last executing test programs: 2m2.830032171s ago: executing program 1 (id=101): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000440)='p', 0x1, 0x24008810, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x42, 0x0, &(0x7f00007d0000)) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x3, 0x30}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x13) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0xfff7, 0x7, 0x9, 0x80}]}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) syz_emit_ethernet(0x2e, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1d", 0x1}], 0x1}}], 0x1, 0x4008885) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 2m2.708740104s ago: executing program 1 (id=104): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="38003300c0500e00ffffffffffff080211"], 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x28004800) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000640)={0x46c, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x906}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x86}], @NL80211_ATTR_FRAME={0x427, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @random="b5d8319f9531", {0x7, 0x6}}, 0x7, @random=0x5, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x6, [{0x1b, 0x1}, {0x4}, {0xb}, {0x48, 0x1}, {0xb, 0x1}, {0x6c}]}, @val={0x3, 0x1, 0x2}, @val={0x4, 0x6, {0x65, 0xfe, 0x3, 0x7fff}}, @void, @val={0x2d, 0x1a, {0x80, 0x3, 0x2, 0x0, {0x7fff, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x400, 0x5, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x35, 0x2}}, [{0xdd, 0x88, "705be944e03b7be8c8ae1b008064c3bb350205783a51dcdbf72a6296c02946c5e35d8faa391c1b928a076d663795daaf6a447a8f27aa4a5a44aaca2f845171f27d266b9af3ec8af5bb43b8dfe3981e872f25ce3686b3add66dd993351a10e62eabefd2e71d8dbbf890d3fe73ee03821bd0d473bcb9a29f6c1ce06852ac67a4e54e6dbf0ad35755ba"}, {0xdd, 0xfe, "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"}, {0xdd, 0x9e, "b0f07033920d169de8152767fa57232a956eecd0c81388e3439584c5eb43dd9ea61b78b10cf21a3ad2968d86c7467b5e3c595db7491b9d0d045748d25d4b751cffaf81a40173761a7a90b8ef1792703065982f03073400a464f594aa631c89a4d70c0c9ac4ab1e1e104d63cab3e312be1ee9d9a96d2b5894d16e92be3ad4952b52074e1489a3604ee704613db6ca6febccec6bf02102a4f91f3bf65658b1"}, {0xdd, 0x27, "9ddb46cebce0189b6945f04b419ee6499c4483be206cd8f78961e9c28e8f6d9c08eeb8e566ddaa"}, {0xdd, 0x96, "055288301d7d2850c44ba277874b217caeaa2ae87091b1103d5468a1633ff30f2b8e12343852ad6c22976d910f9a785c07d48a79e0bae3d6bc9193ce1e16e9cfd8af957c00ab22e2ed59fea70989720ae3abb23707c2b4f51cf597490e96f06cf19e7e78f7af8c4a24a0dfda37c88e8e1e5ac6b96a61be752e8cbcd756b0a4c464b2c69d2183a494cf12c07e4a71cf4a5d524f18c502"}, {0xdd, 0xca, "219726ce0b88136871765d43e09719f21f16af45c43ebcb1788ea3edbd8d8388a7ab188209d3734519aa5a9d6e05baf03e6f24f72498733e205a62facad5074d281c2a3944cef86eb59c1db24d0c7b21f9be9b617a67ef4eb300753b3acfa257494ed5c0fd37bc1ed95820dbd30779e5a4c3a9691143968a2e86e821cb2cd87dfd5c9e023d9e3e96188037ec170237b5c27157bee05e08bc90dcd1122462887f5bc261cd375bbe17c834844997cf6e7801cfc7977250bd211477bd7ef7ff129c20010d4e9d6e6e19cb9b"}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x20009000}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000480)) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x7ff, @vifc_lcl_addr=@local, @broadcast}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket(0x11, 0x3, 0x0) setsockopt(r7, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r7, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r10, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256", 0x22}, {&(0x7f0000000500)="55f0e46e7aeb504dca2fb5e5ea9ef6f5c17ac39ef5f90fcfe3ed8ae2", 0x1c}], 0x3}, 0x40011) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000000)={0x7, 0x1, 0x0, 0xff, @vifc_lcl_ifindex=r10, @multicast1}, 0x10) 2m2.473237454s ago: executing program 1 (id=108): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x77359400}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f00004da000/0x2000)=nil, 0x2000, 0x3000001, 0x11, r1, 0x0) mprotect(&(0x7f00005cc000/0x1000)=nil, 0x1000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000500)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000340)={r4, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x444242, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x6) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f00000004c0)={0xe, 0xadc, &(0x7f0000000180)="6cfc780cddbfa381bd3340246fddb09cbde1b5a206eee55f844f49f4203dcce5925f2b29030cbe1804e261505664683d1cd2029df65f6134114a537fe7e8bba2fb609495bcbe116e96cc44df92d8acdc2c", &(0x7f0000000480)="d46fb37504584799ae3a020ad4dcd2bc92715581995f91e41504f1cb3910da3eeae5da178b4b102fb29f76a0d9161812c6cf24c0a481af79", 0x51, 0x38}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMEJECT_SW(r7, 0x530f, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0xa041, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0xea, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r10, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/108, 0x6c}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r10, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m1.053579939s ago: executing program 1 (id=125): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x13, 0x2, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x8}) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x4000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r2, 0x40086806, 0x21) ioctl$BLKTRACESETUP(r2, 0x80186803, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1842, 0x136) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f00005de000/0x2000)=nil, 0x2000, 0xf3}) syz_io_uring_setup(0x746e, &(0x7f0000000200)={0x0, 0xb347, 0x2000, 0x1, 0x27a, 0x0, r3}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r5 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) mmap$IORING_OFF_CQ_RING(&(0x7f0000341000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x8000000) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000440)={0x0, 0x1a4a, 0x800, 0x3, 0x1b3}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6845, 0x200, 0x3, 0x363, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe04, 0x20, 0x2, 0x238, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc780, 0x4, 0x1, 0x1bd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbc66, 0x8000, 0x2, 0x224, 0x0, r3}}], 0x4, &(0x7f0000001c40)={0x2e, 0x0, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x1, 0xbc3, 0x0, &(0x7f0000000c40)=@buf_4k="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"}}, &(0x7f0000001cc0)) 2m0.952471998s ago: executing program 1 (id=127): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x8) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) r2 = request_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='\x00', 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)="867dfe251561b3c9462f0f1b31eb7e9ee4fb797082b7b92ac7f2c6d61669c3f280b9302d743669a504aefd88710123e998f645485b", 0x35, r2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) 2m0.313579191s ago: executing program 1 (id=134): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) listen(r0, 0x0) shutdown(r0, 0x0) 2m0.234242993s ago: executing program 32 (id=134): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) listen(r0, 0x0) shutdown(r0, 0x0) 1m47.803193451s ago: executing program 3 (id=286): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x0, 0x6, 0x0, 0xfffffffc}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$pptp(0x18, 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40010) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x34, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m47.491917836s ago: executing program 3 (id=292): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8, 0x8, 0x401, 0xfffffff9]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4880}, 0x24000000) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(0xffffffffffffffff, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc022100}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x164, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x92, 0x2a, [@perr={0x84, 0xf, {0x9, 0x1, [{{}, @broadcast, 0x2, @void, 0xe}]}}, @fast_bss_trans={0x37, 0x5b, {0x5, 0x1, "ee8d80b2cc761d5055de3c7069b80764", "c26259f02ce0e0759a0d82cd5dff172c78da322793144df0c066f6b42fa70bd0", "33c0e62d42539dcf49181461b482aa3c4aba22b6ea6a185b4c94f6ac55bf9b6a", [{0x2, 0x7, "157b321b28b085"}]}}, @dsss={0x3, 0x1, 0xb6}, @peer_mgmt={0x75, 0x18, {0x1, 0xd000, @val=0x5, @val=0x36, @val="75e07b7d96bae3fc180017a3ca9bf1c7"}}, @erp={0x2a, 0x1, {0x1, 0x1}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x46}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x94, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0xf9, 0x50}}, @tim={0x5, 0x65, {0x3, 0x36, 0xb, "878334d594889feed9b8c527e2a8234ae03429ae97467149f17530fe6550cc1942b529282ba3067eb77bd41883a25b1abcda1d6423ba8b51614fc6241f25bc0a36063b6e7de945a4f0684ac313c451b64ab1f768076ce43171d265d7068faa1434a4"}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0x66, 0x0, @device_a, 0x3ff, 0x80, 0x8000}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x7f, 0x80}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x54}]}, 0x164}, 0x1, 0x0, 0x0, 0x9b3325f7bbcd22a2}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, r3, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x9}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0xa, 0x0, 0x40, 0x1, 0x7, 0xf9c3]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x8, 0x7, 0x6, 0x618, 0x8001, 0x8001, 0x60f0, 0xc96]}, @NL80211_ATTR_FRAME={0x25, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x4}, @broadcast, @broadcast, @from_mac=@broadcast, {0x0, 0xa}}, @addba_resp={0x3, 0x1, {0x0, 0x2, {0x1, 0x1, 0x1, 0xc3}, 0x3}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4044089}, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000580)={0x6, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e23, 0x1, 'wlc\x00', 0xa, 0x8, 0x5e}, 0x2c) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000005c0)) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000004480)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004440)={&(0x7f0000000640)={0x3de8, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x36, 0x5, "3c1f499d19a80f96a85f0bb695ecef722d3b7234734fa320ccea8e8627d98a2eb12635c86486c933bf751e679eeb7c2138a4"}, @ETHTOOL_A_BITSET_MASK={0x1d, 0x5, "9ced6cd1cd90eacdc82d1dd4fe5b27d894d36c06c1f656767c"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1390, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb2, 0x4, "e72e959ef35a2203f2f95df7ecad2eb32680a46f62f671de270cef86cc9bf5c8adbb03748f932f3e4d0b4980a88a5fadcfb6d739e1e313099204f007f8cdf0028574665c9c20b4f400051778c659e98fbfbdaff653b625529a05fd774fb08a4b0c98fa778207d4cc27d7879ff12267c2c6345a7fa3c80cc6e5dfe119d145a3f857b6f80f6f491aab4e7d17bf1abbc8b59707c115959eeeef436be6fee771a83a1ecf569f613d52eb1eb3b5e2d8e0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd0, 0x5, "b37610b81227f3eacaa798f91455dc2409375fcd0a4785fc4c7e70f5c30911857560b79614ff2788d3d2b5bfbfe04f949720856fed45b7fef71deddef0657f4896ba1034042974184c72d567fb1fe2d40ccfe3819add523383d10f529a2fe52adeb4641fbe5a5c5cd4670f53e60bef90e18b630aa47926d9033d49e029f79e85e8becd529b956ea169b7471ec756e65ea58efce7bf02720582a5399bbd36f0218eca85dea9dd5b8bed23afa28782f625538d51e19b974ee5ca468eb2edfb9e32df4b55410cc046d7e4898251"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x94, 0x4, "a0eb17cc0c4a93869466383be29c357e913b61373151b9249a03e653f4912be7a2edbb024dcff934bc322db81c0b63f155e49ae4b2e55f1f8652d0f622e0e8aae6786d337facf04f9fc4bd21d9942b47f54fb65ba3ea02324eff94d4e7871dc7297205bbb97a6fb81231c040ff42e9f3bda13fbf4e0c6e566566df146ec440079d6f682cf174da905771a12a79445cb9"}, @ETHTOOL_A_BITSET_VALUE={0x86, 0x4, "3333cd568f0880d089786a9f314ad364e7e8ac3bb04051ecac23adbfd77ed23389427a63043edaf3b9c06d327856b152e32563784d4718c7939c3549b13411aa689c09166fbabbfb1e800b51fb80ad16794fd80bf7902c890d0fa6382a30afea522379ca14e3a345413d909afd036e8fba215ae0ea79f7efd2c48e04710c83e540b3"}, @ETHTOOL_A_BITSET_MASK={0xdc, 0x5, "38036f6b2e70456e0d2a6364f90a4572a18894d24106808fa91e5d606a7cf7e7b8b8cd092c3799cb71f544624eec72d041036021ebb9febcd0d897a947f43f50cec92a69491ced33c977d3d993fff689f4ea5f57e97c441b3198bbfcd03558b42a1667c18d91573c87368410d6f6c54489a99e9f909a7394a1431cc97d36edd38c1df3ab0edb7605aeb9b83a1fe38dac340c98a8997b625793d2b3f2a0a58b9652b1dbf2fc9905604891922133a8421548ff5999f4528ed6983780264db29c3f9c93b00661f4747fbcb6f45c6e69e068e8483e13f9981c0c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb1, 0x4, "2923208e6a4df2c1fbfdbbc31bc33edfddfc53bea84c7ee96fa3eb866d6c46f012e0236184e17689fc1a18a6fc4a0bb65b368c025ced8c6ba578765f154131bf29d74d577c48436c2321c9500f2845326007a6b14360e2ef78eef7049143643ecfe5299174cf5f048ba07a6ea658647bba2c8791227096d81b5a374b3e50eecae9b5ed40bca580fa02a63f76b65c0d895506f8d6adef70220cd30f4764e44108daea56ca191a816ca907b2c679"}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '*.$}!@%(!#%,+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}){/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%@\t!\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2ce6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-!\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$&\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}-^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xf4,:@\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd29}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xbd, 0x5, "34bb2e98c82d2f42b7451bff5448ea9588e49dcad6ba4dbbc19c7b0806c2e7ddb28138ba0316e45aafb25e8d1a9eca85cf1df1009454de59f275e9f5eaa25595d2994b1c09e3109dafb5258a3390ec43ff3d84378ce9ed64ca8c043fe1f9e8c0e995efdf6063e2d10886b9ae7bc430569e36026216d7397b84ab810af03229c322f0e4a11656e3f51a4dbd3a489580b553fcda751477c519e1014bf0e20fa820e199ce297a2915b4c41acd721ab16dfbbce18b74ce10d2055f"}, @ETHTOOL_A_BITSET_VALUE={0x47, 0x4, "6d636a1a0596e2be6c1cab2eb82b0a6c85aa0cd33d90575a25f85c8d2adcbbdada95042bcd24bc39f9f0395cab85d8d328f76806d9c33234e2815e32094309fc00dbb0"}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wlc\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb410}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wlc\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9607}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1390, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wlc\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'T\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!o.+:{\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc1ff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff6f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wlc\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xe6, 0x5, "7b65f33471829bcf390892ba708fc3d3ce3c9d520c424eb97a5cbb2e791f05404ba301ccb3fdb0f5bf511d6d114f8d2cccd0409a3144a8144fd7edfd46bee0a8c04988ace6be015854a4b020a2ba11bd067c8d48c428187fe7df7d7c4a709a7b6241544466bda7cf0b324dd012693d9f4ce84e04b0b43151f7c6d240261a0b7650096a67c2fed22cb73546b1d815ac343cc5b4fb9cd1de9fe98e558f2a875a57f58f7fa8803ae1ece0383c2aed4638609a2064ef9f813ad0cfe8a4420f033b42fddbe15393e4d88d618ef0233aaccc66abf2b60715dae536aab1fc107072306168e7"}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xd2\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "17da8301de420f6e113924c7effa1dbfcd43250e4891a28562b007a0baf20ce9c4adad2ebff0fdbac84e7adff15d8886844407bd80879136ea7c843dcc7652d5e760fbf62cf3194ead13493b5a0718e5e1378bd57964eb49345742dc5eaf60e5f2fb7abd34ea43279f01aa000f9d5312ccf22636ac3c4eca73bb7d00c65494fb9aabefef22669dc9facb4435e5bd29786b2b7b9b0b19b2fc1a9f5fee3e1067d964df409fe9aec42a3ddc05c222cdb99f2670264dac5cfcb20e575a48ad"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xd8, 0x5, "1529770d72722d3be5301f4a937e579b923411ac348d7e30016d54fa58cbee9c4e9a632cb97099132878d2003945bc3ecfa0dc0933ed31b112b3d42e6613f40af7c1439369c1fbc78524363a36f2df8e0b2f503952c4b3e9fa714587a8a1b6ca8c4e4dd38f1343c181aeb74bf448cedd22aa7c267972460779fafbff2e39ae550becb234f71a888fc8516dd205c598a456b16c20aef5908492e254bfeafb34485f13c1eb75ebb64dd574d11d7b93db13e94fb5ba3bfee7b980dbc90b70bcd3a0542418668294a90f56a25e723e72741d125bb7ec"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x68, 0x5, "c7c4aedef09110cfd240b7264ff3722fff8b7a6be0c4892f673db7a5c51eaaf68a5a626c387b680ec60804e621a2d96dfd8967cbc29fde466f5c2715a4306da3e234df370f2b3ef0e3547416781dbdada151cb642e41423f789196c19e6c0c6610eda4d8"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}]}, 0x3de8}, 0x1, 0x0, 0x0, 0x4008000}, 0xc041) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000004500), r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000004680)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004640)={&(0x7f0000004540)={0xd4, r6, 0x500, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40004}, 0x20000800) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000047c0)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004780)={&(0x7f0000004700)={0x80, r0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0xfffff0d4, 0x5, 0x9]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xfffffffa, 0x7, 0x0, 0x40d]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xf, 0x7, 0x200, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf}]}, 0x80}, 0x1, 0x0, 0x0, 0xc10}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000004800), 0x20000, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000004940)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000004840)=""/181, 0xb5, 0x1, &(0x7f0000004900)=""/49, 0x31}, &(0x7f0000004980)=0x40) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000049c0)) connect$inet(r5, &(0x7f0000004a00)={0x2, 0x4e22, @remote}, 0x10) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000004a40), &(0x7f0000004a80)=0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000004ac0)={0x1, 'erspan0\x00', {}, 0x2}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000004b00)=0x8, 0x4) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000004b80), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000004c40)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004c00)={&(0x7f0000004bc0)={0x24, r8, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x10000}}, ["", "", "", ""]}, 0x24}}, 0x45) sendmsg$nl_route(r2, &(0x7f0000004d80)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004d40)={&(0x7f0000004cc0)=@setlink={0x48, 0x13, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x82c0}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x6431}, @IFLA_IFALIASn={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x4000801) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000004dc0)={0x1e0, 0x10, 0x780, 0x480, 0x3, 0x7, 0x8, 0x0, {0x0, 0x0, 0x1}, {0x0, 0x9}, {0xcd3e, 0x5}, {0x0, 0xb}, 0x3, 0x1, 0x4, 0xa4, 0x1, 0x3, 0x12, 0x4, 0x4, 0xfffffffc, 0xbc8c, 0xc13b, 0x4, 0x100, 0x3, 0x4}) 1m46.590958489s ago: executing program 3 (id=309): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x20, 0xff, 0x0, 0xffff7038}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) pwritev2(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="1bbc54a603ff246bd56edbce6558", 0xe}, {&(0x7f0000000040)="010130a7cd08f1cac7c721e86558", 0xe}], 0x2, 0xa74a, 0x80000000, 0x10) 1m46.153231272s ago: executing program 3 (id=312): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000120005ff00000400040000000000004a", @ANYRES32, @ANYBLOB="040000000380020008002e"], 0x50}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000210001002cbd7000f7dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900040000000500010004000000"], 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0xa0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)={0x20, r5, 0x5, 0x70bd29, 0xfffffffe, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000d0}, 0x40040c0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x15) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x2711, @host}, 0x10) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0xc94, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m45.962199493s ago: executing program 3 (id=316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) close(r1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x4, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xcda8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl(r6, 0x2, &(0x7f0000000140)="18a068ced408f15644f8da688b3e75d71b4144ec331610a8ed93a64759c379831a50e03f9c58680e77b215fcb3db93da70299e352ac9771d654b70f7c7ef3eb586949506ff58f044a6fb3d46cfcdca91e05fa04df2cbc764d898641dc1aa71bc322e4ee2ba64d75283a2c82e45701ce0ffbb8c55ef7021fa0677b743c9725a6aa61148b7c1245caf271a5b9a4cc7e210afb3d004aa510013edf34f406c") 1m45.763234207s ago: executing program 3 (id=318): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000301000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) 1m45.738280025s ago: executing program 33 (id=318): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000301000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) 1m16.982562513s ago: executing program 0 (id=652): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a008884bbbbbbbbbbbbaaaaaaaaaabb81000a0086dd6d042000004511ff00000000000000000000000000000000ff0200000000000000000000000000014f191b59004590784208000000000000e4fe0ebe71bf71881af7ee346eb3e270ffd80222da1454cf3a90cfa18c261e274fb7f7801dbe7020fd842f1f52b5d7f13353939002890da494c37bf336b3f3fc19b9fa433bcc7f6898c9021fc6b215a3887fc8b5ee1d6d829f458644d994a0575475e0c46e82c9c5560cfba8e41064529729e6acc73aa6736b2c57dca08b7943d6e7baace8832df5c071ff6e1ab9d09a4ab0ac35f1a6de24bc44d17230185c68f3004354"], 0x83) add_key(&(0x7f0000000380)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="11e1a86b1b4c310d5857204b8d6bbfdcc821ec147a188daa2b23ee56bd01c582a5cce271742665efb73be426ddd623eb9fffe20472cd61b8159f6b031b40ad4f53e2bb009a54ab", 0x47, 0xfffffffffffffff9) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffff5fb, {0x0, 0x0, 0x0, r6, {0x7}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1m16.731150612s ago: executing program 0 (id=660): syz_io_uring_setup(0x34ba, &(0x7f0000000440)={0x0, 0x1d1c, 0x1000, 0xffffffff, 0xf}, &(0x7f0000000100), &(0x7f0000000000)=0x0, &(0x7f00000004c0)=0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file2\x00', 0x0, 0x12) socket$pptp(0x18, 0x1, 0x2) r3 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x284f, 0x20, 0xfffffffe, 0x235}) r4 = creat(&(0x7f0000000380)='./file1\x00', 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, r0, r1, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x38, 0x0, @fd=r3, 0x3, {0x0, r2}, 0x5, 0x1, 0x1, {0x0, 0x0, r4}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x3) sendmmsg$inet6(r5, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0x3, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r7, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m13.651411913s ago: executing program 0 (id=694): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500160007020000020008000100030000000500020003000000050002"], 0x12c}, 0x1, 0x1000000, 0x0, 0x24004821}, 0x0) 1m13.502806033s ago: executing program 0 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x240, 0x5, 0x19}, 0x18) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 1m13.501835299s ago: executing program 0 (id=698): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x611}}, './file0\x00'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) io_uring_setup(0xfcd, &(0x7f0000000040)={0x0, 0x2596, 0x200, 0x1, 0x211, 0x0, r0}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0xd, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf}, @generic={0x0, 0x6, 0x9, 0x10, 0x2}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x72}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xf0, &(0x7f0000000400)=""/240, 0x40f00, 0x2a, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x2, 0x521}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r0], &(0x7f0000000600)=[{0x5, 0x1, 0x3, 0x6}, {0x5, 0x3, 0x5, 0xc}, {0x1, 0x5, 0x6, 0x3}, {0x0, 0x5, 0x9, 0x6}, {0x1, 0x4, 0x0, 0x5}]}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000740)=r5, 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, 0x0, 0x274) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000000c0)={0xfe, 0x2, 0x200}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x11, 0x15, 0x188, 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x240080c0}, 0x80) 1m13.230985542s ago: executing program 0 (id=700): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 1m13.127392451s ago: executing program 34 (id=700): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 1m3.672651302s ago: executing program 4 (id=826): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x77359400}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f00004da000/0x2000)=nil, 0x2000, 0x3000001, 0x11, r1, 0x0) mprotect(&(0x7f00005cc000/0x1000)=nil, 0x1000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000500)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000340)={r4, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x444242, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x6) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMEJECT_SW(r6, 0x530f, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0xa041, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0xea, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m2.039886814s ago: executing program 4 (id=841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = fsopen(&(0x7f0000001240)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) bind$l2tp6(r7, &(0x7f0000000500)={0xa, 0x0, 0x7f, @empty, 0x7, 0x3}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r4, 0x4, 0x2, 0x8, 0x1ff, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x10, 0x40, 0xfffffff7, 0xfffffff8}}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffe57, &(0x7f0000000580)={&(0x7f0000000440)=@delchain={0x0, 0x65, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xe, 0x8}, {0xd, 0xffff}, {0x1}}, [@filter_kind_options=@f_matchall={{}, {0x0, 0x2, [@TCA_MATCHALL_CLASSID={0x0, 0x1, {0xffff, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x0, 0x1, {0xfff2, 0xb}}, @TCA_MATCHALL_FLAGS={0x0, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x0, 0x1, {0xb, 0x5}}]}}, @TCA_RATE={0x0, 0x5, {0x5, 0xf7}}, @TCA_RATE={0x0, 0x5, {0x0, 0x6}}, @TCA_CHAIN={0x0, 0xb, 0x7475}, @TCA_RATE={0x0, 0x5, {0x2f, 0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x7c, 0x2c, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {0x6, 0xffe0}, {0x5, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @filter_kind_options=@f_bpf={{0x8}, {0x40, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x6, 0x7f, 0x8, 0xedf}, {0x3, 0x3, 0x40, 0x80}, {0xfa, 0x8, 0x5, 0x6}, {0xf, 0x2, 0x2, 0x200}, {0x9, 0x1, 0x4}]}}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x90, 0xc}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x894) r10 = socket$packet(0x11, 0x3, 0x300) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r11, 0xc020aa07, &(0x7f00000004c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x20000040, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1m1.898497193s ago: executing program 4 (id=846): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'comedi_parport\x00', [0xd00, 0x1f, 0x6, 0xfff, 0x3, 0xcc7, 0x0, 0x6, 0x5, 0x100ff, 0x2, 0x1, 0x1, 0x2, 0x9, 0x3, 0xbc761c6, 0x9, 0x42, 0x40000003, 0xfff, 0x8, 0x5, 0x2000006, 0x800b, 0x32, 0x5, 0x2, 0xd, 0x1, 0xffffff5c]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0xf000000}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xf9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) 1m1.475831591s ago: executing program 4 (id=850): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x7ff, @vifc_lcl_addr=@local, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', &(0x7f00000004c0), 0x800008, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 1m1.380317739s ago: executing program 4 (id=851): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x57, 0x2, 0x2, "14a5d19aea562d299914ea48f12ec9745f0000000000000dc9c181f0bfa73100", 0x38414262}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) 1m0.711548434s ago: executing program 4 (id=858): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a008884bbbbbbbbbbbbaaaaaaaaaabb81000a0086dd6d042000004511ff00000000000000000000000000000000ff0200000000000000000000000000014f191b59004590784208000000000000e4fe0ebe71bf71881af7ee346eb3e270ffd80222da1454cf3a90cfa18c261e274fb7f7801dbe7020fd842f1f52b5d7f13353939002890da494c37bf336b3f3fc19b9fa433bcc7f6898c9021fc6b215a3887fc8b5ee1d6d829f458644d994a0575475e0c46e82c9c5560cfba8e41064529729e6acc73aa6736b2c57dca08b7943d6e7baace8832df5c071ff6e1ab9d09a4ab0ac35f1a6de24bc44d17230185c68f3004354"], 0x83) add_key(&(0x7f0000000380)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="11e1a86b1b4c310d5857204b8d6bbfdcc821ec147a188daa2b23ee56bd01c582a5cce271742665efb73be426ddd623eb9fffe20472cd61b8159f6b031b40ad4f53e2bb009a54ab", 0x47, 0xfffffffffffffff9) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffff5fb, {0x0, 0x0, 0x0, r5, {0x7}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1m0.594831844s ago: executing program 35 (id=858): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a008884bbbbbbbbbbbbaaaaaaaaaabb81000a0086dd6d042000004511ff00000000000000000000000000000000ff0200000000000000000000000000014f191b59004590784208000000000000e4fe0ebe71bf71881af7ee346eb3e270ffd80222da1454cf3a90cfa18c261e274fb7f7801dbe7020fd842f1f52b5d7f13353939002890da494c37bf336b3f3fc19b9fa433bcc7f6898c9021fc6b215a3887fc8b5ee1d6d829f458644d994a0575475e0c46e82c9c5560cfba8e41064529729e6acc73aa6736b2c57dca08b7943d6e7baace8832df5c071ff6e1ab9d09a4ab0ac35f1a6de24bc44d17230185c68f3004354"], 0x83) add_key(&(0x7f0000000380)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="11e1a86b1b4c310d5857204b8d6bbfdcc821ec147a188daa2b23ee56bd01c582a5cce271742665efb73be426ddd623eb9fffe20472cd61b8159f6b031b40ad4f53e2bb009a54ab", 0x47, 0xfffffffffffffff9) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffff5fb, {0x0, 0x0, 0x0, r5, {0x7}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 43.841631075s ago: executing program 7 (id=1012): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/23, 0x48}], 0x1}, 0x142) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) fdatasync(r4) 43.462197401s ago: executing program 7 (id=1014): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$KDSIGACCEPT(r0, 0x800455c9, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x4, 0xc, 0x15, {0x15, @udp_ip4_spec={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4e21, 0x10}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x7b, 0x8, [0x9, 0xea]}, @usr_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x1, 0x4, 0x2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x0, 0x6, [0x8, 0xffff]}, 0x7fffffff, 0xffff0001}}}) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f0000000280), &(0x7f0000000340)=""/140}, 0x20) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) writev(r4, &(0x7f0000003440)=[{&(0x7f0000001180)="41962e65aa37bc", 0x7}], 0x1) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) mmap(&(0x7f00000b5000/0x4000)=nil, 0x4000, 0xa, 0x11, r5, 0x5a6df000) 41.181917986s ago: executing program 7 (id=1045): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00600010000700000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0e01060000000000140003007767310000000000000000000000000008000a00", @ANYRES32=r1], 0x3c}}, 0x0) 41.181283106s ago: executing program 7 (id=1047): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020025bd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="00050000000a00060022cbd8e0ffffffff0500fd000000d88718daf9eac3a200800361daec000000000000000000bdb940168348e1eefe384cffcec76418fe6ae71d7f2faa5b37f3016278d6f0719ccb8e007330286649150d6fac7eb9f635f29274c7bc1cb91eecad3575306e133b5781e492f171176f1f0489983d01c2871c0ceb2a6ee61a7d49014d9f66a5bd3d2ae1e2f30ae89ce60d8378942a433cfc9f6629799064a38def8ce4ab01dacdcadcb02e6e37eb0ec856e42177a8fe56164c284ed84fa3cde9fd4e83f5c7552c8172790f082ec4b39e3c95a0fe0ead655d6006955b"], 0x3c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x200800, &(0x7f00000000c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}}) syz_fuse_handle_req(r6, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x69015a58, 0xdcd, 0xff, 0x8, 0x3, 0x0, 0x0, 0x40, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r7, 0x2) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r8, 0x1) flock(r8, 0x1) flock(r7, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd25, 0x2000, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040050) socket$qrtr(0x2a, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0xfffffffffffffe14, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) 40.927315072s ago: executing program 7 (id=1049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'veth0_to_batadv\x00', 0x20}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = getpid() r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r3, 0x0, 0xb2, 0x83, &(0x7f0000000940)="a2492cdecd41a7cf0f78a2809ce627e574d3004afb38ccea36156ac1d9ed624cef5b52a24f0af6d4d6a7ec788e642461153c84ad3b2bb8bd6ac3e8b0db8a0be958a9e81e0bdea45283e91c3abf868dede872a1fd08036c91bef7b7a125fe67cd52370ce3353dc1e938a5b2e146db12bb0ab922e441ad452aea2ebe39b4b313159518166698357934fbb746dc8b3a6287631ed3caac9282aa02ade5f6f6e58c124f32c044a110eead868479769db611a75177", &(0x7f0000000500)=""/131, 0xffffffff, 0x0, 0xc1, 0x93, &(0x7f0000000840)="3091ec51878b856759a110424f79bafcc2cfb5ee5fe7e8f0f0734477974182c4ebfa403b208370566dd16a40e482b96e20ec5048dfb9a6387f81472cc478c44c1891ba38a93c8bee65fbe759caa2b7db4567bcfabfde4842e884f294c95770f1c8523b6637eaa30500000000000000706e6965502dc964ddb054d640f62a8c7a90c9972b196efa65b6b0cd46b174cc8f15e885978b6afea4725732db13ce67c451c156b428cdbaa22c19fc39bddab0990008f5ed954de32a1ef075473e03220eee", &(0x7f0000000440)="62ff35db52427e9de2a963020e37d9d05dc4fa162d8f6c94d83ce12d3235f27d3bdd5239d921df4b5b84b5d45af66cd7263effbbb8e41eca1d3f1ef64d5788996d5f68de2356025b45084d6d093904d6e0cbdfadba92f75d8216dedfb02582ce9e2d6a520b4084b72d1debd3f432eeefc8fbef4a1eb4ade0eafc3a90a7f1a96ac0e0900c4559ffffffffffffff7ffe411aac1a", 0x3, 0x0, 0x9}, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_procfs(r2, &(0x7f0000000000)='syscall\x00') r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f000037d000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000640)={{0x0, 0x2, 0x678, 0x9, 'syz1\x00', 0x3}, 0x2, 0x50, 0x2ee, r2, 0x7, 0x5, 'syz1\x00', &(0x7f0000000100)=['.!p+{\x00', 'bond_slave_1\x00', 'bond_slave_1\x00', '*\x0f\x00', ']*\x00', '[#-#+\x00', '\x9c\x00'], 0x2e}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0xe, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffff55a, 0x4, 0x1, 0x3, 0x9}, 0x22}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000100000000020000000000001103000000ffffffff000000c59557ff2306868c622e67fb96c713e5ef64478fe558d9fff59862bfcd68476f034df5409d2bed99bd05674dbd336feb66e0c2ef69a29f68b07988ce98c36f1a1ba8947a44e0bfca981996ed81831da1ac2e78bb5c7b"], 0x0, 0x2b}, 0x20) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r9, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r11, 0x8983, &(0x7f0000000080)={0x6, 'pim6reg1\x00', {}, 0x9}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r11, 0x8982, &(0x7f00000023c0)={0x0, 'bond_slave_1\x00', {0x1}, 0x109}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) 40.701915421s ago: executing program 7 (id=1052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x9}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f00000001c0)={'\x00', 0x100, 0x2, 0xfff}) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) 40.577485657s ago: executing program 36 (id=1052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x9}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f00000001c0)={'\x00', 0x100, 0x2, 0xfff}) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) 5.129777778s ago: executing program 6 (id=1448): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) read(r0, &(0x7f00000000c0)=""/142, 0x8e) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) creat(&(0x7f00000063c0)='./file0\x00', 0x120) rmdir(&(0x7f0000007880)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 4.261909769s ago: executing program 6 (id=1459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="80003f800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 4.089227241s ago: executing program 6 (id=1463): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d40), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c850) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r5, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4044050) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x9, @b={0x1, 0x2, 0x2, 0x1, 0x5, 0x9, 0xfc, {}, 0x40, 0x6, 0x2, 0x3}}, 0x10) 3.40176708s ago: executing program 2 (id=1468): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$inet6(0xa, 0x3, 0x87) socket$netlink(0x10, 0x3, 0x6) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xfeff0000, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.301772584s ago: executing program 2 (id=1469): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) 1.641073389s ago: executing program 5 (id=1473): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file0\x00', 0x121003, 0x0) statx(r0, &(0x7f0000000100)='./file0/file0\x00', 0x100, 0x7ff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffffff, r1, 0x400) execve(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000480)={[&(0x7f0000000300)='fuse\x00', &(0x7f0000000440)='\x00']}, &(0x7f0000000740)={[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='{]0\'}&*\x00', &(0x7f0000000540)='\x00', &(0x7f00000005c0)='\x00', &(0x7f00000006c0)='fuse\x00', &(0x7f0000000700)='!.:\x00']}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x40042, 0x144) 1.558968072s ago: executing program 5 (id=1474): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x17}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x4, 0x83, @tick=0xfdff, {0xfd}, {}, @note={0xfa, 0x0, 0x4}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @ext={0x4e, &(0x7f0000000500)="1f8c25264f2027d3a3fdc552fc0b3fe9b1567447427bea54bbd3e2cb06ee8dd682b08139ff9ac5831e3e17665429ef2fb2b3b2d39e3eb440094fbb323b551b74ebcb11505d4cb9b6adc3827eef62"}}], 0x54) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000000), 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x2a0, 0x2a0, 0xffffffff, 0x188, 0xe0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x19, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id, @port=0xfffc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x34220, 0x0, 0x36}, 0x18) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, &(0x7f00000009c0)={&(0x7f0000000580)={{@host, 0x10}, {@host, 0x2}, 0x400, "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"}, 0x418, 0x9}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.558789078s ago: executing program 5 (id=1475): syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd, 0x4000}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) 1.46148177s ago: executing program 5 (id=1476): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x200, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x700) 1.411629939s ago: executing program 5 (id=1477): socket$pptp(0x18, 0x1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40010) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x34, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.101519062s ago: executing program 5 (id=1478): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x77359400}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mprotect(&(0x7f00005cc000/0x1000)=nil, 0x1000, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x444242, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000004c0)={0xe, 0xadc, &(0x7f0000000180)="6cfc780cddbfa381bd3340246fddb09cbde1b5a206eee55f844f49f4203dcce5925f2b29030cbe1804e261505664683d1cd2029df65f6134114a537fe7e8bba2fb609495bcbe116e96cc44df92d8acdc2c", &(0x7f0000000480)="d46fb37504584799ae3a020ad4dcd2bc92715581995f91e41504f1cb3910da3eeae5da178b4b102fb29f76a0d9161812c6cf24c0a481af79", 0x51, 0x38}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0xa041, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0xea, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 994.509958ms ago: executing program 2 (id=1480): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7000000) 994.239319ms ago: executing program 6 (id=1481): syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x9000000, 0x35315241}}) 721.194289ms ago: executing program 8 (id=1484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x700000000000000) 541.773439ms ago: executing program 8 (id=1485): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500160007020000020008000100030000000500020003000000050002"], 0x12c}, 0x1, 0x1000000, 0x100000000000000, 0x24004821}, 0x0) 471.797417ms ago: executing program 8 (id=1486): socket$pptp(0x18, 0x1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40010) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x34, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 360.203942ms ago: executing program 2 (id=1487): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 291.268981ms ago: executing program 8 (id=1488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xe, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) shmctl$IPC_RMID(0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42, 0x30000}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c002400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 161.636531ms ago: executing program 8 (id=1489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3cf72e330700000000f8507a8c5a8753fabc1be1"], 0x20}}, 0x0) capset(&(0x7f0000000500)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000200)={0x4, 0x4208001, 0x801, 0x4, 0x6000, 0x40087}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0) write$vhost_msg(r3, &(0x7f0000000580)={0x1, {0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfe74) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0xfffc, @rand_addr=0x64010101}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = fsopen(&(0x7f00000002c0)='incremental-fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) fsmount(r4, 0x0, 0x5) landlock_restrict_self(r5, 0xa) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x400) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x3, 0x0, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r4, @ANYBLOB="35977bc453467d19036d9328f0aa48bb455b64ebd99477da2b2d6df4b8e59a55a4f13a692c1948af99e00bf5a5a81cc347583c8397b11e821b91cd4035faa1c1184b6aa4e1306a648831126cec43fc5b23a71683a9d256981a0e20ebbb8fdc93ceafb09df19a19abf2e14a129ed2d6e392c70546f02ff889e2cebc6b02d4666bc349b9a93f8d4c8d853f98bbb28bbd40031ef8ccc752bfeed57dd2252d7ba1c6b7f7f68cc8b28a362f74e1a12daff76f82b2d2d8767c3a0cfd36f88db20d7e87956b60f01a09e1fa64bffcf917ec776c551b9ef83b1ce7db783a54444609603cf5348ef250e521813b96e72ac9773f9914e3"], 0x0, 0x26}, 0x28) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x22000, 0x0) write$binfmt_aout(r8, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xffffbff9, 0x7fff, 0x1a, "0062007d82000000000000002240f7ffffff00"}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) mount(&(0x7f0000000380)=@sr0, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='squashfs\x00', 0x300084, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x17) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, 0x0) 89.024258ms ago: executing program 6 (id=1490): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x36ba, 0xf000, 0x0, 0x3c}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x18010, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) file_setattr(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x60, 0x8001, 0x6, 0x0, 0xe}, 0x18, 0x0) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0xfffffffffffffff5, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 88.459621ms ago: executing program 2 (id=1491): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x610b6e43934e1733, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire={0x40046305, 0xfe}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 88.216228ms ago: executing program 8 (id=1492): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x58) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x6, 0x7ff, {0x5, 0x8010001, 0x7, 0x40c, 0x6, 0x20000000, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r3, r4, 0x3d4, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file0\x00', 0x121003, 0x0) statx(r5, &(0x7f0000000100)='./file0/file0\x00', 0x100, 0x7ff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r5, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffffff, r6, 0x400) execve(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000480)={[&(0x7f0000000300)='fuse\x00', &(0x7f0000000440)='\x00']}, &(0x7f0000000740)={[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='{]0\'}&*\x00', &(0x7f0000000540)='\x00', &(0x7f00000005c0)='\x00', &(0x7f00000006c0)='fuse\x00', &(0x7f0000000700)='!.:\x00']}) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x26, 0x5, 0x6100083a, 0x8, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x4, 0x10001}}, 0x50) 241.736µs ago: executing program 2 (id=1493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22700, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f20f221df3640f0967f30f2c00f2641561000f011d6436db6c1a260f01c0677b0f0fb5bb04000f2199", 0x29}], 0x1, 0xc, &(0x7f0000000140)=[@efer={0x2, 0x8100}, @dstype0={0x6, 0x4}], 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="b9b00b0000b800800000ba000000000f3066ba4100ed430f3240c6f800b805000000b9000000000f01d9360fc7bd35fb0000b9800000c00f3235002000000f30c4a27d18c16666440f388131c48178ae1b", 0x51}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001640)=@vmx={0x108, 0x0, 0x2080, {0x6000, 0x80a0000, {}, 0x1, 0x3a3}, {"7f16b1cfc73a3c91b1386e23f94261365aab0ebd77cff1e4e5183db02ae88d79a6bee281b2e29b8fea726ba603db08f87727634b6eb684a050e3df2b78b3e54729ca884e7f019d5e78252de75b224703a2590c36dffcb476523f0d93635f230f7449e01a5c578c9b9191118aa0f9a7ce22b6ff4a5022e93b56ae2536af8ad205e3c1f9facdc2472df10fb6095dc14eba4165058ec441a9cc77c9d9733f7dde5066b79bb6e8c47052d652de83293ff95a6263f8f33f7ae22ee9638ead385cea6c7fc484aed5a0e453a0c41103d001b6e7f49ac3fa4b24ae7f95448ac0066683b70c417c1bdb3f1dd9b2247348bfca2465dc0a173bddca08f6cf18353f230da6584f0b8635707a9678300f4c191d3578a299e44ddee67eb0816c7847530c31171941e938fbe5940141aaa0911a3e78304240f8d0b809c6def3eea9d0d37e65815a0d1b40c2580acb8fc389a5fde7a5c8b1be9015c68a1e75b4707851f7e30529f17e2a07e770797d18efbdc01e6099f79ed0e2fe7c550dacf5322eb1c6ea32372d3fce61c10a6ce950589e82633f4b6cb44d121c575e6ac2bffe6d7deead1cf475d9fc31d6498434caa20815f59226aca4b2b2c6843a103d409bf29307e5b73da997ca73ec9cc6ce46cfba6e5909be95810830defe5e97fce1ecb75d0b47f04222fb03dbb653295ec316629dd6db499079d231868ce60f381c6f7487dd0b042da414a5ce8751ace26090f7655782c21aee653b1b214b7c09468a6401d225d13bc20ee69b5480fcbebaef7f66d5f69470948c35818129a73d35bd062eb383885151f9f8dd400096df98a3cec2fef36144a2d62e2cbc94cc9b2772b7abc6e243bb48c8705fdd01c6af27ecde9c4a3a453b839d8ce77eb6615d63312d6deb07ee139e5cb263b05ef19c96689dd5b4a2f32baf55a31acf778e0c393338cafa162492967ed6619c58fcc93be52c54d811f51f96cfe53210d3fdfa870ab09c7854b53620ee93cc22dbc7acced1ac7c34018c855f5f9615c30e860225f4f4f11de3dbc47942012babc1a5c4edf1a2c0bbcc96ab838701929ff8fdf5d68cefd5dc54b999f6316ee86f5156610f6e4ef8b11d045e90070d980d0234daccc41ea59db46c2f9ab3eaeaf0c130d0a90b9b68d1d4dbb9305cd2e0e6792e7c54fe7a406c3b7a4b7cd608515dc04680ef59314eee7ea8ee2d5b1033ba0b088dafb0d80de50b9ab994ad5c639c372b44cc36bed1c8fb5ae6552c164e455cb1471c9f3432a87c515e7d6dd588cd13b8a30803c247ab64383053972d6b6c773ce48b403971541a244d39ca956673da431dd0c3d935b1a0ded65126939decbaceb039b4362438de3ae69ec1d6cca38a5016ea44cbcffd124c540603ec10223088bddffd8273676739bac52ec1581f2ff8d65bc377583169508f128b5f598a168365c35a6e916dd7c10c847fb9d7db232cc798dfa1e46703005e4ca8f7f223808e96fd010255dd685aaef65b7bf935d4d07aa9873277ae5c49ee37ca92e84887bd11bd6068a7b0c116feb4343888340fd7f292b69c501bb5ccf31dae5d95376cf963f064e10f59f3ac4c02d22a988566ed681da616308fa825891fd0c97daf194072cf303790f699371df43bc86bce421a6c379b0609293cece6eab2ee57b17450ed610e3276cb34b5892a4c746e6b0356d58859023765b55fc72367f752fb3f756a90876e9f17f55c279ec186719eb26af59d1850805e7d19be832ba9558305e8b34717b2b6d6eb25eab1b8679d6e13cc1e257cd337165a93e80f694890cfad3c320a938d726e55fce70ee8edfbb186e0bf4af0af47a262f758db69b2caabd91eb3d2497b1a391d3a214cdf751acdeb2d5d68aa7e375769eeba0d8c703f07bbd7f56f9e78505b8a20c23138f63ea9ee4cab0360202373466c9a85b5c6d7803105ae7f828c79a5d54fc2248c97cce68dce08d13e5c922c5e523d54106b379aba41b92c3b4cb3e4fcd7bf3c0abab93fdfeae97d6a980865d2536779c61caee4fdbf6e6ab1db7245a38868bcf3034c18f8f54047925c20f57322e3e53b802e7a749005866066e842ff6ff37580ca9489268441a14e59379b72dbb153b510cbcd4ffa8695d24af9fcafdb972b59b377683ca8f0b70a5e5e1b0e1c7981df24d414abf7575e5fee27513aa7ccb3a4cfbc6a13cb0cf5e3c83f124d2b4e0ea285d9b6803719738114e725dd499519b2365554fbef09f89d18782c8572402539ef974a55a80c5aeb1de59e9023b3e8cee4906fff9232b9e6f7a9b9ac1a324e909280542d53100672f18efb3553f1193f8da1fbadf99d8d2167f47da5339b6b1c7eba4c7424cc0ad49439fa870d4898cf09a10c6a34eb415eb3fb0f2deb0e8acff20341fdf1a74ae51148ca7bd0079bb14e50bebcef52250702f7281196a6171a893ab8125be5a428a1b613a1c025b60fd3059567dcaeac9c90f69068888ec33efe79adc9985372d8df4fd1d28fcfed1c20de0ee8bb31229bdb7336e996c6491ab164ecb92a0afee9812a92d19746c5f54e90d76b8180b0619653ddb001cb33aaf7cafbe07d5b946383e0346f74ca109413238c2176d431c40272653f9bcdc0c307ba5a3caf3620ab54ee64527023f98cd65eab1674ce892d2233403179321d315fb43dab329dc6465865ffb694281a3c8c430634ec9e00b5b993f1f38d2e5bcc09387a1a61cbe7083ba012b7c7807be1364ba57ad18d76880beba3e9411ad4090f115de460a489b9af0f8530f01c47810d9cf28ea8f4086b09858f371656bc6189cf82c36a6fd4b181a7cc78d4bb32aee66fc8871a2c2401bbce1565de143522476dc0d62109eaf85075f26728c5997ef83e5898b316be0ae144222439099509ca04dccd5726e3fe0d2116be5252ba4d66c95ce1fa719c5b0a769db5b47d814524c804687107e01749d8524ca4764bfd3e80f180221ea9ed9b1e530f21c8802060e07286a80ba67cbdfe2240d6c727733a70f7032d67417f096ffd80ccf1031d60ea0aa36ed32d7755746ee7fd2cd7ecedcac709b827808f856bb32b04a2cba01542c43e4e601f149ddf703a89a6e191225e346a235969ff81682684f7ecb96b7981a14e862c78946eaa7cc79d29e9b9997e11ef16198a806369bca0633facd90161ca469eae66f9f905bae2282f964903857c7b61f7903ba5fe4d00133fd7b06833e4ed532501b83bb65522ad77e43fc353d8f4c162689ef360a3dd75b3948c82393b4a3ffefbd053abc0f32bd5bbe45a88c0cb1f7c2ee5f53633ad64696d43881fdbb7c79f9a3e111d175dda6a8c544bba30e1171da4710dd941dbdb68b44a77ec4a8ad394f7893d6cf0e3de0ee4a0ff6ec92eb8caa682eff4e8b80720e2d8d82629210e2c51c2a99c4095c792e751ae37558b231f34c3cb322570b331d7ceb7e9aa45644d8b036fbadb27f61537dec3a2643a1280242186021f0c08496ae84c7c9ae3a14405bdeee5bb97a8f0788fc92498151c0f5a9bc8aedbf5faba5b486dd72a438cdd60e3e6631f50c97d7b381d0896b7e49e64208debf9471183fc9f817e9fde474800ccdcb8b614808e200efc0eadb67acaad0ca3de9f963c8280f350203738984b1c17ad799093f9bc34a12875c8e43e47690555e2e3d64ae83744b4dc4c2a3bf32eaf8cc2ae0769971853b251a7f6e4eba0560c2683f5720f8cd3c20b9152ea0116f4e7004169a074e7ac88d084fea0929ed8ce60912aec7418afa5db3c20549bc9b4a306b23a0bc16e49a134082392ab875b384651f41249d70c19b3a0c69304377e9c1e7ec9e7ff2f164fa969cd640e3b2621c3c9fcf0763597bf36280c45b9fce120a843f6d32fbda4594380c84be2c30f2cec668888ab0ed87ad4c706e94a87af0f3796d922d1a7481334e1e36a0d6ce64f998e24f2941d917be146e51704b30100fd2582eef2151efdb5e9c237b0478134033cad003af99a909d5c34e2f35e1bb620a63dc0263b1a7261104e5223cc8080691af3d3a6953503f3bb6692a541630b10c50b06e0313bc93157ad22cb2fd4add9c2c24741478187963efb1be5a4db0c6248316d564e50279a0053b5539f0a548adeb71c350069e6c41ac4fc9c62f2848f53bcffa859723766a75b9d8281beead7b417a37804f6687deccfc22de9987950a42c5f9f9e23c64a94b7e437764558ddfa5a319b49a60399333d615b98789312a6a80bd51635068864e1d7eb3cecd508614a16b60795ca82648ef49ca46dab6d812e1a70fcbd10d05fea261d0e53e135a7490af9a05f31be7a4530f511dca02ac184392a73e133df1b58653b2639041f0a2dcb58db619b98998a063d6d3667f09ae49e79cac3be28b379433c8e27c99215a0f71b6fa8f29da49d2cb206b2e3a0bae4714edeb23d99aaa005f6c6ce4e0458d68e037fb3b9690f9ff622970c8c63ee43516850438f354cb9c5c8f248baabf885b3ed4a9f715fd2999ed16a4d84e51ed87350d629deafa8590c65a2b8d467669da536ed0e4f8491e24fcc310d8199de1daebbcbb6481073d1bb6383f6befc46163bec72602f579c7fb8fb2c5d4699469acf1948d2778798d3cf003466d8243c931d2384bc1042a8b97da09fe0f388426c0b85ffa8cad2a6f7397bf8ddb4fd629477f27d1670b196f3ef5d9caa7160fe8e483910ef089b8bde546b1c339f6a27b2fb6fc132175bec6012621d47e24715de5d89fd34a51c60e56cca4c9a22cd782390ad514497852f9cc3cbeb9e5e5f6b37729e6382ddd4800faa9899564c72c4ad788fdf5a94837ec1a5b8f8c6cc748647c9a3217d69a22b474f3ea4cc0fc911ee7e4a02e0e1ec692fac24e4a96861e9b9acee08bd0081ae25bc6b52ebb79ed8f17e0986d91c9a163aff4dc8adc899736d7dd772b73fa731b3ad7fa0dfe7445c255ff63c534d860b8eb6603f8f58072eb36d8a3d99fa2faa51d2580681e7245063cfcf822f96924c947032f2b9f52ce13b3b7696bc22b89d463bfe5f8ab7a8a0e6e4107b6825b6a269252313712d5829c2331515436004687b2b65a3f4886bbb302a92e013893bd9ed39ece4af454612328712a4c8ba7b3dc34c4e4ef35043912c94641ec7b70aab55811137f808a4fc92948d6a6214f77055bad11ecdd305a9763113fd9541571ab104bb743a800ef7fdd7eb701239afdce4fccbf2fce6d6a252a0a505bc16032d3284bd740bbcaaadb067480ec0089565ac6b3b4bae3b7d01e0d41b97fb5aa41edad8c31e368b71824a3f5dbcc473c73a1b31c51b17b120700170fd8a2c204f4628d6458b2d42d587ad8eaf3acc889a3fd057a9a8fa3b518de1a1b729aef9cdc949233da68a6605fdc4b4a6f961de3eeb58fa12eac7205bc986722985e640b39aed126d0be02495c54fa2b0c7c37899875ecca81ad26e746f65aea576459bfc84217757c2e98ecf068a497364579b210fa8ed6d53bdd481da30560bceb40a6334ba63ec2e427b92af9db1930de99a5e01e5d079efecf56a38738511a3da14abea5fb3577c902ed294f1af41030631cc356e1d21ef14a4a7c0f26c991d886e2510ef461912d444fcb4ffdb9ddaabd977e89afdd15897d935ce3d5db98ca6463732297757daaa0ea7b5747f389e75cfdbb3c97271196ba8501efbd91fb75048f288dfd42a8ce88b38683aa5917bf4cf4c9695667a119bf654c406f7908f1cb8f1c9ecf53b53105b240b39d0aa742a2fa7f286b475285d293ff67cce3a7f16fbf579eba6c2bfb26093c8475de4e0c48d7266486cb34df32580bb2545df03144a83273ebe0c3873da9c27dcf0eb3f", "4e567a7dd8aa0ddf32d65acca3fae9e7b67fdae02749e9b5bd15a7edc7f06ca8a970b8c377e6ea1c7994ad2dfc33a03cc82708e4eb1d441f2c6b899b5504df7c2615c5564b04fce902be838f558d410ab96f5b01d1345bb7da47041161d804ace95d3e950c6218d5294963fa6592b584cc6aab35c9603bd5c762cac81ca09db78dedfb9625adb0b71de7877dcedfccea8cb884e7ab9a79a04df6e74a31f10024d685abc72773be2d8a08dfab4e91f7fc7f1b52da85cd45a4042c4e065097b11e9e352741ea8e8e5d05df5468a5cfcf4d81ca4ad3abb4cfac8936d98bfff3dd3610abb0c2da71d3d1953945e8100113d39a3c8df7e18fc8ad2d49d480ab8caf8a547fe8660674c5677ec8931999383e3e90719320073fb00ba3e77c532d8239d540b091c5a747a4b33b2f3f2cd307a30795bcdec4a49b7bb06c1c4475f174cc289a95cf22b75a91b485db11ffe0f101639e9d6d883fdad302744c32e8e7f0af51b3a7ddaebea5b635e73053d3c56b3c39664d496dd788f5c873dbdd70e300f0b7699de39b21bfca73494d736ea3304b881741447726538044a8cd298b83ffab0258a9da74fc50423a92ba8f05d2a01611141d9fbe9c6b6f732c66a5b9562708df967cecaa715e0213e261e5daac97cfe448158d01ebf83644d18418f3dd75aa8317f43c643e5404eda8635591dc47e56515e5d53daa65a93b0b3bcac0dcdf4daa6800b79e92d7e48db325d9639c647d79764abb3b776199d0a14e720844c9df30c445e7bc7d317ea6877221fc692977b3c1e673517708db6dfa99141ff0607a0a4f01702bb8c91c37d5b1fb48893cf8f46759a1089692f6b89075c7507055374fba191b46324db906d8ce18d5e3d1d765d18d8704f7a85b734b8f1d1ac33214e6a91f10c053c1a56f5c2109d9a4843cb9de7181cfb866def7dfd2e8c97382ad729edc97907c223d83032c5d7e18c5096571b4ababa857071c8297cbf0ddd74c006e52b2ab21b44199bc90600b4b0bacd44942b1b60bad34ca76ad2a027b4a4f5cd143acb2af9caf542c5902e6d2a95f363c9cdbe7feb7f452e48fae8782dd6cbcebc1acfcb068933443eae61951d4dbccc6bbdb3c6cd87ce8b9012b2afb4d831bae9e8ba5ca06be9eaff6b718d8131761fb0e1892704dde08dd61fd21ef465f875e71a84dc24bd971a63f81242004331447ddf951bb81764980a931a7d439c64d734fbfa77c5bf97581248f6189ae94c8c14e392385e2585ced552146571ca6181562532f4c9c5b97a28abbf022673aa9a288e4b45ccf71118ba196fa4d70acd74eae9439294a1a63d3f0d2c8ba74e64c100c64d76a4f24b1d03515446ec717bc0d4e626a515e8cef4cd56b915c1a10b34db8bf8934177cb4749901440b3cc215712dddd275d6207d18e91ccd33c7d2669e15bbd20630e0582155e486e57eabb8e01610d83740f1870c7394802799ee80da8a7f496720dcc09ae9a43c4159b37248b2664d9b6fec5e4a9fdbd8c2ca31cb313ba0769d014a9023c7e9948d82962e55377256e7753b866c32f2da68d5ac756d33af53b36c86e4ac71ff5d046eaf9c15fe7b8c299f0e296f5a0dce0b52b23d972e8a3609162b9bc4f32dd32a69df590da80ab7540489e0cf0f518b70cecf68fe88b3ca37280a5630b6aaac509d728aab12b39d7d780646c387e9203746651330efb62bcb2002aad99a41421ef1c4a0652c5297252355fd80e80bf815462ce84a95535a12add1d77e69f02fc47000bad35d78134bda86d8d67e72a5c848f6a087f3fd963954cdff5000b28f50e039714336a637f444b3e4857ed4fc4beee31d6c8bc2b82f3f5c731fd863725773995cd38c36a0fda8b99950fbf5f047ed2efdb4fa6871facf3a620b74a157221127030fddee50124c5577e926aebb3dedb9d2ca311f710edcc71f151ab975b7d49297361a305fbc46a1cace928b5132e03a7557f03be864a588c72a9b85081b8e6d60dc22d3553cc7b4db917b0c05e642cada67263b7b04320c6641cd3041d2d0562ed9a7d676161099b196b2dbcab184b1b967a4646f1ef3c287f0f52ebe5afe93d862f0973386c59584cf68fccaf0b2ba85ef9f4fd7797d804253a22f6214bc5e414a9dc49ff76e4474613a5a1396fe19a242b711d5e2bceb12796d78c0167520444f1c2c26e053b7a1ef22c96d04362d4a7da70d108619f6831a9ac343c362abf16ccff51417bb2fa9498a6abf8c6827e61592166ab77a5d2e325140002d0a02a02b92cdde471b4d524c2842d51ef477c619cab0f580f3a477cccdac9339e9a69ae9da0957b20064d492aa9be00ea5556c21b663988098073bb472ceccabe5528328be3ed7575004d266067348d34d5a9f9c7c9970568758d8a37a0f9a887d701f12da7d22f040b9789934a798167e45c36289fb89e39cf446239510e0396020c7b8e3318d0e2c1d32e2fdc33a100c3c2b07ed27a04ab1605977fc3b2633d00cc82df957a4db035e4f51a42da030e4245dcafe68fcc702c4752b0be6abb00888c5b5f6548f4de903ae99638db0067b8851340647f846e3fe913b3165e75ec8d79376cf3f3233dc17766c2592d889ef4bf686bf2a08c1e993ad1339b92f2f8c22fa448da661443e5334aca5f7084923ab8a9328290632151a9d52ffb792b55866bbfcbf01a43934d829f6a1caf7821d071225ab9338970f7483adf61df354a80228f9575761413a315737a96216bad9e3077e913038a791b31047085d9559fb51697d8bcdacbdacfe41fe51364d8742503b51324c8bffb85fcf9253a95e6da9167cde92e9b7d08467c3d9aee742c074d578b8f3cb953296f447cd6806dfc97e6d184ddb426468fe8df1d484022269fdaa73ee68755cd7e86a9f1c82e5ff708612fe05a0757e0c61b35a2707d6972f62c2f069196572821070f3a4c821e7ae9a54eb41cb39cdbddc67cef937fb569a194ec632c6a6b8b0b31f6a189c87a795e83196934a5e2176065df4e76e4c502e492f64b25563881e3050cca125660e7d6967faa6c04f095aeab70ac01c6cbbc9e3a2e36209cf88be2fb8f3c3b9e48d5a2e0e73e21bc0abf4c6b8bd0e17b5aa5b7c8f17bb10c20edb9f6964a977aa8f20bd790f9a4b6f7854f4e4ff3889dd7c8ad1c16a332d804da06123cb0faae470362ddc39165a89fe8c638cf1792d33b703c2163833412b6950d7c01b36a77b922813f7fd36f6ca22e637695a4e40b0da2c231e0995e74b99ebc0d7306be31e8b9fda1dbd4e6c8b669c906003d3c41afc7eb54a74870029581b01a8d6f038e70ff850297ad39aa7749f9f4253f1670232f4ebc55cd8696c837f1d35dfcb355e2f26a6e17bc08a6a82bc0f03710f463cb88bb946fb94fc4626233b7c8900ce19fd59b70ee55b06e5b17121dfea302fd66d8906ba9b00edb895ed597bf23b2504cb84a07619b2a13c0365d6a6241855926e7da52494320c2482948774cbf7c847e5367d76d3a56171074c2ed3150aa180f3b3cb470d38c352a28d6e9237feef1b93d4f08cbd2935d2b982788b196cd9a2678d3e4002e5a993210d00e739e79620885f06ea0f8f8aa26ca4812ff7c599be366c0b1b768f662f71b49947b063acd609d67d8c9b9462930945ea02d681a231a6cdef156eef9af88a1efb5ff3567d2288a59432280771b8fadd82c48185d87aa883cdc9e26e9e30da0a93e70fbbf746ccb1610313371bcdd4820c0e0a63cd57c82cd01ad0e436e6416a26ae20f3f545ac3f9eb84c9c0a7a5388d795a491d765495f1ca778ffc07967c1e21483b252178408def1fc673abb75725428742a377b9ee4d267a9df595aedb78440bfc1a0fd2756af3cb7df912e9a88f27c5b394318752e66e2282908e98f379dfb743b70affd5c1ac5eecd87cdad8c447952536aabe57677d3efc7f9be90e93a6b4fd35167fd959cb1231da55488e7c6bef5519d407c05ef1da62052997e0b0de6d86f6f29def3e61bb5c1fedf836699997f3a402860db98e8c0c814b0336a69b51181651267d4a9292cc9799984edabedd9218a34264abccc666a33da08d19d9efb29016aa2bc7bcbffd839c1171174ee36506bd273efcf6b99fa83b5b8955a3c7aed8158f7a24a8e693c6f9c83d1cb2a82e40ef1c4628913404dc663955430ae86dc78e75d9a89967a13a6341907033505eab5850b70cd3aca65d3be3b93a734f3a98966a145c54d27334adc17fcbaf65005fe5889e19dabd0b326b852d6057c7d295340722c3c4b3d2f0eb95bb117872ba311dd390417b6c6db861dba070837b57757352f85ed90869104fc23668f5f84a566bfe5a3b931e4304127e90f5b92b5be988277f97bc2c3079259e6acdf23f079ef62dca93bf3537914a06df2f8d0976f56d4fc51675512f59ace32acf68322eb24cc9fa614ac0ed55c9aa784d5e4d5704113942c35cc5cf00d9f7f8a00956394e738d7aed7f15a6608ab76b0582551e22675a8f07c6afffb8e8cfaa29730bd1c1f2826e7b8b87d0434fabb7f31be81ff0796975895b21bb105c0401819b1345e56216b2b636b051943803facef13f1fd3181366d73e171e532a74147a1b197c0015193726096325e1a8b463dabdbe9454aaa97289ae947db2e79402a6ca90d548f9da08ed4b54afda9767b3dc59a3a7ebb96e517f5141d0097fb8f0f2f7d62ecf3f51a01ec9770e0ecf2b3a8a74f2024a28e1695df7011755fdcb0db8cb7cbf8d70eb1dedba4ebccf1229183a7535e6128edbff76f29c1da47c12db16b4a23021a3b4a7325571d0bb32bb86c184556735321613c5738cab32ae4826d43cb3672b0bd18834adbecae898bab8c71d905d2bdc52bbdc98db359458b110f4ad85f910a875040d93c3314abc2f76358a9b2232e87fccf10e481f79eb8e8666c0adf0c342de15325fb1c4e8c0e92deb614da36c9f9dde6f763433eda5a91b39b25635ccfa47105d80cdcf49beb3d9b841c9f1919f8f3dd00cad2a1fa9d5d12682dc0f7360e0d213bda360d3ec4ce71d8f286853bed3729254ec8f132c27d7f73cb85ef03c606b352bf79f0bed28e36432227eb53953be04f14cbbabc03ee6e9ef7541e7d2b6fb340b024372eb1b2b55709e11f39493aee2a19d3f9864cd3a90bd3f7703f62f1d6ad350548f802c835e921c27a3849c13804abe82207d79247cb9deabc3239c51b6e3b680bda13f4defff889cff528b794460ee37e086f378baf6253f435996f67b11d06c7fab27d0adfe148b66506d8b896eb32cde3de6eede67a95d6f0ce2d107c1eb9de92453dbd4b417a211fc95a161f81ec29ee0b9892741aa8c26ea0a7b4d852c94cea500bead8ec078ad27895ed70d8086a81958ed5cc4239be413fe0ab967ece079cb61d8ed0e92dc78dce67a2d4578b3cce7fdde7230c51dda7a6199a942a680b71716f6d9264c8b77139337a95c4a5ac98001a30e8dbe3283de6079c768173e54603419a49873d9fc915530a9d888b53b16fdb1e5f645d71bcd9d70fa375167d70018a98444551b3072579e6eaca369c448712f8b24c0db570524baecf748bd414bb7f3a97ecc18d4b48cea48b7fb1c7e88aef8095cbf060dda607933831dad4a09af3dfdf0ec37ce2f490df9073f74e882764e95402e463f1b07afd0fb4f6e6f89b4a87333deee9f7520b844846d1e4c214b2808882b42bdf384ca5f20c3075b49a97096c79ed6687995d71418bab0fd7fb5f55c3387e121223b96e2aa3ecb32c78f9e67f7e6568453d0ff09018766cbf841d8999b0f561f56e228c9ef0a6184a605d93fcfe421ad6848d10fdd869"}}) 0s ago: executing program 6 (id=1494): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) r1 = creat(&(0x7f00000002c0)='./file0/file1\x00', 0x4) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) fdatasync(r0) kernel console output (not intermixed with test programs): be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.125395][ T40] audit: type=1400 audit(1780010878.025:677): avc: denied { write } for pid=8853 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.125854][ T8807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.227754][ T8807] hsr_slave_0: entered promiscuous mode [ 126.231580][ T8807] hsr_slave_1: entered promiscuous mode [ 126.234921][ T8807] debugfs: 'hsr0' already exists in 'hsr' [ 126.237999][ T8807] Cannot create hsr debugfs directory [ 126.329864][ T40] audit: type=1400 audit(1780010878.235:678): avc: denied { write } for pid=8856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.438634][ T40] audit: type=1400 audit(1780010878.345:679): avc: denied { write } for pid=8859 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.488155][ T8807] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 126.495802][ T8807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.499262][ T8807] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 126.515237][ T8807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.527530][ T8807] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 126.543138][ T8807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.554009][ T8807] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 126.562797][ T8807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.563816][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.867'. [ 126.602913][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.606010][ T8807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.606406][ T40] audit: type=1400 audit(1780010878.505:680): avc: denied { write } for pid=8868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.609266][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.619025][ T8807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.659898][ T40] audit: type=1400 audit(1780010878.565:681): avc: denied { write } for pid=8880 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.686321][ T8807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.698761][ T40] audit: type=1400 audit(1780010878.605:682): avc: denied { ioctl } for pid=8882 comm="syz.6.868" path="socket:[27998]" dev="sockfs" ino=27998 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.703898][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.713882][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.729192][ T8807] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.742860][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.745657][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.754878][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.757492][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.771533][ T8886] tipc: Enabling of bearer rejected, media not registered [ 126.823667][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.6.870'. [ 126.881278][ T8894] netlink: 'syz.6.871': attribute type 10 has an invalid length. [ 126.887126][ T8894] netlink: 40 bytes leftover after parsing attributes in process `syz.6.871'. [ 126.891066][ T8894] bond0: entered promiscuous mode [ 126.893304][ T8894] bond_slave_0: entered promiscuous mode [ 126.895936][ T8894] bond_slave_1: entered promiscuous mode [ 126.902124][ T8894] bridge0: port 3(bond0) entered blocking state [ 126.905021][ T8894] bridge0: port 3(bond0) entered disabled state [ 126.909082][ T8894] bond0: entered allmulticast mode [ 126.911657][ T8894] bond_slave_0: entered allmulticast mode [ 126.914278][ T8894] bond_slave_1: entered allmulticast mode [ 126.977074][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.077394][ T8807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.182791][ T8910] autofs4:pid:8910:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 127.245238][ T8807] veth0_vlan: entered promiscuous mode [ 127.254069][ T8807] veth1_vlan: entered promiscuous mode [ 127.277898][ T8807] veth0_macvtap: entered promiscuous mode [ 127.285685][ T8807] veth1_macvtap: entered promiscuous mode [ 127.304176][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.322421][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.337679][ T238] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.342494][ T238] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.348625][ T238] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.355319][ T238] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.381027][ T61] Bluetooth: hci0: command tx timeout [ 127.435085][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.440958][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.466040][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.470005][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.636863][ T2319] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 127.739999][ T40] audit: type=1400 audit(1780010879.645:683): avc: denied { setopt } for pid=8917 comm="syz.7.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.789750][ T238] Bluetooth: hci4: Frame reassembly failed (-84) [ 127.791902][ T2319] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.795747][ T2319] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 111, setting to 64 [ 127.799255][ T2319] usb 7-1: config 0 interface 0 has no altsetting 0 [ 127.803850][ T2319] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 127.808262][ T2319] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 127.810923][ T2319] usb 7-1: Product: syz [ 127.812636][ T2319] usb 7-1: Manufacturer: syz [ 127.814468][ T2319] usb 7-1: SerialNumber: syz [ 127.823377][ T2319] usb 7-1: config 0 descriptor?? [ 127.829796][ T8914] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 127.834634][ T2319] usb 7-1: selecting invalid altsetting 0 [ 128.034762][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.038077][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.041195][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.044022][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.047052][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.049620][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.052409][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.055159][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.057955][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.060458][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.062999][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.065600][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.069071][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.072135][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.076065][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.080361][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.083183][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.086414][ T8914] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 128.090162][ T2319] usb 7-1: USB disconnect, device number 11 [ 128.092838][ T8914] usb 7-1: cannot submit urb 0, error -19: no device [ 128.435613][ T70] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 128.440013][ T70] usb 10-1: can't read configurations, error -71 [ 128.521102][ T40] audit: type=1400 audit(1780010880.425:684): avc: denied { set_context_mgr } for pid=8926 comm="syz.6.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 128.529453][ T8927] binder: 8926:8927 ioctl c0306201 200000000040 returned -22 [ 128.682054][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 128.720899][ T8940] nbd: socks must be embedded in a SOCK_ITEM attr [ 128.793797][ T40] audit: type=1400 audit(1780010880.695:685): avc: denied { map } for pid=8928 comm="syz.5.878" path="socket:[28160]" dev="sockfs" ino=28160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.887775][ T8948] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 129.176997][ T39] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 129.246575][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.888'. [ 129.340283][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.357267][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.361188][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.366334][ T39] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.376796][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.380995][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.384335][ T39] usb 7-1: config 0 descriptor?? [ 129.384559][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.388518][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.390864][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.393168][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.395458][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.398216][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.400688][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.403025][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.405204][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.408329][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.411503][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.414717][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.420907][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.424213][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.426723][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.430238][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.432743][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.435818][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.439488][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.442585][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.445422][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.448598][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.451267][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd8781bd0 returned -22 [ 129.454425][ T8962] binder: 8959:8962 ioctl 4020ae46 7f3bd87818d0 returned -22 [ 129.458410][ T8962] binder: 8959:8962 ioctl 8138ae83 7f3bd8781a90 returned -22 [ 129.466865][ T5745] Bluetooth: hci0: command tx timeout [ 129.859226][ T61] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 129.896930][ T39] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xe [ 129.929990][ T8966] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 129.966034][ T39] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x8f000) [ 130.042834][ T1135] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 130.045210][ T1135] ata1: failed to read log page 10h (errno=-5) [ 130.047530][ T1135] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 130.050185][ T1135] ata1.00: irq_stat 0x41000008 [ 130.052410][ T1135] ata1.00: failed command: READ FPDMA QUEUED [ 130.055066][ T1135] ata1.00: cmd 60/78:70:de:84:03/04:00:00:00:00/40 tag 14 ncq dma 585728 in [ 130.055066][ T1135] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 130.068561][ T1135] ata1.00: status: { DRDY } [ 130.072842][ T1135] ata1.00: error: { ABRT } [ 130.076139][ T1135] ata1.00: configured for UDMA/100 [ 130.080952][ T1135] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 130.084162][ T1135] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 130.086898][ T1135] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 130.089461][ T1135] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 84 de 00 04 78 00 [ 130.092055][ T1135] I/O error, dev sda, sector 230622 op 0x0:(READ) flags 0x80700 phys_seg 15 prio class 2 [ 130.095195][ T1135] ata1: EH complete [ 130.095792][ T9] usb 7-1: USB disconnect, device number 12 [ 130.151414][ T8974] Bluetooth: MGMT ver 1.23 [ 130.235816][ T8968] fido_id[8968]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 130.239657][ T68] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 130.295612][ T8984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.327715][ T8986] loop2: detected capacity change from 0 to 7 [ 130.416832][ T68] usb 12-1: Using ep0 maxpacket: 16 [ 130.419853][ T68] usb 12-1: config index 0 descriptor too short (expected 65, got 36) [ 130.422799][ T68] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.428453][ T68] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 130.431821][ T68] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 130.435642][ T68] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.441575][ T68] usb 12-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 130.445158][ T68] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.450243][ T68] usb 12-1: config 0 descriptor?? [ 130.464322][ T68] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input24 [ 130.473501][ T5129] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 130.483107][ T5129] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 130.487393][ T5129] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 130.493701][ T5129] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 130.517193][ T6981] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 130.521565][ T5129] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 130.532470][ T5129] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 130.535712][ T5129] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 130.657785][ T8970] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 130.674136][ T8990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.674819][ T8993] fuse: Bad value for 'user_id' [ 130.679511][ T8993] fuse: Bad value for 'user_id' [ 130.680870][ T8992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.682717][ T8990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.684809][ T8992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.709469][ T5824] usb 12-1: USB disconnect, device number 2 [ 131.146346][ T8998] macvlan0: entered promiscuous mode [ 131.244768][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 131.244783][ T40] audit: type=1400 audit(1780010883.145:689): avc: denied { read write } for pid=8999 comm="syz.6.900" name="file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 131.246693][ T9000] [ 131.249709][ T40] audit: type=1400 audit(1780010883.145:690): avc: denied { open } for pid=8999 comm="syz.6.900" path="/50/file0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 131.420399][ T40] audit: type=1400 audit(1780010883.325:691): avc: denied { read } for pid=9017 comm="syz.6.905" dev="nsfs" ino=4026532899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 131.427919][ T40] audit: type=1400 audit(1780010883.325:692): avc: denied { open } for pid=9017 comm="syz.6.905" path="net:[4026532899]" dev="nsfs" ino=4026532899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 131.462257][ T9025] netlink: 148 bytes leftover after parsing attributes in process `syz.5.906'. [ 131.499808][ T9016] can0: slcan on ttyS3. [ 131.526683][ T9016] netlink: 104 bytes leftover after parsing attributes in process `syz.7.904'. [ 131.537988][ T9026] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 131.543099][ T9026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9026 comm=syz.5.906 [ 131.546972][ T61] Bluetooth: hci0: command tx timeout [ 131.569747][ T9018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.691425][ T9034] netlink: 'syz.5.909': attribute type 4 has an invalid length. [ 131.692009][ T40] audit: type=1400 audit(1780010883.595:693): avc: denied { write } for pid=9031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.702068][ T9040] tmpfs: Bad value for 'mpol' [ 131.720689][ T9034] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 131.758402][ T9014] can0 (unregistered): slcan off ttyS3. [ 131.764741][ T40] audit: type=1400 audit(1780010883.665:694): avc: denied { write } for pid=9043 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.844076][ T9056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.914'. [ 131.882542][ T40] audit: type=1400 audit(1780010883.785:695): avc: denied { write } for pid=9054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.950756][ T9064] netlink: 'syz.7.918': attribute type 29 has an invalid length. [ 131.961232][ T9064] netlink: 'syz.7.918': attribute type 29 has an invalid length. [ 131.965654][ T9064] netlink: 44 bytes leftover after parsing attributes in process `syz.7.918'. [ 131.968058][ T40] audit: type=1400 audit(1780010883.875:696): avc: denied { write } for pid=9065 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.974341][ T9064] overlayfs: workdir and upperdir must reside under the same mount [ 131.993735][ T40] audit: type=1400 audit(1780010883.895:697): avc: denied { write } for pid=9063 comm="syz.7.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.108783][ T40] audit: type=1400 audit(1780010884.015:698): avc: denied { name_bind } for pid=9076 comm="syz.7.922" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 132.324304][ T9083] xt_hashlimit: invalid rate [ 132.357867][ T9085] misc userio: No port type given on /dev/userio [ 132.522255][ T9097] pimreg: entered allmulticast mode [ 132.672679][ T9099] bridge1: entered promiscuous mode [ 132.675019][ T9099] bridge1: entered allmulticast mode [ 133.470349][ T9111] netlink: 104 bytes leftover after parsing attributes in process `syz.6.934'. [ 133.536532][ T9114] IPVS: length: 201 != 24 [ 133.583586][ T9116] syzkaller0: entered promiscuous mode [ 133.585612][ T9116] syzkaller0: entered allmulticast mode [ 133.593468][ T9116] 0: reclassify loop, rule prio 0, protocol 800 [ 133.626817][ T61] Bluetooth: hci0: command tx timeout [ 133.748999][ T9120] mmap: syz.6.937 (9120) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.819034][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.937'. [ 133.823728][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.6.937'. [ 134.063275][ T9129] syzkaller0: entered promiscuous mode [ 134.065592][ T9129] syzkaller0: entered allmulticast mode [ 134.230728][ T9136] netlink: 148 bytes leftover after parsing attributes in process `syz.6.943'. [ 134.246492][ T9136] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 134.253385][ T9136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=9136 comm=syz.6.943 [ 134.313544][ T61] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 134.331407][ T9140] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 134.339492][ T9140] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 134.343271][ T9141] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 134.411224][ T9149] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 134.481529][ T9149] overlay: Unknown parameter 'subj_type' [ 134.486612][ T9149] cgroup: name respecified [ 134.699246][ T9152] kvm_intel: kvm [9151]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1046 [ 134.721459][ T9152] kvm: kvm [9151]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1046 [ 135.383337][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.7.954'. [ 135.387943][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.7.954'. [ 135.475380][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.7.954'. [ 135.483203][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.7.954'. [ 135.661708][ T9181] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 135.703962][ T9179] xt_ecn: cannot match TCP bits for non-tcp packets [ 135.852352][ T9179] syzkaller0: entered promiscuous mode [ 135.854942][ T9179] syzkaller0: entered allmulticast mode [ 135.861466][ T9185] batadv_slave_1: entered promiscuous mode [ 135.889813][ T9185] EXT4-fs (nbd2): unable to read superblock [ 135.903593][ T9183] batadv_slave_1: left promiscuous mode [ 136.252703][ T40] kauditd_printk_skb: 16819 callbacks suppressed [ 136.252715][ T40] audit: type=1326 audit(1780010888.145:17518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c19ce59 code=0x50000 [ 136.266995][ T40] audit: type=1326 audit(1780010888.145:17519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c19ce59 code=0x50000 [ 136.275300][ T40] audit: type=1326 audit(1780010888.165:17520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c19ce59 code=0x50000 [ 136.297286][ T40] audit: type=1326 audit(1780010888.165:17522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c19ce59 code=0x50000 [ 136.308113][ T40] audit: type=1326 audit(1780010888.165:17521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c19ce59 code=0x50000 [ 136.315223][ T40] audit: type=1326 audit(1780010888.165:17523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c19ce59 code=0x50000 [ 136.323233][ T40] audit: type=1326 audit(1780010888.165:17525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c19ce59 code=0x50000 [ 136.330560][ T40] audit: type=1326 audit(1780010888.165:17526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c19ce59 code=0x50000 [ 136.337806][ T40] audit: type=1326 audit(1780010888.165:17524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c19ce59 code=0x50000 [ 136.344875][ T40] audit: type=1326 audit(1780010888.165:17527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c19ce59 code=0x50000 [ 137.797609][ T9198] netlink: 'syz.2.964': attribute type 10 has an invalid length. [ 137.809766][ T9198] team0: Failed to send options change via netlink (err -105) [ 137.813404][ T9198] team0: Port device dummy0 added [ 137.816380][ T9197] netlink: 'syz.2.964': attribute type 10 has an invalid length. [ 137.821894][ T9197] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 137.832256][ T9197] team0: Failed to send options change via netlink (err -105) [ 137.834950][ T9197] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 137.839264][ T9197] team0: Port device dummy0 removed [ 137.845137][ T9197] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 137.861568][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.194736][ T9216] __nla_validate_parse: 1 callbacks suppressed [ 138.194748][ T9216] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.970'. [ 138.236204][ T9216] bridge_slave_0: left allmulticast mode [ 138.238746][ T9216] bridge_slave_0: left promiscuous mode [ 138.240836][ T9216] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.253306][ T9216] bridge_slave_1: left allmulticast mode [ 138.255703][ T9216] bridge_slave_1: left promiscuous mode [ 138.259125][ T9216] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.271236][ T9216] bond0: (slave bond_slave_0): Releasing backup interface [ 138.289368][ T9216] bond0: (slave bond_slave_1): Releasing backup interface [ 138.310220][ T9216] team0: Port device team_slave_0 removed [ 138.316462][ T9216] team0: Port device team_slave_1 removed [ 138.320504][ T9216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.323094][ T9216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.328239][ T9216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.334050][ T9216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.345518][ T9216] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 138.371620][ T9225] ip6gre1: entered allmulticast mode [ 138.382976][ T9225] team0: Port device ip6gre1 added [ 138.535136][ T9228] kvm_intel: kvm [9226]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1046 [ 138.574094][ T9228] kvm: kvm [9226]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1046 [ 138.884053][ T9254] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 139.019028][ T9264] syzkaller0: entered promiscuous mode [ 139.020815][ T9264] syzkaller0: entered allmulticast mode [ 140.577693][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 140.581433][ T9267] netem: unknown loss type 13 [ 140.583394][ T9267] netem: change failed [ 140.602679][ T9272] bridge0: port 3(bond0) entered blocking state [ 140.605369][ T9272] bridge0: port 3(bond0) entered forwarding state [ 140.608686][ T9272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.642812][ T9272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.643304][ T9277] tmpfs: Cannot enable quota on remount [ 140.648252][ T9272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.650502][ T238] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.655267][ T238] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.660628][ T238] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.663934][ T238] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.697807][ T13] Bluetooth: hci4: Frame reassembly failed (-90) [ 140.699936][ T238] Bluetooth: hci4: Frame reassembly failed (-84) [ 140.724598][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 140.732944][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 140.906493][ T9289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=9289 comm=syz.5.996 [ 141.127823][ T9303] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1001'. [ 141.698852][ T40] kauditd_printk_skb: 15119 callbacks suppressed [ 141.698950][ T40] audit: type=1400 audit(1780010893.595:32647): avc: granted { setsecparam } for pid=9311 comm="syz.7.1006" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 141.710933][ T40] audit: type=1400 audit(1780010893.615:32648): avc: denied { create } for pid=9311 comm="syz.7.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 141.866339][ T9323] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 141.945296][ T40] audit: type=1400 audit(1780010893.845:32649): avc: denied { setopt } for pid=9329 comm="syz.6.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 142.393478][ T9337] FAULT_INJECTION: forcing a failure. [ 142.393478][ T9337] name failslab, interval 1, probability 0, space 0, times 0 [ 142.398807][ T9337] CPU: 3 UID: 0 PID: 9337 Comm: syz.6.1015 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.398836][ T9337] Tainted: [L]=SOFTLOCKUP [ 142.398842][ T9337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.398852][ T9337] Call Trace: [ 142.398858][ T9337] [ 142.398865][ T9337] dump_stack_lvl+0x100/0x190 [ 142.398904][ T9337] should_fail_ex.cold+0x5/0xa [ 142.398928][ T9337] should_failslab+0xc2/0x120 [ 142.398950][ T9337] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 142.398977][ T9337] ? skb_clone+0x190/0x400 [ 142.399014][ T9337] skb_clone+0x190/0x400 [ 142.399043][ T9337] netlink_deliver_tap+0xaed/0xcc0 [ 142.399069][ T9337] netlink_unicast+0x62b/0x850 [ 142.399094][ T9337] ? __pfx_netlink_unicast+0x10/0x10 [ 142.399123][ T9337] netlink_sendmsg+0x8b0/0xda0 [ 142.399149][ T9337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.399165][ T9337] ? __might_fault+0xa0/0x140 [ 142.399199][ T9337] ____sys_sendmsg+0x9e1/0xb70 [ 142.399217][ T9337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.399240][ T9337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.399272][ T9337] ___sys_sendmsg+0x190/0x1e0 [ 142.399298][ T9337] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.399348][ T9337] __sys_sendmsg+0x170/0x220 [ 142.399376][ T9337] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.399419][ T9337] ? rcu_is_watching+0x12/0xc0 [ 142.399449][ T9337] do_syscall_64+0x115/0x870 [ 142.399479][ T9337] ? clear_bhb_loop+0x40/0x90 [ 142.399501][ T9337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.399520][ T9337] RIP: 0033:0x7f3bd799ce59 [ 142.399536][ T9337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.399554][ T9337] RSP: 002b:00007f3bd87a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.399571][ T9337] RAX: ffffffffffffffda RBX: 00007f3bd7c15fa0 RCX: 00007f3bd799ce59 [ 142.399583][ T9337] RDX: 0000000020004440 RSI: 0000200000000400 RDI: 0000000000000005 [ 142.399593][ T9337] RBP: 00007f3bd87a4090 R08: 0000000000000000 R09: 0000000000000000 [ 142.399604][ T9337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.399613][ T9337] R13: 00007f3bd7c16038 R14: 00007f3bd7c15fa0 R15: 00007fff2429d688 [ 142.399638][ T9337] [ 142.399662][ T9337] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1015'. [ 142.649462][ T40] audit: type=1400 audit(1780010894.555:32650): avc: denied { remount } for pid=9343 comm="syz.6.1017" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 142.650757][ T9344] option changes via remount are deprecated (pid=9343 comm=syz.6.1017) [ 142.738656][ T5745] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 142.741338][ T5095] Bluetooth: hci5: command 0x1003 tx timeout [ 142.741439][ T5749] Bluetooth: hci4: command 0x1003 tx timeout [ 142.749923][ T61] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 142.753952][ T40] audit: type=1400 audit(1780010894.655:32651): avc: denied { unmount } for pid=8285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 143.052436][ T9360] loop2: detected capacity change from 0 to 7 [ 143.063496][ T9360] loop2: [ 143.064832][ T9360] loop2: partition table partially beyond EOD, truncated [ 143.104381][ T40] audit: type=1400 audit(1780010895.005:32652): avc: denied { setopt } for pid=9361 comm="syz.2.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.201522][ T9364] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 143.216601][ T9367] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 143.222314][ T9367] FAULT_INJECTION: forcing a failure. [ 143.222314][ T9367] name failslab, interval 1, probability 0, space 0, times 0 [ 143.226443][ T9367] CPU: 2 UID: 0 PID: 9367 Comm: syz.6.1025 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.226461][ T9367] Tainted: [L]=SOFTLOCKUP [ 143.226465][ T9367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.226471][ T9367] Call Trace: [ 143.226475][ T9367] [ 143.226479][ T9367] dump_stack_lvl+0x100/0x190 [ 143.226495][ T9367] should_fail_ex.cold+0x5/0xa [ 143.226510][ T9367] should_failslab+0xc2/0x120 [ 143.226522][ T9367] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 143.226537][ T9367] ? do_getname+0x35/0x390 [ 143.226557][ T9367] ? fput+0x79/0x100 [ 143.226581][ T9367] do_getname+0x35/0x390 [ 143.226608][ T9367] __x64_sys_mkdirat+0x78/0xc0 [ 143.226633][ T9367] do_syscall_64+0x115/0x870 [ 143.226653][ T9367] ? clear_bhb_loop+0x40/0x90 [ 143.226666][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.226676][ T9367] RIP: 0033:0x7f3bd799ce59 [ 143.226686][ T9367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.226697][ T9367] RSP: 002b:00007f3bd87a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 143.226707][ T9367] RAX: ffffffffffffffda RBX: 00007f3bd7c15fa0 RCX: 00007f3bd799ce59 [ 143.226714][ T9367] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 143.226720][ T9367] RBP: 00007f3bd87a4090 R08: 0000000000000000 R09: 0000000000000000 [ 143.226726][ T9367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.226745][ T9367] R13: 00007f3bd7c16038 R14: 00007f3bd7c15fa0 R15: 00007fff2429d688 [ 143.226759][ T9367] [ 143.354334][ T9370] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 143.506407][ T9386] bond0: (slave dummy0): Releasing backup interface [ 143.516399][ T9386] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 143.755182][ T40] audit: type=1804 audit(1780010895.655:32653): pid=9391 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1033" name="/newroot/248/file0/file1" dev="9p" ino=72877211 res=1 errno=0 [ 143.856966][ T61] Bluetooth: hci6: command 0x1003 tx timeout [ 143.862736][ T5739] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 143.908894][ T9393] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1034'. [ 144.081351][ T40] audit: type=1400 audit(1780010895.985:32654): avc: denied { associate } for pid=9401 comm="syz.2.1037" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 144.092118][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1036'. [ 144.430693][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1041'. [ 144.472282][ T9421] netlink: 'syz.2.1044': attribute type 49 has an invalid length. [ 144.499122][ T5747] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 144.502804][ T5739] Bluetooth: hci7: command 0x1003 tx timeout [ 144.741599][ T9440] binder: 9435:9440 ioctl c0306201 200000000640 returned -22 [ 144.775976][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 144.780993][ T9430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1046'. [ 145.055660][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 145.059362][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 145.062816][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 145.066040][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 145.118537][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.240993][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.260728][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.269031][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.272923][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.279453][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.283257][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.351219][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.424237][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.570472][ T9474] FAULT_INJECTION: forcing a failure. [ 145.570472][ T9474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.574696][ T9474] CPU: 1 UID: 0 PID: 9474 Comm: syz.2.1057 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.574714][ T9474] Tainted: [L]=SOFTLOCKUP [ 145.574717][ T9474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.574723][ T9474] Call Trace: [ 145.574728][ T9474] [ 145.574733][ T9474] dump_stack_lvl+0x100/0x190 [ 145.574748][ T9474] should_fail_ex.cold+0x5/0xa [ 145.574767][ T9474] _copy_to_user+0x32/0xd0 [ 145.574789][ T9474] simple_read_from_buffer+0xcb/0x170 [ 145.574805][ T9474] proc_fail_nth_read+0x1af/0x230 [ 145.574818][ T9474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.574830][ T9474] ? rw_verify_area+0xce/0x6d0 [ 145.574840][ T9474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.574851][ T9474] vfs_read+0x1e4/0xb30 [ 145.574864][ T9474] ? __pfx_vfs_read+0x10/0x10 [ 145.574875][ T9474] ? __fget_files+0x215/0x3d0 [ 145.574891][ T9474] ? __fget_files+0x21f/0x3d0 [ 145.574908][ T9474] ksys_read+0x12a/0x250 [ 145.574919][ T9474] ? __pfx_ksys_read+0x10/0x10 [ 145.574931][ T9474] ? rcu_is_watching+0x12/0xc0 [ 145.574948][ T9474] do_syscall_64+0x115/0x870 [ 145.574962][ T9474] ? clear_bhb_loop+0x40/0x90 [ 145.574975][ T9474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.574986][ T9474] RIP: 0033:0x7fc134f5d68e [ 145.574995][ T9474] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 145.575006][ T9474] RSP: 002b:00007fc135e6ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.575016][ T9474] RAX: ffffffffffffffda RBX: 00007fc135e706c0 RCX: 00007fc134f5d68e [ 145.575023][ T9474] RDX: 000000000000000f RSI: 00007fc135e700a0 RDI: 0000000000000004 [ 145.575029][ T9474] RBP: 00007fc135e70090 R08: 0000000000000000 R09: 0000000000000000 [ 145.575035][ T9474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.575041][ T9474] R13: 00007fc135216038 R14: 00007fc135215fa0 R15: 00007ffc42815d88 [ 145.575055][ T9474] [ 145.780408][ T13] team0: Port device ip6gre1 removed [ 145.813764][ T40] audit: type=1400 audit(1780010897.715:32655): avc: denied { write } for pid=9480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.872879][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'. [ 145.892127][ T40] audit: type=1400 audit(1780010897.795:32656): avc: denied { write } for pid=9484 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.930585][ T13] bond0 (unregistering): Released all slaves [ 145.938775][ T13] bond1 (unregistering): Released all slaves [ 145.959836][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14 [ 146.250002][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15 [ 146.320820][ T9456] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.323782][ T9456] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.326499][ T9456] bridge_slave_0: entered allmulticast mode [ 146.329427][ T9456] bridge_slave_0: entered promiscuous mode [ 146.333748][ T9456] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.336337][ T9456] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.341387][ T9456] bridge_slave_1: entered allmulticast mode [ 146.344289][ T9456] bridge_slave_1: entered promiscuous mode [ 146.359241][ T9456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.364319][ T9456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.388913][ T9456] team0: Port device team_slave_0 added [ 146.399956][ T9456] team0: Port device team_slave_1 added [ 146.407287][ T13] hsr_slave_0: left promiscuous mode [ 146.411246][ T13] hsr_slave_1: left promiscuous mode [ 146.422878][ T13] veth1_macvtap: left promiscuous mode [ 146.425241][ T13] veth0_macvtap: left promiscuous mode [ 146.427869][ T13] veth1_vlan: left promiscuous mode [ 146.430357][ T13] veth0_vlan: left promiscuous mode [ 146.735087][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16 [ 146.739611][ T9456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.743036][ T9456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.754538][ T9456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.765793][ T9456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.769032][ T9456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.780933][ T9456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.838738][ T9456] hsr_slave_0: entered promiscuous mode [ 146.841275][ T9456] hsr_slave_1: entered promiscuous mode [ 146.843904][ T9456] debugfs: 'hsr0' already exists in 'hsr' [ 146.846173][ T9456] Cannot create hsr debugfs directory [ 146.924736][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 146.924752][ T40] audit: type=1400 audit(1780010898.825:32661): avc: denied { write } for pid=9522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.996673][ T9456] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 147.000966][ T9456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.003896][ T9456] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 147.008306][ T9456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.011854][ T9456] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 147.012567][ T40] audit: type=1400 audit(1780010898.915:32662): avc: denied { write } for pid=9525 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.025178][ T9456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.028701][ T9456] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 147.032755][ T9456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.059045][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17 [ 147.106693][ T9456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.139124][ T9456] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.146808][ T238] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.150062][ T238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.162571][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.165541][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.386921][ T5747] Bluetooth: hci0: command tx timeout [ 147.538299][ T9565] netlink: 'syz.6.1070': attribute type 1 has an invalid length. [ 147.543203][ T9565] netlink: 'syz.6.1070': attribute type 2 has an invalid length. [ 147.546484][ T9565] netlink: 'syz.6.1070': attribute type 1 has an invalid length. [ 147.557188][ T9456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.560276][ T9565] tipc: Enabling of bearer rejected, failed to enable media [ 147.604330][ T40] audit: type=1400 audit(1780010899.505:32663): avc: denied { connect } for pid=9567 comm="syz.6.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.734631][ T9456] veth0_vlan: entered promiscuous mode [ 147.743890][ T9456] veth1_vlan: entered promiscuous mode [ 147.763814][ T9456] veth0_macvtap: entered promiscuous mode [ 147.769164][ T9456] veth1_macvtap: entered promiscuous mode [ 147.778940][ T9456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.791583][ T9456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.799294][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.803249][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.809713][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.813679][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.894401][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.902099][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.956144][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.959781][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.029709][ T9589] netlink: 'syz.8.1053': attribute type 1 has an invalid length. [ 148.140143][ T40] audit: type=1400 audit(1780010900.045:32664): avc: denied { cmd } for pid=9592 comm="syz.8.1076" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 148.273293][ T9603] tipc: Started in network mode [ 148.276857][ T9603] tipc: Node identity dec1c30ef568, cluster identity 4711 [ 148.279935][ T9603] tipc: Enabled bearer , priority 0 [ 148.467954][ T9597] tipc: Disabling bearer [ 148.489195][ T9616] syzkaller0: entered promiscuous mode [ 148.491642][ T9616] syzkaller0: entered allmulticast mode [ 148.542729][ T9606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.547536][ T9616] tipc: Enabled bearer , priority 0 [ 148.553031][ T9615] tipc: Resetting bearer [ 148.581062][ T9615] tipc: Disabling bearer [ 148.594071][ T9619] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 148.642302][ T5747] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 148.687193][ T5818] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 148.697093][ T9623] binder: 9622:9623 ioctl c0306201 200000000040 returned -14 [ 148.699467][ T9625] binder: 9622:9625 ioctl 8008af73 200000000100 returned -22 [ 148.774525][ T9631] netlink: 'syz.5.1089': attribute type 11 has an invalid length. [ 148.852773][ T5818] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.856847][ T5818] usb 7-1: config 0 has no interface number 0 [ 148.859387][ T5818] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 148.863827][ T5818] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 148.868267][ T5818] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.872149][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.884119][ T5818] usb 7-1: config 0 descriptor?? [ 148.889129][ T9614] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.905611][ T5818] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 149.042229][ T5747] Bluetooth: hci2: unexpected event for opcode 0x202d [ 149.044899][ T40] audit: type=1400 audit(1780010900.945:32665): avc: denied { accept } for pid=9646 comm="syz.6.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.223520][ T5739] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 149.262079][ T9658] wg1: entered promiscuous mode [ 149.270764][ T9658] team0: Device wg1 is of different type [ 149.274765][ T9660] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 149.278775][ T5739] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 149.285701][ T9658] __nla_validate_parse: 8 callbacks suppressed [ 149.285719][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1098'. [ 149.456968][ T5739] Bluetooth: hci0: command tx timeout [ 149.640888][ C2] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 149.649729][ T39] usb 7-1: USB disconnect, device number 13 [ 149.741534][ T9675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.768939][ T9675] can: request_module (can-proto-0) failed. [ 149.812850][ T40] audit: type=1400 audit(1780010901.715:32666): avc: denied { lock } for pid=9674 comm="syz.2.1104" path="/dev/video2" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 150.019789][ T9680] dvmrp0: entered allmulticast mode [ 150.023928][ T9680] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1105'. [ 150.057184][ T9680] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1105'. [ 150.131648][ T9686] autofs4:pid:9686:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 150.222984][ T9688] netlink: 'syz.6.1107': attribute type 4 has an invalid length. [ 150.349230][ T40] audit: type=1400 audit(1780010902.255:32667): avc: denied { read write } for pid=9689 comm="syz.2.1108" name="file0" dev="9p" ino=72877209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 150.350066][ T9690] 9pnet_virtio: no channels available for device syz [ 150.358200][ T40] audit: type=1400 audit(1780010902.255:32668): avc: denied { open } for pid=9689 comm="syz.2.1108" path="/269/file0/file0" dev="9p" ino=72877209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 150.370438][ T40] audit: type=1400 audit(1780010902.255:32669): avc: denied { mounton } for pid=9689 comm="syz.2.1108" path="/269/file0" dev="9p" ino=72877197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.050635][ T9700] binder: 9699:9700 ioctl c0306201 200000000040 returned -14 [ 151.115130][ T9703] overlayfs: conflicting lowerdir path [ 151.548546][ T5739] Bluetooth: hci0: command 0x040f tx timeout [ 151.824152][ T40] audit: type=1400 audit(1780010903.725:32670): avc: denied { create } for pid=9721 comm="syz.5.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 152.426985][ T9731] tipc: Enabling of bearer rejected, failed to enable media [ 152.470672][ T9734] binder: BINDER_SET_CONTEXT_MGR already set [ 152.474551][ T9734] binder: 9733:9734 ioctl 4018620d 200000000100 returned -16 [ 152.481129][ T9734] binder: BINDER_SET_CONTEXT_MGR already set [ 152.483371][ T9734] binder: 9733:9734 ioctl 4018620d 200000004a80 returned -16 [ 152.486701][ T9734] binder_alloc: 9733: binder_alloc_buf, no vma [ 152.492799][ T9737] /dev/sg0: Can't lookup blockdev [ 152.494987][ T9737] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1118'. [ 152.496362][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 152.496377][ T40] audit: type=1400 audit(1780010904.385:32672): avc: denied { call } for pid=9733 comm="syz.6.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 152.530715][ T40] audit: type=1400 audit(1780010904.435:32673): avc: denied { create } for pid=9739 comm="syz.6.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.547731][ T40] audit: type=1400 audit(1780010904.435:32674): avc: denied { bind } for pid=9739 comm="syz.6.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.557742][ T9738] kernel read not supported for file /policy (pid: 9738 comm: syz.5.1117) [ 152.564902][ T40] audit: type=1400 audit(1780010904.435:32675): avc: denied { setopt } for pid=9739 comm="syz.6.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.569304][ T9742] netlink: 'syz.2.1120': attribute type 16 has an invalid length. [ 152.573136][ T40] audit: type=1400 audit(1780010904.435:32676): avc: denied { accept } for pid=9739 comm="syz.6.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.575228][ T9742] netlink: 'syz.2.1120': attribute type 17 has an invalid length. [ 152.583454][ T40] audit: type=1400 audit(1780010904.435:32677): avc: denied { write } for pid=9739 comm="syz.6.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.599832][ T40] audit: type=1400 audit(1780010904.435:32678): avc: denied { read } for pid=9739 comm="syz.6.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.607280][ T40] audit: type=1400 audit(1780010904.465:32679): avc: denied { module_load } for pid=9732 comm="syz.5.1117" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 152.621603][ T9742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.624365][ T9742] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.632678][ T9745] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1120'. [ 152.634949][ T9742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.641593][ T9742] wg1: left promiscuous mode [ 152.655312][ T9742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.659382][ T9742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.665189][ T9742] veth1_vlan: left promiscuous mode [ 152.678403][ T9742] veth0_vlan: left promiscuous mode [ 152.681381][ T9742] veth0_vlan: entered promiscuous mode [ 152.682468][ T9747] fuse: fd is not a fuse device [ 152.685006][ T9742] veth1_vlan: entered promiscuous mode [ 152.690088][ T9742] veth1_macvtap: left promiscuous mode [ 152.692462][ T9742] veth0_macvtap: left promiscuous mode [ 152.694776][ T9742] veth0_macvtap: entered promiscuous mode [ 152.697334][ T9742] veth1_macvtap: entered promiscuous mode [ 152.700523][ T9742] veth1_macvtap: entered allmulticast mode [ 152.706043][ T9742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.710547][ T9742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.713626][ T9742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.716510][ T9742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.720625][ T9742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.724329][ T9742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.728985][ T9742] veth3: left allmulticast mode [ 152.731195][ T9742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.734840][ T9742] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.737962][ T9742] vlan2: left allmulticast mode [ 152.739522][ T9742] macsec0: left allmulticast mode [ 152.741119][ T9742] veth1_macvtap: left allmulticast mode [ 152.745325][ T9742] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.749383][ T1167] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 152.772575][ T88] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.782047][ T88] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.788148][ T88] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.791380][ T88] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.825085][ T9751] FAULT_INJECTION: forcing a failure. [ 152.825085][ T9751] name failslab, interval 1, probability 0, space 0, times 0 [ 152.830276][ T272] bond1: (slave ip6gretap1): link status up again after 0 ms [ 152.833566][ T9751] CPU: 1 UID: 0 PID: 9751 Comm: syz.2.1122 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.833595][ T9751] Tainted: [L]=SOFTLOCKUP [ 152.833601][ T9751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.833612][ T9751] Call Trace: [ 152.833618][ T9751] [ 152.833625][ T9751] dump_stack_lvl+0x100/0x190 [ 152.833651][ T9751] should_fail_ex.cold+0x5/0xa [ 152.833676][ T9751] should_failslab+0xc2/0x120 [ 152.833697][ T9751] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 152.833727][ T9751] ? v9fs_init_fs_context+0x13d/0x590 [ 152.833758][ T9751] kstrdup+0x51/0xe0 [ 152.833778][ T9751] v9fs_init_fs_context+0x13d/0x590 [ 152.833798][ T9751] alloc_fs_context+0x60c/0xf40 [ 152.833832][ T9751] path_mount+0xdbd/0x23d0 [ 152.833863][ T9751] ? __pfx_path_mount+0x10/0x10 [ 152.833886][ T9751] ? lockdep_hardirqs_on+0x78/0x100 [ 152.833913][ T9751] ? putname+0xb1/0x110 [ 152.833936][ T9751] ? kmem_cache_free+0x127/0x6c0 [ 152.833969][ T9751] ? __x64_sys_mount+0x293/0x310 [ 152.833995][ T9751] __x64_sys_mount+0x293/0x310 [ 152.834022][ T9751] ? __pfx___x64_sys_mount+0x10/0x10 [ 152.834052][ T9751] ? rcu_is_watching+0x12/0xc0 [ 152.834081][ T9751] do_syscall_64+0x115/0x870 [ 152.834104][ T9751] ? clear_bhb_loop+0x40/0x90 [ 152.834126][ T9751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.834145][ T9751] RIP: 0033:0x7fc134f9ce59 [ 152.834161][ T9751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.834177][ T9751] RSP: 002b:00007fc135e70028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.834195][ T9751] RAX: ffffffffffffffda RBX: 00007fc135215fa0 RCX: 00007fc134f9ce59 [ 152.834206][ T9751] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 152.834217][ T9751] RBP: 00007fc135e70090 R08: 00002000000000c0 R09: 0000000000000000 [ 152.834227][ T9751] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 152.834237][ T9751] R13: 00007fc135216038 R14: 00007fc135215fa0 R15: 00007ffc42815d88 [ 152.834261][ T9751] [ 152.926338][ T272] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 153.037018][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 153.147071][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 153.206652][ T9765] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.249370][ T9768] fuse: Unknown parameter '#!fd' [ 153.256940][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 153.326566][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1129'. [ 153.329515][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1129'. [ 153.365011][ T9775] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 153.367060][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 153.414416][ T40] audit: type=1400 audit(1780010905.315:32680): avc: denied { view } for pid=9776 comm="syz.5.1131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 153.438920][ T9777] fuse: Bad value for 'fd' [ 153.442712][ T9777] dlm: non-version read from control device 0 [ 153.477454][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 153.599322][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 153.613951][ T9784] overlayfs: missing 'lowerdir' [ 153.617161][ T5747] Bluetooth: hci0: command 0x040f tx timeout [ 153.703198][ T9789] binder: 9788:9789 ioctl c0306201 200000000040 returned -22 [ 153.716931][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 153.763292][ T160] Bluetooth: hci4: Frame reassembly failed (-84) [ 153.769185][ T9791] netlink: 'syz.8.1136': attribute type 10 has an invalid length. [ 153.772412][ T9791] ipvlan0: entered allmulticast mode [ 153.774537][ T9791] veth0_vlan: entered allmulticast mode [ 153.780465][ T9791] team0: Device ipvlan0 failed to register rx_handler [ 153.787525][ T9791] Bluetooth: hci4: Frame reassembly failed (-90) [ 153.826933][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 153.835095][ T9793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9793 comm=syz.2.1137 [ 153.936876][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 154.046944][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 154.159781][ T272] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 154.288421][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 154.321554][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1145'. [ 154.325336][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1145'. [ 154.331584][ T9816] netlink: 'syz.5.1145': attribute type 7 has an invalid length. [ 154.334846][ T9816] netlink: 'syz.5.1145': attribute type 13 has an invalid length. [ 154.404309][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 154.519341][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 154.630048][ T272] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 154.778975][ T5739] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 154.984466][ T61] Bluetooth: hci5: sending frame failed (-49) [ 154.989608][ T5739] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 155.256870][ T5818] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 155.408776][ T5818] usb 11-1: config 0 has no interfaces? [ 155.413452][ T5818] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 155.418250][ T5818] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.418415][ T88] nci: nci_ntf_packet: unknown ntf opcode 0x104 [ 155.421586][ T5818] usb 11-1: Product: syz [ 155.421604][ T5818] usb 11-1: Manufacturer: syz [ 155.421618][ T5818] usb 11-1: SerialNumber: syz [ 155.424003][ T5818] usb 11-1: config 0 descriptor?? [ 155.643077][ T40] audit: type=1400 audit(1780010907.545:32681): avc: denied { getopt } for pid=9863 comm="syz.6.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.648103][ T7385] usb 11-1: USB disconnect, device number 2 [ 155.706863][ T5739] Bluetooth: hci0: command 0x040f tx timeout [ 155.778602][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 155.780406][ T5739] Bluetooth: hci4: command 0x1003 tx timeout [ 156.190361][ T9882] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 156.576995][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 156.724860][ T9903] syzkaller0: entered promiscuous mode [ 156.726993][ T9903] syzkaller0: entered allmulticast mode [ 157.597738][ T9918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1177'. [ 157.839404][ T9922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=9922 comm=syz.8.1178 [ 157.880396][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 157.880412][ T40] audit: type=1400 audit(1780010909.785:32683): avc: denied { write } for pid=9923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.924122][ T40] audit: type=1400 audit(1780010909.825:32684): avc: denied { write } for pid=9926 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.019896][ T40] audit: type=1400 audit(1780010909.925:32685): avc: denied { write } for pid=9929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.082506][ T40] audit: type=1400 audit(1780010909.985:32686): avc: denied { write } for pid=9932 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.330662][ T9870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.445176][ T40] audit: type=1804 audit(1780010910.345:32687): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1180" name="/newroot/181/file0/file1" dev="9p" ino=72877211 res=1 errno=0 [ 158.465669][ T9941] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1181'. [ 158.510389][ T9949] syzkaller0: entered promiscuous mode [ 158.512957][ T9949] syzkaller0: entered allmulticast mode [ 158.705505][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 158.709029][ T88] net_ratelimit: 37 callbacks suppressed [ 158.709155][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 158.710252][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1188'. [ 158.720403][ T9954] kvm_intel: kvm [9953]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1046 [ 158.738382][ T9954] kvm: kvm [9953]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1046 [ 158.778937][ T9968] overlayfs: overlapping lowerdir path [ 158.782492][ T9970] Bluetooth: MGMT ver 1.23 [ 158.803676][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 158.809678][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 158.821802][ T9964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.828837][ T9964] bond1: (slave bond0): Enslaving as a backup interface with a down link [ 158.847998][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 158.851418][ T9969] binder: 9967:9969 ioctl c0306201 200000000080 returned -14 [ 158.867788][ T58] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 158.871348][ T40] audit: type=1400 audit(1780010910.775:32688): avc: denied { write } for pid=9971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.909615][ T9976] syzkaller0: entered promiscuous mode [ 158.911928][ T9976] syzkaller0: entered allmulticast mode [ 158.953887][ T40] audit: type=1400 audit(1780010910.855:32689): avc: denied { write } for pid=9978 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.969091][ T160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 159.012151][ T9983] tipc: Enabled bearer , priority 0 [ 159.018249][ T40] audit: type=1326 audit(1780010910.915:32690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9981 comm="syz.5.1190" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f476c19ce59 code=0x0 [ 159.042640][ T9986] syzkaller0: entered promiscuous mode [ 159.044418][ T9986] syzkaller0: entered allmulticast mode [ 159.078485][ T272] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 159.108526][ T9976] tipc: Resetting bearer [ 159.126631][ T9976] tipc: Disabling bearer [ 159.206976][ T272] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 159.256110][ T9995] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1193'. [ 159.286985][ T9997] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 159.317176][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 159.342860][ T9999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1196'. [ 159.428937][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 159.468451][T10009] syzkaller0: entered promiscuous mode [ 159.470855][T10009] syzkaller0: entered allmulticast mode [ 159.475421][ T40] audit: type=1400 audit(1780010911.375:32691): avc: denied { write } for pid=10007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.544351][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 159.551616][ T40] audit: type=1400 audit(1780010911.455:32692): avc: denied { write } for pid=10015 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.657004][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 159.717627][T10031] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 159.741788][T10031] bond7: Unable to set up delay as MII monitoring is disabled [ 159.746275][T10031] bond7 (unregistering): Released all slaves [ 159.880341][T10041] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 160.136970][ T5840] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 160.292573][T10055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56319 sclass=netlink_route_socket pid=10055 comm=syz.5.1212 [ 160.307051][ T5840] usb 7-1: Using ep0 maxpacket: 8 [ 160.312827][ T5840] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 160.316185][ T5840] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.326882][ T5840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.331836][ T5840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.335915][ T5840] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.344619][ T5840] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.352878][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.559333][ T5840] usb 7-1: GET_CAPABILITIES returned 0 [ 160.562299][ T5840] usbtmc 7-1:16.0: can't read capabilities [ 161.119574][T10071] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 161.146438][ T5840] usb 7-1: USB disconnect, device number 14 [ 161.148344][T10074] FAULT_INJECTION: forcing a failure. [ 161.148344][T10074] name failslab, interval 1, probability 0, space 0, times 0 [ 161.153604][T10074] CPU: 3 UID: 0 PID: 10074 Comm: syz.8.1216 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.153632][T10074] Tainted: [L]=SOFTLOCKUP [ 161.153638][T10074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.153648][T10074] Call Trace: [ 161.153654][T10074] [ 161.153662][T10074] dump_stack_lvl+0x100/0x190 [ 161.153696][T10074] should_fail_ex.cold+0x5/0xa [ 161.153720][T10074] should_failslab+0xc2/0x120 [ 161.153740][T10074] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 161.153769][T10074] ? v9fs_init_fs_context+0x17f/0x590 [ 161.153798][T10074] kstrdup+0x51/0xe0 [ 161.153816][T10074] v9fs_init_fs_context+0x17f/0x590 [ 161.153835][T10074] alloc_fs_context+0x60c/0xf40 [ 161.153867][T10074] path_mount+0xdbd/0x23d0 [ 161.153897][T10074] ? __pfx_path_mount+0x10/0x10 [ 161.153920][T10074] ? lockdep_hardirqs_on+0x78/0x100 [ 161.153953][T10074] ? putname+0xb1/0x110 [ 161.153973][T10074] ? kmem_cache_free+0x127/0x6c0 [ 161.154004][T10074] ? __x64_sys_mount+0x293/0x310 [ 161.154027][T10074] __x64_sys_mount+0x293/0x310 [ 161.154052][T10074] ? __pfx___x64_sys_mount+0x10/0x10 [ 161.154077][T10074] ? rcu_is_watching+0x12/0xc0 [ 161.154104][T10074] do_syscall_64+0x115/0x870 [ 161.154124][T10074] ? clear_bhb_loop+0x40/0x90 [ 161.154145][T10074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.154167][T10074] RIP: 0033:0x7fa5c639ce59 [ 161.154183][T10074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.154198][T10074] RSP: 002b:00007fa5c71af028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.154215][T10074] RAX: ffffffffffffffda RBX: 00007fa5c6615fa0 RCX: 00007fa5c639ce59 [ 161.154226][T10074] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 161.154236][T10074] RBP: 00007fa5c71af090 R08: 00002000000000c0 R09: 0000000000000000 [ 161.154247][T10074] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 161.154256][T10074] R13: 00007fa5c6616038 R14: 00007fa5c6615fa0 R15: 00007ffd5a26bd28 [ 161.154279][T10074] [ 161.304970][T10080] fuse: Bad value for 'user_id' [ 161.307357][T10080] fuse: Bad value for 'user_id' [ 161.331154][T10080] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1219'. [ 161.590341][T10090] kvm: kvm [10089]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6522 [ 161.593245][T10090] kvm: kvm [10089]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x6523 [ 161.611871][T10090] kvm: kvm [10089]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x9b94 [ 161.614980][T10090] kvm: kvm [10089]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x9b95 [ 161.686146][T10090] kvm: kvm [10089]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa44c [ 161.692533][T10090] kvm: kvm [10089]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0xa44d [ 161.698722][T10103] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 161.709340][T10105] [U] =vw7n1Onn؀[ȟb?aI:7PpвR14 [ 161.712781][T10105] [U] Lʥr֣Ě$z{kR-g5TM`d8rM)c țTZ01߯$=ie)bZsg"6IaCNy*.[J [ 161.714715][T10090] kvm: kvm [10089]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x154c [ 161.722903][T10090] kvm: kvm [10089]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x154d [ 161.723582][T10105] [U] 5$\гylMz')GW೾ J$F_4`~L.2tB]@iARoht [ 161.731882][T10104] [U] (E*.F|y=^V3(iCry [ 161.742889][T10107] binder: 10106:10107 ioctl c0306201 200000000040 returned -22 [ 161.754002][T10090] kvm: kvm [10089]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xb16c [ 161.776252][T10090] kvm_intel: kvm [10089]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x3216 [ 161.832099][T10116] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1231'. [ 161.927156][T10118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1232'. [ 162.507901][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1239'. [ 163.372564][T10164] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 163.398576][ T160] nci: nci_ntf_packet: unknown ntf opcode 0x104 [ 163.740030][ T160] net_ratelimit: 35 callbacks suppressed [ 163.740052][ T160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 163.788837][T10183] bond1: (slave bond0): Releasing backup interface [ 163.810758][T10183] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.846950][ T160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 163.874571][T10187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1250'. [ 163.915548][T10189] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 163.919942][T10189] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 163.956929][ T160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 164.013658][T10196] Invalid logical block size (253) [ 164.052568][T10197] comedi comedi3: no devices specified [ 164.066896][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 164.186996][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 164.297636][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 164.407087][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 164.516998][ T160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 164.627041][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 164.747105][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 165.580346][T10225] netlink: 'syz.5.1261': attribute type 1 has an invalid length. [ 165.600317][T10225] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.624041][T10225] bond2: (slave veth5): Enslaving as an active interface with a down link [ 165.630912][T10225] trusted_key: encrypted_key: key trusted:syz not found [ 165.633238][T10225] bond0: (slave dummy0): Releasing backup interface [ 165.640550][T10225] bond2: (slave dummy0): making interface the new active one [ 165.643549][T10225] dummy0: entered promiscuous mode [ 165.645637][T10225] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 166.326619][T10166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.387319][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 166.410733][T10246] syzkaller0: entered promiscuous mode [ 166.413495][T10246] syzkaller0: entered allmulticast mode [ 166.420226][T10248] syzkaller0: entered promiscuous mode [ 166.422455][T10248] syzkaller0: entered allmulticast mode [ 166.545421][T10253] tipc: Enabled bearer , priority 0 [ 166.620449][T10248] tipc: Resetting bearer [ 166.636720][T10248] tipc: Disabling bearer [ 166.766355][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 166.766370][ T40] audit: type=1804 audit(1780010918.665:32696): pid=10262 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.1273" name="/newroot/47/file0/file1" dev="9p" ino=72877211 res=1 errno=0 [ 166.917206][ T40] audit: type=1326 audit(1780010918.815:32697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.5.1275" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f476c19ce59 code=0x0 [ 167.028115][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1277'. [ 167.031608][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1277'. [ 167.078664][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1277'. [ 167.081694][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1277'. [ 167.093314][T10275] bridge0: port 3(bond0) entered disabled state [ 167.101276][T10275] bond0: left allmulticast mode [ 167.103113][T10275] bond_slave_0: left allmulticast mode [ 167.105230][T10275] bond_slave_1: left allmulticast mode [ 167.107838][T10275] bond0: left promiscuous mode [ 167.109738][T10275] bond_slave_0: left promiscuous mode [ 167.111632][T10275] bond_slave_1: left promiscuous mode [ 167.117675][T10275] bridge0: port 3(bond0) entered disabled state [ 167.180929][T10281] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1280'. [ 167.253390][T10287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1283'. [ 167.796218][T10327] veth0_vlan: entered allmulticast mode [ 167.850027][T10329] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1294'. [ 167.929416][T10331] syzkaller0: entered promiscuous mode [ 167.931182][T10331] syzkaller0: entered allmulticast mode [ 167.962686][T10333] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1296'. [ 168.074803][T10339] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 168.142288][ T40] audit: type=1804 audit(1780010920.045:32698): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1300" name="/newroot/329/file0/file1" dev="9p" ino=72877211 res=1 errno=0 [ 168.240017][T10346] 9pnet_virtio: no channels available for device syz [ 168.355645][T10351] netlink: 59880 bytes leftover after parsing attributes in process `syz.8.1303'. [ 168.379961][T10353] binder: 10352:10353 ioctl c0306201 200000000040 returned -22 [ 168.382699][T10353] binder: 10352:10353 ioctl 5318 2000000004c0 returned -22 [ 168.522079][T10357] syzkaller0: entered promiscuous mode [ 168.524436][T10357] syzkaller0: entered allmulticast mode [ 168.560801][T10359] Cache volume key already in use (9p,syz,) [ 168.571128][ T40] audit: type=1804 audit(1780010920.475:32699): pid=10359 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.1315" name="/newroot/171/file0/file1" dev="9p" ino=72877211 res=1 errno=0 [ 168.797056][ T1213] net_ratelimit: 36 callbacks suppressed [ 168.797080][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 168.907135][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 168.987787][ T40] audit: type=1400 audit(1780010920.885:32700): avc: denied { read } for pid=10371 comm="syz.6.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 169.017337][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 169.018782][ T9582] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 169.136951][ T272] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 169.176909][ T9582] usb 7-1: Using ep0 maxpacket: 32 [ 169.182111][ T9582] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 169.184868][ T9582] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 169.188589][ T9582] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 169.193680][ T9582] usb 7-1: config 0 interface 0 has no altsetting 0 [ 169.197987][ T9582] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 169.201930][ T9582] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 169.205487][ T9582] usb 7-1: Product: syz [ 169.207047][ T9582] usb 7-1: Manufacturer: syz [ 169.208548][ T9582] usb 7-1: SerialNumber: syz [ 169.211584][ T9582] usb 7-1: config 0 descriptor?? [ 169.217927][ T9582] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 169.225455][ T9582] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 169.256975][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 169.366956][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 169.438777][ T9582] usb 7-1: USB disconnect, device number 15 [ 169.449725][ T9582] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 169.478730][ T272] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 169.588775][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 169.706940][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 169.814868][T10397] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 169.817143][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 169.822338][T10397] FAULT_INJECTION: forcing a failure. [ 169.822338][T10397] name failslab, interval 1, probability 0, space 0, times 0 [ 169.829829][T10397] CPU: 1 UID: 0 PID: 10397 Comm: syz.8.1320 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.829859][T10397] Tainted: [L]=SOFTLOCKUP [ 169.829866][T10397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.829877][T10397] Call Trace: [ 169.829884][T10397] [ 169.829892][T10397] dump_stack_lvl+0x100/0x190 [ 169.829927][T10397] should_fail_ex.cold+0x5/0xa [ 169.829952][T10397] should_failslab+0xc2/0x120 [ 169.829974][T10397] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 169.830004][T10397] ? __d_alloc+0x34/0xa40 [ 169.830037][T10397] __d_alloc+0x34/0xa40 [ 169.830062][T10397] ? register_lock_class+0x40/0x560 [ 169.830088][T10397] d_alloc_parallel+0x111/0x14e0 [ 169.830111][T10397] ? find_held_lock+0x2b/0x80 [ 169.830129][T10397] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 169.830162][T10397] ? __pfx_d_alloc_parallel+0x10/0x10 [ 169.830186][T10397] ? lockdep_init_map_type+0x5c/0x250 [ 169.830211][T10397] ? lockdep_init_map_type+0x5c/0x250 [ 169.830238][T10397] __lookup_slow+0x193/0x460 [ 169.830266][T10397] ? __pfx___lookup_slow+0x10/0x10 [ 169.830298][T10397] ? irq_entries_start+0xd0/0xcb0 [ 169.830324][T10397] ? irq_entries_start+0xd0/0xcb0 [ 169.830350][T10397] lookup_slow+0x50/0x70 [ 169.830382][T10397] lookup_one_unlocked+0xb8/0xd0 [ 169.830407][T10397] ovl_lookup_single+0x3df/0x1280 [ 169.830439][T10397] ? __pfx_ovl_lookup_single+0x10/0x10 [ 169.830462][T10397] ? unwind_get_return_address+0x59/0xa0 [ 169.830490][T10397] ? arch_stack_walk+0xa6/0xf0 [ 169.830519][T10397] ovl_lookup_layer+0x3f1/0x4b0 [ 169.830541][T10397] ? find_held_lock+0x2b/0x80 [ 169.830557][T10397] ? xa_load+0x149/0x2c0 [ 169.830627][T10397] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 169.830656][T10397] ovl_lookup_layers+0x355/0x2ac0 [ 169.830687][T10397] ? __lock_acquire+0x4a5/0x2630 [ 169.830710][T10397] ? memcg_list_lru_alloc+0x116/0x740 [ 169.830742][T10397] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 169.830783][T10397] ovl_lookup+0x4a8/0x6b0 [ 169.830810][T10397] ? __pfx_ovl_lookup+0x10/0x10 [ 169.830831][T10397] ? rcu_is_watching+0x12/0xc0 [ 169.830862][T10397] ? do_raw_spin_lock+0x128/0x260 [ 169.830893][T10397] ? do_raw_spin_unlock+0x145/0x1e0 [ 169.830919][T10397] ? _raw_spin_unlock+0x28/0x50 [ 169.830945][T10397] lookup_one_qstr_excl+0x1cd/0x250 [ 169.830971][T10397] ? mnt_want_write+0x161/0x450 [ 169.830995][T10397] filename_create+0x1cf/0x400 [ 169.831017][T10397] ? __pfx_filename_create+0x10/0x10 [ 169.831039][T10397] ? find_held_lock+0x2b/0x80 [ 169.831057][T10397] filename_mkdirat+0xb9/0x5e0 [ 169.831085][T10397] ? __pfx_filename_mkdirat+0x10/0x10 [ 169.831109][T10397] ? strncpy_from_user+0x19d/0x2d0 [ 169.831134][T10397] ? do_getname+0x191/0x390 [ 169.831163][T10397] __x64_sys_mkdirat+0x89/0xc0 [ 169.831189][T10397] do_syscall_64+0x115/0x870 [ 169.831211][T10397] ? clear_bhb_loop+0x40/0x90 [ 169.831234][T10397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.831253][T10397] RIP: 0033:0x7fa5c639ce59 [ 169.831270][T10397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.831287][T10397] RSP: 002b:00007fa5c71af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 169.831305][T10397] RAX: ffffffffffffffda RBX: 00007fa5c6615fa0 RCX: 00007fa5c639ce59 [ 169.831318][T10397] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 169.831329][T10397] RBP: 00007fa5c71af090 R08: 0000000000000000 R09: 0000000000000000 [ 169.831338][T10397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.831350][T10397] R13: 00007fa5c6616038 R14: 00007fa5c6615fa0 R15: 00007ffd5a26bd28 [ 169.831375][T10397] [ 169.863405][T10401] syzkaller0: entered promiscuous mode [ 169.994168][T10401] syzkaller0: entered allmulticast mode [ 170.083149][ T40] audit: type=1400 audit(1780010921.985:32701): avc: denied { create } for pid=10407 comm="syz.8.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 170.122843][T10413] Invalid logical block size (254) [ 170.162767][T10417] syzkaller0: entered allmulticast mode [ 170.454578][T10433] syzkaller0: entered promiscuous mode [ 170.458300][T10433] syzkaller0: entered allmulticast mode [ 170.594403][T10443] ALSA: mixer_oss: invalid OSS volume 'cCaPture'' [ 170.691062][T10450] syzkaller0: entered promiscuous mode [ 170.693390][T10450] syzkaller0: entered allmulticast mode [ 171.048055][ T40] audit: type=1400 audit(1780010922.945:32702): avc: denied { write } for pid=10465 comm="syz.6.1346" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 171.066882][ T7385] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 171.122610][T10461] kvm_intel: kvm [10460]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xffff000000009d25 [ 171.142435][T10461] kvm_pr_unimpl_wrmsr: 7 callbacks suppressed [ 171.142458][T10461] kvm: kvm [10460]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xffff00000000cf20 [ 171.220743][T10475] netlink: 'syz.8.1349': attribute type 1 has an invalid length. [ 171.234281][ T7385] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.239678][ T7385] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 111, setting to 64 [ 171.244219][ T7385] usb 10-1: config 0 interface 0 has no altsetting 0 [ 171.249481][ T7385] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 171.252672][ T7385] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 171.255980][ T7385] usb 10-1: Product: syz [ 171.257826][ T7385] usb 10-1: Manufacturer: syz [ 171.259818][ T7385] usb 10-1: SerialNumber: syz [ 171.265732][ T7385] usb 10-1: config 0 descriptor?? [ 171.269300][T10458] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 171.277692][ T7385] usb 10-1: selecting invalid altsetting 0 [ 171.475450][T10458] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 171.478217][T10458] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 171.481795][T10458] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 171.485298][T10458] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 171.491130][T10458] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 171.494499][T10458] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 171.500199][T10458] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 171.505033][T10458] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 171.508025][T10458] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 171.511430][T10458] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 171.513676][T10483] __nla_validate_parse: 3 callbacks suppressed [ 171.513689][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 171.514471][T10458] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 171.516714][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1351'. [ 171.520006][T10458] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 171.529685][T10458] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 171.533713][ T8872] usb 10-1: USB disconnect, device number 6 [ 171.536866][T10458] usb 10-1: cannot submit urb 0, error -19: no device [ 171.581041][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 171.584483][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'. [ 171.589254][T10483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.594880][T10483] bond1: (slave bond0): Enslaving as a backup interface with a down link [ 171.620140][ T40] audit: type=1400 audit(1780010923.525:32703): avc: denied { write } for pid=10487 comm="syz.2.1352" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 171.620685][T10488] ipt_ECN: cannot use operation on non-tcp rule [ 171.684493][T10488] could not allocate digest TFM handle cryptd(blake2b-160) [ 171.736986][T10495] netlink: 'syz.2.1353': attribute type 21 has an invalid length. [ 171.739470][T10495] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.744688][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1353'. [ 171.775141][T10497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1354'. [ 172.082179][ T40] audit: type=1400 audit(1780010923.985:32704): avc: denied { ioctl } for pid=10502 comm="syz.5.1357" path="socket:[38683]" dev="sockfs" ino=38683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 172.090748][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1357'. [ 172.095028][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1357'. [ 172.096258][T10503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.106581][T10503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.272864][T10512] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1359'. [ 172.375388][ T40] audit: type=1400 audit(1780010924.275:32705): avc: denied { setopt } for pid=10518 comm="syz.8.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 172.431298][T10527] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 172.583292][T10545] autofs4:pid:10545:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 172.898574][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1374'. [ 172.996246][T10567] FAULT_INJECTION: forcing a failure. [ 172.996246][T10567] name failslab, interval 1, probability 0, space 0, times 0 [ 173.001843][T10567] CPU: 3 UID: 0 PID: 10567 Comm: syz.6.1375 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.001876][T10567] Tainted: [L]=SOFTLOCKUP [ 173.001884][T10567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.001896][T10567] Call Trace: [ 173.001915][T10567] [ 173.001925][T10567] dump_stack_lvl+0x100/0x190 [ 173.001960][T10567] should_fail_ex.cold+0x5/0xa [ 173.001991][T10567] should_failslab+0xc2/0x120 [ 173.002015][T10567] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 173.002046][T10567] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 173.002083][T10567] kmemdup_nul+0x49/0xd0 [ 173.002107][T10567] vfs_parse_fs_qstr+0x112/0x1c0 [ 173.002138][T10567] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 173.002175][T10567] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 173.002207][T10567] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 173.002237][T10567] vfs_parse_monolithic_sep+0x195/0x210 [ 173.002271][T10567] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 173.002303][T10567] ? alloc_fs_context+0x65a/0xf40 [ 173.002338][T10567] path_mount+0x77f/0x23d0 [ 173.002371][T10567] ? __pfx_path_mount+0x10/0x10 [ 173.002399][T10567] ? lockdep_hardirqs_on+0x78/0x100 [ 173.002440][T10567] ? putname+0xb1/0x110 [ 173.002464][T10567] ? kmem_cache_free+0x127/0x6c0 [ 173.002502][T10567] ? __x64_sys_mount+0x293/0x310 [ 173.002526][T10567] __x64_sys_mount+0x293/0x310 [ 173.002557][T10567] ? __pfx___x64_sys_mount+0x10/0x10 [ 173.002590][T10567] ? rcu_is_watching+0x12/0xc0 [ 173.002623][T10567] do_syscall_64+0x115/0x870 [ 173.002648][T10567] ? clear_bhb_loop+0x40/0x90 [ 173.002673][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.002694][T10567] RIP: 0033:0x7f3bd799ce59 [ 173.002710][T10567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.002730][T10567] RSP: 002b:00007f3bd87a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.002750][T10567] RAX: ffffffffffffffda RBX: 00007f3bd7c15fa0 RCX: 00007f3bd799ce59 [ 173.002764][T10567] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 173.002777][T10567] RBP: 00007f3bd87a4090 R08: 00002000000000c0 R09: 0000000000000000 [ 173.002795][T10567] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 173.002807][T10567] R13: 00007f3bd7c16038 R14: 00007f3bd7c15fa0 R15: 00007fff2429d688 [ 173.002835][T10567] [ 173.285249][ T40] audit: type=1804 audit(1780010925.185:32706): pid=10579 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1379" name="/newroot/351/file0/file1" dev="9p" ino=72877211 res=1 errno=0 [ 173.406432][T10583] smb3: Unknown parameter 'gMv1\wZu.y&v)\D< iGgtްC^ŇTcA"*0x֔8AӤ#rB) R_+F@^#r_nj' [ 173.857777][ T1213] net_ratelimit: 34 callbacks suppressed [ 173.857808][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 173.976888][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 174.086961][ T160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 174.110879][T10588] Invalid logical block size (160) [ 174.192730][T10600] fuse: Bad value for 'user_id' [ 174.194888][T10600] fuse: Bad value for 'user_id' [ 174.197284][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 174.316870][ T272] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 174.331838][T10611] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 174.347044][T10611] FAULT_INJECTION: forcing a failure. [ 174.347044][T10611] name failslab, interval 1, probability 0, space 0, times 0 [ 174.354149][T10611] CPU: 2 UID: 0 PID: 10611 Comm: syz.8.1390 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.354183][T10611] Tainted: [L]=SOFTLOCKUP [ 174.354189][T10611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.354201][T10611] Call Trace: [ 174.354224][T10611] [ 174.354232][T10611] dump_stack_lvl+0x100/0x190 [ 174.354260][T10611] should_fail_ex.cold+0x5/0xa [ 174.354282][T10611] ? ovl_lookup_layers+0x13ff/0x2ac0 [ 174.354316][T10611] should_failslab+0xc2/0x120 [ 174.354337][T10611] __kmalloc_noprof+0xe0/0x850 [ 174.354377][T10611] ovl_lookup_layers+0x13ff/0x2ac0 [ 174.354406][T10611] ? __lock_acquire+0x4a5/0x2630 [ 174.354436][T10611] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 174.354465][T10611] ? find_held_lock+0x2b/0x80 [ 174.354482][T10611] ? rcu_read_unlock+0x17/0x60 [ 174.354505][T10611] ? rcu_read_unlock+0x17/0x60 [ 174.354535][T10611] ovl_lookup+0x4a8/0x6b0 [ 174.354562][T10611] ? __pfx_ovl_lookup+0x10/0x10 [ 174.354584][T10611] ? rcu_is_watching+0x12/0xc0 [ 174.354614][T10611] ? do_raw_spin_lock+0x128/0x260 [ 174.354645][T10611] ? do_raw_spin_unlock+0x145/0x1e0 [ 174.354672][T10611] ? _raw_spin_unlock+0x28/0x50 [ 174.354697][T10611] lookup_one_qstr_excl+0x1cd/0x250 [ 174.354722][T10611] ? mnt_want_write+0x161/0x450 [ 174.354745][T10611] filename_create+0x1cf/0x400 [ 174.354766][T10611] ? __pfx_filename_create+0x10/0x10 [ 174.354791][T10611] ? find_held_lock+0x2b/0x80 [ 174.354813][T10611] filename_mkdirat+0xb9/0x5e0 [ 174.354843][T10611] ? __pfx_filename_mkdirat+0x10/0x10 [ 174.354869][T10611] ? strncpy_from_user+0x19d/0x2d0 [ 174.354896][T10611] ? do_getname+0x191/0x390 [ 174.354925][T10611] __x64_sys_mkdirat+0x89/0xc0 [ 174.354951][T10611] do_syscall_64+0x115/0x870 [ 174.354972][T10611] ? clear_bhb_loop+0x40/0x90 [ 174.354994][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.355011][T10611] RIP: 0033:0x7fa5c639ce59 [ 174.355026][T10611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.355044][T10611] RSP: 002b:00007fa5c71af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 174.355060][T10611] RAX: ffffffffffffffda RBX: 00007fa5c6615fa0 RCX: 00007fa5c639ce59 [ 174.355072][T10611] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 174.355081][T10611] RBP: 00007fa5c71af090 R08: 0000000000000000 R09: 0000000000000000 [ 174.355093][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.355103][T10611] R13: 00007fa5c6616038 R14: 00007fa5c6615fa0 R15: 00007ffd5a26bd28 [ 174.355126][T10611] [ 174.467560][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 174.578566][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 174.633585][ T40] audit: type=1400 audit(1780010926.535:32707): avc: denied { mount } for pid=10618 comm="syz.5.1393" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 174.686977][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 174.802424][T10624] autofs4:pid:10624:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 174.807152][ T272] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 174.917043][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 175.087912][T10626] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 176.148215][T10638] Invalid logical block size (768) [ 176.226170][T10640] Process accounting resumed [ 176.278247][T10637] kvm: kvm [10636]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6522 [ 176.282130][T10637] kvm: kvm [10636]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x6523 [ 176.307357][T10637] kvm: kvm [10636]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa338 [ 176.311402][T10637] kvm: kvm [10636]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0xa339 [ 176.331378][T10637] kvm_intel: kvm [10636]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 176.350880][T10637] kvm_intel: kvm [10636]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 176.374562][T10637] kvm_intel: kvm [10636]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 176.390036][T10637] kvm_intel: kvm [10636]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 176.406633][T10637] kvm_intel: kvm [10636]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 176.427382][T10637] kvm_intel: kvm [10636]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 176.444375][T10637] kvm_intel: kvm [10636]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 176.461243][T10637] kvm_intel: kvm [10636]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 176.478310][T10637] kvm_intel: kvm [10636]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 176.505130][T10637] kvm_intel: kvm [10636]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 176.897588][ T12] dummy0: left promiscuous mode [ 176.998029][T10594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.096504][T10655] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1406'. [ 177.100086][T10654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1404'. [ 177.140218][T10651] kvm: kvm [10650]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 177.166668][T10651] kvm: kvm [10650]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x525f [ 177.183836][T10651] kvm: kvm [10650]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x41b5 [ 177.213845][T10651] kvm: kvm [10650]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100004000 [ 177.219002][T10651] kvm: kvm [10650]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 177.231272][T10651] kvm: kvm [10650]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x2900 [ 177.510131][T10671] netlink: 'syz.8.1409': attribute type 1 has an invalid length. [ 177.552356][T10671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.568635][T10673] bond1: (slave geneve2): making interface the new active one [ 177.588317][T10673] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 177.672456][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1411'. [ 177.676235][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1411'. [ 177.742305][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1411'. [ 177.745231][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1411'. [ 177.880722][T10687] GUP no longer grows the stack in syz.6.1410 (10687): 200000004000-20000000a000 (200000002000) [ 177.885749][T10687] CPU: 0 UID: 0 PID: 10687 Comm: syz.6.1410 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.885769][T10687] Tainted: [L]=SOFTLOCKUP [ 177.885773][T10687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.885780][T10687] Call Trace: [ 177.885785][T10687] [ 177.885791][T10687] dump_stack_lvl+0x100/0x190 [ 177.885817][T10687] gup_vma_lookup.cold+0x83/0x96 [ 177.885834][T10687] __get_user_pages+0x241/0x32a0 [ 177.885852][T10687] ? find_held_lock+0x2b/0x80 [ 177.885863][T10687] ? mtree_load+0x311/0xa90 [ 177.885884][T10687] ? __pfx___get_user_pages+0x10/0x10 [ 177.885900][T10687] get_user_pages_remote+0x3d2/0xb10 [ 177.885914][T10687] ? mas_root_expand+0x670/0x750 [ 177.885931][T10687] ? __pfx_get_user_pages_remote+0x10/0x10 [ 177.885945][T10687] ? __access_remote_vm+0x755/0x890 [ 177.885958][T10687] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.885974][T10687] __access_remote_vm+0x3bb/0x890 [ 177.885989][T10687] ? do_raw_spin_lock+0x128/0x260 [ 177.886006][T10687] ? __pfx___access_remote_vm+0x10/0x10 [ 177.886017][T10687] ? proc_pid_cmdline_read+0x31b/0x8c0 [ 177.886032][T10687] proc_pid_cmdline_read+0x4f2/0x8c0 [ 177.886045][T10687] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 177.886059][T10687] ? rw_verify_area+0xce/0x6d0 [ 177.886070][T10687] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 177.886081][T10687] vfs_readv+0x5d8/0x8d0 [ 177.886096][T10687] ? __pfx_vfs_readv+0x10/0x10 [ 177.886115][T10687] ? __fget_files+0x21f/0x3d0 [ 177.886133][T10687] ? do_preadv+0x1ac/0x270 [ 177.886142][T10687] do_preadv+0x1ac/0x270 [ 177.886153][T10687] ? __pfx_do_preadv+0x10/0x10 [ 177.886165][T10687] ? rcu_is_watching+0x12/0xc0 [ 177.886182][T10687] do_syscall_64+0x115/0x870 [ 177.886196][T10687] ? clear_bhb_loop+0x40/0x90 [ 177.886209][T10687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.886220][T10687] RIP: 0033:0x7f3bd799ce59 [ 177.886235][T10687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.886245][T10687] RSP: 002b:00007f3bd57d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 177.886257][T10687] RAX: ffffffffffffffda RBX: 00007f3bd7c16270 RCX: 00007f3bd799ce59 [ 177.886264][T10687] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000006 [ 177.886270][T10687] RBP: 00007f3bd7a32d6f R08: 00000000fffffff9 R09: 0000000000000000 [ 177.886276][T10687] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 177.886282][T10687] R13: 00007f3bd7c16308 R14: 00007f3bd7c16270 R15: 00007fff2429d688 [ 177.886297][T10687] [ 178.336961][ T6087] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 178.500342][ T6087] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.505018][ T6087] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 111, setting to 64 [ 178.509535][ T6087] usb 10-1: config 0 interface 0 has no altsetting 0 [ 178.514274][ T6087] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 178.518113][ T6087] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 178.521340][ T6087] usb 10-1: Product: syz [ 178.522962][ T6087] usb 10-1: Manufacturer: syz [ 178.524730][ T6087] usb 10-1: SerialNumber: syz [ 178.531696][ T6087] usb 10-1: config 0 descriptor?? [ 178.534397][T10689] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 178.540977][ T6087] usb 10-1: selecting invalid altsetting 0 [ 178.741203][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.744588][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.751781][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.755021][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.758688][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.762201][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.768754][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.774882][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.778899][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.782216][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.785410][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.789216][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.793494][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.797597][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.801045][T10689] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 178.802150][ T9582] usb 10-1: USB disconnect, device number 7 [ 178.804761][T10689] usb 10-1: cannot submit urb 0, error -19: no device [ 178.810326][T10689] usb 10-1: cannot submit urb 0, error -19: no device [ 178.897182][ T1167] net_ratelimit: 33 callbacks suppressed [ 178.897197][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 179.008661][ T160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 179.126939][ T160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 179.170830][T10711] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 179.224897][T10715] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1422'. [ 179.236970][ T272] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 179.356657][T10727] sctp: [Deprecated]: syz.8.1425 (pid 10727) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.356657][T10727] Use struct sctp_sack_info instead [ 179.357180][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 179.379854][ T40] audit: type=1400 audit(1780010931.285:32708): avc: denied { execute } for pid=10726 comm="syz.8.1425" name="file0" dev="ramfs" ino=41184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 179.391902][ T40] audit: type=1400 audit(1780010931.285:32709): avc: denied { nosuid_transition } for pid=10726 comm="syz.8.1425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 179.401416][ T40] audit: type=1400 audit(1780010931.285:32710): avc: denied { transition } for pid=10726 comm="syz.8.1425" path="/file0" dev="ramfs" ino=41184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 179.406434][T10729] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 179.411099][ T40] audit: type=1400 audit(1780010931.285:32711): avc: denied { entrypoint } for pid=10726 comm="syz.8.1425" path="/file0" dev="ramfs" ino=41184 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 179.416616][T10729] FAULT_INJECTION: forcing a failure. [ 179.416616][T10729] name failslab, interval 1, probability 0, space 0, times 0 [ 179.424790][ T40] audit: type=1400 audit(1780010931.285:32712): avc: denied { noatsecure } for pid=10726 comm="syz.8.1425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 179.432759][T10729] CPU: 2 UID: 0 PID: 10729 Comm: syz.5.1426 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.432792][T10729] Tainted: [L]=SOFTLOCKUP [ 179.432800][T10729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.432812][T10729] Call Trace: [ 179.432819][T10729] [ 179.432828][T10729] dump_stack_lvl+0x100/0x190 [ 179.432869][T10729] should_fail_ex.cold+0x5/0xa [ 179.432894][T10729] should_failslab+0xc2/0x120 [ 179.432919][T10729] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 179.432948][T10729] ? __d_alloc+0x34/0xa40 [ 179.432982][T10729] __d_alloc+0x34/0xa40 [ 179.433012][T10729] d_alloc_parallel+0x111/0x14e0 [ 179.433037][T10729] ? look_up_lock_class+0x64/0x120 [ 179.433076][T10729] ? register_lock_class+0x40/0x560 [ 179.433103][T10729] ? __pfx_d_alloc_parallel+0x10/0x10 [ 179.433129][T10729] ? lockdep_init_map_type+0x5c/0x250 [ 179.433151][T10729] ? lockdep_init_map_type+0x5c/0x250 [ 179.433177][T10729] __lookup_slow+0x193/0x460 [ 179.433207][T10729] ? __pfx___lookup_slow+0x10/0x10 [ 179.433237][T10729] ? irq_entries_start+0xd0/0xcb0 [ 179.433262][T10729] ? irq_entries_start+0xd0/0xcb0 [ 179.433288][T10729] lookup_slow+0x50/0x70 [ 179.433319][T10729] lookup_one_unlocked+0xb8/0xd0 [ 179.433344][T10729] ovl_lookup_single+0x3df/0x1280 [ 179.433382][T10729] ? __pfx_ovl_lookup_single+0x10/0x10 [ 179.433413][T10729] ovl_lookup_layer+0x3f1/0x4b0 [ 179.433442][T10729] ? rcu_is_watching+0x12/0xc0 [ 179.433468][T10729] ? trace_kmalloc+0xe3/0x110 [ 179.433490][T10729] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 179.433514][T10729] ? __kmalloc_noprof+0x320/0x850 [ 179.433550][T10729] ovl_lookup_layers+0x16d4/0x2ac0 [ 179.433590][T10729] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 179.433635][T10729] ovl_lookup+0x4a8/0x6b0 [ 179.433666][T10729] ? __pfx_ovl_lookup+0x10/0x10 [ 179.433690][T10729] ? rcu_is_watching+0x12/0xc0 [ 179.433720][T10729] ? do_raw_spin_lock+0x128/0x260 [ 179.433754][T10729] ? do_raw_spin_unlock+0x145/0x1e0 [ 179.433781][T10729] ? _raw_spin_unlock+0x28/0x50 [ 179.433806][T10729] lookup_one_qstr_excl+0x1cd/0x250 [ 179.433836][T10729] ? mnt_want_write+0x161/0x450 [ 179.433862][T10729] filename_create+0x1cf/0x400 [ 179.433886][T10729] ? __pfx_filename_create+0x10/0x10 [ 179.433914][T10729] ? find_held_lock+0x2b/0x80 [ 179.433936][T10729] filename_mkdirat+0xb9/0x5e0 [ 179.433966][T10729] ? __pfx_filename_mkdirat+0x10/0x10 [ 179.433992][T10729] ? strncpy_from_user+0x19d/0x2d0 [ 179.434023][T10729] ? do_getname+0x191/0x390 [ 179.434056][T10729] __x64_sys_mkdirat+0x89/0xc0 [ 179.434083][T10729] do_syscall_64+0x115/0x870 [ 179.434109][T10729] ? clear_bhb_loop+0x40/0x90 [ 179.434133][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.434153][T10729] RIP: 0033:0x7f476c19ce59 [ 179.434171][T10729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.434190][T10729] RSP: 002b:00007f476d130028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 179.434209][T10729] RAX: ffffffffffffffda RBX: 00007f476c415fa0 RCX: 00007f476c19ce59 [ 179.434221][T10729] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 179.434233][T10729] RBP: 00007f476d130090 R08: 0000000000000000 R09: 0000000000000000 [ 179.434246][T10729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.434258][T10729] R13: 00007f476c416038 R14: 00007f476c415fa0 R15: 00007fff578e8148 [ 179.434286][T10729] [ 179.479635][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 179.636041][T10743] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1429'. [ 179.687039][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 179.716578][T10747] autofs4:pid:10747:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 179.797257][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 179.908335][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 180.017226][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 180.191691][ T40] audit: type=1400 audit(1780010932.095:32713): avc: denied { getopt } for pid=10764 comm="syz.8.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.298818][T10732] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 180.329086][ T40] audit: type=1400 audit(1780010932.235:32714): avc: denied { execute } for pid=10769 comm="syz.2.1439" path="/dev/audio" dev="devtmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 180.385612][T10776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1441'. [ 180.522083][ T40] audit: type=1400 audit(1780010932.425:32715): avc: denied { shutdown } for pid=10780 comm="syz.6.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.524040][T10781] netlink: 'syz.6.1443': attribute type 3 has an invalid length. [ 180.570976][T10785] syz.2.1445 (10785): attempted to duplicate a private mapping with mremap. This is not supported. [ 180.635460][T10790] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.735029][ T40] audit: type=1400 audit(1780010932.635:32716): avc: denied { accept } for pid=10800 comm="syz.2.1450" lport=47756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 180.782908][T10803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1451'. [ 180.995749][ T5747] Bluetooth: hci3: Malformed Event: 0x02 [ 180.997645][ T5747] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 181.108785][T10809] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 181.113232][T10809] FAULT_INJECTION: forcing a failure. [ 181.113232][T10809] name failslab, interval 1, probability 0, space 0, times 0 [ 181.118026][T10809] CPU: 0 UID: 0 PID: 10809 Comm: syz.8.1454 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.118045][T10809] Tainted: [L]=SOFTLOCKUP [ 181.118049][T10809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.118055][T10809] Call Trace: [ 181.118059][T10809] [ 181.118063][T10809] dump_stack_lvl+0x100/0x190 [ 181.118080][T10809] should_fail_ex.cold+0x5/0xa [ 181.118094][T10809] ? lsm_blob_alloc+0x68/0x90 [ 181.118106][T10809] should_failslab+0xc2/0x120 [ 181.118118][T10809] __kmalloc_noprof+0xe0/0x850 [ 181.118134][T10809] ? trace_kmem_cache_alloc+0xd5/0x100 [ 181.118149][T10809] lsm_blob_alloc+0x68/0x90 [ 181.118160][T10809] security_prepare_creds+0x2d/0x290 [ 181.118172][T10809] prepare_creds+0x5d6/0x950 [ 181.118188][T10809] ovl_override_creator_creds+0x110/0x340 [ 181.118207][T10809] ovl_create_or_link+0x18a/0x390 [ 181.118225][T10809] ovl_create_object+0x2bf/0x3b0 [ 181.118241][T10809] ? __pfx_ovl_create_object+0x10/0x10 [ 181.118259][T10809] ? inode_permission+0x374/0x620 [ 181.118279][T10809] ovl_mkdir+0x2a/0x40 [ 181.118294][T10809] vfs_mkdir+0x361/0x850 [ 181.118306][T10809] filename_mkdirat+0x48b/0x5e0 [ 181.118322][T10809] ? __pfx_filename_mkdirat+0x10/0x10 [ 181.118336][T10809] ? strncpy_from_user+0x19d/0x2d0 [ 181.118351][T10809] ? do_getname+0x191/0x390 [ 181.118372][T10809] __x64_sys_mkdirat+0x89/0xc0 [ 181.118387][T10809] do_syscall_64+0x115/0x870 [ 181.118400][T10809] ? clear_bhb_loop+0x40/0x90 [ 181.118413][T10809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.118424][T10809] RIP: 0033:0x7fa5c639ce59 [ 181.118433][T10809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.118444][T10809] RSP: 002b:00007fa5c71af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 181.118455][T10809] RAX: ffffffffffffffda RBX: 00007fa5c6615fa0 RCX: 00007fa5c639ce59 [ 181.118462][T10809] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 181.118468][T10809] RBP: 00007fa5c71af090 R08: 0000000000000000 R09: 0000000000000000 [ 181.118474][T10809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.118480][T10809] R13: 00007fa5c6616038 R14: 00007fa5c6615fa0 R15: 00007ffd5a26bd28 [ 181.118494][T10809] [ 181.171436][T10812] netlink: 'syz.2.1456': attribute type 1 has an invalid length. [ 181.221568][T10812] 8021q: adding VLAN 0 to HW filter on device bond8 [ 181.387222][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 181.492833][T10823] syzkaller0: entered promiscuous mode [ 181.494811][T10823] syzkaller0: entered allmulticast mode [ 181.537673][ T5747] Bluetooth: hci0: command 0x040f tx timeout [ 181.795233][ T40] audit: type=1400 audit(1780010933.695:32717): avc: denied { write } for pid=10835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.838028][T10837] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 182.240228][T10860] autofs4:pid:10860:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 182.293280][T10866] __nla_validate_parse: 3 callbacks suppressed [ 182.293291][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1467'. [ 182.301440][T10866] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1467'. [ 182.305385][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1467'. [ 182.309462][T10866] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1467'. [ 182.345599][T10869] netlink: 'syz.2.1468': attribute type 1 has an invalid length. [ 182.367931][T10869] 8021q: adding VLAN 0 to HW filter on device bond9 [ 182.388236][T10869] bond9: (slave geneve2): making interface the new active one [ 182.400609][T10869] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 183.997992][ T1213] net_ratelimit: 32 callbacks suppressed [ 183.998011][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.107767][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.227541][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.238674][T10904] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 184.301905][T10906] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.338296][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.447914][ T160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.557462][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.667304][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.700103][T10831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.725879][T10914] autofs4:pid:10914:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 184.788160][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.800974][T10918] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 184.912741][ T1213] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.985856][T10927] ip6gretap1: entered promiscuous mode [ 184.988301][T10927] ip6gretap1: entered allmulticast mode [ 185.815529][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 185.815546][ T40] audit: type=1804 audit(1780010937.715:32731): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.1494" name="/newroot/218/file0/file1" dev="9p" ino=72877211 res=1 errno=0 [ 185.833746][T10955] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.880900][T10958] ================================================================== [ 185.883792][T10958] BUG: KASAN: slab-use-after-free in netfs_unbuffered_write+0x1c21/0x21e0 [ 185.886255][T10958] Read of size 2 at addr ffff88805fc450e4 by task syz.6.1494/10958 [ 185.889482][T10958] [ 185.891542][T10958] CPU: 1 UID: 0 PID: 10958 Comm: syz.6.1494 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.891572][T10958] Tainted: [L]=SOFTLOCKUP [ 185.891579][T10958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.891591][T10958] Call Trace: [ 185.891598][T10958] [ 185.891606][T10958] dump_stack_lvl+0x100/0x190 [ 185.891631][T10958] print_report+0x13d/0x4b0 [ 185.891660][T10958] ? __virt_addr_valid+0x239/0x430 [ 185.891688][T10958] ? netfs_unbuffered_write+0x1c21/0x21e0 [ 185.891710][T10958] kasan_report+0xdf/0x1d0 [ 185.891732][T10958] ? netfs_unbuffered_write+0x1c21/0x21e0 [ 185.891757][T10958] netfs_unbuffered_write+0x1c21/0x21e0 [ 185.891782][T10958] ? __pfx_netfs_unbuffered_write+0x10/0x10 [ 185.891805][T10958] ? rolling_buffer_init+0x8a/0xb0 [ 185.891830][T10958] ? netfs_create_write_req+0x527/0x860 [ 185.891857][T10958] netfs_unbuffered_write_iter_locked+0x7e2/0xa90 [ 185.891880][T10958] netfs_unbuffered_write_iter+0x442/0x740 [ 185.891904][T10958] v9fs_file_write_iter+0xbf/0x100 [ 185.891929][T10958] vfs_write+0x6ac/0x1070 [ 185.891950][T10958] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 185.891976][T10958] ? __pfx_vfs_write+0x10/0x10 [ 185.892000][T10958] ksys_write+0x12a/0x250 [ 185.892018][T10958] ? __pfx_ksys_write+0x10/0x10 [ 185.892039][T10958] ? rcu_is_watching+0x12/0xc0 [ 185.892067][T10958] do_syscall_64+0x115/0x870 [ 185.892083][T10958] ? clear_bhb_loop+0x40/0x90 [ 185.892095][T10958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.892107][T10958] RIP: 0033:0x7f3bd799ce59 [ 185.892117][T10958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.892129][T10958] RSP: 002b:00007f3bd87a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.892141][T10958] RAX: ffffffffffffffda RBX: 00007f3bd7c15fa0 RCX: 00007f3bd799ce59 [ 185.892148][T10958] RDX: 00000000fffffdd8 RSI: 0000200000000540 RDI: 0000000000000004 [ 185.892155][T10958] RBP: 00007f3bd7a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 185.892162][T10958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.892169][T10958] R13: 00007f3bd7c16038 R14: 00007f3bd7c15fa0 R15: 00007fff2429d688 [ 185.892179][T10958] [ 185.892184][T10958] [ 185.969331][T10958] Allocated by task 10958: [ 185.970683][T10958] kasan_save_stack+0x30/0x50 [ 185.972166][T10958] kasan_save_track+0x14/0x30 [ 185.973903][T10958] __kasan_slab_alloc+0x89/0x90 [ 185.975506][T10958] kmem_cache_alloc_noprof+0x241/0x6e0 [ 185.977206][T10958] mempool_alloc_noprof+0x1b7/0x310 [ 185.978852][T10958] netfs_alloc_subrequest+0xc1/0x3c0 [ 185.980705][T10958] netfs_prepare_write+0x76/0x780 [ 185.982808][T10958] netfs_unbuffered_write+0x7b8/0x21e0 [ 185.984884][T10958] netfs_unbuffered_write_iter_locked+0x7e2/0xa90 [ 185.987156][T10958] netfs_unbuffered_write_iter+0x442/0x740 [ 185.988953][T10958] v9fs_file_write_iter+0xbf/0x100 [ 185.990509][T10958] vfs_write+0x6ac/0x1070 [ 185.991829][T10958] ksys_write+0x12a/0x250 [ 185.993143][T10958] do_syscall_64+0x115/0x870 [ 185.994511][T10958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.996324][T10958] [ 185.997060][T10958] Freed by task 10958: [ 185.998296][T10958] kasan_save_stack+0x30/0x50 [ 185.999690][T10958] kasan_save_track+0x14/0x30 [ 186.001076][T10958] kasan_save_free_info+0x3b/0x70 [ 186.002496][T10958] __kasan_slab_free+0x5f/0x80 [ 186.003919][T10958] kmem_cache_free+0x127/0x6c0 [ 186.005354][T10958] mempool_free+0xde/0x130 [ 186.006716][T10958] netfs_put_subrequest+0x282/0x4c0 [ 186.008325][T10958] netfs_unbuffered_write+0x13ed/0x21e0 [ 186.009997][T10958] netfs_unbuffered_write_iter_locked+0x7e2/0xa90 [ 186.011972][T10958] netfs_unbuffered_write_iter+0x442/0x740 [ 186.013787][T10958] v9fs_file_write_iter+0xbf/0x100 [ 186.015410][T10958] vfs_write+0x6ac/0x1070 [ 186.016769][T10958] ksys_write+0x12a/0x250 [ 186.018074][T10958] do_syscall_64+0x115/0x870 [ 186.019458][T10958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.021212][T10958] [ 186.021939][T10958] The buggy address belongs to the object at ffff88805fc45040 [ 186.021939][T10958] which belongs to the cache netfs_subrequest of size 200 [ 186.026187][T10958] The buggy address is located 164 bytes inside of [ 186.026187][T10958] freed 200-byte region [ffff88805fc45040, ffff88805fc45108) [ 186.030274][T10958] [ 186.030968][T10958] The buggy address belongs to the physical page: [ 186.032953][T10958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805fc45180 pfn:0x5fc44 [ 186.035979][T10958] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 186.038509][T10958] memcg:ffff88805fc440d9 [ 186.039811][T10958] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 186.042354][T10958] page_type: f5(slab) [ 186.043599][T10958] raw: 00fff00000000240 ffff888022197680 ffffea0000ef2510 ffffea0000887010 [ 186.046074][T10958] raw: ffff88805fc45180 000001400019000f 00000000f5000000 ffff88805fc440d9 [ 186.048683][T10958] head: 00fff00000000240 ffff888022197680 ffffea0000ef2510 ffffea0000887010 [ 186.051357][T10958] head: ffff88805fc45180 000001400019000f 00000000f5000000 ffff88805fc440d9 [ 186.053862][T10958] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 186.056317][T10958] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 186.058935][T10958] page dumped because: kasan: bad access detected [ 186.060838][T10958] page_owner tracks the page as allocated [ 186.062541][T10958] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d2880(GFP_NOWAIT|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 10358, tgid 10358 (syz.6.1315), ts 168766132998, free_ts 168276271373 [ 186.069091][T10958] post_alloc_hook+0xfd/0x120 [ 186.070646][T10958] get_page_from_freelist+0x11a6/0x3410 [ 186.072391][T10958] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 186.074223][T10958] new_slab+0xa6/0x6c0 [ 186.075492][T10958] refill_objects+0x277/0x420 [ 186.076894][T10958] __pcs_replace_empty_main+0x375/0x650 [ 186.078549][T10958] kmem_cache_alloc_noprof+0x480/0x6e0 [ 186.080416][T10958] mempool_alloc_noprof+0x1b7/0x310 [ 186.082234][T10958] netfs_alloc_subrequest+0xc1/0x3c0 [ 186.083940][T10958] netfs_prepare_write+0x76/0x780 [ 186.085807][T10958] netfs_advance_write+0x3af/0x4c0 [ 186.087437][T10958] netfs_write_folio+0xc09/0x1810 [ 186.089115][T10958] netfs_writepages+0x2b9/0x990 [ 186.090817][T10958] do_writepages+0x278/0x600 [ 186.092354][T10958] filemap_writeback+0x22d/0x2e0 [ 186.093889][T10958] v9fs_dir_release+0x2d1/0x590 [ 186.095517][T10958] page last free pid 8285 tgid 8285 stack trace: [ 186.098008][T10958] __free_frozen_pages+0x794/0x10a0 [ 186.099733][T10958] qlist_free_all+0x47/0xf0 [ 186.101126][T10958] kasan_quarantine_reduce+0x1a0/0x1f0 [ 186.102924][T10958] __kasan_slab_alloc+0x69/0x90 [ 186.104430][T10958] kmem_cache_alloc_noprof+0x241/0x6e0 [ 186.106125][T10958] vm_area_dup+0x27/0x8e0 [ 186.107516][T10958] dup_mmap+0x6f6/0x21b0 [ 186.108933][T10958] copy_process+0x6c78/0x7ed0 [ 186.110502][T10958] kernel_clone+0x176/0x9e0 [ 186.112063][T10958] __do_sys_clone+0xd9/0x120 [ 186.113615][T10958] do_syscall_64+0x115/0x870 [ 186.115055][T10958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.116888][T10958] [ 186.117624][T10958] Memory state around the buggy address: [ 186.119389][T10958] ffff88805fc44f80: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 186.121888][T10958] ffff88805fc45000: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 186.124596][T10958] >ffff88805fc45080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.127065][T10958] ^ [ 186.129291][T10958] ffff88805fc45100: fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.131760][T10958] ffff88805fc45180: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.134270][T10958] ================================================================== [ 186.156633][ T40] audit: type=1400 audit(1780010938.055:32732): avc: denied { read } for pid=5126 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 186.158768][T10958] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 186.158789][T10958] CPU: 2 UID: 0 PID: 10958 Comm: syz.6.1494 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.158816][T10958] Tainted: [L]=SOFTLOCKUP [ 186.158822][T10958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.158833][T10958] Call Trace: [ 186.158839][T10958] [ 186.158847][T10958] dump_stack_lvl+0x100/0x190 [ 186.158872][T10958] vpanic+0x552/0x970 [ 186.158892][T10958] ? __pfx_vpanic+0x10/0x10 [ 186.158911][T10958] ? mark_held_locks+0x40/0x70 [ 186.158951][T10958] ? netfs_unbuffered_write+0x1c21/0x21e0 [ 186.158973][T10958] panic+0xd1/0xe0 [ 186.158988][T10958] ? __pfx_panic+0x10/0x10 [ 186.159006][T10958] ? netfs_unbuffered_write+0x1c21/0x21e0 [ 186.159027][T10958] ? preempt_schedule_common+0x42/0xc0 [ 186.159056][T10958] check_panic_on_warn.cold+0x19/0x34 [ 186.159078][T10958] end_report.part.0+0x3a/0x90 [ 186.159105][T10958] kasan_report.cold+0xe/0x18 [ 186.159131][T10958] ? netfs_unbuffered_write+0x1c21/0x21e0 [ 186.159155][T10958] netfs_unbuffered_write+0x1c21/0x21e0 [ 186.159177][T10958] ? __pfx_netfs_unbuffered_write+0x10/0x10 [ 186.159221][T10958] ? rolling_buffer_init+0x8a/0xb0 [ 186.159247][T10958] ? netfs_create_write_req+0x527/0x860 [ 186.159275][T10958] netfs_unbuffered_write_iter_locked+0x7e2/0xa90 [ 186.159299][T10958] netfs_unbuffered_write_iter+0x442/0x740 [ 186.159323][T10958] v9fs_file_write_iter+0xbf/0x100 [ 186.159350][T10958] vfs_write+0x6ac/0x1070 [ 186.159371][T10958] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 186.159396][T10958] ? __pfx_vfs_write+0x10/0x10 [ 186.159422][T10958] ksys_write+0x12a/0x250 [ 186.159442][T10958] ? __pfx_ksys_write+0x10/0x10 [ 186.159464][T10958] ? rcu_is_watching+0x12/0xc0 [ 186.159492][T10958] do_syscall_64+0x115/0x870 [ 186.159515][T10958] ? clear_bhb_loop+0x40/0x90 [ 186.159537][T10958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.159556][T10958] RIP: 0033:0x7f3bd799ce59 [ 186.159571][T10958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.159590][T10958] RSP: 002b:00007f3bd87a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.159609][T10958] RAX: ffffffffffffffda RBX: 00007f3bd7c15fa0 RCX: 00007f3bd799ce59 [ 186.159621][T10958] RDX: 00000000fffffdd8 RSI: 0000200000000540 RDI: 0000000000000004 [ 186.159634][T10958] RBP: 00007f3bd7a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 186.159645][T10958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.159656][T10958] R13: 00007f3bd7c16038 R14: 00007f3bd7c15fa0 R15: 00007fff2429d688 [ 186.159681][T10958] [ 186.166496][T10958] Kernel Offset: disabled VM DIAGNOSIS: 23:28:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81fc1d0d RDX=ffff8880302da540 RSI=ffffffff81fc1ce7 RDI=ffff8880302da540 RBP=ffff88806a540f80 RSP=ffffc90003536d38 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4a81f1 R14=0000000000000001 R15=ffff88806a43c600 RIP=ffffffff81fc1ce9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555556e4d500 ffffffff 00c00000 GS =0000 ffff8880d6386000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3bd8782ff8 CR3=0000000119f7a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a26c216 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a26c216 00007ffd5a26c21c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5c6433352 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5c6433392 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5c64334f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5c6433384 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5c65ed600 00007fa5c65ed5e0 00007fa5c65ed5e8 00007fa5c65ed618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5c65ed5f8 00007fa5c65ed5c8 00007fa5c65ed600 00007fa5c65ed5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000074 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff857e75a0 RDI=ffffffff9b45dca0 RBP=ffffffff9b45dc60 RSP=ffffc90003727510 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=ffffffff9b45df20 R14=ffffffff9b45dcb0 R15=0000000000000000 RIP=ffffffff857e75c7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f3bd87a46c0 ffffffff 00c01300 GS =0000 ffff8880d6486000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3bd8783d58 CR3=0000000117919000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000007fff Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bd874d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2429db76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2429db76 00007fff2429db7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bd7a33352 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bd7a33392 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bd7a334f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bd7a33384 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bd7bed600 00007f3bd7bed5e0 00007f3bd7bed5e8 00007f3bd7bed618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bd874d020 00007f3bd7bed5c0 00007f3bd7bed5d0 00007f3bd7bed610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bd7bed5f8 00007f3bd7bed5c8 00007f3bd7bed600 00007f3bd7bed5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81fc1d0d RDX=ffff88801cb78000 RSI=ffffffff81fc1ce7 RDI=ffff88801cb78000 RBP=ffff88806a5431e0 RSP=ffffc900007cf1d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4a863d R14=0000000000000001 R15=ffff88806a63c600 RIP=ffffffff81fc1ce9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6586000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa5c45f6d58 CR3=0000000064403000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff578e8636 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff578e8636 00007fff578e863c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f476c233352 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f476c233392 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f476c2334f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f476c233384 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000000e RBX=1ffff92000e95e25 RCX=ffffc900074aef64 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffc900074af148 RBP=ffff88803f840000 RSP=ffffc900074af128 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffffc900074af148 R14=0000000000100cc0 R15=ffff88803f8405f0 RIP=ffffffff8280dca5 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f476d1306c0 ffffffff 00c00000 GS =0000 ffff8880d6686000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3bd7a4f156 CR3=0000000061191000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=000000000c000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd127a178b 00007ffd127a178b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd127a1c90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd127a1c90 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303030303030203a 5841525f4749524f 2036343230303030 30203a5347414c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030303030302030 5241525547435245 2036343230303030 3020305347414600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7320353932373639 343932343d736573 2035393237363934 3932343d64697561 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e693d706f20745f 6d64617379733a72 5f6d64617379733a 746f6f723d6a6275 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303d6f6e72726520 313d736572203131 3237373832373d6f 6e6920227039223d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 766564202231656c 69662f30656c6966 2f3831322f746f6f 7277656e2f223d65 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d616e2022343934 312e362e7a797322 3d6d6d6f6320556f 544d6f543d657375 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6163207263705f64 696c61766e693d70 6f20745f6d646173 79733a725f6d6461 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000