r4, r4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r9 = open(&(0x7f0000000c40)='./file0\x00', 0xa0000, 0x1f3) getsockopt$inet_sctp6_SCTP_EVENT(r2, 0x84, 0x7f, &(0x7f0000000c80)={0x0, 0x8004}, &(0x7f0000000cc0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000d00)={r10, 0x6}, &(0x7f0000000d40)=0x8) ioctl$SOUND_PCM_READ_CHANNELS(r9, 0x80045006, &(0x7f0000000d80)) ioctl$XFS_IOC_GETBMAPA(r6, 0xc020582c, &(0x7f0000000dc0)={0x5, 0x9, 0x9, 0x4, 0x3}) getsockopt$TIPC_CONN_TIMEOUT(r8, 0x10f, 0x82, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) mknodat(r9, &(0x7f0000000e80)='./file0\x00', 0x10, 0x9) r11 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f000011b980)={0x1, [], 0x8, "3d37f931621524"}) 1.558812459s ago: executing program 4 (id=432): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x82, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000180)={0x8, r3}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x12) 1.439825693s ago: executing program 0 (id=433): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="480100001a00330600000000fddbdf250a01010100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) 1.439262028s ago: executing program 0 (id=434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') lseek(r2, 0x3, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000020000000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a000000000000000100000000000000000000000001000000000000020000002300000000000000480002"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000600)={0x20071026}, &(0x7f0000000640)={0x200000, 0x200000, 0x40, 0x0, 0x0, 0x80}) bind$bt_hci(r4, &(0x7f0000000680)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./config\x00', &(0x7f0000000740)='configfs\x00', 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000840)={0x1f, 0x2, 0x2}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x1, 0x0) write$tun(r5, &(0x7f0000000840)=ANY=[], 0x10b4) getdents(r2, &(0x7f00000003c0)=""/152, 0x98) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000100)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xfffffffd], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd25, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x1, 0x9, 0x0, 0x0, 0x3, 0x10013}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x34}}, 0x40800) 1.290413458s ago: executing program 1 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x15, 0x1, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x209}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x1e, 0x4, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7328, 0x0, 0x0, 0x0, 0x38}, [@kfunc]}, &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) 1.290080022s ago: executing program 0 (id=436): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) ftruncate(r1, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f98000/0x4000)=nil, &(0x7f0000c43000/0x3000)=nil, &(0x7f0000e20000/0x2000)=nil, &(0x7f0000f26000/0x4000)=nil, &(0x7f0000000000)="eb6e14de0c32eea6b2bb0a7f2001ebef5cb6bf6f914f1b5b008eb1485af92eaf9dba7709ad8506cc86a26fefb65c34a93b4ec954e19c3638f1cb22cbf5a840bc929201faf1e9f1331a71a0f3de4e79e5357ebe65fc767473a3f10b8aef12b6625ecde3f51a2ed7416bb9ab60a95c89e1859064", 0x73, r1}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f98000/0x4000)=nil, &(0x7f0000c43000/0x3000)=nil, &(0x7f0000e20000/0x2000)=nil, &(0x7f0000f26000/0x4000)=nil, &(0x7f0000000000)="eb6e14de0c32eea6b2bb0a7f2001ebef5cb6bf6f914f1b5b008eb1485af92eaf9dba7709ad8506cc86a26fefb65c34a93b4ec954e19c3638f1cb22cbf5a840bc929201faf1e9f1331a71a0f3de4e79e5357ebe65fc767473a3f10b8aef12b6625ecde3f51a2ed7416bb9ab60a95c89e1859064", 0x73, r1}, 0x68) 1.169956294s ago: executing program 1 (id=437): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.169680341s ago: executing program 1 (id=438): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x60000011, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0, 0x0) munlockall() openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42, 0x1ff) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000000c0)={0xc, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x1, r2, 0x0, &(0x7f0000403000/0x3000)=nil, 0x3000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 539.082208ms ago: executing program 0 (id=439): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x4, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x4, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) (async) 289.711837ms ago: executing program 0 (id=440): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0x8000, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x80, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x6, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c65, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000001, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x40000007, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x80, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1fc, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async) mount$fuse(0x0, 0x0, &(0x7f0000000340), 0x1010, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 288.511862ms ago: executing program 4 (id=441): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000500)="f0000000", 0x4, 0x10) pwrite64(r0, &(0x7f0000000600)="0200", 0x2, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r2, r3, 0x1, 0x7, 0x7, 0x5, {0x5, 0x22, 0x3, 0x7ff, 0x5, 0x4096, 0x8, 0xfff9, 0x0, 0x6, 0x9b6f, 0x97, 0x200, 0x300000, "427c9145b4d9e5f85f9dfc1fdf80dab57b0e7f931b9e4d7de900000932a005a6"}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000a00)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_sys/bus/pci/devices/0000:00:01.0/resource\x00', 0x0, 0x0) read(r6, &(0x7f0000000c00)=""/1000, 0x3e8) 0s ago: executing program 6 (id=442): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368a84b50b3cdad74ec8bc2653d66"]) chdir(&(0x7f0000000500)='./file0\x00') unlink(&(0x7f0000000540)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/comedi2\x00', 0x1, 0x0) bind$netlink(r0, &(0x7f0000001440)={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0x4) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000001480)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x8, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x9, 0x1, 0x4]}) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000001540)='::1\x00', 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001580)=@o_path={0x0}, 0x18) ppoll(&(0x7f00000015c0)=[{r1, 0x92}, {r0, 0x6001}, {r0, 0x402}], 0x3, &(0x7f0000001600), 0x0, 0x0) mknod$loop(&(0x7f0000000580)='./file0\x00', 0x1000, 0x1) syz_io_uring_setup(0x47ea, &(0x7f0000000080)={0x0, 0xba32, 0x1, 0x2, 0xb3}, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6004, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={'\x00', 0x9, 0x3, 0x5, 0x1000000003, 0x40000000008, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000040)={0x8000000, 0x5, 0x100000001}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001140), 0x57, 0x10, &(0x7f0000001180), 0xffffffffffffffc9}, 0x48) openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) r6 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x1, 0xb, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd2c, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001300)={{0x2, 0x1, 0x6, 0x7, 'syz0\x00', 0x8001}, 0x1, 0x100, 0x2, r4, 0x4, 0x2, 'syz1\x00', &(0x7f0000000680)=['&@]\x00', '/proc/sys/fs/binfmt_misc/syz1\x00', '\x00', '}^-)[[\x00'], 0x2a}) kernel console output (not intermixed with test programs): [ T6742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.504258][ T6742] Call Trace: [ 62.504274][ T6742] [ 62.504281][ T6742] dump_stack_lvl+0x100/0x190 [ 62.504343][ T6742] should_fail_ex.cold+0x5/0xa [ 62.504362][ T6742] should_failslab+0xc2/0x120 [ 62.504378][ T6742] __kmalloc_noprof+0xfc/0x840 [ 62.504390][ T6742] ? handler_new_ref+0x1ab/0xc60 [ 62.504414][ T6742] handler_new_ref+0x1ab/0xc60 [ 62.504431][ T6742] v4l2_ctrl_new+0xe67/0x23a0 [ 62.504449][ T6742] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 62.504465][ T6742] ? handler_new_ref+0x7cb/0xc60 [ 62.504483][ T6742] v4l2_ctrl_new_std+0x1bb/0x290 [ 62.504501][ T6742] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 62.504517][ T6742] ? __mutex_unlock_slowpath+0x35d/0x930 [ 62.504545][ T6742] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 62.504560][ T6742] ? __asan_memcpy+0x3c/0x60 [ 62.504571][ T6742] ? find_ref+0x209/0x420 [ 62.504586][ T6742] handler_new_ref+0x82f/0xc60 [ 62.504603][ T6742] v4l2_ctrl_new+0xe67/0x23a0 [ 62.504622][ T6742] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 62.504642][ T6742] v4l2_ctrl_new_std+0x1bb/0x290 [ 62.504660][ T6742] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 62.504682][ T6742] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 62.504698][ T6742] ? media_request_object_init+0x105/0x180 [ 62.504713][ T6742] vicodec_open+0x2a6/0xf70 [ 62.504729][ T6742] ? kobject_get_unless_zero+0xb0/0x200 [ 62.504749][ T6742] v4l2_open+0x1d2/0x490 [ 62.504763][ T6742] ? __pfx_v4l2_open+0x10/0x10 [ 62.504777][ T6742] chrdev_open+0x234/0x6a0 [ 62.504792][ T6742] ? __pfx_chrdev_open+0x10/0x10 [ 62.504808][ T6742] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 62.504823][ T6742] do_dentry_open+0x674/0x1470 [ 62.504836][ T6742] ? __pfx_chrdev_open+0x10/0x10 [ 62.504852][ T6742] vfs_open_consume+0xcc/0x460 [ 62.504871][ T6742] path_openat+0x1547/0x23f0 [ 62.504888][ T6742] ? __pfx_path_openat+0x10/0x10 [ 62.504914][ T6742] do_file_open+0x20e/0x430 [ 62.504932][ T6742] ? __pfx_do_file_open+0x10/0x10 [ 62.504964][ T6742] ? _raw_spin_unlock+0x28/0x50 [ 62.504974][ T6742] ? alloc_fd+0x471/0x7a0 [ 62.505000][ T6742] do_sys_openat2+0x163/0x1d0 [ 62.505023][ T6742] ? __pfx_do_sys_openat2+0x10/0x10 [ 62.505041][ T6742] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 62.505065][ T6742] __x64_sys_openat+0x12d/0x210 [ 62.505090][ T6742] ? __pfx___x64_sys_openat+0x10/0x10 [ 62.505113][ T6742] do_syscall_64+0x123/0x790 [ 62.505133][ T6742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.505146][ T6742] RIP: 0033:0x7ff1f615fd8e [ 62.505162][ T6742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 62.505177][ T6742] RSP: 002b:00007ff1f6ff9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 62.505203][ T6742] RAX: ffffffffffffffda RBX: 00007ff1f6ffa6c0 RCX: 00007ff1f615fd8e [ 62.505223][ T6742] RDX: 0000000000000002 RSI: 00007ff1f6ff9c00 RDI: ffffffffffffff9c [ 62.505236][ T6742] RBP: 00007ff1f6ff9c00 R08: 0000000000000000 R09: 0000000000000000 [ 62.505249][ T6742] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 62.505259][ T6742] R13: 00007ff1f6426038 R14: 00007ff1f6425fa0 R15: 00007ffc392154e8 [ 62.505285][ T6742] [ 62.630153][ T5868] usb 9-1: USB disconnect, device number 3 [ 62.650637][ T6751] device-mapper: ioctl: Unable to rename non-existent device, to syze2 [ 62.651405][ T6751] netlink: 'syz.4.174': attribute type 4 has an invalid length. [ 62.687174][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.175'. [ 62.927941][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.932589][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.009794][ T5788] Bluetooth: hci2: command 0x041b tx timeout [ 63.010103][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.094530][ T6776] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 63.307906][ T5843] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.488466][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 63.509640][ T73] tipc: Node number set to 1 [ 63.532098][ T5868] logitech-hidpp-device 0005:046D:B012.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 63.592007][ T6795] fido_id[6795]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.095390][ T6826] afs: Unknown parameter 'd'}' [ 64.117741][ T5843] usb 5-1: unable to get BOS descriptor or descriptor too short [ 64.117770][ T5843] usb 5-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 64.154640][ T5843] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 64.154664][ T5843] usb 5-1: can't read configurations, error -71 [ 64.503352][ T6839] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 64.622484][ T6847] syzkaller0: entered promiscuous mode [ 64.622503][ T6847] syzkaller0: entered allmulticast mode [ 64.891194][ T6847] bond1 (unregistering): Released all slaves [ 64.971383][ T6854] device-mapper: table: 248:1: cache: Error opening cache device (-ENOENT) [ 64.971398][ T6854] device-mapper: ioctl: error adding target to table [ 64.989141][ T6854] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 64.989155][ T6854] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 64.989289][ T6854] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 64.989299][ T6854] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 65.009646][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.009679][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.075202][ T6853] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 65.075227][ T6853] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 65.075241][ T6853] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 65.075254][ T6853] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 65.168187][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.938319][ T6880] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.207'. [ 65.958608][ T6876] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.207'. [ 66.100420][ C1] net_ratelimit: 59917 callbacks suppressed [ 66.100428][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 66.100435][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.100599][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 66.100601][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 66.100753][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.100787][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 66.100902][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.100929][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 66.101061][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 66.101068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 66.675313][ T6878] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.207'. [ 67.097940][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.097963][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.247967][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.785822][ T6894] netlink: 88 bytes leftover after parsing attributes in process `syz.0.209'. [ 71.107947][ C1] net_ratelimit: 66001 callbacks suppressed [ 71.107947][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 71.107962][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 71.108103][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 71.108118][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.108245][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 71.108268][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.108386][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 71.108423][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 71.108529][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 71.108575][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.338163][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.338217][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.434815][ C0] sched: DL replenish lagged too much [ 71.652109][ T855] cfg80211: failed to load regulatory.db [ 74.684055][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.210'. [ 74.684077][ T6896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.210'. [ 74.684090][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.210'. [ 74.839303][ T6905] batman_adv: batadv0: Adding interface: syzkaller0 [ 74.839315][ T6905] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.839329][ T6905] batman_adv: batadv0: Interface activated: syzkaller0 [ 74.856377][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 74.856391][ T42] audit: type=1400 audit(1792853887.006:502): avc: denied { write } for pid=6901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.978636][ T42] audit: type=1400 audit(1792853887.126:503): avc: denied { write } for pid=6903 comm="syz.4.211" name="001" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 75.543227][ T42] audit: type=1400 audit(1792853887.696:504): avc: denied { write } for pid=6910 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.729096][ T42] audit: type=1400 audit(1792853887.846:505): avc: denied { audit_write } for pid=6903 comm="syz.4.211" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.737798][ T6912] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 76.117990][ C0] net_ratelimit: 67878 callbacks suppressed [ 76.118005][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 76.118099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 76.118147][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 76.118284][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 76.118367][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.118451][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 76.118595][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 76.118610][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.118735][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 76.118846][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 76.173888][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'. [ 76.421877][ T6916] bond1: (slave bridge1): making interface the new active one [ 76.425200][ T6916] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 76.462656][ T6905] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 76.593594][ T42] audit: type=1400 audit(1792853888.746:506): avc: denied { write } for pid=6927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.623986][ T6905] batman_adv: batadv0: Removing interface: syzkaller0 [ 76.942100][ T42] audit: type=1400 audit(1792853889.096:507): avc: denied { write } for pid=6935 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.959788][ T42] audit: type=1400 audit(1792853889.106:508): avc: denied { write } for pid=6938 comm="syz.1.217" name="md0" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.980173][ T6944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.218'. [ 76.984162][ T6939] loop0: detected capacity change from 0 to 4096 [ 77.053182][ T6946] netlink: 'syz.1.217': attribute type 11 has an invalid length. [ 77.053603][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 77.224090][ T6939] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 77.294408][ T6939] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 77.294443][ T6939] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 77.294456][ T6939] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 77.294514][ T6939] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 77.294528][ T6939] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 77.294541][ T6939] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 77.294554][ T6939] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 77.294563][ T6939] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 77.294603][ T6939] loop0: [ 77.304370][ T6943] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.304589][ T6943] block device autoloading is deprecated and will be removed. [ 77.539109][ T42] audit: type=1400 audit(1792853889.696:509): avc: denied { write } for pid=6951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.671388][ T6960] syz.4.221 uses obsolete (PF_INET,SOCK_PACKET) [ 77.746759][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 77.747514][ T6959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6959 comm=syz.4.221 [ 77.760056][ T42] audit: type=1400 audit(1792853889.916:510): avc: denied { read write } for pid=6957 comm="syz.4.221" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.760384][ T42] audit: type=1400 audit(1792853889.916:511): avc: denied { open } for pid=6957 comm="syz.4.221" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.858289][ T5788] Bluetooth: hci0: Unable to find connection with handle 0x00c8 [ 77.871626][ T6964] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 78.328174][ T6669] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 78.487967][ T6669] usb 6-1: Using ep0 maxpacket: 8 [ 78.488772][ T6669] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 78.489728][ T6669] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 78.489773][ T6669] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.489792][ T6669] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.489810][ T6669] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.489839][ T6669] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.489870][ T6669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.159163][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.227'. [ 79.232018][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 79.232037][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.228'. [ 79.344101][ T6669] usb 6-1: USB disconnect, device number 3 [ 79.472575][ T7000] comedi comedi0: Minor 3 could not be opened [ 79.709764][ T7008] Bluetooth: MGMT ver 1.23 [ 79.941238][ T7019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2085 sclass=netlink_route_socket pid=7019 comm=syz.0.235 [ 79.941426][ T7019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7019 comm=syz.0.235 [ 80.018493][ T7023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.236'. [ 80.377024][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 80.377040][ T42] audit: type=1400 audit(1792853892.526:527): avc: denied { create } for pid=7030 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 80.438199][ T42] audit: type=1400 audit(1792853892.596:528): avc: denied { getopt } for pid=7026 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 80.477965][ T42] audit: type=1400 audit(1792853892.626:529): avc: denied { sys_admin } for pid=7030 comm="syz.0.239" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 80.825954][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.827027][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.835283][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.845509][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.898482][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.970853][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.971646][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.127873][ C1] net_ratelimit: 54494 callbacks suppressed [ 81.127889][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.128053][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 81.128097][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 81.128294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.128357][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 81.128579][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 81.128630][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 81.128865][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.128885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 81.129131][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 81.711805][ T7034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.716122][ T7034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.102035][ T7051] ftl_cs: FTL header not found. [ 82.199928][ T7051] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [65] [ 82.339343][ T5822] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.339432][ T5822] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.339465][ T5822] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.339496][ T5822] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.443518][ T42] audit: type=1400 audit(1792853894.596:530): avc: denied { mount } for pid=7060 comm="syz.4.243" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 82.494661][ T42] audit: type=1400 audit(1792853894.646:531): avc: denied { write } for pid=7064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.552274][ T7061] bridge0: entered promiscuous mode [ 82.552298][ T7061] bridge0: entered allmulticast mode [ 82.644782][ T42] audit: type=1400 audit(1792853894.796:532): avc: denied { write } for pid=7069 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.777082][ T5822] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.947636][ T5822] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.966206][ T42] audit: type=1400 audit(1792853895.116:533): avc: denied { name_bind } for pid=7077 comm="syz.0.244" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 82.967402][ T7078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7078 comm=syz.0.244 [ 83.010064][ T5788] Bluetooth: hci4: command tx timeout [ 83.101405][ T42] audit: type=1400 audit(1792853895.256:534): avc: denied { write } for pid=7076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.274463][ T7095] overlayfs: missing 'lowerdir' [ 83.294198][ T42] audit: type=1400 audit(1792853895.446:535): avc: denied { write } for pid=7094 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.386299][ T5822] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.402509][ T42] audit: type=1400 audit(1792853895.556:536): avc: denied { read write } for pid=7096 comm="syz.4.248" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.431003][ T7087] warning: `syz.1.247' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.741306][ T5822] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.801463][ T7086] br_netfilter no longer supported in user namespaces [ 83.912447][ T7086] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.294167][ T7040] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.503868][ T5822] bridge_slave_1: left allmulticast mode [ 84.503892][ T5822] bridge_slave_1: left promiscuous mode [ 84.504068][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.624812][ T5822] bridge_slave_0: left allmulticast mode [ 84.635502][ T5822] bridge_slave_0: left promiscuous mode [ 84.737069][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.059580][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.088790][ T5788] Bluetooth: hci4: command tx timeout [ 85.131425][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.170449][ T5822] bond0 (unregistering): Released all slaves [ 85.183042][ T7132] Bluetooth: MGMT ver 1.23 [ 85.738999][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 85.739012][ T42] audit: type=1400 audit(1792853897.896:546): avc: denied { read } for pid=7137 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.137915][ C1] net_ratelimit: 71647 callbacks suppressed [ 86.137932][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.137964][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 86.138084][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.138115][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 86.138228][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 86.138360][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 86.138398][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.138508][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 86.138540][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 86.138650][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 86.324142][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.324221][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.324275][ T7040] bridge_slave_0: entered allmulticast mode [ 86.324918][ T7040] bridge_slave_0: entered promiscuous mode [ 86.335466][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.335552][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.335609][ T7040] bridge_slave_1: entered allmulticast mode [ 86.336333][ T7040] bridge_slave_1: entered promiscuous mode [ 86.369945][ T42] audit: type=1400 audit(1792853898.526:547): avc: denied { write } for pid=7161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.416005][ T42] audit: type=1400 audit(1792853898.566:548): avc: denied { write } for pid=7166 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.502563][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.258'. [ 86.531445][ T42] audit: type=1400 audit(1792853898.686:549): avc: denied { read } for pid=7170 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.538986][ T42] audit: type=1400 audit(1792853898.696:550): avc: denied { connect } for pid=7170 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.545600][ T42] audit: type=1400 audit(1792853898.696:551): avc: denied { setopt } for pid=7170 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.659570][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.663652][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.694709][ T7040] team0: Port device team_slave_0 added [ 86.704699][ T7040] team0: Port device team_slave_1 added [ 86.725301][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.725312][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.725340][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.727537][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.727547][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.727559][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.807685][ T7040] hsr_slave_0: entered promiscuous mode [ 86.810809][ T7040] hsr_slave_1: entered promiscuous mode [ 86.811123][ T7040] debugfs: 'hsr0' already exists in 'hsr' [ 86.811135][ T7040] Cannot create hsr debugfs directory [ 86.865552][ T42] audit: type=1400 audit(1792853899.016:552): avc: denied { write } for pid=7175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.894129][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 86.946031][ T42] audit: type=1400 audit(1792853899.096:553): avc: denied { write } for pid=7181 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.048023][ T7176] netlink: 'syz.1.260': attribute type 21 has an invalid length. [ 87.078545][ T5490] 8021q: adding VLAN 0 to HW filter on device eth10 [ 87.170720][ T5822] hsr_slave_0: left promiscuous mode [ 87.178458][ T5788] Bluetooth: hci4: command tx timeout [ 87.204158][ T5822] hsr_slave_1: left promiscuous mode [ 87.204589][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.204601][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.215727][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.215740][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.320856][ T7185] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 87.336733][ T5822] veth1_macvtap: left promiscuous mode [ 87.336757][ T5822] veth0_macvtap: left promiscuous mode [ 87.336802][ T5822] veth1_vlan: left promiscuous mode [ 87.336840][ T5822] veth0_vlan: left promiscuous mode [ 87.507924][ T42] audit: type=1400 audit(1792853899.656:554): avc: denied { write } for pid=7184 comm="syz.4.257" name="cluster" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.507952][ T42] audit: type=1400 audit(1792853899.656:555): avc: denied { add_name } for pid=7184 comm="syz.4.257" name="mycluster" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.258258][ T5788] Bluetooth: hci4: command tx timeout [ 89.967403][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 89.993806][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 90.527573][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.266'. [ 90.826936][ T7040] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 90.843817][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.845251][ T7040] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 90.984244][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 90.984256][ T42] audit: type=1400 audit(1792853903.136:559): avc: denied { write } for pid=7240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.147858][ C0] net_ratelimit: 65244 callbacks suppressed [ 91.147872][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 91.147878][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.148008][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 91.148110][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 91.148140][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 91.148244][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.148273][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 91.148375][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.148405][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 91.148512][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.325265][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.331463][ T7040] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 91.501289][ T42] audit: type=1400 audit(1792853903.656:560): avc: denied { write } for pid=7247 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.618638][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.619067][ T7040] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 91.763530][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.775959][ T5490] 8021q: adding VLAN 0 to HW filter on device eth11 [ 92.135977][ T7040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.225034][ T7040] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.277110][ T5146] hid-generic 0005:000C:0009.0003: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 92.386461][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.386507][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.413726][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.413773][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.460749][ T42] audit: type=1400 audit(1792853904.616:561): avc: denied { write } for pid=7261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.487684][ T7269] fido_id[7269]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 92.517506][ T7040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.751151][ T7266] netlink: 'syz.4.271': attribute type 14 has an invalid length. [ 92.751166][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 92.841318][ T7266] netlink: 'syz.4.271': attribute type 14 has an invalid length. [ 92.841333][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 92.849468][ T5852] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.849970][ T5852] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.850068][ T5852] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.850086][ T5852] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.871323][ T42] audit: type=1400 audit(1792853905.026:562): avc: denied { write } for pid=7276 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.136366][ T5490] 8021q: adding VLAN 0 to HW filter on device eth12 [ 93.273619][ T42] audit: type=1400 audit(1792853905.426:563): avc: denied { mount } for pid=7278 comm="syz.1.272" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 93.399440][ T7290] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 93.402475][ T42] audit: type=1400 audit(1792853905.556:564): avc: denied { open } for pid=7289 comm="syz.0.274" path="/dev/ttyq5" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 93.653055][ T42] audit: type=1400 audit(1792853905.806:565): avc: denied { write } for pid=7286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.904377][ T7282] page: refcount:16 mapcount:15 mapping:0000000000000000 index:0x0 pfn:0x50000 [ 93.904397][ T7282] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 93.904414][ T7282] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 93.904424][ T7282] raw: 0000000000000000 0000000000000000 000000100000000e 0000000000000000 [ 93.904431][ T7282] page dumped because: unmovable page [ 93.904437][ T7282] page_owner tracks the page as allocated [ 93.904441][ T7282] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5771, tgid 5771 (syz-executor), ts 46571480352 [ 93.904460][ T7282] post_alloc_hook+0xfd/0x120 [ 93.904563][ T7282] get_page_from_freelist+0x1113/0x35e0 [ 93.904574][ T7282] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 93.904585][ T7282] alloc_pages_mpol+0x201/0x560 [ 93.904600][ T7282] alloc_pages_noprof+0x1a/0x160 [ 93.904616][ T7282] __vmalloc_node_range_noprof+0x899/0x1440 [ 93.904631][ T7282] vmalloc_user_noprof+0x9e/0xe0 [ 93.904645][ T7282] kcov_ioctl+0x4d/0x760 [ 93.904667][ T7282] __x64_sys_ioctl+0x18e/0x210 [ 93.904680][ T7282] do_syscall_64+0x123/0x790 [ 93.904711][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.904745][ T7282] page_owner free stack trace missing [ 93.958057][ T7040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.959177][ T42] audit: type=1400 audit(1792853906.116:566): avc: denied { write } for pid=7304 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.194656][ T42] audit: type=1400 audit(1792853906.346:567): avc: denied { read } for pid=5167 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 94.205165][ T42] audit: type=1400 audit(1792853906.356:568): avc: denied { search } for pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.358934][ T5490] 8021q: adding VLAN 0 to HW filter on device eth13 [ 94.599630][ T7312] VFS: Mount too revealing [ 95.059042][ T7040] veth0_vlan: entered promiscuous mode [ 95.085330][ T7040] veth1_vlan: entered promiscuous mode [ 95.136231][ T7040] veth0_macvtap: entered promiscuous mode [ 95.164239][ T7040] veth1_macvtap: entered promiscuous mode [ 95.195491][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.205851][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.388105][ T5852] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.388133][ T5852] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.388151][ T5852] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.388169][ T5852] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.622066][ T7337] ima: Unable to open file: /e (-2) [ 95.622194][ T7336] ima: Unable to open file: /e (-2) [ 95.773013][ T7337] netlink: 'syz.4.280': attribute type 25 has an invalid length. [ 95.793402][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'. [ 96.157927][ C0] net_ratelimit: 69055 callbacks suppressed [ 96.157929][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.157942][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 96.158093][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 96.158094][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.158261][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 96.158272][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 96.158415][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 96.158436][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.158564][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 96.158592][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 96.376139][ T7334] ima: policy update failed [ 96.376359][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 96.376366][ T42] audit: type=1802 audit(1792853908.526:577): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.280" res=0 errno=-22 [ 97.218468][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.218483][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.359849][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.359862][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.563935][ T42] audit: type=1400 audit(1792853909.716:578): avc: denied { create } for pid=7360 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.609378][ T42] audit: type=1400 audit(1792853909.766:579): avc: denied { write } for pid=7360 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.725541][ T5788] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 255 [ 97.774516][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774545][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774562][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774579][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774596][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774613][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774631][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774648][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774665][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774681][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774698][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774715][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774732][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774748][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774765][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774782][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774799][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774815][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774831][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774848][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774865][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774887][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774904][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774921][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774938][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774955][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774972][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.774990][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.775006][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.775023][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.775040][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.775057][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.775075][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 97.841058][ T42] audit: type=1400 audit(1792853909.996:580): avc: denied { accept } for pid=7360 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.924553][ T5788] Bluetooth: hci3: Unable to find connection with handle 0x00c8 [ 98.811144][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.811336][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.920243][ T42] audit: type=1400 audit(1792853911.076:581): avc: denied { bind } for pid=7375 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.920271][ T42] audit: type=1400 audit(1792853911.076:582): avc: denied { name_bind } for pid=7375 comm="syz.0.284" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 98.920291][ T42] audit: type=1400 audit(1792853911.076:583): avc: denied { node_bind } for pid=7375 comm="syz.0.284" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 98.972655][ T42] audit: type=1400 audit(1792853911.126:584): avc: denied { read write } for pid=7375 comm="syz.0.284" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 98.972686][ T42] audit: type=1400 audit(1792853911.126:585): avc: denied { open } for pid=7375 comm="syz.0.284" path="/110/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 98.973139][ T7380] zero sized request [ 98.973163][ T42] audit: type=1400 audit(1792853911.126:586): avc: denied { ioctl } for pid=7375 comm="syz.0.284" path="/110/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x400c4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 99.028355][ T7042] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.183839][ T7042] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.186507][ T7042] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.186528][ T7042] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.186546][ T7042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.230159][ T7376] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.259613][ T7042] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.571622][ T7042] usb 5-1: USB disconnect, device number 5 [ 100.097529][ T7195] syz.1.260 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 100.097552][ T7195] CPU: 2 UID: 0 PID: 7195 Comm: syz.1.260 Not tainted syzkaller #0 PREEMPT(full) [ 100.097564][ T7195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.097571][ T7195] Call Trace: [ 100.097575][ T7195] [ 100.097580][ T7195] dump_stack_lvl+0x100/0x190 [ 100.097631][ T7195] dump_header+0xfb/0x606 [ 100.097651][ T7195] oom_kill_process.cold+0xd/0x380 [ 100.097664][ T7195] out_of_memory+0x343/0x14c0 [ 100.097682][ T7195] ? __pfx_out_of_memory+0x10/0x10 [ 100.097698][ T7195] mem_cgroup_out_of_memory+0xc6/0x130 [ 100.097711][ T7195] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 100.097724][ T7195] ? find_held_lock+0x2b/0x80 [ 100.097751][ T7195] ? do_raw_spin_unlock+0x145/0x1e0 [ 100.097783][ T7195] ? _raw_spin_unlock+0x28/0x50 [ 100.097814][ T7195] try_charge_memcg+0x76f/0xfd0 [ 100.097835][ T7195] ? __pfx_try_charge_memcg+0x10/0x10 [ 100.097850][ T7195] ? find_held_lock+0x2b/0x80 [ 100.097866][ T7195] ? rcu_read_unlock+0x17/0x60 [ 100.097875][ T7195] ? rcu_read_unlock+0x17/0x60 [ 100.097885][ T7195] ? find_held_lock+0x2b/0x80 [ 100.097901][ T7195] ? rcu_read_unlock+0x17/0x60 [ 100.097914][ T7195] charge_memcg+0x1ae/0x210 [ 100.097931][ T7195] __mem_cgroup_charge+0x2b/0x1c0 [ 100.097947][ T7195] shmem_alloc_and_add_folio+0x451/0xd40 [ 100.097966][ T7195] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 100.097982][ T7195] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 100.098001][ T7195] shmem_get_folio_gfp+0x758/0x1af0 [ 100.098019][ T7195] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 100.098035][ T7195] ? vm_normal_page+0x1d1/0x380 [ 100.098047][ T7195] ? __pfx_vm_normal_page+0x10/0x10 [ 100.098061][ T7195] shmem_write_begin+0x1a4/0x420 [ 100.098078][ T7195] ? __pfx_shmem_write_begin+0x10/0x10 [ 100.098094][ T7195] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 100.098113][ T7195] generic_perform_write+0x292/0xa40 [ 100.098125][ T7195] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 100.098146][ T7195] ? __pfx_generic_perform_write+0x10/0x10 [ 100.098159][ T7195] ? file_update_time_flags+0x38c/0x520 [ 100.098174][ T7195] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 100.098190][ T7195] shmem_file_write_iter+0x10e/0x140 [ 100.098208][ T7195] __kernel_write_iter+0x2ac/0x930 [ 100.098223][ T7195] ? __pfx___kernel_write_iter+0x10/0x10 [ 100.098257][ T7195] ? __up_read+0x333/0x980 [ 100.098273][ T7195] ? dump_user_range+0x7e0/0xe90 [ 100.098290][ T7195] dump_user_range+0xa0d/0xe90 [ 100.098308][ T7195] ? __pfx_dump_user_range+0x10/0x10 [ 100.098325][ T7195] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 100.098350][ T7195] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 100.098364][ T7195] ? __pfx_writenote+0x10/0x10 [ 100.098382][ T7195] elf_core_dump+0x2d97/0x3d60 [ 100.098405][ T7195] ? __pfx_elf_core_dump+0x10/0x10 [ 100.098419][ T7195] ? kasan_save_stack+0x3f/0x50 [ 100.098431][ T7195] ? kasan_save_stack+0x30/0x50 [ 100.098443][ T7195] ? kasan_save_track+0x14/0x30 [ 100.098455][ T7195] ? __kasan_kmalloc+0xaa/0xb0 [ 100.098467][ T7195] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 100.098481][ T7195] ? get_signal+0x1f20/0x21d0 [ 100.098502][ T7195] ? arch_do_signal_or_restart+0x91/0x7e0 [ 100.098525][ T7195] ? irqentry_exit+0x542/0xab0 [ 100.098541][ T7195] ? 0xffffffffff600000 [ 100.098567][ T7195] ? lock_acquire+0x1d1/0x380 [ 100.098579][ T7195] ? get_signal+0x1f20/0x21d0 [ 100.098595][ T7195] ? vfs_coredump+0x2606/0x58c0 [ 100.098608][ T7195] vfs_coredump+0x2606/0x58c0 [ 100.098628][ T7195] ? __pfx_vfs_coredump+0x10/0x10 [ 100.098645][ T7195] ? __lock_acquire+0x5c0/0x1f40 [ 100.098660][ T7195] ? lock_acquire+0x1d1/0x380 [ 100.098672][ T7195] ? unwind_next_frame+0xbd/0x2090 [ 100.098698][ T7195] ? lock_acquire+0x1d1/0x380 [ 100.098710][ T7195] ? is_bpf_text_address+0x25/0x1a0 [ 100.098723][ T7195] ? find_held_lock+0x2b/0x80 [ 100.098739][ T7195] ? is_bpf_text_address+0x8a/0x1a0 [ 100.098750][ T7195] ? is_bpf_text_address+0x8a/0x1a0 [ 100.098760][ T7195] ? bpf_ksym_find+0x128/0x1c0 [ 100.098774][ T7195] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 100.098789][ T7195] ? is_bpf_text_address+0x94/0x1a0 [ 100.098808][ T7195] ? __sigqueue_free+0xbe/0x2a0 [ 100.098822][ T7195] ? stack_trace_save+0x8e/0xc0 [ 100.098839][ T7195] ? kasan_save_stack+0x3f/0x50 [ 100.098851][ T7195] ? kasan_save_stack+0x30/0x50 [ 100.098863][ T7195] ? kasan_save_track+0x14/0x30 [ 100.098874][ T7195] ? kasan_save_free_info+0x3b/0x70 [ 100.098890][ T7195] ? __kasan_slab_free+0x5f/0x80 [ 100.098902][ T7195] ? kmem_cache_free+0x127/0x6c0 [ 100.098912][ T7195] ? __sigqueue_free+0xbe/0x2a0 [ 100.098924][ T7195] ? get_signal+0xb02/0x21d0 [ 100.098938][ T7195] ? arch_do_signal_or_restart+0x91/0x7e0 [ 100.098953][ T7195] ? irqentry_exit+0x542/0xab0 [ 100.098965][ T7195] ? asm_exc_page_fault+0x26/0x30 [ 100.098999][ T7195] ? rcu_is_watching+0x13/0xc0 [ 100.099017][ T7195] get_signal+0x1f20/0x21d0 [ 100.099034][ T7195] ? __pfx_get_signal+0x10/0x10 [ 100.099049][ T7195] arch_do_signal_or_restart+0x91/0x7e0 [ 100.099066][ T7195] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 100.099091][ T7195] irqentry_exit+0x542/0xab0 [ 100.099105][ T7195] asm_exc_page_fault+0x26/0x30 [ 100.099116][ T7195] RIP: 0033:0x7ff5ed854cb7 [ 100.099126][ T7195] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 4e 1b 00 48 8d 35 d2 14 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 100.099137][ T7195] RSP: 002b:00007ff5ee87d1a0 EFLAGS: 00010206 [ 100.099153][ T7195] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007ff5ed99f559 [ 100.099159][ T7195] RDX: 00007ff5ee87d1c0 RSI: 00007ff5ee87d2f0 RDI: 000000000000000b [ 100.099166][ T7195] RBP: 00007ff5eda36b20 R08: 0000000000000000 R09: 0000000000000000 [ 100.099172][ T7195] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 100.099179][ T7195] R13: 00007ff5edc26128 R14: 00007ff5edc26090 R15: 00007ffcea3da4f8 [ 100.099193][ T7195] [ 100.365291][ T7195] memory: usage 307200kB, limit 307200kB, failcnt 36576 [ 100.365306][ T7195] memory+swap: usage 431984kB, limit 9007199254740988kB, failcnt 0 [ 100.365313][ T7195] kmem: usage 5920kB, limit 9007199254740988kB, failcnt 0 [ 100.365320][ T7195] Memory cgroup stats for /syz1: [ 100.365552][ T7195] cache 308330496 [ 100.365558][ T7195] rss 155648 [ 100.365561][ T7195] rss_huge 0 [ 100.365565][ T7195] shmem 308293632 [ 100.365569][ T7195] mapped_file 4096 [ 100.365572][ T7195] dirty 0 [ 100.365576][ T7195] writeback 0 [ 100.365579][ T7195] workingset_refault_anon 18 [ 100.365583][ T7195] workingset_refault_file 8229 [ 100.365587][ T7195] swap 127778816 [ 100.365591][ T7195] swapcached 65536 [ 100.365595][ T7195] pgpgin 174402 [ 100.365598][ T7195] pgpgout 99082 [ 100.365602][ T7195] pgfault 38039 [ 100.365605][ T7195] pgmajfault 42 [ 100.365609][ T7195] inactive_anon 136953856 [ 100.365613][ T7195] active_anon 171520000 [ 100.365617][ T7195] inactive_file 0 [ 100.365620][ T7195] active_file 32768 [ 100.365624][ T7195] unevictable 0 [ 100.365628][ T7195] hierarchical_memory_limit 314572800 [ 100.365632][ T7195] hierarchical_memsw_limit 9223372036854771712 [ 100.365637][ T7195] total_cache 308330496 [ 100.365640][ T7195] total_rss 155648 [ 100.365644][ T7195] total_rss_huge 0 [ 100.365648][ T7195] total_shmem 308293632 [ 100.365651][ T7195] total_mapped_file 4096 [ 100.365655][ T7195] total_dirty 0 [ 100.365659][ T7195] total_writeback 0 [ 100.365663][ T7195] total_workingset_refault_anon 18 [ 100.365667][ T7195] total_workingset_refault_file 8229 [ 100.365671][ T7195] total_swap 127778816 [ 100.365675][ T7195] total_swapcached 65536 [ 100.365679][ T7195] total_pgpgin 174402 [ 100.365682][ T7195] total_pgpgout 99082 [ 100.365686][ T7195] total_pgfault 38039 [ 100.365690][ T7195] total_pgmajfault 42 [ 100.365694][ T7195] total_inactive_anon 136953856 [ 100.365698][ T7195] total_active_anon 171520000 [ 100.365702][ T7195] total_inactive_file 0 [ 100.365706][ T7195] total_active_file 32768 [ 100.365710][ T7195] total_unevictable 0 [ 100.365713][ T7195] anon_cost 0 [ 100.365717][ T7195] file_cost 0 [ 100.365721][ T7195] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.260,pid=7196,uid=0 [ 100.366497][ T7195] Memory cgroup out of memory: Killed process 7196 (syz.1.260) total-vm:99364kB, anon-rss:1292kB, file-rss:33172kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 100.471723][ T7194] syz.1.260 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 100.471746][ T7194] CPU: 2 UID: 0 PID: 7194 Comm: syz.1.260 Not tainted syzkaller #0 PREEMPT(full) [ 100.471758][ T7194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.471765][ T7194] Call Trace: [ 100.471769][ T7194] [ 100.471774][ T7194] dump_stack_lvl+0x100/0x190 [ 100.471793][ T7194] dump_header+0xfb/0x606 [ 100.471806][ T7194] oom_kill_process.cold+0xd/0x380 [ 100.471820][ T7194] out_of_memory+0x343/0x14c0 [ 100.471841][ T7194] ? __pfx_out_of_memory+0x10/0x10 [ 100.471858][ T7194] mem_cgroup_out_of_memory+0xc6/0x130 [ 100.471871][ T7194] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 100.471883][ T7194] ? find_held_lock+0x2b/0x80 [ 100.471902][ T7194] ? do_raw_spin_unlock+0x145/0x1e0 [ 100.471918][ T7194] ? _raw_spin_unlock+0x28/0x50 [ 100.471930][ T7194] try_charge_memcg+0x76f/0xfd0 [ 100.471949][ T7194] ? __pfx_try_charge_memcg+0x10/0x10 [ 100.471964][ T7194] ? find_held_lock+0x2b/0x80 [ 100.471979][ T7194] ? rcu_read_unlock+0x17/0x60 [ 100.471989][ T7194] ? rcu_read_unlock+0x17/0x60 [ 100.471998][ T7194] ? find_held_lock+0x2b/0x80 [ 100.472015][ T7194] ? rcu_read_unlock+0x17/0x60 [ 100.472027][ T7194] charge_memcg+0x1ae/0x210 [ 100.472043][ T7194] __mem_cgroup_charge+0x2b/0x1c0 [ 100.472055][ T7194] shmem_alloc_and_add_folio+0x451/0xd40 [ 100.472074][ T7194] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 100.472090][ T7194] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 100.472108][ T7194] shmem_get_folio_gfp+0x758/0x1af0 [ 100.472127][ T7194] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 100.472140][ T7194] ? inode_set_ctime_current+0x9c/0x850 [ 100.472157][ T7194] ? find_held_lock+0x2b/0x80 [ 100.472174][ T7194] ? timestamp_truncate+0x22e/0x2f0 [ 100.472192][ T7194] shmem_write_begin+0x1a4/0x420 [ 100.472208][ T7194] ? __pfx_shmem_write_begin+0x10/0x10 [ 100.472223][ T7194] ? inode_set_ctime_current+0x283/0x850 [ 100.472239][ T7194] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 100.472255][ T7194] ? inode_maybe_inc_iversion+0x169/0x220 [ 100.472272][ T7194] generic_perform_write+0x292/0xa40 [ 100.472284][ T7194] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 100.472304][ T7194] ? __pfx_generic_perform_write+0x10/0x10 [ 100.472317][ T7194] ? mnt_put_write_access_file+0x4e/0x100 [ 100.472333][ T7194] ? file_update_time_flags+0x38c/0x520 [ 100.472346][ T7194] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 100.472362][ T7194] shmem_file_write_iter+0x10e/0x140 [ 100.472394][ T7194] __kernel_write_iter+0x2ac/0x930 [ 100.472408][ T7194] ? __pfx___kernel_write_iter+0x10/0x10 [ 100.472421][ T7194] ? __up_read+0x333/0x980 [ 100.472437][ T7194] ? dump_user_range+0x7e0/0xe90 [ 100.472453][ T7194] dump_user_range+0xa0d/0xe90 [ 100.472471][ T7194] ? __pfx_dump_user_range+0x10/0x10 [ 100.472488][ T7194] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 100.472502][ T7194] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 100.472515][ T7194] ? __pfx_writenote+0x10/0x10 [ 100.472533][ T7194] elf_core_dump+0x2d97/0x3d60 [ 100.472556][ T7194] ? __pfx_elf_core_dump+0x10/0x10 [ 100.472569][ T7194] ? kasan_save_stack+0x3f/0x50 [ 100.472582][ T7194] ? kasan_save_stack+0x30/0x50 [ 100.472593][ T7194] ? kasan_save_track+0x14/0x30 [ 100.472605][ T7194] ? __kasan_kmalloc+0xaa/0xb0 [ 100.472616][ T7194] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 100.472629][ T7194] ? get_signal+0x1f20/0x21d0 [ 100.472639][ T7194] ? arch_do_signal_or_restart+0x91/0x7e0 [ 100.472655][ T7194] ? irqentry_exit+0x542/0xab0 [ 100.472669][ T7194] ? 0xffffffffff600000 [ 100.472695][ T7194] ? lock_acquire+0x1d1/0x380 [ 100.472707][ T7194] ? get_signal+0x1f20/0x21d0 [ 100.472722][ T7194] ? vfs_coredump+0x2606/0x58c0 [ 100.472734][ T7194] vfs_coredump+0x2606/0x58c0 [ 100.472754][ T7194] ? __pfx_vfs_coredump+0x10/0x10 [ 100.472770][ T7194] ? __lock_acquire+0x5c0/0x1f40 [ 100.472784][ T7194] ? lock_acquire+0x1d1/0x380 [ 100.472796][ T7194] ? unwind_next_frame+0xbd/0x2090 [ 100.472814][ T7194] ? lock_acquire+0x1d1/0x380 [ 100.472830][ T7194] ? is_bpf_text_address+0x25/0x1a0 [ 100.472841][ T7194] ? find_held_lock+0x2b/0x80 [ 100.472856][ T7194] ? is_bpf_text_address+0x8a/0x1a0 [ 100.472866][ T7194] ? is_bpf_text_address+0x8a/0x1a0 [ 100.472877][ T7194] ? bpf_ksym_find+0x128/0x1c0 [ 100.472889][ T7194] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 100.472903][ T7194] ? is_bpf_text_address+0x94/0x1a0 [ 100.472921][ T7194] ? __sigqueue_free+0xbe/0x2a0 [ 100.472935][ T7194] ? stack_trace_save+0x8e/0xc0 [ 100.472951][ T7194] ? kasan_save_stack+0x3f/0x50 [ 100.472963][ T7194] ? kasan_save_stack+0x30/0x50 [ 100.472975][ T7194] ? kasan_save_track+0x14/0x30 [ 100.472986][ T7194] ? kasan_save_free_info+0x3b/0x70 [ 100.473002][ T7194] ? __kasan_slab_free+0x5f/0x80 [ 100.473015][ T7194] ? kmem_cache_free+0x127/0x6c0 [ 100.473024][ T7194] ? __sigqueue_free+0xbe/0x2a0 [ 100.473036][ T7194] ? get_signal+0xb02/0x21d0 [ 100.473045][ T7194] ? arch_do_signal_or_restart+0x91/0x7e0 [ 100.473060][ T7194] ? irqentry_exit+0x542/0xab0 [ 100.473071][ T7194] ? asm_exc_page_fault+0x26/0x30 [ 100.473105][ T7194] ? rcu_is_watching+0x13/0xc0 [ 100.473123][ T7194] get_signal+0x1f20/0x21d0 [ 100.473139][ T7194] ? __pfx_get_signal+0x10/0x10 [ 100.473154][ T7194] arch_do_signal_or_restart+0x91/0x7e0 [ 100.473171][ T7194] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 100.473207][ T7194] irqentry_exit+0x542/0xab0 [ 100.473221][ T7194] asm_exc_page_fault+0x26/0x30 [ 100.473232][ T7194] RIP: 0033:0x7ff5ed854cb7 [ 100.473242][ T7194] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 4e 1b 00 48 8d 35 d2 14 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 100.473252][ T7194] RSP: 002b:00007ff5ee87d1a0 EFLAGS: 00010206 [ 100.473262][ T7194] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007ff5ed99f559 [ 100.473268][ T7194] RDX: 00007ff5ee87d1c0 RSI: 00007ff5ee87d2f0 RDI: 000000000000000b [ 100.473275][ T7194] RBP: 00007ff5eda36b20 R08: 0000000000000000 R09: 0000000000000000 [ 100.473281][ T7194] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 100.473287][ T7194] R13: 00007ff5edc26128 R14: 00007ff5edc26090 R15: 00007ffcea3da4f8 [ 100.473301][ T7194] [ 100.477776][ T7194] memory: usage 307200kB, limit 307200kB, failcnt 36639 [ 100.513957][ T7194] memory+swap: usage 431984kB, limit 9007199254740988kB, failcnt 0 [ 100.513968][ T7194] kmem: usage 5920kB, limit 9007199254740988kB, failcnt 0 [ 100.513975][ T7194] Memory cgroup stats for /syz1: [ 100.514052][ T7194] cache 308330496 [ 100.514057][ T7194] rss 155648 [ 100.514061][ T7194] rss_huge 0 [ 100.514064][ T7194] shmem 308326400 [ 100.514068][ T7194] mapped_file 0 [ 100.514071][ T7194] dirty 0 [ 100.514075][ T7194] writeback 0 [ 100.514078][ T7194] workingset_refault_anon 18 [ 100.514082][ T7194] workingset_refault_file 8229 [ 100.514086][ T7194] swap 127778816 [ 100.514090][ T7194] swapcached 65536 [ 100.514093][ T7194] pgpgin 174410 [ 100.514097][ T7194] pgpgout 99090 [ 100.514100][ T7194] pgfault 38039 [ 100.514104][ T7194] pgmajfault 42 [ 100.514107][ T7194] inactive_anon 235175936 [ 100.514111][ T7194] active_anon 73326592 [ 100.514115][ T7194] inactive_file 0 [ 100.514119][ T7194] active_file 4096 [ 100.514122][ T7194] unevictable 0 [ 100.514126][ T7194] hierarchical_memory_limit 314572800 [ 100.514131][ T7194] hierarchical_memsw_limit 9223372036854771712 [ 100.514135][ T7194] total_cache 308330496 [ 100.514139][ T7194] total_rss 155648 [ 100.514143][ T7194] total_rss_huge 0 [ 100.514146][ T7194] total_shmem 308326400 [ 100.514150][ T7194] total_mapped_file 0 [ 100.514154][ T7194] total_dirty 0 [ 100.514157][ T7194] total_writeback 0 [ 100.514161][ T7194] total_workingset_refault_anon 18 [ 100.514165][ T7194] total_workingset_refault_file 8229 [ 100.514169][ T7194] total_swap 127778816 [ 100.514173][ T7194] total_swapcached 65536 [ 100.514177][ T7194] total_pgpgin 174410 [ 100.514180][ T7194] total_pgpgout 99090 [ 100.514184][ T7194] total_pgfault 38039 [ 100.514188][ T7194] total_pgmajfault 42 [ 100.514191][ T7194] total_inactive_anon 235175936 [ 100.514195][ T7194] total_active_anon 73326592 [ 100.514199][ T7194] total_inactive_file 0 [ 100.514203][ T7194] total_active_file 4096 [ 100.514207][ T7194] total_unevictable 0 [ 100.514210][ T7194] anon_cost 0 [ 100.514214][ T7194] file_cost 0 [ 100.514218][ T7194] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.260,pid=7186,uid=0 [ 100.671719][ T7194] Memory cgroup out of memory: Killed process 7186 (syz.1.260) total-vm:98968kB, anon-rss:1288kB, file-rss:33172kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 100.872580][ T7396] syz.1.286 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 100.872603][ T7396] CPU: 2 UID: 0 PID: 7396 Comm: syz.1.286 Not tainted syzkaller #0 PREEMPT(full) [ 100.872616][ T7396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.872622][ T7396] Call Trace: [ 100.872627][ T7396] [ 100.872632][ T7396] dump_stack_lvl+0x100/0x190 [ 100.872662][ T7396] dump_header+0xfb/0x606 [ 100.872681][ T7396] oom_kill_process.cold+0xd/0x380 [ 100.872703][ T7396] out_of_memory+0x343/0x14c0 [ 100.872731][ T7396] ? __pfx_out_of_memory+0x10/0x10 [ 100.872752][ T7396] mem_cgroup_out_of_memory+0xc6/0x130 [ 100.872782][ T7396] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 100.872796][ T7396] ? find_held_lock+0x2b/0x80 [ 100.872815][ T7396] ? do_raw_spin_unlock+0x145/0x1e0 [ 100.872835][ T7396] ? _raw_spin_unlock+0x28/0x50 [ 100.872847][ T7396] try_charge_memcg+0x76f/0xfd0 [ 100.872866][ T7396] ? __pfx_try_charge_memcg+0x10/0x10 [ 100.872882][ T7396] ? find_held_lock+0x2b/0x80 [ 100.872898][ T7396] ? rcu_read_unlock+0x17/0x60 [ 100.872907][ T7396] ? rcu_read_unlock+0x17/0x60 [ 100.872921][ T7396] obj_cgroup_charge_pages+0x2b/0x1f0 [ 100.872938][ T7396] __memcg_slab_post_alloc_hook+0x476/0x10b0 [ 100.872960][ T7396] ? kasan_save_track+0x14/0x30 [ 100.872974][ T7396] kmem_cache_alloc_noprof+0x4f5/0x6a0 [ 100.872987][ T7396] ? vm_area_dup+0x27/0x9d0 [ 100.873003][ T7396] vm_area_dup+0x27/0x9d0 [ 100.873018][ T7396] __split_vma+0x19c/0x1d70 [ 100.873036][ T7396] ? __pfx___split_vma+0x10/0x10 [ 100.873060][ T7396] vma_modify+0x1ef4/0x29b0 [ 100.873077][ T7396] ? validate_mm+0x150/0x4e0 [ 100.873097][ T7396] ? __pfx_vma_modify+0x10/0x10 [ 100.873122][ T7396] vma_modify_flags+0x2c3/0x460 [ 100.873140][ T7396] ? __pfx_vma_modify_flags+0x10/0x10 [ 100.873163][ T7396] ? rcu_is_watching+0x13/0xc0 [ 100.873179][ T7396] ? percpu_counter_add_batch+0xb9/0x230 [ 100.873213][ T7396] mprotect_fixup+0x27a/0xe00 [ 100.873233][ T7396] ? __pfx_mprotect_fixup+0x10/0x10 [ 100.873261][ T7396] do_mprotect_pkey+0xa51/0xdd0 [ 100.873281][ T7396] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 100.873305][ T7396] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 100.873321][ T7396] ? ktime_get+0x22c/0x320 [ 100.873346][ T7396] __x64_sys_mprotect+0x78/0xc0 [ 100.873361][ T7396] ? lockdep_hardirqs_on+0x7d/0x110 [ 100.873373][ T7396] do_syscall_64+0x123/0x790 [ 100.873387][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.873399][ T7396] RIP: 0033:0x7ff5ed99f357 [ 100.873410][ T7396] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.873420][ T7396] RSP: 002b:00007ffcea3da498 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 100.873431][ T7396] RAX: ffffffffffffffda RBX: 00007ff5ee89c6c0 RCX: 00007ff5ed99f357 [ 100.873438][ T7396] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007ff5ee87d000 [ 100.873444][ T7396] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 100.873451][ T7396] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffcea3da5f0 [ 100.873457][ T7396] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 100.873471][ T7396] [ 100.988336][ T7396] memory: usage 307200kB, limit 307200kB, failcnt 36922 [ 100.988347][ T7396] memory+swap: usage 432132kB, limit 9007199254740988kB, failcnt 0 [ 100.988354][ T7396] kmem: usage 5888kB, limit 9007199254740988kB, failcnt 0 [ 100.988360][ T7396] Memory cgroup stats for /syz1: [ 100.988482][ T7396] cache 308359168 [ 100.988487][ T7396] rss 143360 [ 100.988491][ T7396] rss_huge 0 [ 100.988494][ T7396] shmem 308178944 [ 100.988498][ T7396] mapped_file 0 [ 100.988501][ T7396] dirty 0 [ 100.988505][ T7396] writeback 0 [ 100.988508][ T7396] workingset_refault_anon 18 [ 100.988512][ T7396] workingset_refault_file 8355 [ 100.988516][ T7396] swap 127930368 [ 100.988520][ T7396] swapcached 65536 [ 100.988524][ T7396] pgpgin 174585 [ 100.988527][ T7396] pgpgout 99257 [ 100.988531][ T7396] pgfault 38044 [ 100.988534][ T7396] pgmajfault 47 [ 100.988538][ T7396] inactive_anon 45420544 [ 100.988542][ T7396] active_anon 262717440 [ 100.988545][ T7396] inactive_file 20480 [ 100.988549][ T7396] active_file 61440 [ 100.988553][ T7396] unevictable 0 [ 100.988556][ T7396] hierarchical_memory_limit 314572800 [ 100.988561][ T7396] hierarchical_memsw_limit 9223372036854771712 [ 100.988565][ T7396] total_cache 308359168 [ 100.988569][ T7396] total_rss 143360 [ 100.988573][ T7396] total_rss_huge 0 [ 100.988577][ T7396] total_shmem 308178944 [ 100.988581][ T7396] total_mapped_file 0 [ 100.988585][ T7396] total_dirty 0 [ 100.988588][ T7396] total_writeback 0 [ 100.988592][ T7396] total_workingset_refault_anon 18 [ 100.988596][ T7396] total_workingset_refault_file 8355 [ 100.988600][ T7396] total_swap 127930368 [ 100.988604][ T7396] total_swapcached 65536 [ 100.988608][ T7396] total_pgpgin 174585 [ 100.988611][ T7396] total_pgpgout 99257 [ 100.988615][ T7396] total_pgfault 38044 [ 100.988619][ T7396] total_pgmajfault 47 [ 100.988622][ T7396] total_inactive_anon 45420544 [ 100.988626][ T7396] total_active_anon 262717440 [ 100.988630][ T7396] total_inactive_file 20480 [ 100.988634][ T7396] total_active_file 61440 [ 100.988638][ T7396] total_unevictable 0 [ 100.988642][ T7396] anon_cost 0 [ 100.988645][ T7396] file_cost 0 [ 100.988649][ T7396] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.260,pid=7191,uid=0 [ 100.988830][ T7396] Memory cgroup out of memory: Killed process 7191 (syz.1.260) total-vm:98968kB, anon-rss:1264kB, file-rss:33204kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 101.167920][ C0] net_ratelimit: 68114 callbacks suppressed [ 101.167935][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 101.167961][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 101.168111][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.168131][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 101.168256][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.168307][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 101.168400][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.168477][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 101.168547][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 101.168647][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 101.256582][ T7197] syz.1.260 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 101.256604][ T7197] CPU: 2 UID: 0 PID: 7197 Comm: syz.1.260 Not tainted syzkaller #0 PREEMPT(full) [ 101.256617][ T7197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.256623][ T7197] Call Trace: [ 101.256627][ T7197] [ 101.256632][ T7197] dump_stack_lvl+0x100/0x190 [ 101.256652][ T7197] dump_header+0xfb/0x606 [ 101.256666][ T7197] oom_kill_process.cold+0xd/0x380 [ 101.256680][ T7197] out_of_memory+0x343/0x14c0 [ 101.256696][ T7197] ? __pfx_out_of_memory+0x10/0x10 [ 101.256713][ T7197] mem_cgroup_out_of_memory+0xc6/0x130 [ 101.256726][ T7197] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 101.256738][ T7197] ? find_held_lock+0x2b/0x80 [ 101.256763][ T7197] ? do_raw_spin_unlock+0x145/0x1e0 [ 101.256778][ T7197] ? _raw_spin_unlock+0x28/0x50 [ 101.256790][ T7197] try_charge_memcg+0x76f/0xfd0 [ 101.256810][ T7197] ? __pfx_try_charge_memcg+0x10/0x10 [ 101.256825][ T7197] ? find_held_lock+0x2b/0x80 [ 101.256841][ T7197] ? rcu_read_unlock+0x17/0x60 [ 101.256850][ T7197] ? rcu_read_unlock+0x17/0x60 [ 101.256859][ T7197] ? find_held_lock+0x2b/0x80 [ 101.256876][ T7197] ? rcu_read_unlock+0x17/0x60 [ 101.256888][ T7197] charge_memcg+0x1ae/0x210 [ 101.256905][ T7197] __mem_cgroup_charge+0x2b/0x1c0 [ 101.256917][ T7197] shmem_alloc_and_add_folio+0x451/0xd40 [ 101.256936][ T7197] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 101.256952][ T7197] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 101.256971][ T7197] shmem_get_folio_gfp+0x758/0x1af0 [ 101.256989][ T7197] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 101.257003][ T7197] ? inode_set_ctime_current+0x9c/0x850 [ 101.257021][ T7197] ? find_held_lock+0x2b/0x80 [ 101.257038][ T7197] ? timestamp_truncate+0x22e/0x2f0 [ 101.257056][ T7197] shmem_write_begin+0x1a4/0x420 [ 101.257073][ T7197] ? __pfx_shmem_write_begin+0x10/0x10 [ 101.257087][ T7197] ? inode_set_ctime_current+0x283/0x850 [ 101.257104][ T7197] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 101.257121][ T7197] ? inode_maybe_inc_iversion+0x169/0x220 [ 101.257138][ T7197] generic_perform_write+0x292/0xa40 [ 101.257150][ T7197] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 101.257171][ T7197] ? __pfx_generic_perform_write+0x10/0x10 [ 101.257184][ T7197] ? mnt_put_write_access_file+0x4e/0x100 [ 101.257200][ T7197] ? file_update_time_flags+0x38c/0x520 [ 101.257213][ T7197] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 101.257229][ T7197] shmem_file_write_iter+0x10e/0x140 [ 101.257247][ T7197] __kernel_write_iter+0x2ac/0x930 [ 101.257261][ T7197] ? __pfx___kernel_write_iter+0x10/0x10 [ 101.257274][ T7197] ? __up_read+0x333/0x980 [ 101.257290][ T7197] ? dump_user_range+0x7e0/0xe90 [ 101.257307][ T7197] dump_user_range+0xa0d/0xe90 [ 101.257324][ T7197] ? __pfx_dump_user_range+0x10/0x10 [ 101.257342][ T7197] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 101.257355][ T7197] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 101.257369][ T7197] ? __pfx_writenote+0x10/0x10 [ 101.257387][ T7197] elf_core_dump+0x2d97/0x3d60 [ 101.257409][ T7197] ? __pfx_elf_core_dump+0x10/0x10 [ 101.257423][ T7197] ? kasan_save_stack+0x3f/0x50 [ 101.257435][ T7197] ? kasan_save_stack+0x30/0x50 [ 101.257446][ T7197] ? kasan_save_track+0x14/0x30 [ 101.257458][ T7197] ? __kasan_kmalloc+0xaa/0xb0 [ 101.257470][ T7197] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 101.257482][ T7197] ? get_signal+0x1f20/0x21d0 [ 101.257492][ T7197] ? arch_do_signal_or_restart+0x91/0x7e0 [ 101.257508][ T7197] ? irqentry_exit+0x542/0xab0 [ 101.257523][ T7197] ? 0xffffffffff600000 [ 101.257548][ T7197] ? lock_acquire+0x1d1/0x380 [ 101.257560][ T7197] ? get_signal+0x1f20/0x21d0 [ 101.257575][ T7197] ? vfs_coredump+0x2606/0x58c0 [ 101.257599][ T7197] vfs_coredump+0x2606/0x58c0 [ 101.257622][ T7197] ? __pfx_vfs_coredump+0x10/0x10 [ 101.257639][ T7197] ? __lock_acquire+0x5c0/0x1f40 [ 101.257653][ T7197] ? lock_acquire+0x1d1/0x380 [ 101.257665][ T7197] ? unwind_next_frame+0xbd/0x2090 [ 101.257684][ T7197] ? lock_acquire+0x1d1/0x380 [ 101.257696][ T7197] ? is_bpf_text_address+0x25/0x1a0 [ 101.257707][ T7197] ? find_held_lock+0x2b/0x80 [ 101.257723][ T7197] ? is_bpf_text_address+0x8a/0x1a0 [ 101.257733][ T7197] ? is_bpf_text_address+0x8a/0x1a0 [ 101.257744][ T7197] ? bpf_ksym_find+0x128/0x1c0 [ 101.257775][ T7197] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 101.257790][ T7197] ? is_bpf_text_address+0x94/0x1a0 [ 101.257809][ T7197] ? __sigqueue_free+0xbe/0x2a0 [ 101.257822][ T7197] ? stack_trace_save+0x8e/0xc0 [ 101.257839][ T7197] ? kasan_save_stack+0x3f/0x50 [ 101.257851][ T7197] ? kasan_save_stack+0x30/0x50 [ 101.257862][ T7197] ? kasan_save_track+0x14/0x30 [ 101.257874][ T7197] ? kasan_save_free_info+0x3b/0x70 [ 101.257890][ T7197] ? __kasan_slab_free+0x5f/0x80 [ 101.257902][ T7197] ? kmem_cache_free+0x127/0x6c0 [ 101.257911][ T7197] ? __sigqueue_free+0xbe/0x2a0 [ 101.257923][ T7197] ? get_signal+0xb02/0x21d0 [ 101.257933][ T7197] ? arch_do_signal_or_restart+0x91/0x7e0 [ 101.257948][ T7197] ? irqentry_exit+0x542/0xab0 [ 101.257959][ T7197] ? asm_exc_page_fault+0x26/0x30 [ 101.257993][ T7197] ? rcu_is_watching+0x13/0xc0 [ 101.258012][ T7197] get_signal+0x1f20/0x21d0 [ 101.258028][ T7197] ? __pfx_get_signal+0x10/0x10 [ 101.258040][ T7197] ? preempt_schedule_irq+0x79/0x90 [ 101.258054][ T7197] arch_do_signal_or_restart+0x91/0x7e0 [ 101.258071][ T7197] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 101.258096][ T7197] irqentry_exit+0x542/0xab0 [ 101.258110][ T7197] asm_exc_page_fault+0x26/0x30 [ 101.258120][ T7197] RIP: 0033:0x7ff5ed854cb7 [ 101.258130][ T7197] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 4e 1b 00 48 8d 35 d2 14 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 101.258140][ T7197] RSP: 002b:00007ff5ee87d1a0 EFLAGS: 00010206 [ 101.258150][ T7197] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007ff5ed99f559 [ 101.258157][ T7197] RDX: 00007ff5ee87d1c0 RSI: 00007ff5ee87d2f0 RDI: 000000000000000b [ 101.258164][ T7197] RBP: 00007ff5eda36b20 R08: 0000000000000000 R09: 0000000000000000 [ 101.258170][ T7197] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 101.258176][ T7197] R13: 00007ff5edc26128 R14: 00007ff5edc26090 R15: 00007ffcea3da4f8 [ 101.258191][ T7197] [ 101.496557][ T7197] memory: usage 307200kB, limit 307200kB, failcnt 37236 [ 101.496569][ T7197] memory+swap: usage 431932kB, limit 9007199254740988kB, failcnt 0 [ 101.496576][ T7197] kmem: usage 5888kB, limit 9007199254740988kB, failcnt 0 [ 101.496582][ T7197] Memory cgroup stats for /syz1: [ 101.496710][ T7197] cache 308359168 [ 101.496716][ T7197] rss 131072 [ 101.496719][ T7197] rss_huge 0 [ 101.496723][ T7197] shmem 308248576 [ 101.496726][ T7197] mapped_file 0 [ 101.496730][ T7197] dirty 0 [ 101.496733][ T7197] writeback 0 [ 101.496737][ T7197] workingset_refault_anon 18 [ 101.496741][ T7197] workingset_refault_file 8402 [ 101.496745][ T7197] swap 127725568 [ 101.496749][ T7197] swapcached 65536 [ 101.496752][ T7197] pgpgin 174687 [ 101.496756][ T7197] pgpgout 99359 [ 101.496760][ T7197] pgfault 38055 [ 101.496763][ T7197] pgmajfault 55 [ 101.496767][ T7197] inactive_anon 137572352 [ 101.496770][ T7197] active_anon 170860544 [ 101.496775][ T7197] inactive_file 36864 [ 101.496778][ T7197] active_file 36864 [ 101.496782][ T7197] unevictable 0 [ 101.496786][ T7197] hierarchical_memory_limit 314572800 [ 101.496790][ T7197] hierarchical_memsw_limit 9223372036854771712 [ 101.496795][ T7197] total_cache 308359168 [ 101.496798][ T7197] total_rss 131072 [ 101.496802][ T7197] total_rss_huge 0 [ 101.496806][ T7197] total_shmem 308248576 [ 101.496809][ T7197] total_mapped_file 0 [ 101.496813][ T7197] total_dirty 0 [ 101.496817][ T7197] total_writeback 0 [ 101.496820][ T7197] total_workingset_refault_anon 18 [ 101.496825][ T7197] total_workingset_refault_file 8402 [ 101.496829][ T7197] total_swap 127725568 [ 101.496833][ T7197] total_swapcached 65536 [ 101.496841][ T7197] total_pgpgin 174687 [ 101.496845][ T7197] total_pgpgout 99359 [ 101.496849][ T7197] total_pgfault 38055 [ 101.496853][ T7197] total_pgmajfault 55 [ 101.496857][ T7197] total_inactive_anon 137572352 [ 101.496861][ T7197] total_active_anon 170860544 [ 101.496865][ T7197] total_inactive_file 36864 [ 101.496869][ T7197] total_active_file 36864 [ 101.496873][ T7197] total_unevictable 0 [ 101.496877][ T7197] anon_cost 0 [ 101.496880][ T7197] file_cost 0 [ 101.496884][ T7197] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.260,pid=7197,uid=0 [ 101.497098][ T7197] Memory cgroup out of memory: Killed process 7197 (syz.1.260) total-vm:99364kB, anon-rss:1276kB, file-rss:32964kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 101.839965][ T7408] hub 8-0:1.0: USB hub found [ 101.847597][ T42] audit: type=1400 audit(1792853913.996:587): avc: denied { create } for pid=7406 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.873568][ T42] audit: type=1400 audit(1792853914.026:588): avc: denied { bind } for pid=7406 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.907977][ T7408] hub 8-0:1.0: 1 port detected [ 101.955161][ T7191] syz.1.260 (7191) used greatest stack depth: 19272 bytes left [ 102.003586][ T42] audit: type=1400 audit(1792853914.156:589): avc: denied { bind } for pid=7396 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.031180][ T7405] netlink: 32 bytes leftover after parsing attributes in process `syz.1.286'. [ 102.228555][ T7416] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 102.260206][ T42] audit: type=1400 audit(1792853914.416:590): avc: denied { map } for pid=7412 comm="syz.0.289" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 102.829013][ T42] audit: type=1400 audit(1792853914.986:591): avc: denied { write } for pid=7422 comm="syz.1.292" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 103.115031][ T7186] syz.1.260 (7186) used greatest stack depth: 17528 bytes left [ 104.463774][ T42] audit: type=1400 audit(1792853916.616:592): avc: denied { setopt } for pid=7444 comm="syz.6.295" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.627684][ T42] audit: type=1400 audit(1792853916.776:593): avc: denied { associate } for pid=7448 comm="syz.1.294" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 104.783018][ T42] audit: type=1400 audit(1792853916.936:594): avc: denied { ioctl } for pid=7444 comm="syz.6.295" path="socket:[18927]" dev="sockfs" ino=18927 ioctlcmd=0x89fa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.798526][ T7446] jffs2: notice: (7446) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 106.177936][ C1] net_ratelimit: 66569 callbacks suppressed [ 106.177945][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 106.177952][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 106.178092][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 106.178139][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.178255][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 106.178327][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.178398][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 106.178493][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.178538][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 106.178654][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 106.925842][ T7440] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 107.193046][ T7449] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 107.221367][ T42] audit: type=1400 audit(1792853919.376:595): avc: denied { connect } for pid=7457 comm="syz.0.297" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.347300][ T42] audit: type=1400 audit(1792853919.496:596): avc: denied { write } for pid=7463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.714876][ T42] audit: type=1400 audit(1792853919.866:598): avc: denied { write } for pid=7472 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.717013][ T42] audit: type=1400 audit(1792853919.866:597): avc: denied { setattr } for pid=7473 comm="syz.4.298" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.167670][ T7477] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 108.212773][ T7481] ip6tnl0: entered allmulticast mode [ 108.681505][ T7042] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 108.763775][ T7503] CIFS: bad ip= option (yU~+1) [ 108.849050][ T7042] usb 9-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 108.850451][ T7042] usb 9-1: config 0 has no interfaces? [ 108.850470][ T7042] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.851888][ T7042] usb 9-1: config 0 descriptor?? [ 109.070971][ T42] audit: type=1400 audit(1792853921.226:599): avc: denied { write } for pid=7487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.078500][ T7042] usb 9-1: USB disconnect, device number 4 [ 109.210265][ T42] audit: type=1400 audit(1792853921.366:600): avc: denied { write } for pid=7508 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.449082][ T7518] netlink: 'syz.0.308': attribute type 15 has an invalid length. [ 109.463532][ T7518] vxlan0: entered promiscuous mode [ 109.463547][ T7518] vxlan0: entered allmulticast mode [ 109.470390][ T42] audit: type=1400 audit(1792853921.626:601): avc: denied { write } for pid=7516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.476733][ T7518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.308'. [ 109.478033][ T5852] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 31488 - 0 [ 109.478058][ T5852] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 31488 - 0 [ 109.478075][ T5852] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 31488 - 0 [ 109.489634][ T5852] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 31488 - 0 [ 109.581973][ T7526] overlayfs: missing 'workdir' [ 109.711351][ T42] audit: type=1400 audit(1792853921.866:602): avc: denied { write } for pid=7529 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.076754][ T42] audit: type=1400 audit(1792853922.226:603): avc: denied { write } for pid=7535 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 110.149229][ T42] audit: type=1400 audit(1792853922.306:604): avc: denied { setattr } for pid=7535 comm="syz.4.312" name="NETLINK" dev="sockfs" ino=15136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.499096][ T7547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.314'. [ 110.529945][ T7547] netlink: 'syz.0.314': attribute type 1 has an invalid length. [ 110.691389][ T7539] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.734054][ T7539] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.775039][ T7539] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.775192][ T7539] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 110.775249][ T7539] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 110.801836][ T7547] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.804989][ T7547] bond3: (slave bond4): making interface the new active one [ 110.805663][ T7547] bond3: (slave bond4): Enslaving as an active interface with an up link [ 110.931832][ T7561] netlink: 'syz.0.317': attribute type 7 has an invalid length. [ 110.975096][ T5788] Bluetooth: hci3: Unknown advertising packet type: 0x78 [ 110.975119][ T5788] Bluetooth: hci3: Malformed LE Event: 0x0d [ 111.018740][ T7539] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 111.187893][ C1] net_ratelimit: 66592 callbacks suppressed [ 111.187907][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.188045][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 111.188064][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 111.188218][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.188342][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 111.188373][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 111.188527][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.188633][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 111.188680][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.188837][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.532898][ T7578] program syz.0.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.487956][ T5146] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 112.641099][ T5146] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.643079][ T5146] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.643106][ T5146] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.643125][ T5146] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.643158][ T5146] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.673273][ T5146] usb 11-1: config 0 descriptor?? [ 112.699860][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.780454][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.844561][ T7613] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 112.848176][ T5788] Bluetooth: hci4: command 0x0c1a tx timeout [ 112.859464][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.894402][ T5146] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 112.894439][ T5146] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 112.894456][ T5146] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 112.894468][ T5146] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 112.894483][ T5146] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 112.894500][ T5146] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 112.894518][ T5146] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 112.894537][ T5146] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 112.894556][ T5146] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 112.894574][ T5146] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 112.986392][ T5146] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 113.044832][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 113.044845][ T42] audit: type=1400 audit(1792853925.196:626): avc: denied { bind } for pid=7616 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.092738][ T5146] usb 11-1: USB disconnect, device number 2 [ 113.147721][ T7618] fido_id[7618]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb11/11-1/report_descriptor': No such file or directory [ 113.315718][ T5788] Bluetooth: hci0: unexpected event 0x08 length: 20 > 4 [ 113.317783][ T42] audit: type=1400 audit(1792853925.466:627): avc: denied { read } for pid=7617 comm="syz.4.331" name="usbmon5" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.333028][ T42] audit: type=1400 audit(1792853925.486:628): avc: denied { open } for pid=7617 comm="syz.4.331" path="/dev/usbmon5" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.667710][ T42] audit: type=1400 audit(1792853925.816:629): avc: denied { write } for pid=7626 comm="syz.0.332" name="nullb" dev="configfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 113.704487][ T42] audit: type=1400 audit(1792853925.856:630): avc: denied { read write } for pid=7626 comm="syz.0.332" name="memory_backed" dev="configfs" ino=19631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 113.714673][ T42] audit: type=1400 audit(1792853925.866:631): avc: denied { open } for pid=7626 comm="syz.0.332" path="/122/config/nullb/my_zoned_dev/memory_backed" dev="configfs" ino=19631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 113.837450][ T7630] netlink: 48 bytes leftover after parsing attributes in process `syz.0.332'. [ 113.844352][ T7628] netlink: 48 bytes leftover after parsing attributes in process `syz.0.332'. [ 114.109270][ T7642] ucma_write: process 241 (syz.4.337) changed security contexts after opening file descriptor, this is not allowed. [ 114.198334][ T5868] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 114.269532][ T7042] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 114.349312][ T5868] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 114.352748][ T5868] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.352779][ T5868] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 114.352792][ T5868] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 114.352812][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.428951][ T7042] usb 11-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 114.429874][ T7042] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 114.429890][ T7042] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 114.437730][ T7042] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.437749][ T7042] usb 11-1: Product: syz [ 114.437756][ T7042] usb 11-1: Manufacturer: syz [ 114.437764][ T7042] usb 11-1: SerialNumber: syz [ 114.472558][ T7042] symbolserial 11-1:1.0: symbol converter detected [ 114.481867][ T7042] usb 11-1: symbol converter now attached to ttyUSB0 [ 114.677366][ T5146] usb 11-1: USB disconnect, device number 3 [ 114.694609][ T5146] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 114.702311][ T5146] symbolserial 11-1:1.0: device disconnected [ 114.772659][ T42] audit: type=1400 audit(1792853926.926:632): avc: denied { setopt } for pid=7672 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.781928][ T42] audit: type=1400 audit(1792853926.936:633): avc: denied { ioctl } for pid=7672 comm="syz.0.339" path="socket:[19793]" dev="sockfs" ino=19793 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.782365][ T42] audit: type=1400 audit(1792853926.936:634): avc: denied { write } for pid=7672 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.928254][ T5788] Bluetooth: hci4: command 0x0c1a tx timeout [ 115.090679][ T7676] tmpfs: Using encoding : utf8-12.1.0 [ 115.647210][ T7681] IPVS: length: 118 != 24 [ 115.745498][ T42] audit: type=1400 audit(1792853927.896:635): avc: denied { append } for pid=7678 comm="syz.6.342" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.903499][ T5868] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 115.903513][ T5868] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 115.921295][ T5868] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 115.924935][ T5868] usb 6-1: USB disconnect, device number 4 [ 116.060376][ T7689] netlink: 88 bytes leftover after parsing attributes in process `syz.4.344'. [ 116.197876][ C0] net_ratelimit: 59181 callbacks suppressed [ 116.197898][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 116.197959][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.198117][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 116.198196][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 116.198289][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 116.198442][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.198465][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 116.198593][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.198744][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.198761][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 117.008023][ T5788] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.620918][ T7712] macvlan2: entered promiscuous mode [ 117.620933][ T7712] bridge0: entered promiscuous mode [ 117.780246][ T7725] SELinux: DCCP has been removed, pid=7725 comm=syz.4.351 [ 118.005931][ T7730] gadgetfs: bound to dummy_udc driver [ 118.049927][ T42] kauditd_printk_skb: 545 callbacks suppressed [ 118.049940][ T42] audit: type=1326 audit(1792853930.206:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.4.352" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feed3d9f1eb code=0x7ff00000 [ 118.050032][ T42] audit: type=1326 audit(1792853930.206:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.4.352" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feed3d9f1eb code=0x7ff00000 [ 118.050118][ T42] audit: type=1326 audit(1792853930.206:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.4.352" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feed3d9f1eb code=0x7ff00000 [ 118.050230][ T42] audit: type=1326 audit(1792853930.206:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.4.352" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feed3d9f1eb code=0x7ff00000 [ 118.050337][ T42] audit: type=1326 audit(1792853930.206:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.4.352" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feed3d9f1eb code=0x7ff00000 [ 118.050511][ T42] audit: type=1326 audit(1792853930.206:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.4.352" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feed3d9f1eb code=0x7ff00000 [ 118.050673][ T42] audit: type=1326 audit(1792853930.206:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.4.352" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feed3d9f1eb code=0x7ff00000 [ 118.050763][ T42] audit: type=1326 audit(1792853930.206:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.4.352" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feed3d9f1eb code=0x7ff00000 [ 118.050873][ T42] audit: type=1326 audit(1792853930.206:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.4.352" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feed3d9f1eb code=0x7ff00000 [ 118.050963][ T42] audit: type=1326 audit(1792853930.206:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.4.352" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feed3d9f1eb code=0x7ff00000 [ 118.258256][ T5868] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 118.258492][ C2] gadgetfs: connected [ 118.260713][ T5868] gadgetfs: disconnected [ 118.408741][ C2] gadgetfs: connected [ 118.409454][ T5868] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 118.409697][ T5868] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 118.409727][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.411268][ C2] gadgetfs: configuration #1 [ 118.804360][ T7729] gadgetfs: suspended from state 3 [ 118.804423][ T7729] gadgetfs: disconnected [ 118.807022][ T7042] usb 5-1: USB disconnect, device number 6 [ 119.151671][ T7747] netlink: 'syz.0.354': attribute type 10 has an invalid length. [ 119.461598][ T7760] netlink: 'syz.0.354': attribute type 10 has an invalid length. [ 119.504316][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 119.657997][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 119.744891][ T7747] team0 (unregistering): Port device team_slave_0 removed [ 119.760866][ T7747] team0 (unregistering): Port device team_slave_1 removed [ 119.784690][ T7764] netlink: 64 bytes leftover after parsing attributes in process `syz.4.361'. [ 119.873069][ T7764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=7764 comm=syz.4.361 [ 119.873356][ T7752] syzkaller0: entered promiscuous mode [ 119.873368][ T7752] syzkaller0: entered allmulticast mode [ 120.086127][ T7770] 9p: Bad value for 'wfdno' [ 120.470316][ T7805] hfs: can't find a HFS filesystem on dev sr0 [ 121.207856][ C1] net_ratelimit: 62210 callbacks suppressed [ 121.207871][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 121.207884][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 121.208023][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.208072][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 121.208164][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.208256][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 121.208303][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.208397][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 121.208442][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 121.208536][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 121.706758][ T7828] netlink: 64 bytes leftover after parsing attributes in process `syz.0.367'. [ 121.805023][ T7826] ima: policy update failed [ 121.940673][ T7842] bridge_slave_0: left allmulticast mode [ 121.940695][ T7842] bridge_slave_0: left promiscuous mode [ 121.940890][ T7842] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.045885][ T7842] bridge_slave_1: left allmulticast mode [ 122.045907][ T7842] bridge_slave_1: left promiscuous mode [ 122.046069][ T7842] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.085532][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 122.147727][ T7842] bond0: (slave bond_slave_0): Releasing backup interface [ 122.193626][ T7842] bond0: (slave bond_slave_1): Releasing backup interface [ 122.276189][ T7842] team0: Port device team_slave_0 removed [ 122.305315][ T7842] team0: Port device team_slave_1 removed [ 122.305595][ T7842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.318769][ T7842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.339840][ T7843] team0: Port device xfrm0 added [ 122.672968][ T7866] netlink: 72 bytes leftover after parsing attributes in process `syz.4.374'. [ 123.065682][ T42] kauditd_printk_skb: 4939 callbacks suppressed [ 123.065708][ T42] audit: type=1807 audit(1792853935.216:6129): action=measure uid>+ res=0 [ 123.067321][ T42] audit: type=1802 audit(1792853935.216:6130): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.6.376" res=0 errno=-22 [ 123.085721][ T7880] /dev/sr0: Can't open blockdev [ 123.087299][ T7879] ima: policy update failed [ 123.087403][ T42] audit: type=1802 audit(1792853935.236:6131): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.6.376" res=0 errno=-22 [ 123.227251][ T7882] loop7: detected capacity change from 0 to 7 [ 123.237417][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.237552][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.255487][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.255530][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.270298][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.270347][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.274420][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.274565][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.275612][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.275669][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.275885][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.275934][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.276042][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.276093][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.276128][ T7882] ldm_validate_partition_table(): Disk read failed. [ 123.276211][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.276260][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.276425][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.276475][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.276942][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.276995][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.344459][ T7882] Dev loop7: unable to read RDB block 0 [ 123.420575][ T42] audit: type=1400 audit(1792853935.576:6132): avc: denied { getopt } for pid=7884 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.455337][ T42] audit: type=1400 audit(1792853935.606:6133): avc: denied { ioctl } for pid=7884 comm="syz.0.380" path="socket:[21748]" dev="sockfs" ino=21748 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.481678][ T42] audit: type=1400 audit(1792853935.636:6134): avc: denied { ioctl } for pid=7884 comm="syz.0.380" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 ioctlcmd=0xc138fd10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 123.603581][ T7882] loop7: unable to read partition table [ 123.603715][ T7882] loop7: partition table beyond EOD, truncated [ 123.603757][ T7882] loop_reread_partitions: partition scan of loop7 (Cj̖4FLQk5) failed (rc=-5) [ 123.635190][ T7883] ldm_validate_partition_table(): Disk read failed. [ 123.635470][ T7883] Dev loop7: unable to read RDB block 0 [ 123.635850][ T7883] loop7: unable to read partition table [ 123.636089][ T7883] loop7: partition table beyond EOD, truncated [ 124.271835][ T42] audit: type=1400 audit(1792853936.426:6135): avc: denied { append } for pid=7897 comm="syz.4.383" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 124.304820][ T7909] netlink: 'syz.0.385': attribute type 10 has an invalid length. [ 124.304853][ T7909] ipvlan0: entered allmulticast mode [ 124.304868][ T7909] veth0_vlan: entered allmulticast mode [ 124.612099][ T7918] bridge1: entered promiscuous mode [ 124.612179][ T7918] bridge1: entered allmulticast mode [ 124.618943][ T42] audit: type=1400 audit(1792853936.776:6136): avc: denied { read } for pid=5490 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 124.840336][ T42] audit: type=1400 audit(1792853936.996:6137): avc: denied { write } for pid=7927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.910888][ T42] audit: type=1400 audit(1792853937.066:6138): avc: denied { write } for pid=7930 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.156793][ T7942] nfs4: Unknown parameter '' [ 125.260348][ T7042] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 125.283115][ T7948] erspan1: entered promiscuous mode [ 125.388462][ T7042] usb 11-1: device descriptor read/64, error -71 [ 125.638393][ T7042] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 125.737740][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.397'. [ 125.778382][ T7042] usb 11-1: device descriptor read/64, error -71 [ 125.888121][ T7042] usb usb11-port1: attempt power cycle [ 126.127078][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 126.217868][ C1] net_ratelimit: 71595 callbacks suppressed [ 126.217882][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 126.217961][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 126.218027][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.218149][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 126.218189][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.218283][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 126.218333][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.218414][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 126.218476][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 126.218546][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 126.250024][ T7042] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 126.276206][ T7042] usb 11-1: device descriptor read/8, error -71 [ 126.372735][ T7969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7969 comm=syz.4.401 [ 126.528834][ T7042] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 126.552288][ T7042] usb 11-1: device descriptor read/8, error -71 [ 126.670634][ T7042] usb usb11-port1: unable to enumerate USB device [ 127.282222][ T7983] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 127.300618][ T7983] macvlan1: entered promiscuous mode [ 127.300689][ T7983] macvlan1: entered allmulticast mode [ 127.305004][ T7983] veth1_vlan: entered allmulticast mode [ 127.314131][ T7983] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 127.862431][ T6429] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 127.949911][ T8000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.144304][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 128.144316][ T42] audit: type=1400 audit(1792853940.296:6145): avc: denied { getopt } for pid=8005 comm="syz.6.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.189363][ T6429] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 128.248718][ T6429] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.248749][ T6429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.279402][ T8011] scsi_strcpy_devinfo: vendor string 'b~sb%`Qʮ~G|\D5X2aE' is too long [ 128.351041][ T8013] syzkaller0: entered promiscuous mode [ 128.351058][ T8013] syzkaller0: entered allmulticast mode [ 128.432903][ T8014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.413'. [ 128.432916][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 128.461151][ T6429] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 128.473315][ T6429] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 128.473348][ T6429] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 128.510617][ T6429] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 128.510660][ T6429] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 128.553483][ T6429] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 128.572578][ T6429] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 128.572617][ T6429] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 128.631945][ T6429] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 128.633488][ T8018] block nbd4: NBD_DISCONNECT [ 128.709840][ T6429] usb 6-1: USB disconnect, device number 5 [ 128.794376][ T6429] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 128.821660][ T6429] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 128.865851][ T42] audit: type=1400 audit(1792853941.016:6146): avc: denied { accept } for pid=8019 comm="syz.4.415" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.890911][ T6429] keyspan 6-1:1.0: device disconnected [ 129.584374][ T42] audit: type=1400 audit(1792853941.726:6147): avc: denied { bind } for pid=8030 comm="syz.6.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.740764][ T42] audit: type=1400 audit(1792853941.896:6148): avc: denied { connect } for pid=8030 comm="syz.6.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.866054][ T8039] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 129.866073][ T8039] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.867288][ T8039] vhci_hcd vhci_hcd.0: Device attached [ 129.881323][ T8040] vhci_hcd: connection closed [ 129.891237][ T12] vhci_hcd vhci_hcd.6: stop threads [ 129.891666][ T12] vhci_hcd vhci_hcd.6: release socket [ 129.891686][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 130.677093][ T42] audit: type=1400 audit(1792853942.826:6149): avc: denied { getopt } for pid=8043 comm="syz.6.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.725711][ T7697] Bluetooth: hci2: Frame reassembly failed (-84) [ 130.726004][ T8053] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 130.736450][ T7697] Bluetooth: hci2: Frame reassembly failed (-84) [ 131.227845][ C1] net_ratelimit: 69871 callbacks suppressed [ 131.227861][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.227874][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 131.228007][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 131.228023][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 131.228140][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 131.228159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 131.228270][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.228307][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 131.228400][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.228457][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:4c:56:5e:9d:01, vlan:0) [ 131.367084][ T8058] netlink: 'syz.4.425': attribute type 21 has an invalid length. [ 131.367098][ T8058] netlink: 156 bytes leftover after parsing attributes in process `syz.4.425'. [ 132.706719][ T8065] netlink: 'syz.0.427': attribute type 1 has an invalid length. [ 132.721486][ T8065] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.734788][ T8065] bond5: (slave geneve2): making interface the new active one [ 132.736513][ T8065] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 132.750953][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.751057][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.751084][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.751106][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.772164][ T5788] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 132.773832][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.773860][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.927725][ T8074] netlink: 'syz.1.430': attribute type 10 has an invalid length. [ 132.981185][ T42] audit: type=1400 audit(1792853945.136:6150): avc: denied { write } for pid=8075 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.991613][ T42] audit: type=1400 audit(1792853945.146:6151): avc: denied { read } for pid=8075 comm="syz.0.428" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 132.999448][ T42] audit: type=1400 audit(1792853945.156:6152): avc: denied { open } for pid=8075 comm="syz.0.428" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 133.077460][ T8079] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 133.089511][ T42] audit: type=1400 audit(1792853945.246:6153): avc: denied { create } for pid=8078 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 133.155395][ T8082] netlink: 88 bytes leftover after parsing attributes in process `syz.0.433'. [ 133.195789][ T8074] team0 (unregistering): Port device team_slave_0 removed [ 133.202575][ T8074] team0 (unregistering): Port device team_slave_1 removed [ 133.262952][ T8084] netlink: 72 bytes leftover after parsing attributes in process `syz.0.434'. [ 133.289897][ T42] audit: type=1400 audit(1792853945.446:6154): avc: denied { write } for pid=8083 comm="syz.0.434" name="usb_gadget" dev="configfs" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.292688][ T42] audit: type=1400 audit(1792853945.446:6155): avc: denied { write } for pid=8083 comm="syz.0.434" name="functions" dev="configfs" ino=23845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.105540][ T8096] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 134.105640][ T8096] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 134.558380][ T8100] Console: switching to colour dummy device 80x25 [ 135.102417][ T8103] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 135.128432][ T8103] pci 0000:00:01.0: BAR 0 [mem 0x00000000-0x007fffff pref] [ 135.128576][ T8103] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 135.128642][ T8103] pci 0000:00:01.0: BAR 4 [mem 0xfeaf6000-0xfeaf6fff] [ 135.128743][ T8103] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 135.130867][ T8103] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 135.181846][ T8103] pci 0000:00:01.0: Adding to iommu group 1 [ 135.204367][ T8103] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 135.204383][ T8103] pci 0000:00:01.0: vgaarb: bridge control possible [ 135.204390][ T8103] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 135.230176][ T8103] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 135.231009][ T8103] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 135.249605][ T8103] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 135.303366][ T8103] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 135.303513][ T8103] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 135.304552][ T8103] [drm] features: -virgl +edid -resource_blob -host_visible [ 135.304561][ T8103] [drm] features: -context_init -blob_alignment [ 135.322995][ T8103] ------------[ cut here ]------------ [ 135.323004][ T8103] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 135.323011][ T8103] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xab/0x440, CPU#2: syz.4.441/8103 [ 135.330632][ T8103] Modules linked in: [ 135.333209][ T8103] CPU: 2 UID: 0 PID: 8103 Comm: syz.4.441 Not tainted syzkaller #0 PREEMPT(full) [ 135.336182][ T8103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.339821][ T8103] RIP: 0010:__kmem_cache_create_args+0xae/0x440 [ 135.341842][ T8103] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 4a 1a 90 74 1f 48 8b 7b 58 48 89 ee e8 e0 ce 7b 09 85 c0 75 e0 48 8d 3d 25 cd 08 10 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 60 d0 7b 09 48 85 c0 0f [ 135.348203][ T8103] RSP: 0018:ffffc900077d6f18 EFLAGS: 00010246 [ 135.350154][ T8103] RAX: 0000000000000000 RBX: ffff888103aa4780 RCX: fffff52000efadbe [ 135.352793][ T8103] RDX: 0000000000000000 RSI: ffffffff8cb27620 RDI: ffffffff926d1d10 [ 135.355387][ T8103] RBP: ffffffff8cb27620 R08: 0000000000000000 R09: fffffbfff24d114b [ 135.357926][ T8103] R10: ffffc900077d6f18 R11: 0000000000000001 R12: 0000000000000000 [ 135.360294][ T8103] R13: ffffc900077d6f88 R14: 00000000000000d8 R15: ffff8880485d4fce [ 135.362677][ T8103] FS: 00007feed4c816c0(0000) GS:ffff8880d46c3000(0000) knlGS:0000000000000000 [ 135.365502][ T8103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.367528][ T8103] CR2: 00007f3c8473d473 CR3: 0000000014084000 CR4: 0000000000352ef0 [ 135.370350][ T8103] DR0: 0000000000000007 DR1: ffffffffff7fff00 DR2: 4000000000010022 [ 135.372762][ T8103] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 135.375181][ T8103] Call Trace: [ 135.376255][ T8103] [ 135.377177][ T8103] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 135.379057][ T8103] ? __pfx__printk+0x10/0x10 [ 135.380521][ T8103] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 135.382340][ T8103] ? lockdep_init_map_type+0x5c/0x250 [ 135.383991][ T8103] virtio_gpu_init.cold+0x40d/0x127f [ 135.385637][ T8103] ? vga_remove_vgacon.cold+0x1d/0x99 [ 135.387282][ T8103] ? __pfx_virtio_gpu_init+0x10/0x10 [ 135.389042][ T8103] ? is_console_locked+0x9/0x20 [ 135.390534][ T8103] ? con_is_bound+0x141/0x190 [ 135.391993][ T8103] ? vga_remove_vgacon+0x21/0x30 [ 135.393522][ T8103] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 135.395673][ T8103] virtio_gpu_probe+0x21c/0x360 [ 135.397204][ T8103] virtio_dev_probe+0x72a/0xd30 [ 135.399143][ T8103] ? __pfx_virtio_dev_probe+0x10/0x10 [ 135.400806][ T8103] ? kernfs_put+0x3f/0x60 [ 135.402163][ T8103] ? sysfs_do_create_link_sd+0xbb/0x140 [ 135.403836][ T8103] ? sysfs_create_link+0x68/0xc0 [ 135.405348][ T8103] ? __pfx_virtio_dev_probe+0x10/0x10 [ 135.407038][ T8103] really_probe+0x241/0xa60 [ 135.408545][ T8103] __driver_probe_device+0x210/0x460 [ 135.410164][ T8103] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.412004][ T8103] driver_probe_device+0x4a/0x140 [ 135.413601][ T8103] __device_attach_driver+0x1df/0x320 [ 135.415259][ T8103] ? __pfx___device_attach_driver+0x10/0x10 [ 135.417094][ T8103] bus_for_each_drv+0x159/0x1e0 [ 135.418628][ T8103] ? __pfx_bus_for_each_drv+0x10/0x10 [ 135.420230][ T8103] ? lockdep_hardirqs_on+0x7d/0x110 [ 135.421868][ T8103] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 135.423762][ T8103] __device_attach+0x1e4/0x4d0 [ 135.425287][ T8103] ? __pfx___device_attach+0x10/0x10 [ 135.427029][ T8103] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.429060][ T8103] device_initial_probe+0xaf/0xd0 [ 135.430684][ T8103] bus_probe_device+0x64/0x160 [ 135.432217][ T8103] device_add+0x121d/0x1970 [ 135.433682][ T8103] ? __pfx_device_add+0x10/0x10 [ 135.435249][ T8103] ? __pfx___might_resched+0x10/0x10 [ 135.436986][ T8103] ? lockdep_init_map_type+0x5c/0x250 [ 135.438786][ T8103] ? vp_synchronize_vectors+0x121/0x1f0 [ 135.440549][ T8103] ? __pfx_vp_set_status+0x10/0x10 [ 135.442190][ T8103] register_virtio_device+0x661/0x7c0 [ 135.443922][ T8103] ? __pfx_register_virtio_device+0x10/0x10 [ 135.445809][ T8103] ? __pfx_pcibios_set_master+0x10/0x10 [ 135.447604][ T8103] ? __raw_spin_lock_init+0x3a/0x110 [ 135.449350][ T8103] ? __pfx_virtio_pci_probe+0x10/0x10 [ 135.451061][ T8103] virtio_pci_probe+0x255/0x410 [ 135.452613][ T8103] local_pci_probe+0xdd/0x1b0 [ 135.454121][ T8103] pci_call_probe+0x176/0x800 [ 135.455626][ T8103] ? pci_match_device+0x147/0x7d0 [ 135.457241][ T8103] ? __pfx_pci_call_probe+0x10/0x10 [ 135.459299][ T8103] ? __pfx_pci_match_device+0x10/0x10 [ 135.461012][ T8103] ? pci_find_host_bridge+0x3c/0x80 [ 135.462682][ T8103] pci_device_probe+0x25b/0x400 [ 135.464238][ T8103] ? __pfx_pci_device_probe+0x10/0x10 [ 135.466056][ T8103] ? sysfs_create_link+0x68/0xc0 [ 135.467666][ T8103] ? __pfx_pci_device_probe+0x10/0x10 [ 135.469417][ T8103] really_probe+0x241/0xa60 [ 135.470888][ T8103] __driver_probe_device+0x210/0x460 [ 135.472565][ T8103] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.474421][ T8103] driver_probe_device+0x4a/0x140 [ 135.476038][ T8103] __device_attach_driver+0x1df/0x320 [ 135.477761][ T8103] ? __pfx___device_attach_driver+0x10/0x10 [ 135.479693][ T8103] bus_for_each_drv+0x159/0x1e0 [ 135.481407][ T8103] ? __pfx_bus_for_each_drv+0x10/0x10 [ 135.483130][ T8103] ? lockdep_hardirqs_on+0x7d/0x110 [ 135.484781][ T8103] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 135.486667][ T8103] __device_attach+0x1e4/0x4d0 [ 135.488949][ T8103] ? __pfx___device_attach+0x10/0x10 [ 135.490663][ T8103] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.492347][ T8103] device_initial_probe+0xaf/0xd0 [ 135.494000][ T8103] pci_bus_add_device+0xc5/0x100 [ 135.495590][ T8103] pci_bus_add_devices+0x9a/0x1f0 [ 135.497269][ T8103] pci_rescan_bus+0x2a/0x40 [ 135.498851][ T8103] rescan_store+0xfb/0x130 [ 135.500285][ T8103] ? __pfx_rescan_store+0x10/0x10 [ 135.501934][ T8103] ? sysfs_file_kobj+0xe4/0x290 [ 135.503498][ T8103] ? __pfx_rescan_store+0x10/0x10 [ 135.505105][ T8103] bus_attr_store+0x74/0xb0 [ 135.506617][ T8103] ? __pfx_bus_attr_store+0x10/0x10 [ 135.508385][ T8103] sysfs_kf_write+0xf2/0x150 [ 135.509995][ T8103] kernfs_fop_write_iter+0x3e0/0x5f0 [ 135.511787][ T8103] ? __pfx_sysfs_kf_write+0x10/0x10 [ 135.513592][ T8103] vfs_write+0x6af/0x1050 [ 135.515142][ T8103] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 135.517022][ T8103] ? __pfx_vfs_write+0x10/0x10 [ 135.519004][ T8103] ? find_held_lock+0x2b/0x80 [ 135.520532][ T8103] ksys_write+0x12a/0x250 [ 135.521921][ T8103] ? __pfx_ksys_write+0x10/0x10 [ 135.523617][ T8103] do_syscall_64+0x123/0x790 [ 135.525131][ T8103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.527049][ T8103] RIP: 0033:0x7feed3d9f559 [ 135.528633][ T8103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.534632][ T8103] RSP: 002b:00007feed4c81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.537257][ T8103] RAX: ffffffffffffffda RBX: 00007feed4026090 RCX: 00007feed3d9f559 [ 135.539813][ T8103] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000006 [ 135.542206][ T8103] RBP: 00007feed3e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 135.544685][ T8103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.547161][ T8103] R13: 00007feed4026128 R14: 00007feed4026090 R15: 00007ffee00d9b18 [ 135.550020][ T8103] [ 135.551033][ T8103] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 135.553310][ T8103] CPU: 2 UID: 0 PID: 8103 Comm: syz.4.441 Not tainted syzkaller #0 PREEMPT(full) [ 135.556176][ T8103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.559341][ T8103] Call Trace: [ 135.560411][ T8103] [ 135.561364][ T8103] dump_stack_lvl+0x100/0x190 [ 135.562909][ T8103] vpanic+0x553/0x970 [ 135.564187][ T8103] ? __pfx_vpanic+0x10/0x10 [ 135.565639][ T8103] panic+0xd1/0xe0 [ 135.566858][ T8103] ? __pfx_panic+0x10/0x10 [ 135.568283][ T8103] check_panic_on_warn.cold+0x19/0x34 [ 135.569945][ T8103] ? __kmem_cache_create_args+0xab/0x440 [ 135.571725][ T8103] __warn.cold+0x191/0x318 [ 135.573150][ T8103] __report_bug+0x30f/0x440 [ 135.574603][ T8103] ? __kmem_cache_create_args+0xab/0x440 [ 135.576380][ T8103] ? __pfx___report_bug+0x10/0x10 [ 135.577988][ T8103] ? __mutex_lock+0x267/0x1c10 [ 135.579437][ T8103] ? __kmem_cache_create_args+0x44/0x440 [ 135.581116][ T8103] report_bug_entry+0xe2/0x290 [ 135.582554][ T8103] ? __kmem_cache_create_args+0xae/0x440 [ 135.584266][ T8103] handle_bug+0x1cd/0x2a0 [ 135.585657][ T8103] exc_invalid_op+0x17/0x50 [ 135.587134][ T8103] asm_exc_invalid_op+0x1a/0x20 [ 135.588691][ T8103] RIP: 0010:__kmem_cache_create_args+0xae/0x440 [ 135.590672][ T8103] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 4a 1a 90 74 1f 48 8b 7b 58 48 89 ee e8 e0 ce 7b 09 85 c0 75 e0 48 8d 3d 25 cd 08 10 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 60 d0 7b 09 48 85 c0 0f [ 135.596685][ T8103] RSP: 0018:ffffc900077d6f18 EFLAGS: 00010246 [ 135.598606][ T8103] RAX: 0000000000000000 RBX: ffff888103aa4780 RCX: fffff52000efadbe [ 135.601086][ T8103] RDX: 0000000000000000 RSI: ffffffff8cb27620 RDI: ffffffff926d1d10 [ 135.603570][ T8103] RBP: ffffffff8cb27620 R08: 0000000000000000 R09: fffffbfff24d114b [ 135.606072][ T8103] R10: ffffc900077d6f18 R11: 0000000000000001 R12: 0000000000000000 [ 135.608551][ T8103] R13: ffffc900077d6f88 R14: 00000000000000d8 R15: ffff8880485d4fce [ 135.611050][ T8103] ? __kmem_cache_create_args+0xa0/0x440 [ 135.612826][ T8103] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 135.614509][ T8103] ? __pfx__printk+0x10/0x10 [ 135.615998][ T8103] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 135.617881][ T8103] ? lockdep_init_map_type+0x5c/0x250 [ 135.619597][ T8103] virtio_gpu_init.cold+0x40d/0x127f [ 135.621286][ T8103] ? vga_remove_vgacon.cold+0x1d/0x99 [ 135.623001][ T8103] ? __pfx_virtio_gpu_init+0x10/0x10 [ 135.624684][ T8103] ? is_console_locked+0x9/0x20 [ 135.626287][ T8103] ? con_is_bound+0x141/0x190 [ 135.627799][ T8103] ? vga_remove_vgacon+0x21/0x30 [ 135.629383][ T8103] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 135.631596][ T8103] virtio_gpu_probe+0x21c/0x360 [ 135.633160][ T8103] virtio_dev_probe+0x72a/0xd30 [ 135.634731][ T8103] ? __pfx_virtio_dev_probe+0x10/0x10 [ 135.636461][ T8103] ? kernfs_put+0x3f/0x60 [ 135.637858][ T8103] ? sysfs_do_create_link_sd+0xbb/0x140 [ 135.639634][ T8103] ? sysfs_create_link+0x68/0xc0 [ 135.641200][ T8103] ? __pfx_virtio_dev_probe+0x10/0x10 [ 135.642914][ T8103] really_probe+0x241/0xa60 [ 135.644378][ T8103] __driver_probe_device+0x210/0x460 [ 135.646092][ T8103] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.647936][ T8103] driver_probe_device+0x4a/0x140 [ 135.649464][ T8103] __device_attach_driver+0x1df/0x320 [ 135.651158][ T8103] ? __pfx___device_attach_driver+0x10/0x10 [ 135.653029][ T8103] bus_for_each_drv+0x159/0x1e0 [ 135.654581][ T8103] ? __pfx_bus_for_each_drv+0x10/0x10 [ 135.656290][ T8103] ? lockdep_hardirqs_on+0x7d/0x110 [ 135.657949][ T8103] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 135.659805][ T8103] __device_attach+0x1e4/0x4d0 [ 135.661334][ T8103] ? __pfx___device_attach+0x10/0x10 [ 135.662998][ T8103] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.664587][ T8103] device_initial_probe+0xaf/0xd0 [ 135.666199][ T8103] bus_probe_device+0x64/0x160 [ 135.667678][ T8103] device_add+0x121d/0x1970 [ 135.669081][ T8103] ? __pfx_device_add+0x10/0x10 [ 135.670598][ T8103] ? __pfx___might_resched+0x10/0x10 [ 135.672217][ T8103] ? lockdep_init_map_type+0x5c/0x250 [ 135.673852][ T8103] ? vp_synchronize_vectors+0x121/0x1f0 [ 135.675528][ T8103] ? __pfx_vp_set_status+0x10/0x10 [ 135.677170][ T8103] register_virtio_device+0x661/0x7c0 [ 135.678845][ T8103] ? __pfx_register_virtio_device+0x10/0x10 [ 135.680648][ T8103] ? __pfx_pcibios_set_master+0x10/0x10 [ 135.682408][ T8103] ? __raw_spin_lock_init+0x3a/0x110 [ 135.684040][ T8103] ? __pfx_virtio_pci_probe+0x10/0x10 [ 135.685663][ T8103] virtio_pci_probe+0x255/0x410 [ 135.687188][ T8103] local_pci_probe+0xdd/0x1b0 [ 135.688662][ T8103] pci_call_probe+0x176/0x800 [ 135.690134][ T8103] ? pci_match_device+0x147/0x7d0 [ 135.691691][ T8103] ? __pfx_pci_call_probe+0x10/0x10 [ 135.693253][ T8103] ? __pfx_pci_match_device+0x10/0x10 [ 135.694904][ T8103] ? pci_find_host_bridge+0x3c/0x80 [ 135.696491][ T8103] pci_device_probe+0x25b/0x400 [ 135.697962][ T8103] ? __pfx_pci_device_probe+0x10/0x10 [ 135.699589][ T8103] ? sysfs_create_link+0x68/0xc0 [ 135.701082][ T8103] ? __pfx_pci_device_probe+0x10/0x10 [ 135.702704][ T8103] really_probe+0x241/0xa60 [ 135.704145][ T8103] __driver_probe_device+0x210/0x460 [ 135.705792][ T8103] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.707591][ T8103] driver_probe_device+0x4a/0x140 [ 135.709197][ T8103] __device_attach_driver+0x1df/0x320 [ 135.710901][ T8103] ? __pfx___device_attach_driver+0x10/0x10 [ 135.712708][ T8103] bus_for_each_drv+0x159/0x1e0 [ 135.714202][ T8103] ? __pfx_bus_for_each_drv+0x10/0x10 [ 135.715850][ T8103] ? lockdep_hardirqs_on+0x7d/0x110 [ 135.717503][ T8103] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 135.719295][ T8103] __device_attach+0x1e4/0x4d0 [ 135.720778][ T8103] ? __pfx___device_attach+0x10/0x10 [ 135.722412][ T8103] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.724073][ T8103] device_initial_probe+0xaf/0xd0 [ 135.725639][ T8103] pci_bus_add_device+0xc5/0x100 [ 135.727151][ T8103] pci_bus_add_devices+0x9a/0x1f0 [ 135.728670][ T8103] pci_rescan_bus+0x2a/0x40 [ 135.730037][ T8103] rescan_store+0xfb/0x130 [ 135.731414][ T8103] ? __pfx_rescan_store+0x10/0x10 [ 135.732927][ T8103] ? sysfs_file_kobj+0xe4/0x290 [ 135.734408][ T8103] ? __pfx_rescan_store+0x10/0x10 [ 135.735934][ T8103] bus_attr_store+0x74/0xb0 [ 135.737324][ T8103] ? __pfx_bus_attr_store+0x10/0x10 [ 135.738918][ T8103] sysfs_kf_write+0xf2/0x150 [ 135.740363][ T8103] kernfs_fop_write_iter+0x3e0/0x5f0 [ 135.741970][ T8103] ? __pfx_sysfs_kf_write+0x10/0x10 [ 135.743537][ T8103] vfs_write+0x6af/0x1050 [ 135.744912][ T8103] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 135.746765][ T8103] ? __pfx_vfs_write+0x10/0x10 [ 135.748285][ T8103] ? find_held_lock+0x2b/0x80 [ 135.749796][ T8103] ksys_write+0x12a/0x250 [ 135.751182][ T8103] ? __pfx_ksys_write+0x10/0x10 [ 135.752740][ T8103] do_syscall_64+0x123/0x790 [ 135.754219][ T8103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.756101][ T8103] RIP: 0033:0x7feed3d9f559 [ 135.757526][ T8103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.763538][ T8103] RSP: 002b:00007feed4c81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.766155][ T8103] RAX: ffffffffffffffda RBX: 00007feed4026090 RCX: 00007feed3d9f559 [ 135.768641][ T8103] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000006 [ 135.771131][ T8103] RBP: 00007feed3e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 135.773532][ T8103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.775982][ T8103] R13: 00007feed4026128 R14: 00007feed4026090 R15: 00007ffee00d9b18 [ 135.778362][ T8103] [ 135.779916][ T8103] Kernel Offset: disabled [ 135.781264][ T8103] Rebooting in 86400 seconds..