last executing test programs: 4m18.335153106s ago: executing program 32 (id=254): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) dup2(r4, r5) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r6, 0x20, 0x0, 0x5, 0x4, {{0x1d, 0x4, 0x3, 0x5, 0x74, 0x67, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@timestamp={0x44, 0x24, 0x5f, 0x0, 0x8, [0xfffffff9, 0x8000, 0xce, 0x40, 0x7fff, 0x86, 0xffffffff, 0xe04]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x40, 0x0, 0x0, [0x6, 0x4, 0x4, 0x1000]}, @generic={0x89, 0x2}, @cipso={0x86, 0x21, 0x0, [{0x5, 0x5, "74901b"}, {0xad92885ae0047c3d, 0x12, "643861a8cef5366b427b4f839b1ac8e6"}, {0x7, 0x4, "451a"}]}, @noop]}}}}}) sendmsg$nl_route(r7, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000001500000125bd7000fedbdf250a380400", @ANYRES32=r8, @ANYBLOB="080009003e710000140006000600000004000000f8ffffff060000000800090002000000140002000000000000000000000000000000000114000100fbfdf50000000000000000000000001608000a0002000000"], 0x6c}, 0x1, 0x0, 0x0, 0x400c820}, 0x20000820) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000406ff7f03000000fcffffffffffa7a800000000010000b50000"], 0x28}}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000850) write$cgroup_int(r9, &(0x7f0000000040)=0x1c9, 0x3f) 4m6.232553614s ago: executing program 2 (id=426): r0 = timerfd_create(0x5, 0x80800) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x7) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x0) fchown(r0, r2, r3) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) recvmsg$unix(r5, &(0x7f0000000480)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)=""/161, 0xa1}], 0x1}, 0x1) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r4, r6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000580)=0x0) fchown(r0, r7, r3) ppoll(&(0x7f00000005c0), 0x0, &(0x7f0000000600)={0x0, 0x3938700}, &(0x7f0000000640)={[0xffffffff80000001]}, 0x8) r8 = socket(0x2, 0xa, 0xffe00000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@fallback=r8, 0xd, 0x0, 0x10001, &(0x7f0000000680)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r9) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6gre0\x00', r1, 0x2f, 0x2, 0xe, 0x4fa44ce2, 0x21, @mcast2, @private1, 0x10, 0x7, 0xf, 0x9fdb}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x8c, r10, 0xa08, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) shutdown(r5, 0x1) read(r5, &(0x7f0000000a40)=""/237, 0xed) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x16) sendmmsg$inet6(r8, &(0x7f0000000b40), 0x0, 0x20000000) syz_emit_vhci(&(0x7f0000000b80)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r12 = dup3(r8, r5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r12, 0x6, 0x1, &(0x7f0000000bc0)={0x190, 0x1, 0x3, 0x10, 0x7, 0xf, 0x2}, 0xc) ioctl$PIO_UNIMAPCLR(r12, 0x4b68, &(0x7f0000000c00)={0xfffc, 0xab8, 0x9bd}) r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000c40), 0x800, 0x0) ioctl$TCSETS(r13, 0x5402, &(0x7f0000000c80)={0x7f, 0x4, 0x40, 0xffff, 0x8, "358099233bf528fdd6161ebca47a77201fe8ba"}) listen(r5, 0xd) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r12, 0x54a2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r9, 0x28, 0x0, &(0x7f0000000cc0), 0x8) 4m6.162278421s ago: executing program 2 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0xfffff399}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0xc, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004095) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000001500)={@l2tp6={0xa, 0x0, 0xffffff81, @mcast2, 0xfffffff5, 0x2}, {&(0x7f0000000500)=""/4096, 0x1000}, &(0x7f0000000380), 0x12}, 0xa0) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000140)={0x0, 0x3, 0x7f, 0x4000}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000000000000b0000000003001473797a30ef000000"], 0x28}}, 0x0) 4m6.103221205s ago: executing program 2 (id=432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1, 0x3}, {}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x19c000}) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000040)={0x3000, 0x114000}) 4m5.943409877s ago: executing program 2 (id=437): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000998000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) close(0x3) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x203, 0x70bd28, 0x0, {0xa, 0x10, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 4m5.892200621s ago: executing program 2 (id=439): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='fusectl\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='\x00', 0x0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002800128008000100687372001c00028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="0500060009"], 0x50}}, 0x0) 4m5.890348626s ago: executing program 2 (id=441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000f5ffffffffffffff0000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 4m5.822961218s ago: executing program 33 (id=441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000f5ffffffffffffff0000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3m47.874088428s ago: executing program 4 (id=769): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) writev(r0, &(0x7f0000002140)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f00000000c0)="37c860346c168009fbef0c", 0xb}], 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="f30f01766136440f01c970a8652e0f780b66ba4300ed36410f381c1d20000000b9800000c00f3235001000000f3066baf80cb80c652d85ef66bafc0ced66baf80cb8d87d8e86ef66bafc0cb831440000ef66baf80cb89e5eb885ef66bafc0c66ed", 0x61}], 0x24, 0x50, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x101400, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000180)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r3, &(0x7f00000017c0)=[{&(0x7f0000000040)="273eebfe167c0e923301b61c42cb1d11f41d00bdab2aae0e00005a56", 0x1c}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x800c0d0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002140), 0x8300, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r6, 0x40046103, &(0x7f0000002180)={0x6, 0x7fff, 0x1, 0x93, 0xf7, 0x9, 0xbf, 0x34, 0x4, 0x91, 0x4, "a078f56c7232c21260d826cd9f3c8344dca377109a5d209b00"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) (async) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) (async) writev(r0, &(0x7f0000002140)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f00000000c0)="37c860346c168009fbef0c", 0xb}], 0x2) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="f30f01766136440f01c970a8652e0f780b66ba4300ed36410f381c1d20000000b9800000c00f3235001000000f3066baf80cb80c652d85ef66bafc0ced66baf80cb8d87d8e86ef66bafc0cb831440000ef66baf80cb89e5eb885ef66bafc0c66ed", 0x61}], 0x24, 0x50, 0x0, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x101400, 0x0) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000180)) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) (async) writev(r3, &(0x7f00000017c0)=[{&(0x7f0000000040)="273eebfe167c0e923301b61c42cb1d11f41d00bdab2aae0e00005a56", 0x1c}], 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x800c0d0) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002140), 0x8300, 0x0) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r6, 0x40046103, &(0x7f0000002180)={0x6, 0x7fff, 0x1, 0x93, 0xf7, 0x9, 0xbf, 0x34, 0x4, 0x91, 0x4, "a078f56c7232c21260d826cd9f3c8344dca377109a5d209b00"}) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) 3m47.724423064s ago: executing program 4 (id=771): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x48081, 0x0) ioctl$COMEDI_CMDTEST(r1, 0x8050640a, &(0x7f00000001c0)={0x3, 0x80, 0x40, 0x8, 0xffffffff, 0x7e, 0x0, 0xe, 0x30, 0xca6, 0x0, 0x81b, &(0x7f0000000080)=[0x7], 0x1, &(0x7f00000000c0)}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x0, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x48081, 0x0) (async) ioctl$COMEDI_CMDTEST(r1, 0x8050640a, &(0x7f00000001c0)={0x3, 0x80, 0x40, 0x8, 0xffffffff, 0x7e, 0x0, 0xe, 0x30, 0xca6, 0x0, 0x81b, &(0x7f0000000080)=[0x7], 0x1, &(0x7f00000000c0)}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x0, 0x8}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async) 3m47.672418783s ago: executing program 4 (id=772): r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x400641, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000140)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x13) 3m47.671587478s ago: executing program 4 (id=773): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453", 0xc0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="04002a0020002d800a"], 0x48}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000300)={r4, r0, r4}, &(0x7f0000000440)=""/68, 0x44, &(0x7f0000000400)={&(0x7f00000002c0)={'xcbc(aes)\x00'}}) r5 = msgget(0x2, 0x404) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000040)=""/243) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f00000003c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048890}, 0x0) connect$tipc(r8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 3m47.592133655s ago: executing program 4 (id=777): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@redirect_dir_off}, {@metacopy_on}, {@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@index_on}, {@default_permissions}]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x208300, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0xfff, 0x2001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x46, 0x10d4, 0x5, 0x8, 0xfa, "39c2e3", 0x8}}) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x400) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000480)={0x18, 0x1, 0x0, {0x5}}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$uinput_user_dev(r6, &(0x7f0000000200)={'syz1\x00', {0x800, 0xbc64, 0x2, 0x6}, 0x26, [0x9, 0x5, 0x71, 0x0, 0x2, 0x6, 0xfffffff8, 0x1, 0xfffffff9, 0x6, 0x2, 0x101, 0x2, 0x4, 0x74, 0xfffffffa, 0x3, 0x1000, 0x101, 0x66ca, 0x6, 0x4, 0x5, 0x80000000, 0x6, 0x5, 0x7, 0x49, 0x470, 0x10, 0x7, 0x7fff, 0x8, 0x5e5, 0xffffffff, 0x4, 0x0, 0x8, 0x0, 0x1, 0xffffede2, 0x80000000, 0x2, 0x400, 0x80000001, 0x0, 0x404, 0x3, 0x9, 0x401, 0x2, 0xfffffffb, 0x4, 0x5, 0x4, 0x7, 0x6, 0x1, 0x0, 0x0, 0x3, 0x5, 0x1b2, 0xfffffff8], [0xfffffffa, 0x4, 0x8, 0xc, 0x3, 0x8000, 0xffff, 0x9, 0x9, 0x7, 0x69b9, 0x5, 0x2, 0x6, 0x8, 0x7, 0xe, 0x6, 0xe1, 0x769, 0xd, 0x1, 0xfff, 0x4, 0x5471, 0x2, 0xc5d, 0x6, 0x0, 0x0, 0xc, 0x8, 0x3, 0x80, 0x5, 0x70, 0x6af, 0x2, 0x5, 0x5, 0xf, 0x0, 0x8, 0x10000, 0x691, 0x3, 0x5, 0xfffff801, 0x5, 0x2, 0x9000000, 0x3, 0x2, 0x0, 0x5, 0x1, 0xee7, 0xee, 0x0, 0x5, 0x44af, 0x5, 0x0, 0xb117dd18], [0x10001, 0x6, 0x200, 0x8, 0x18, 0x1ba, 0x2, 0x4, 0x8, 0x100, 0x10, 0xc6c, 0x7, 0x2, 0x3, 0x8, 0x4, 0x80, 0xfffffbff, 0x5, 0xffffff8a, 0x8, 0x8, 0x2, 0x3, 0xffff8e4f, 0x7, 0x0, 0x3, 0x2, 0x200, 0x6, 0x80, 0x6, 0x7f, 0xfffffff9, 0x46a, 0x4, 0x9, 0x8, 0x2, 0x3, 0x9, 0xbef, 0x2, 0xa, 0x8, 0xff, 0x6, 0x80000000, 0x3, 0x2, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0x7, 0x9, 0xfffffffb, 0x0, 0x6, 0x8, 0x1], [0x7, 0x4, 0xfffff173, 0x101, 0x20, 0x7fffffff, 0x4, 0x200, 0x7, 0x3, 0x7, 0x1, 0x97, 0x4, 0x9, 0x0, 0x1, 0x3, 0x400, 0x2, 0x7, 0x3, 0x783, 0x6, 0x7, 0xfffff53f, 0x5, 0xffffffc0, 0x6, 0x0, 0x2852, 0x1, 0x2400000, 0x5, 0x10, 0x6, 0x9, 0x2, 0xffff0000, 0x800, 0x1, 0x2, 0x800, 0x6, 0x1, 0x6, 0x10000, 0xffffffff, 0x6, 0x40, 0x1, 0x3, 0x4b22, 0x2, 0x9a22, 0x8001, 0xffff2270, 0x3, 0x5, 0xf1a0, 0x8001, 0x8, 0x6, 0x55b2]}, 0x45c) read$eventfd(r4, &(0x7f0000000140), 0x8) splice(r6, &(0x7f0000000040)=0x1, r5, 0x0, 0x2, 0x2) unlink(&(0x7f0000000440)='./file0\x00') 3m47.12309799s ago: executing program 4 (id=785): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075c, 0xfffffffb}}]}, 0xc4}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01c936660ff113650f01c266b9770a00000f320f01c8660fe8a306000f22d83e65260fc73f0f01c466b8edb700000f23d80f21f86635c00000100f23f8", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) 3m47.040331698s ago: executing program 34 (id=785): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075c, 0xfffffffb}}]}, 0xc4}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01c936660ff113650f01c266b9770a00000f320f01c8660fe8a306000f22d83e65260fc73f0f01c466b8edb700000f23d80f21f86635c00000100f23f8", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) 3m26.727063999s ago: executing program 5 (id=1164): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}], 0x1}, 0x4}], 0x2, 0x60, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4, 0x6, 0x4, '\x00', 0x5624}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r1, 0x0, 0x0, 0x0) (async) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r2, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}], 0x1}, 0x4}], 0x2, 0x60, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4, 0x6, 0x4, '\x00', 0x5624}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 3m26.588771598s ago: executing program 5 (id=1165): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000500)={'gretap0\x00', r2, 0x40, 0x0, 0x3, 0x647, {{0x3d, 0x4, 0x0, 0x4, 0xf4, 0x66, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@timestamp_prespec={0x44, 0x34, 0xd2, 0x3, 0x4, [{@broadcast}, {@loopback, 0x69a}, {@private=0xa010100, 0xeb3}, {@loopback, 0x80000000}, {@rand_addr=0x64010101, 0x5}, {@loopback, 0x48b}]}, @cipso={0x86, 0x33, 0x0, [{0x4, 0xd, "ed07b4f6475544155ccf5a"}, {0x1, 0x7, "5d74cbbbc7"}, {0x7, 0x11, "a982dabd6b8791f85f25d3a71bbca7"}, {0x5, 0x8, "95470944f69a"}]}, @timestamp={0x44, 0xc, 0xa, 0x0, 0x6, [0xffff0001, 0x0]}, @ssrr={0x89, 0x13, 0xbe, [@private=0xa010102, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x11}]}, @ssrr={0x89, 0x13, 0x70, [@loopback, @multicast2, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0x44, 0x18, 0x1, 0x8, [{@multicast2, 0xffff3881}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@local, 0xdd}, {@local, 0x77}, {@private=0xa010101, 0xc8}, {@remote, 0xc}, {@rand_addr=0x64010102, 0x8}]}, @generic={0x82, 0x3, "1d"}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x8c, 0x10, 0x437, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_MTU={0x8, 0x4, 0x40}, @IFLA_CARRIER={0x5, 0x21, 0x6}, @IFLA_VF_PORTS={0x54, 0x18, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "36d8f918b095faccd3eb443498d48dd0"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e2bb41010fd1f31a0451cdea472115c1"}, @IFLA_PORT_REQUEST={0x5}]}]}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24044044}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r7, 0x4068aea3, &(0x7f0000000480)) (async) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r7, 0x4068aea3, &(0x7f0000000480)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x0, @initdev}}) (async) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x0, @initdev}}) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3m26.491486665s ago: executing program 5 (id=1166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0x4, './file0\x00'}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = shmget(0x1, 0x4000, 0x40, &(0x7f00003e1000/0x4000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000002008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r4, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 3m26.396518277s ago: executing program 5 (id=1168): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000280)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x18\xad\xaaY\x85\x15\x95\xfe\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7fx\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaAfC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0J\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4$\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f\xe5\x1f_J\xd0=U\x88t\xe7\xab\xbb\x93J\xff\x923\xd5\xc7\xc8\xef\x00c3\xea\xab\xb4\'\bY}\x1f\x80v\r\xa8\xe4>\x185|\nF\xabB\x94\x0e_\x00\x8b\x95\x85\xbbE\\\x1a\xf8\xefI h\xd4\xf7\x8fo\xd3f\x7f\xc6M>\xd3\xa3S\xf3\xe1\xb4\xe4>P\x88\xfat\x86_wYv0i\x04JZ\xde\x1c\xb1qA\xceEj\x9b\vA\xf7.d\x80ni\xe5?\xe9\x89+\x1e;|M`/1\xba\x8cHd\x88\x990e[[\xb2X`\xda\xad;>N\x9f\xfb-\xf6\x96\xd6o,^\x8a\xea\f\x03\xfcU\x01%<{g\xdc\x14\x00O\x88\\\x19\xa9D\xde\xf1\xceE\xbc\xad\x00\x00\x00\x00', 0x3) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ftruncate(r1, 0xffff) r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x1000000, 0xfffffffffffff000}) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) lsetxattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000600)=@random={'system.', 'y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x18\xad\xaaY\x85\x15\x95\xfe\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7fx\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaAfC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0J\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4$\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f\xe5\x1f_J\xd0=U\x88t\xe7\xab\xbb\x93J\xff\x923\xd5\xc7\xc8\xef\x00c3\xea\xab\xb4\'\bY}\x1f\x80v\r\xa8\xe4>\x185|\nF\xabB\x94\x0e_\x00\x8b\x95\x85\xbbE\\\x1a\xf8\xefI h\xd4\xf7\x8fo\xd3f\x7f\xc6M>\xd3\xa3S\xf3\xe1\xb4\xe4>P\x88\xfat\x86_wYv0i\x04JZ\xde\x1c\xb1qA\xceEj\x9b\vA\xf7.d\x80ni\xe5?\xe9\x89+\x1e;|M`/1\xba\x8cHd\x88\x990e[[\xb2X`\xda\xad;>N\x9f\xfb-\xf6\x96\xd6o,^\x8a\xea\f\x03\xfcU\x01%<{g\xdc\x14\x00O\x88\\\x19\xa9D\xde\xf1\xceE\xbc\xad\x00'}, &(0x7f00000008c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x18\xad\xaaY\x85\x15\x95\xfe\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7fx\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaAfC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0J\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4$\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f\xe5\x1f_J\xd0=U\x88t\xe7\xab\xbb\x93J\xff\x923\xd5\xc7\xc8\xef\x00c3\xea\xab\xb4\'\bY}\x1f\x80v\r\xa8\xe4>\x185|\nF\xabB\x94\x0e_\x00\x8b\x95\x85\xbbE\\\x1a\xf8\xefI h\xd4\xf7\x8fo\xd3f\x7f\xc6M>\xd3\xa3S\xf3\xe1\xb4\xe4>P\x88\xfat\x86_wYv0i\x04JZ\xde\x1c\xb1qA\xceEj\x9b\vA\xf7.d\x80ni\xe5?\xe9\x89+\x1e;|M`/1\xba\x8cHd\x88\x990e[[\xb2X`\xda\xad;>N\x9f\xfb-\xf6\x96\xd6o,^\x8a\xea\f\x03\xfcU\x01%<{g\xdc\x14\x00O\x88\\\x19\xa9D\xde\xf1\xceE\xbc\xad\x00', 0x29a, 0x3) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0) 3m26.396183912s ago: executing program 5 (id=1169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000500000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3m25.957967054s ago: executing program 5 (id=1172): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x80000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async, rerun: 64) r3 = eventfd(0x0) (rerun: 64) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000009c0)=r3) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000580)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x48, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "a56cbe0649329ed1105a997550d07c0f20fa69acadf70491", "bd0c3e04facf4a7b8bfd86d9e504b4486c06df0798bb517e9e71b9787aef4a6b"}}}}}}}, 0x0) (async) r5 = socket(0x18, 0x6, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r6, 0x0, 0x79002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000380)=""/67, 0x0, 0x8080000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 3m25.912489461s ago: executing program 35 (id=1172): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x80000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async, rerun: 64) r3 = eventfd(0x0) (rerun: 64) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000009c0)=r3) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000580)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x48, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "a56cbe0649329ed1105a997550d07c0f20fa69acadf70491", "bd0c3e04facf4a7b8bfd86d9e504b4486c06df0798bb517e9e71b9787aef4a6b"}}}}}}}, 0x0) (async) r5 = socket(0x18, 0x6, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r6, 0x0, 0x79002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000380)=""/67, 0x0, 0x8080000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 2m12.27586735s ago: executing program 0 (id=2039): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, ']z\x00'}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048010}, 0x4000055) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000040)=0xfffffffd) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x8, 0x0, &(0x7f0000000680)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)) setxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000240)=@sha1={0x1, "2ea20a338e24d0104982626c33ac65e976c7ea42"}, 0x15, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000001880)=[{&(0x7f0000000400)="8b0a8c85ff574020ddd935fa612030", 0xf}, {&(0x7f0000000440)="c1f739679f5600d9a56f16f84ab52478388d854c26329434ab800b3b859f00dffe9cd4e6f0ca5502ba16dd0b67107a02008ff5bf67070565ccaadeaea4408e1c1a1a92a84ff5c91b0564c2e6ab9af4311aa931e981b4e15913180f7e21f579a00788f3d6ad006b71d5fa96739d328a3cece1ec8245f0cba2e7912a7465d0290bc9891ac346fe1e1c47f4ab3eed7573172cd30dd1fe9a2633c95d95018120c4512299c5926fad18f83b641e922fa9cbf0a0a0dde67866d995f72573d06bd5baffd9b61a638e37663e3e0385dfd45634e5bfbee761f6a5a5931e5de7a664cf41a6cf26999c59d33991e8984240205a1c12db4bb87279189958fc", 0xf9}, {&(0x7f0000000540)="edf1078f827a560a9815965dc5a7de26cfa8d35f66974239d168ea663533d6ad1d1d99b8763e45cf2d6ec0dcde50e1155082ca2332eaf2299efb6a7d6e188de187341a2b82500309177530aaeeb29398e0387bb8e004aaedd3c2b1bbf2cefc2d0cd10d5abb0c797b815ac02e7ea731a45df1fc648c39ccb8cb43", 0x7a}, {&(0x7f00000005c0)="58aab312af26cd65ed5c3951cb9baf042501b86e5371d311f09103270f58e96d6dbbab6864c32856152d066d2e695d6d69c69ca1f54c47cb313d8a53650912483e70f8f80d2df35d43abe66f75ba64472c9985e3a474ead12259b3e782219c0df972d523730080904c73d97bbaa2b0082537197546f4381b9ad4e1c24f986afe33cef9162dd09ab9e48fac3d78a859a3a5325c6d236f86977c43c3afbde3cad8d4c93257a3f212dd9ac54f7d1cb17688e8cdfcc1afdccd9a", 0xb8}, {&(0x7f0000000680)="335f10863d8ed246ff98544366022d647049688c7a29812af1133ea7b181a8442af54f66a54fd2c41bc2323caf196c4944d39c562a08c747e3304946e840589fad168f6bae8ae3b6445dd0fa016120bc822145f946966312c48db2265d5badc3405631675ae2d3a6f8fd6f8beda399e0f8f02a5e4d2f5467465d95ded188feafba4e887d767ce7e8921a9654cfbf07eb8bbed6df0ddeb10d2a834a19d44ac6f1d63b18a2f572a1fe560cb03e74ece6a0b2059f6991b837604a968b2c539d1e7174a1ee6b0e9e27b8393a9816d2e02d448fdb48d4ce1cc5fea3e11d703a96cb0712160e9f7e16759e312822493db1dfd2fb16fc21ce5eb39e898b89b1d0c4fcbcf523afcfd36f8e32cc0356acf43397af676cf0f81f80cff3a11cab308f1f74a67c0aa265e9a8a36e1bf9a3c022078b4059c052140d8475a16dee2298d4f1533eb12f39d28a01b5e4657ce8c0842e10850e6ef36dbc909f34390e8103e4f38bbeb8ec9eb311d478eb46deb834776164c53971011f19ee7ab4df74b54f9098916da3a9ab1d2c4a5d603854b851eb4a03800a7a7d0624a82145d98e7f238d9b77d22ec9ee8f37b891c4bd5151b007318318bc72ea1cc8f72a1052c7dfc12f06ef0daf0aee0cd74c64a0c40ebee14281a48ba0deff5bd4d53ac8ae858263480f6b80a999ee90133f15be0cd1d47bb4e57c3a7ccd7b56cc189c5842a612f46b9764c6541db2091a4134d611890b1afd449e777797d4b7f40a890478c03c7146c91559feffd6ee2cee7ae52072b664151eccb21f2463460a1b0511928a803a3d65cb3bfe3d8b2be8d7b7cd455f0100329941d15a62a5c2ba58fe7793414a82bbdac143e51ef430fc8fd79ecd8e52e8061257fb08217919dd92fe69ff848669b51fa58eba88d7a76fecb2967711b06569fce1d6403f00d625f3914090829aa19143eab19799e62c90085f65a3aa898085ae58faf373c335259bca55516f77af0bb5f5c46feeda45fe9c9d230dc153cd65c9e6e8fdda683b3c2cb4abfe5aed906940305eda285b76d8bcbdcce344d952234ffaf63e8078fc6fc44d404157eaa9c57ad65376947070c86d17f364f3e486e0513717cbf48644c252a17e6d9cb65eb71bb513196603e2551bc3c23e10d70e52730da43546d4a50bf1ec1dc63ee3f1fbe026dfc82ec4e25d7fb93639b5d3bdeb1d37c651fb5f598a9c754058cf11d2c42e5637f40a317831498aca7beaee3eb6528929b0d61714b1cb8278bb78bee1077ab9d306ab8662c281011963a245a8714160ff4f0d9de42ce58d1f8499a98456bc3b93057a118bd7dbd8f6bc79431fcfa2c9f81f8a07a2bc2f3c987424ad6d73106d11e79227d40a9e8611340aa3ee10707a2e35700df43379507d98c211e465f6368a92a9f89585998cedffb6abd8db6dc13bd9582f7f1efa02975a626867ee9a2229c02d10b0b500890a919307f1da499393c561b03867f37d69ba44b4148cd05ee722ba005e9127f3668c2c7df8e05ca755f118c1d7b890e37148c0741f1ebdf4b73d24d7e7e421b0f9ef9bb997d6781ba3ac438490faf9d7fcdd4ca93f5450e48ce404047a9abe7386ca64e90e1663a6cdcec9c22683ba4d038ab75b3508cbac882887c543022bb0a2eb72ddd300d42cd9f869f1907ec79293a4e3dc830e3c7c5f3dda3886bbe3b2d37f8699dc1e988d95f5ab3ccce3d6536c3806fbfefa91e5ae1714bb033293ce0926c60db380cb0c763260ab046708088596ba74580eb6fe35b70c187ce0e50fc88e49277ae147cc76c9937f1e8917da1d709a573d1bc61e58d4c084bf887d60a541e3e3ed164695169c8363354b7f56da79094213a7cf0d02819fa6afd405178a2b0e1219dd73b95cc18bf53d8a45d2f1c07abce73911bb827e4c8e9a94755dc6b62213986e19b33237b62046ab3262f250d9457f12adcc91371cb44cfe11ed3cefc1d389908b67b0806b49c6cc3c3ce02381c3a12acc76bf34d1ab1842467d8c1461c6ada81570e1cefc2cd135ef4977e0ce63d9b426b3f507bc4b4f0f37fecc4878a0c8a04503ce5a9c34c32231240aa290585e0b75cf82a027246e156da1ce562645b25083ba96842e296cceb40c8a82e5a7142e399f1221b8c36d8568226b28db62e5996fb64e4354f144626e05946138ce7e371cdad2f1db1e57f9610e9696b3ba27dfe4bf3ee3db6340efc515d4caef5157fd83577ca9c3586dd3d2918be51cf7538322fe43738e93d9292582af4d3cf2781013fe4b05ba207bd71732d2a86c529754fa4c94daadccac94960cb8291e8a0132914273604766d547353cf48557cb20c9a54092f2e8551c407b7ba881a3d5605aef73896a81c9daeebfa3c90ca17aa3fdd22168d8f5a963a925b7c64d8981e46b9dccad06a6e311f2e5e938139a663a51d0c960398b4c4649e733db19f1b7f51885d2e7d35f16ce8195b8ee6f8b9f6ec2b1439e4b624da72963712b86b15b4d7efc0be31d4a722c987f56f7fc60b9a8e95b13977b1348423518fcc74f055f702216cff3287cdaad281441841afb15ec17c4b2d07d2ea8012d4dcd469d92b1b4b8c593d6529edf95d4becf3c9ad7a3d22209fa8add55c8bf75db582745597406098257b5508b0b74bf39ed11f874b7d3c0dd8ac8de84d8a992b134a26d00a96e5e725221555e6d542af53c4d9c0c0ba048c7a7dff7c37db2559e0fb5fdc76b72f0d6a7c13299982a215706a6b694bdb3d4134b351560bf531fc0b16443c888b3b4b854a0b466903ed906ec6ee86021effe1ed0046427ec8f4455d73911591978e71e62017deed84a573624239dec7b4881803553521c26e20bbe75db70322cc93b3971776ff77b8feda6ef858d4c5f0462eededae04a1ba71ce1f737c65f396dcf9c511b53c762587933e4443ff0cd00b625e429905c3ffdde4c1fe41573592161e64752f7a19cbe6fcf1c236de2440238735b18057c0bad49e048512142ecd10cc11b1c42a1c34d2898478002a83e0e75c0d09a0941d06de2c4cd4f4ac6f3eef09aaf7ba4fddcd20aa048cb56272789531db136fdb89f5d1a40c9063dee630824a04450a24f315184e629f4d2f51aee94ee1a1b50c572c250a40754e3a90dcec6d25e51ef35dc966a529359d09660ddad004d2e4d801325d5e6be168c726153814192304ccbfd34c480495c91dd79e31e27b055ead20a19c6d3dea6c7734dd638f40aa0d51cf614a2ae87827dead52a9b5da1496c195a24b5a56c3c0e0e31caa12f9ce580c35c0e8c05190ad12c9a8b3e98fc8aa7a00dac40ad0ffd36f7e5e685890db789a62bc092963b8e70b4e21cd2a48592b54548c521e0faa2d5c830c2ff4456796277a8a32da0d845b1dbead52d1f5897308be3f866245f96866219612445b4f917e4eff8822449e84a60b30ab3a26b2da94cfe0a1fd8e7e55e07dce04fe6f303d4dc4d741be97c63dde0c086121e2a21a56b0ea72ddd0d6f4e47fb2470eca46aa75c3a31fb3db600c99a7ccdab509b3dd6c7df6e489ff5005a7a04be500022a28dbad53e1a11345a229813a91b282089f4c97d52d2d4364624fc5069bac6e9e2ee83fd2b70cd79953b852621e984291f00956f16d55412cb4b069d89e2f0fd55affd57342aa213559d2ffe30e97133000c6d53a063633f2b63eba581a9a09a79797fea65e264d1aceab2406667bbdd60d3af89367f0872abc09d7e1d55441bf58930d5366b106588ef35cd93b1dd1e36c47d1fc48524d79ea5eb48b9717e3aac5e93e35d2c4a689f865362d086096e445556e1cd44a2095e5ba48115f1faf462cf460a6ed93cfb54c8a30a1454abfff980e08a9754643a9ea6cab1cc472d3b6cc268b9363f755e10188d5571e54087adab77ca1cf6c88d00c7bc896d685bcc3f3ab299ea0f906b4b28820457db01361f5a2d17ef7ee417714886a137495f79c3d9251b0239fbc9083b3eeae558d4e13aa860454dd078215d3e4853edf448d51855dc2bda6868ade262abe34b8a2f1e4ad6c3222d1ae9b8a0c8fe837f717ba27fcb09a11821acc0d009ddcec3a959f5854c8398b138c10b981f3788785b725bb27ccac32ce4078aef9596c7197af78d880ee4548bdcd84d739720006fc24dc39ffa208cabca9f2ea9cb3f7686526e09e14c6c3f230b3b489f966c3ae85994c1f7eb811774647f3079123ec154ba768caaa8180b2b4ed4ded11df8660959ab2462712884b7382da9ec79919fdfeca0c46bf8a5611f5b9e0be47331ee7ab699399e929b6f4c403fb1d8617ac73c0fd389768b39bcb8c2f775c9530563533ecf050bfba8a133d8fa48f551090cb35673811f2ee8cc48df476a174f37635bd1fc3e8896e292408b8678eaf8bb15ff3d8f86abdf344b74795d69085d676a334cacd1ac05ab013d3e4e44db39dba79fa892059649495c74ed57f2e4cd59468889933ce30849af097eb256461d455972fd84915c47ece09980f7d2d6f5331faa09774d3d8666187f2ef02deaa39551e9e1f64ecf0d4ec1ef0f09ca929570c12027ede7826137d22188dce73351d7d3a1a337f595a775b7967dd72bf117905b1798d56b16da7e4e773cb45cce06ea8c17e777e2e8e090ec09db10cc4fd8c24b105d274c23fedb028d6ac33e9237d602748325de8ff47469b4ee499d0d7de28fb837043658bc96a796f5bd4b3d6c5d1ab7fe3ec985ec853ff6981399eebf03d653e192e04388e71f0bbd3d5883a5a5a8489b59aaeaff61ff880918873fa781287d5b0acfc15e791f5b04e4a9928a61bf463483cb2bd91d9b802156bf8d61db13f1ff2155debb644b956fb65f2e23b83e9f5d6bcde4444e967f81a010958e71334ebad29de73873c649022eda3582d97eaad928c22301a9933368e690f6e92615c265837619d8af67e29bd0dad36f63336a7a1c723305fae80be39374076bda4f2e13ffea715f6ba19c9d07c7c087deaad50e255e79fa2f0a2a508a28f3ef065a4e65aa17dc096c3bb6a809", 0xdc6}], 0x5, 0x0) getsockopt$netlink(r7, 0x10e, 0x1, &(0x7f0000000340)=""/216, &(0x7f0000000000)=0xd8) mknodat$loop(r8, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) 2m11.346208728s ago: executing program 0 (id=2050): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000400000000000400050000000000100004000000000020"], 0x24, 0x2) pivot_root(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) 2m11.345303407s ago: executing program 0 (id=2053): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x400, 0x200004, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x91146, 0x204}}, 0x20}, 0x1, 0x0, 0x0, 0x4604}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) (async) sendfile(r1, r1, &(0x7f0000000000)=0x8, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x400, 0x200004, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x91146, 0x204}}, 0x20}, 0x1, 0x0, 0x0, 0x4604}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) (async) 2m11.240275414s ago: executing program 0 (id=2055): io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000000), 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x2, 0x8000) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x108, 0x4, 0x7, 0x101, 0x70bd28, 0x25dfdbfd, {0xf, 0x0, 0x9}, [@generic="aea69d2da5009819f20de6d64fb1b76f373ce82e1788a9d5db6049979be8a028d2a0d6cf8def2dd15c4aac215de8e2ca6e9fe458c7231151e6c423877d3135c4578743187b6304e231f90523f089072bc1a8398425fd8ff18bf1f4009b13cea59654fc3b8d8c284183a78fb19d7e89e8ff80bceae75d0b23947733413628b5de5008db15a3c4fbc21b91e00377eb119ec34fbe69661633968e26191f0e68cb0a68ed0ec4f97e99ac755145aec4e34a3da51f8a7d55f23fa32daf414f045bbffb247952933c743639970143c8233fadc92fb6cdfaa071f410f39de5edb75836eea4047c4b063b2e7ed3fa8a91538b48783fa56db2"]}, 0x108}, 0x1, 0x0, 0x0, 0x313d2592433c4a91}, 0x40004) (async) r1 = syz_io_uring_setup(0x1203, &(0x7f0000000280)={0x0, 0xa7da, 0x10, 0x2, 0x2da}, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001b00)=[{0x3, 0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000380)=""/230, 0xe6}, {&(0x7f0000000480)=""/126, 0x7e}, {&(0x7f0000000500)=""/4096, 0x1000}], &(0x7f0000001540)=[0x1, 0xa66]}, {0x7, 0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/172, 0xac}, {&(0x7f0000001640)=""/181, 0xb5}, {&(0x7f0000001700)=""/143, 0x8f}, {&(0x7f00000017c0)=""/149, 0x95}, {&(0x7f0000001880)=""/204, 0xcc}, {&(0x7f0000001980)=""/41, 0x29}, {&(0x7f00000019c0)=""/79, 0x4f}], &(0x7f0000001ac0)=[0x0, 0x9]}], 0x2) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) fstat(r0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(r0, &(0x7f0000001e00)='./file0\x00', 0x2000, 0x200, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f0000001f40)={0xa0, 0x19, 0x2, {0x100, {0x20, 0x1}, 0xc, r2, r3, 0x8, 0xfffffffffffffff9, 0x6, 0x7, 0x7, 0x0, 0x4, 0x1, 0x800, 0x5, 0xb, 0x5, 0x0, 0x9, 0xeaec}}, 0xa0) r4 = open$dir(&(0x7f0000002000)='./file1\x00', 0x840, 0x59) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000003480)={0x339, 0x0, &(0x7f00000033c0)=[{&(0x7f0000002040)=""/229, 0xe5}, {&(0x7f0000002140)=""/197, 0xc5}, {&(0x7f0000002240)=""/128, 0x80}, {&(0x7f00000022c0)=""/128, 0x80}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/88, 0x58}], &(0x7f0000003440)=[0xfffffffffffffff5, 0x6, 0x2, 0x7fffffffffffffff, 0xaff7], 0x6}, 0x20) (async) ioctl$int_in(r1, 0x5452, &(0x7f00000034c0)=0x7) (async) r5 = add_key$fscrypt_provisioning(&(0x7f0000003500), &(0x7f0000003540)={'syz', 0x2}, &(0x7f0000003580)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffe) (async) getresuid(&(0x7f00000035c0)=0x0, &(0x7f0000003600), &(0x7f0000003640)) (async) read$FUSE(r0, &(0x7f0000003680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, r5, r6, r8) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r0, 0x84) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000056c0)={@id={0x2, 0x0, @d}}) (async) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, &(0x7f00000057c0)={0x0, &(0x7f0000005780)=[&(0x7f0000005700)="f055d3a5aa9d4c99f1c92ca40fd23818566860046fadf33d9588ea90f24b9f5c87faa931553816b7c9010f13facfae5b53ce93d6d329fe16213b65ef7bca52b48ea3eafe0466926bf30664e30b855cdb2c812b7f17c5395079de0865dcb8e7861d2f521f8ac0cefaf9e8188b9ce385a6987ab6a6213e54c95ca7"], 0xfffffffff7f31848}) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000005c00)={0x2710, 0x1c0, 0x380, &(0x7f0000005800)=[0x0, 0x9, 0x850, 0x64d, 0x9, 0x8, 0x280000000, 0x71d, 0x8, 0x50, 0xfffffffffffffffd, 0x5, 0x4, 0x8, 0x9, 0x82, 0x8000000000000000, 0x5, 0x18d, 0x2, 0x401, 0x8, 0x6, 0x1, 0xfff, 0x3, 0x10001, 0x7fff, 0x7, 0x9, 0x5, 0x100000000, 0xffffffff, 0x878f, 0x7, 0x7fffffffffffffff, 0x0, 0x100000001, 0x8, 0xfffffffffffff000, 0x34e2, 0x7, 0xe, 0x4bd, 0x1a7, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x100000001, 0xc55, 0x3, 0x9, 0x5, 0x4, 0x4, 0x8, 0x6, 0x4, 0x8, 0x3, 0xdda, 0x7, 0x7fff, 0x5, 0x7, 0x6, 0x2, 0x10001, 0x2, 0x0, 0x6, 0xffffffffffffffff, 0x80, 0xb400000000000000, 0x4, 0x7, 0xfff, 0x6, 0xfffffffffffffff9, 0x4, 0x1b, 0x7, 0xb, 0x5, 0x7f, 0x3, 0x2, 0x8000000000000000, 0x5, 0x6, 0x4, 0xf, 0xffffffff, 0x100000000, 0x19, 0x221f, 0xfff, 0x7, 0x0, 0x9da, 0xc000, 0x8000000000000001, 0x5, 0x3a, 0x8, 0x0, 0x80000000, 0xc, 0xffffffffffffff01, 0xfe39, 0x101, 0x8000000000000000, 0xfffffffffffffffb, 0x1, 0x9818, 0x7, 0x0, 0x401, 0x3, 0xff, 0x5, 0x4, 0x2, 0x7, 0x3]}) (async) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000005d00)={&(0x7f0000005c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005cc0)={&(0x7f0000005c80)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x810) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000005d40)) openat$cgroup_devices(r0, &(0x7f0000005dc0)='devices.deny\x00', 0x2, 0x0) (async) setreuid(r7, r7) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000005e00), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000005e40)={0xd4, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r9, 0x40206435, &(0x7f0000005e80)={0x0, r10}) (async) getuid() (async) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000005ec0)=""/103) (async) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000006100)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000060c0)={&(0x7f0000006000)={0x8c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '\'&['}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20}, 0x40010) 2m11.239809147s ago: executing program 0 (id=2056): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xc1}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0xff, 0x34424752, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1}, {0xfffffffb, 0x8e}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x2000) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(0x3) sendmsg$sock(r3, &(0x7f00000003c0)={&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x0, 0x3, 0x2, 0x1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000580)="81fe91010b45fbb02668f3e60649d556a57b8626a68390614010d7bcf7774cd32810af33dd93457df1fd840a8a797016e6f07be260c167f9031ee7aed5dc089ddcf1c9b6e9fdec57787be48d12de23e6a96f4c142835f2ae364f0201d9a4e9c090f49c9e0ea3b046d8e12aef59cfafc5d3a07568384a8bd5173d7b21e9ff6996f3e5c63c86817f5c242b459f4643416778348f6d8f338f036e31d24c2637dde8599ac336a350d793b4e92e69fff72620709428600e5a31ca1d8d12a52af1597e5a65490333a930b9d0a510c4d67d45759af0", 0xd2}, {&(0x7f00000004c0)="afcf6111c385b6eb36d5e622721df692317a66fd89d01f679660e19c76f6c2bfad8bc66ca6741d2b51fdfafb4755095909aec2697dfb338b6e8fc04e2e16b2ccdbe1525be78bed017d9f6415ad92f8566e26140a21d12a5f3e767202f8c4afdebcbf3578", 0x64}, {&(0x7f0000000680)="ccb77b5d033bcc3f34dea265097fb68d3903a78ba486fa2182f035087e7e73c4a2114de5ff58d95c3cca8d36d3a634cedfa881851add84d6f92440a1263d232aed634939bebc1e837d8c154b99fb72289f57436e8fdc5134038777553be613314d6e45ce587d9e560788c5826bbc826ed185d473670b0693e42ac987f2c870f7da36332265", 0x85}], 0x3, &(0x7f0000000740)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8df8}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0xb44c}}, @txtime={{0x18, 0x1, 0x3d, 0x1c0f}}], 0xa8}, 0x800) write(r1, &(0x7f0000000240)="27fe000014000707030e0000120f0a002f000100f5fe009d2fb112ff00fa50008a151f75080039", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a00340002020202020200000a0006006bcfad8779b0000005001907000000000000006f230468c984d97512006c0900000400af00"], 0x48}}, 0x0) 2m10.256908714s ago: executing program 0 (id=2062): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x181581, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000100)=0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000080)) 1m54.19630125s ago: executing program 36 (id=2062): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x181581, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000100)=0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000080)) 1m41.017632452s ago: executing program 1 (id=2522): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007b19a200000000008510000002"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 1m40.953293223s ago: executing program 1 (id=2523): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000c00000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x82000) mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r1, 0xb000) r2 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000080)='./file1\x00', 0xb) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x3000016, 0x0) socket$kcm(0x29, 0x0, 0x0) utime(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)={0x6, 0x5}) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000100)=0x40049, 0x4) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f02a, 0x17}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000340), 0x8) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x3ed366ebabb3fad4}, @TCA_NETEM_REORDER={0xc, 0x3, {0x8004, 0x2}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xc77b, 0x8, 0x6, 0xffffff7f, 0x5}}]}}}]}, 0x90}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000c3000000c3000000070000000300000000000011030000000000000001000000000000020000000004f2ffff0100000f0300000005000000ff0100000010000003000000f9ffffff00030000ae0100000001000000010000000900000001000000070000000a0000000000000b02000000000000000600000d000000000900000000000000100000000100000008000000020000000300000058f5d0feca787f7ef6a58a42a9050000000100000005000000090000000000000007000000010000060400000001000000440b00000000302e5f5f2e00"], &(0x7f0000000440)=""/133, 0xe3, 0x85, 0x1, 0x7}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680), 0x4) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r10 = dup(r9) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x1c, 0x2004, 0x0, 0x7, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0x1}, &(0x7f00000007c0), &(0x7f0000000800)='%+9llu \x00'}, 0x20) 1m40.590454318s ago: executing program 1 (id=2524): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000c00)) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='hfsplus\x00', 0x204001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000c70206010100000000000000000000fffe16000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a30000000000c00078008000e000000fffd050005200ac400000500010006000000f8b33cd0b96ed9aedf82981ac655e6503a814c90a90b4c6cef052f5d6c54a885191818fc3cef553dd0659c011c7125a1e3c1c437d59885d13013ab6fd499aa424a06a865b42ed5f42c6c416b74eb1c9195426677888d8a507de7c5fe945f47716b17fdd2"], 0x5c}}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r6, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000180)=0x7, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 1m40.448253488s ago: executing program 1 (id=2526): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x181) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) syz_clone(0x80000000, &(0x7f0000000100)="2afb092f6d87ea8a332eecfc55cd2819ebf6ce2dcab8a24656b34c0c1877cab22ea27841a104c9688ee66dc12d8beb2966406841f080c304ee", 0x39, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)="c3f9492c1ddd8cd5fabcd3a12e33ab371a8ec018c88dd4e0d3bbb178fe46bc49d9f05b61d0d1c5dc82d161dbd0041a8692a647a38927e946500c1cd77cd2119d6ac34946b04ad78b136fcfcb8681d33ed8fa5afbc7369f535a0547d6a280b111ad1bcb3ac11efc9ad3fda94ef57254e41b50bb30d6dcf01f6b4afdb3e5b7bfc6e06b0f63c8c8a34cfe") r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, &(0x7f0000001c80)={0x2020}, 0x2020) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) write$UHID_INPUT(r0, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) 1m40.365024256s ago: executing program 1 (id=2528): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560211820fffff5bab4e210200000058006f543bc2945f640094f96a0325010ebc000000000014008000f0fffeffe809004000fff5dd000000100002000400080004000000224e0000", 0x58}], 0x1) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="01000000002b580d7cc5cf651b00000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="020000000100"/28], 0x50) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000240)={0x1, 0x658, &(0x7f0000000100)="be5b4fe4a1b8f7324dbd41f0082b984071bcbc54d8e173565f51b78bde10167b4915c8c30bddea21acf5742a9555a7d1754470819392f4f8360036dd3bd2894629dd7e387601f2794339026cb85931046780bc7921", &(0x7f0000000200)="b7c23be61787d4ecf11f80c38e587c8214e76fcb0957e7582e6d69d58a31b5d03a14587350c2d88a005638614a53a444b9d16a2923b5ca", 0x55, 0x37}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000000)) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xc, r5, 0x4}, 0x38) sendto$inet(r3, &(0x7f00000003c0)="b0ced5629d5ff45c3a98e16f4458b96950e2ff18f1ce04da991c58b98432e0d9aa12211c8101f6468f75b3ed9924f33a55d549ea8e1eecea20dd9f50211abf473055b5643dcd09cfdec74bf730199a7a6d64f93322a7b7cd6f824137813065832a0bef", 0x63, 0x80, &(0x7f0000000440)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) vmsplice(r8, &(0x7f00000001c0)=[{&(0x7f00000006c0)='=E', 0x2}], 0x1, 0x4) 1m39.499421507s ago: executing program 1 (id=2534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0x1, 0x203, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0xfffffffb, 0x8, 0xb, 0x3}, 0x7}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000820000/0x2000)=nil, 0x2000}, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0) r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000e11000/0x4000)=nil, 0x4000}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 1m39.435216066s ago: executing program 37 (id=2534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0x1, 0x203, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0xfffffffb, 0x8, 0xb, 0x3}, 0x7}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000820000/0x2000)=nil, 0x2000}, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0) r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000e11000/0x4000)=nil, 0x4000}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 1m35.340511389s ago: executing program 6 (id=2578): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = openat$mixer(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000080)) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8304050000000000380012800b000100697036746e6c0000280002800500cf00040000001400030000000000000000000000ffffac1e00010800080039"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) r4 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={'sha384\x00'}}) timer_settime(r5, 0x0, &(0x7f0000040fe0)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x1, @local, 'netdevsim0\x00'}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)="8aa99ac44141eb21630ad48abba677a15523324b39def62374070ab6555d0ff43099a5599c50e77bc0530ba9f2b3052bce2cba3795eea2e454ea4fd6321b5fb3a22c0cccfee94f013c9cad08031084635ee0d1aae5e8a322d6d5de7cd365df97e63a99263779776277bda57642973b129a05d874564dd1d61bdd9a0f25ac6dc62fba82f2fcf80cd8495db42384afc84cf1b58b027bed151b0b3a75dfeadbe4e71830057b1914eeca5ad0d86b74689f05e1a94b34c2c2387c411ee25032ff5272c05cffb082bf6c0c76ecf0784f2fe63fcf70ff3bb8", 0xd5}, {&(0x7f0000000100)="252c8b9036e76581ee183e7a6611217d073ffc859267e3a99a4bdc881c33397c3835e6fd6bd5284925ec1f4ba8bad8e36bbe62ff1ca24c19c432f6cb71bc50c58302061a63784419348014", 0x4b}, {&(0x7f0000000280)="55e75fc4bf153ab07901e1368cae2aeb616db9aa795f342b", 0x18}, {&(0x7f0000000480)="e52606a63c5229a26b504a15b1b3732df0572dec3622a225b32ecf24217e549bf5ea0515b5fd535655ed54f9c64d59f588442d04f096d01e2728c9b40b31efd92589889f284fd13aa4a837c77833db4f3721da9e2c4f3d09d82e05e91a339a6f3566e634fca33894312e4f146868616dc41811e0cb6cc27e60ecd7e74ff4322db0092efc0dcba4524105b3ba070bac4d50f44789a7dfda2018159d29cee3e0891f45ac59567e", 0xa6}, {&(0x7f00000005c0)="805696a86dd1c7208b00c47e05925be6f177774d31fabcf46737ac9228f6bb80120b36a0a3e5ab10f5d73022c8dd8119e70e9107c091bb96c698742e7b43d1a7370d46be0cdb7c842a6373c8e10b0e54a95074081a7852a73e1c87c9863e2419d668a1c4276267202857dcaa55f3585470bc5eb8863e1cc8b4996ed85785adf93dea759cc2d477ce4124e30bd9725a610c42b109ba7ef39ae1e07deb6b5623", 0x9f}, {&(0x7f0000000400)="7db937ff1c935c1e77410da3bc897adb52272cd5085c031fc4ee2e", 0x1b}], 0x6, &(0x7f00000008c0)=[{0x30, 0x88, 0xffff7fff, "790e73ad02b5f3004f9c06eb4f8b582de38024d72e6e23628e3805245f7bcd"}, {0x50, 0x6, 0x2, "67cf42f13f967f2837d43b9a4df11bd4951521c1996e71896e207f6b317b8f8501cd9ca514b3496063335165e0165212a3082929f9e40e69149dd1"}, {0x80, 0x31, 0x4, "f4ac40faf3bbff90749445e94b0ad93cb757b2b4c42e2f5b4fc045be740b16423dc90d4d4e866bd012b58ec0b2ba548c5faad24a7113932555be9ddb88b313a162bab5f7548b21aa3c38f33936197746f32a0b9cb57f490cccde5824009d8805464bb4dde5429a035bc96baf0f0d"}, {0x68, 0x10c, 0x9a0b, "3e0986055394c219866546f501cd2a76cffbc7a7c8034df5d7e033ef3f21284b0ba8ed8b3a9f123bb4c18ec387ca9f1d8b2a2517a294031d7288a9e01d8ed4880166d925b4808c8a0afcfc56be3ca706ba9d70"}, {0xd8, 0x10b, 0xd4, "c04f0b39b5d44980c2ad362537c58961aa19518b4c173460b436f14a1f76764f57df0fbb062157d1ae47672bd59b142540f0b2ce17617d071b7ebbc40f7a27a0cf3d825089e9516ea92c65dced78b6003f86174ce2e1afb95e435e9bf2db920fda9ac9e5941f3c8de137ab0853d0026e83c0c05a5f6e95327b7eee94721e44018de06aeb4e0ea35d44f39cd0d5521d7d3ed7062aca6eae1bfe0d9a77aeb1bdc3047fc931481345b7217af9f8c8ad6c3d4c7cf3fba1156839e7c7892901db3f85d8db3e79b18382"}, {0x88, 0x115, 0x4, "ddc46a44719f2fce10e00605956e5ba60606783ece690c7a76a76ecf4b1aaf3fe298ee93321106cbea48cb2dddb6b57967a02686d4e9790335696ad59d65f6eb977e7a5c17628186e70cb1f31aad0b4ffb44b2b419529c30f72730e09e9fae23937a5cad21f6ede7d008019a47248346bf5ce44a"}, {0xe8, 0x29, 0x10001, "21a26367dbfbf577d2565fc0fce1cb9e10cb23d5f645f1631fbbf538211a5c806cd2075ddcaf3d48b4b6c8e8cd7171cbbb2eb5069f6989ed7b0f6329b807900c661c224200c2688b734fec911b119189541944f4d8bbfca26adead2c3c726f7e580c29dc1a5eb6cab4a04eb76689f4f1601d55b6570cbcc50872c562f514759f4f2131a4bc2037c0d9c68d8f33cf78e9fde30ab6f94f857269143bcf71447d687995927fd9282f6c0467fd545f9f58b8c5e7eb82564b986c11e04a98585486b1400e6829d4c9c15a3624a98cfee9709fd922b81a"}, {0x48, 0x11, 0x1, "38367412e746b736c524d9d845bfb427a015fdb82edc39ac00eae326c63d414dde20b652307e27a33299b3369351ed209bdae05b5837b05b"}, {0x10, 0x84, 0x3}], 0x408}}], 0x1, 0x4001) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m35.27078699s ago: executing program 6 (id=2582): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000040)=ANY=[@ANYBLOB="75737271756f74615f626c6f636b5f686172646c696d69743d3865342c6d13d358f6f381d9256561737572652c6f626a5f757365723d746d706673002c00"]) 1m35.266544307s ago: executing program 6 (id=2585): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}, {@index_off}], [{@fowner_lt={'fowner<', r0}}, {@subj_role={'subj_role', 0x3d, 'upperdir'}}, {@uid_eq={'uid', 0x3d, r0}}, {@appraise}, {@measure}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x22044, 0x0) rmdir(&(0x7f0000000380)='./file1\x00') mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x1) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0xfffffffc, 0x1, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb936aa680b652a88ccf56a1b9ca5386103a5ccbe47b7b9aa6d8d7fca2ba00000000b97800001022f987617c318545790d2200", 0x12}, 0x60) sendmmsg(r2, &(0x7f00000012c0)=[{{&(0x7f0000000400)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="f4f981", 0x3}], 0x1}}], 0x1, 0x8014) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000000)) 1m35.264075726s ago: executing program 6 (id=2587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x11d142, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0xa2, 0x81, 0x1}) r2 = socket(0x11, 0xa, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_cmd={0x4c, 0xb, 0x76e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3f}}) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000)=0x7, 0x4) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2b40, 0x0) close_range(r4, r4, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1m35.136883754s ago: executing program 6 (id=2590): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00') r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f0000000240)={r5, &(0x7f00000001c0)}) unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a5, 0x6, 0x1, 0x80, 0x6, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0xfffffff8, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8d, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0x7, 0x40000005, 0x6, 0x2, 0x4000, 0x3ff, 0x1ff, 0x9, 0x7fff, 0x762, 0x5, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200005, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x7, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x80000000, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x6, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xffbffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x9, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x202, 0x2000007, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x9, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x8, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x35) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000a80)=0x1, 0x4) r8 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$SCSI_IOCTL_START_UNIT(r11, 0x5) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setaffinity(r12, 0x8, &(0x7f0000000100)=0x8) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m34.97792884s ago: executing program 6 (id=2596): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) (async) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) close(r0) 1m18.86466247s ago: executing program 38 (id=2596): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) (async) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) close(r0) 6.704562497s ago: executing program 9 (id=3590): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x12) close_range(r0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000f1d0001002bbd7000fbdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="100008011400010000000000000000000000ffffe0000001"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@loopback, 0xa, r8}) 6.414605207s ago: executing program 9 (id=3591): syz_emit_ethernet(0x12b4, &(0x7f0000000780)={@local, @random="4ac698a8774f", @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "3a2bf2", 0x127e, 0x2f, 0x0, @remote, @private0, {[@routing={0x3a, 0x14, 0x1, 0x0, 0x0, [@local, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x10}, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @local, @dev={0xfe, 0x80, '\x00', 0x36}, @mcast1, @mcast2]}, @fragment={0x81, 0x0, 0x4, 0x0, 0x0, 0x1d, 0x68}, @srh={0x33, 0x4, 0x4, 0x2, 0x8, 0x28, 0xda7, [@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xc3, 0x3, [], "92e0d8a7691619f025a0d6787c4fc6d7672ffdc80918c4982ef087c653e512ec1cd05601d7a06d007f5b68e14c62f1febb82baefe36bd9d58e25329369f75f6f05b6fc03f45165ace1936a1ea233807f8b05fa2283ff31bc9439f4cca4422b75c56d33e5853a61bd074104c9d8fbf95f18275ce1e91d1e683428422b265477859bfaf9752553f8f30a4edfb7a831dc037d76d3fd0d359ae8bb17aa001ab3a52caa85c21290e1e4485a05034b0c5eaf6ffc6598e1504e7a2e9e5b485e474ab25b8d81f6"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "a641f5f3c26f5b8a596824bc151f7533b9c7d8bbdd3a9ea582f84530527686bf30f96b3445c7f60b6335e179d6cfad6e5085284263970d48572cf8860237df5ec7bb5357138cdd72b73494b16453160dbbd7d7f6cccc5c10922f4b043f792cfb34e0fdda4f62561fa8d9aa4b8e5843d0eb96a2ca81f537"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x7], "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"}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x5}, 0x1, {0x4034bedf}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0xda, 0x0, 0x0, 0x1, 0x3, 0x7}, 0x2, {0x9, 0xfff8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "a046bfc2b462a17b1bd8eac7a7b4ecfa39b5381fcff35f4449bab45f03e9d25bb762ef1205da"}}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='personality\x00') preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1, 0x68, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x11c) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000240)='vxfs\x00', 0x11, 0x0) 6.249389305s ago: executing program 9 (id=3596): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x70000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async, rerun: 32) r2 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) (rerun: 32) ioctl$TCFLSH(r2, 0x400455c8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair(0x23, 0x4, 0x6, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 64) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000100)=0x4) 5.304201784s ago: executing program 9 (id=3603): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}}, 0x5c) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc4, @loopback, 0xfffffffc}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x1, {[0xffff, 0x101, 0x4, 0x5, 0xffffff26, 0xff, 0x1, 0x101]}}, 0x5c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000480)=[@exit_looper, @clear_death], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) chdir(&(0x7f0000002300)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200), 0x4000) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x3}) ioctl$CDROMREADAUDIO(r5, 0x530e, &(0x7f0000000280)={@lba=0xd, 0x1, 0x42, &(0x7f0000000380)=""/66}) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 4.390842874s ago: executing program 9 (id=3615): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000117c0)={0x14, 0x28, 0x9, 0x70bd2b, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x844) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0xf4, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) 4.095959541s ago: executing program 9 (id=3618): mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x208000, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="b0593d9504000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000280)={{0x52a, 0x5}, 0x100, './cgroup\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.005526647s ago: executing program 39 (id=3618): mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x208000, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="b0593d9504000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000280)={{0x52a, 0x5}, 0x100, './cgroup\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.968420123s ago: executing program 3 (id=3626): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd7000000000001400f2ff17000180140002006e657464657673696d30000000009287cf690c00fd000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000480)=0x7fffffff, 0x4) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioprio_set$uid(0x3, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r5, 0x0, 0x0, 0x100008) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008001000004"], 0x50) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x7, r6, 0x80000}) 2.88461174s ago: executing program 7 (id=3628): acct(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r1, r0, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x29, 0x0, &(0x7f00000008c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x28000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x9, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0xe) shutdown(r4, 0x1) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000005c0)=ANY=[]) 1.433770086s ago: executing program 7 (id=3630): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000002580)=[@free_buffer={0x40046307}], 0x0, 0x0, 0x0}) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r1, 0x0, 0x0) 1.348498033s ago: executing program 7 (id=3631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000002c00000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.348312817s ago: executing program 3 (id=3632): madvise(&(0x7f0000a17000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 1.19882878s ago: executing program 3 (id=3633): socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'veth0_vlan\x00', 0x200}) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)={'bond_slave_1\x00'}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'ip_vti0\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000000)=0x1000000010) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x4}, @empty}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f8}}], 0x100}}], 0x1, 0x4044805) ioctl$BLKRRPART(r2, 0x125f, 0x0) 919.2214ms ago: executing program 3 (id=3635): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRES32=0x0], 0x14}}, 0x4044) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x7) 851.923195ms ago: executing program 3 (id=3636): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80000) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ff"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) (async) r6 = fsmount(r5, 0x0, 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r6) fchdir(r6) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)) 742.774687ms ago: executing program 7 (id=3638): openat$mice(0xffffff9c, &(0x7f0000000140), 0x100) r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, 0x0) 653.184563ms ago: executing program 3 (id=3639): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0x25f5, &(0x7f00000000c0)={0x0, 0xc63b, 0x0, 0x0, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x800, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4000801) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(r1, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x4, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r7, r8, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x50, r1, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000009, 0x10, r1, 0x10000000) r11 = accept$netrom(0xffffffffffffffff, &(0x7f0000000200)={{}, [@default, @default, @default, @netrom, @rose, @rose, @remote, @netrom]}, &(0x7f0000000180)=0x48) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x74, 0x0, r11, 0x0, &(0x7f00000003c0)="2b34e39edacf70a7c1677e63a32da3011e99cbc8053b8aa804d5157ca6f93beae2aebf9928b834e63bbaa92d7ba046355825bd11136116bfbfb2561c0fbe6e76bcce0b93fe81cd3b022ae0f6b79fcf60df8931a21aa0d712f915da97aad1e7d583ff2ab84541d74252cedbf581892281b283e9375051", 0x76, 0x40000}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r12, 0x0, 0x0) r13 = dup2(r12, r5) write$FUSE_NOTIFY_POLL(r13, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x4}}, 0x18) r14 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) dup2(r14, r13) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r15, 0x0, 0xffffffffffffffff, 0x1}) 586.555445ms ago: executing program 7 (id=3642): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) ftruncate(r1, 0xffff) r3 = gettid() prlimit64(r3, 0x5, &(0x7f0000000080)={0x8, 0x4}, &(0x7f0000000140)) fcntl$addseals(r1, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x10000, 0xfffff000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) lseek(r4, 0x6, 0x3) 581.206443ms ago: executing program 7 (id=3643): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x2, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01022abd7000fcdbdf250900000008000300", @ANYRES32=r8, @ANYBLOB="080037000100"], 0x2c}, 0x1, 0x0, 0x0, 0x29045}, 0x8000) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000240)="f7293eda8d516e660f164fd5baf80c66b838833b8466efbafc0cedb809010f00d87c00c101d10f20c0f30fc7fe0f22c0660fae38b8a3008ee8", 0xfffffffffffffe02}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000044d564b"]) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x40142, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r11, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x7ff, 0x800000000000008, 0x9, 0x7fffffff, 0x6, 0x5, 0x1, 0xb608, 0x6, 0x2, 0xfffffffffffffe01, 0x7fffffffffffffff, 0xc6b, 0x3, 0x42, 0x101], 0x0, 0x1000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0xf0, 0xff, 0x7ff, 0x0, 0xfffffff0, 0xfffffffc, 0x13}}, {0x4}}]}]}, 0x48}}, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r12, 0x5411, &(0x7f00000000c0)) 341.601516ms ago: executing program 8 (id=3644): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'nr0\x00', {0x2, 0x0, @remote}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01040000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000030000000180a0101000b000000000000010000000900020073797a30000000f30800010073797a30"], 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xdec8}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="0212000002f88103af169c7ee03141708c02425be5519d2a0643fd6b86556116dc0d39"], 0x10}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2800082, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x25c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xffffffffffffffda, 0x0, {0x5, 0x0, 0xfffffffffffffb38, 0x7a3, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4e0d, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) 236.242818ms ago: executing program 8 (id=3645): bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x80800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x1, 0x3}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) io_setup(0x226, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x2, r3, 0x0, 0x0, 0x200}]) io_getevents(r4, 0x2, 0x2, &(0x7f00000003c0)=[{}, {}], 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000340)=""/81, 0x51}, &(0x7f0000000040)}, 0x20) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x210000, 0x0) openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) io_submit(r4, 0x1, &(0x7f0000000880)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7, r1, 0x0, 0x0, 0x20a}]) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000014c0)="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", 0xfd1}], 0x1}, 0x20000000) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, &(0x7f0000000a00), &(0x7f0000000a40)=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r9, &(0x7f0000000400), &(0x7f0000000440)=""/180}, 0x20) syz_pidfd_open(r7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000001c0)) 129.689574ms ago: executing program 8 (id=3646): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000000)=0x5, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r5}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000280)={0x60, 0x140, 0x10, 0x258, 0x3ff, 0x1b, 0x1, 0x1, {0x5, 0x7, 0x1}, {0x2, 0x6}, {0x7, 0x2e6, 0x1}, {0x1000, 0xd}, 0x2, 0x1, 0x6, 0x1b4, 0x0, 0x0, 0x7, 0x400, 0x3, 0x7fff, 0x3, 0x5, 0x1}) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, &(0x7f0000002fc0)={0x8, @multicast}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000140)={0x2, 0xa1}) ioctl$IOCTL_STATUS_ACCEL_DEV(r6, 0x40046103, &(0x7f0000000080)={0x0, 0x10000, 0x5, 0xc6, 0x55, 0x4, 0x81, 0xb, 0x4, 0xd2, 0x80, "2acf22ca2f60e2f1f1a6f50fa33cb6ec486d1f515c4ff82c4a03b9049a53c403"}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) syz_emit_ethernet(0x4f, &(0x7f0000000200)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@mpls_uc={0x8847, {[{0xa9a5, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xffffd}, {0xd, 0x0, 0x1}, {}, {0x4}, {0xa6, 0x0, 0x1}], @llc={@llc={0xfe, 0xdc, "d7", "29d51c5ce7d2a99856e92224518cc7fbb439aabde84f845b9d41f6989b26"}}}}}}, &(0x7f00000000c0)={0x1, 0x1, [0x228, 0xcca, 0xad2, 0xd61]}) 72.796894ms ago: executing program 8 (id=3647): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000bf7d001fff00"/20, @ANYRES32=0x0, @ANYBLOB="06300000d04100001800128008000100677265000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40) (async) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0x0, &(0x7f0000000300)) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="86", 0x1}], 0x1, 0x0, 0x0, 0x4010}], 0x1, 0x20040) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x4, 0x0, 0x3}, 0x10) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000001c0), 0x18002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_remove_space\x00', r4, 0x0, 0xfffffffffffffff9}, 0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000081a0001e3207ca3809bafab000000000000dfffffff0700130083b4f36df4fff0eac7d8e60300000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) (async) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001900)={'wlan0\x00'}) (rerun: 64) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10000) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x2, 0x10003) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fd"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000040)="213c9cf3"}, 0x20) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r9, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e26, 0x80000, @loopback, 0xffffbffd}, 0x1c, 0x0, 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='$'], 0x28}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 1.263357ms ago: executing program 8 (id=3648): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x810) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8045}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=0x0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}}, 0x0) 0s ago: executing program 8 (id=3649): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x4000000000007, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x200, 0x4, 0x6, 0x9, 0x100000000036, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x4709c0, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x4709c0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs={0x4008630a}], 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r7, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x5c, r7, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000005c0)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x238, r7, 0x13, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffd92e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "c8084b9fbbf66d438d9738c03dfe10590a8c23bfb8b1dbb0b734cfdd285483"}}, @TIPC_NLA_NODE_ID={0xa6, 0x3, "9f14f8ef97a8a20e6bfc8ce3f8ba80040948a439437fdf46411c882e8601d1813f63d041fe4e735c1d53cca324031bc7919988f44dbcf908b6c4a46b414d3691bc309bae8a72799a8763f5b97b02fb393f7d06ba1ed9c2dd004219a7831d39e724897daa21ded50a722d0d622e54035f8d8095e729253c5ddccb89f41414c303e85ae6c562f9a8941c9c8d0f6a6c0406af08837881258726a186ef09aeb52c213ec5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "2af1549eaf0b9838b63b1701e72402627892eb18b684"}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000005c0)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x238, r7, 0x13, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffd92e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "c8084b9fbbf66d438d9738c03dfe10590a8c23bfb8b1dbb0b734cfdd285483"}}, @TIPC_NLA_NODE_ID={0xa6, 0x3, "9f14f8ef97a8a20e6bfc8ce3f8ba80040948a439437fdf46411c882e8601d1813f63d041fe4e735c1d53cca324031bc7919988f44dbcf908b6c4a46b414d3691bc309bae8a72799a8763f5b97b02fb393f7d06ba1ed9c2dd004219a7831d39e724897daa21ded50a722d0d622e54035f8d8095e729253c5ddccb89f41414c303e85ae6c562f9a8941c9c8d0f6a6c0406af08837881258726a186ef09aeb52c213ec5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "2af1549eaf0b9838b63b1701e72402627892eb18b684"}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) kernel console output (not intermixed with test programs): T5329] Bluetooth: hci0: unexpected event for opcode 0x041b [ 278.825365][T17096] sp0: Synchronizing with TNC [ 279.046720][ T5329] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 279.171442][T17117] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2888'. [ 279.479559][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2891'. [ 279.483353][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2891'. [ 279.924203][T17168] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 280.108836][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 280.151799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 280.155506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 280.202759][T17178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 280.429620][ T1339] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 280.608429][ T1339] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 280.612782][ T1339] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 280.617422][ T1339] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 280.621314][ T1339] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 280.625962][ T1339] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 280.633073][ T1339] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 280.637351][ T1339] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 280.641682][ T1339] usb 8-1: Product: syz [ 280.643663][ T1339] usb 8-1: Manufacturer: syz [ 280.657945][ T1339] cdc_wdm 8-1:1.0: skipping garbage [ 280.660287][ T1339] cdc_wdm 8-1:1.0: skipping garbage [ 280.666039][ T1339] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 280.668782][ T1339] cdc_wdm 8-1:1.0: Unknown control protocol [ 280.884944][T17184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.888712][T17184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.899924][ T55] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 280.949580][T17244] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 280.988835][ T9] usb 8-1: USB disconnect, device number 2 [ 281.013711][ T7971] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.017110][ T7971] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.021306][ T7971] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.024056][ T7971] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.092461][ T55] usb 12-1: Using ep0 maxpacket: 8 [ 281.097564][ T55] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 281.102222][ T55] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 281.106839][ T55] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 281.111171][ T55] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.116655][ T55] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 281.120478][ T55] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.179105][T17277] netlink: 'syz.8.2918': attribute type 10 has an invalid length. [ 281.242114][ T6051] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 281.342675][ T55] usb 12-1: GET_CAPABILITIES returned 0 [ 281.345024][ T55] usbtmc 12-1:16.0: can't read capabilities [ 281.418561][ T6051] usb 14-1: unable to get BOS descriptor or descriptor too short [ 281.421477][ T6051] usb 14-1: no configurations [ 281.423283][ T6051] usb 14-1: can't read configurations, error -22 [ 281.576158][ T9] usb 12-1: USB disconnect, device number 17 [ 281.623724][T17309] kvm: user requested TSC rate below hardware speed [ 281.635908][T17309] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 281.675291][T17309] 9pnet: Could not find request transport: vi [ 281.962460][T17340] random: crng reseeded on system resumption [ 281.971795][T17340] Restarting kernel threads ... [ 281.974672][T17340] Done restarting kernel threads. [ 282.030211][T17343] kvm: kvm [17342]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 282.033795][T17343] kvm: kvm [17342]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 282.053195][T17354] overlayfs: statfs failed on './file0' [ 282.318949][ T40] kauditd_printk_skb: 222 callbacks suppressed [ 282.318961][ T40] audit: type=1400 audit(1758428513.527:92615): avc: denied { read } for pid=17377 comm="syz.3.2938" dev="nsfs" ino=4026533811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 282.328117][ T40] audit: type=1400 audit(1758428513.527:92616): avc: denied { open } for pid=17377 comm="syz.3.2938" path="net:[4026533811]" dev="nsfs" ino=4026533811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 282.335909][ T40] audit: type=1400 audit(1758428513.527:92617): avc: denied { create } for pid=17377 comm="syz.3.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 282.342391][ T40] audit: type=1400 audit(1758428513.536:92618): avc: denied { write } for pid=17377 comm="syz.3.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 282.351434][ T40] audit: type=1400 audit(1758428513.536:92619): avc: denied { read } for pid=17377 comm="syz.3.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 282.388102][ T40] audit: type=1400 audit(1758428513.593:92620): avc: denied { read } for pid=17381 comm="syz.8.2940" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 282.395944][ T40] audit: type=1400 audit(1758428513.593:92621): avc: denied { open } for pid=17381 comm="syz.8.2940" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 282.403941][ T40] audit: type=1400 audit(1758428513.593:92622): avc: denied { ioctl } for pid=17381 comm="syz.8.2940" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 282.469839][ T40] audit: type=1400 audit(1758428513.667:92623): avc: denied { ioctl } for pid=17383 comm="syz.8.2941" path="socket:[77972]" dev="sockfs" ino=77972 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 282.529763][T17343] kvm: kvm [17342]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0 [ 282.892397][ T40] audit: type=1400 audit(1758428514.060:92624): avc: denied { unmount } for pid=9951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 283.015162][T17404] __nla_validate_parse: 7 callbacks suppressed [ 283.015180][T17404] netlink: 136 bytes leftover after parsing attributes in process `syz.9.2949'. [ 283.020417][T17403] netlink: 136 bytes leftover after parsing attributes in process `syz.9.2949'. [ 283.062888][T17410] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 283.120620][T17417] dlm: Unknown command passed to DLM device : 255 [ 283.120620][T17417] [ 283.308167][T17438] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2955'. [ 283.356979][T17448] netlink: 232 bytes leftover after parsing attributes in process `syz.9.2958'. [ 283.358663][ T9062] usb 12-1: new low-speed USB device number 18 using dummy_hcd [ 283.368118][T17450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=17450 comm=syz.8.2957 [ 283.375507][T17450] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2957'. [ 283.388458][T17452] binder: BC_ATTEMPT_ACQUIRE not supported [ 283.391167][T17452] binder: 17451:17452 ioctl c0306201 200000000300 returned -22 [ 283.423909][T17491] netlink: 6032 bytes leftover after parsing attributes in process `syz.8.2962'. [ 283.463316][T17496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.514857][ T10] IPVS: starting estimator thread 0... [ 283.528232][ T5981] Bluetooth: hci0: unexpected event for opcode 0x040d [ 283.532126][ T9062] usb 12-1: Invalid ep0 maxpacket: 64 [ 283.604522][T17541] IPVS: using max 45 ests per chain, 108000 per kthread [ 283.668757][ T9062] usb 12-1: new low-speed USB device number 19 using dummy_hcd [ 283.724732][T17564] xfrm0 speed is unknown, defaulting to 1000 [ 283.727510][T17564] xfrm0 speed is unknown, defaulting to 1000 [ 283.730754][T17564] xfrm0 speed is unknown, defaulting to 1000 [ 283.742681][T17564] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 283.747187][T17568] netlink: 'syz.3.2973': attribute type 27 has an invalid length. [ 283.772665][T17568] bridge0: port 3(batadv0) entered disabled state [ 283.775594][T17568] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.778017][T17568] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.835452][T17568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.839810][ T9062] usb 12-1: Invalid ep0 maxpacket: 64 [ 283.842451][ T9062] usb usb12-port1: attempt power cycle [ 283.845629][T17568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.916627][T17564] xfrm0 speed is unknown, defaulting to 1000 [ 283.942975][T17572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.947213][T17572] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.953419][T17572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.960370][ T7959] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.963838][ T7959] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.969467][T17564] xfrm0 speed is unknown, defaulting to 1000 [ 283.969842][ T7959] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.975590][ T7959] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.980580][T17564] xfrm0 speed is unknown, defaulting to 1000 [ 283.985018][T17564] xfrm0 speed is unknown, defaulting to 1000 [ 283.990135][T17564] xfrm0 speed is unknown, defaulting to 1000 [ 283.993552][T17564] xfrm0 speed is unknown, defaulting to 1000 [ 283.996190][T17564] xfrm0 speed is unknown, defaulting to 1000 [ 284.235442][ T9062] usb 12-1: new low-speed USB device number 20 using dummy_hcd [ 284.257689][ T9062] usb 12-1: Invalid ep0 maxpacket: 64 [ 284.395636][ T9062] usb 12-1: new low-speed USB device number 21 using dummy_hcd [ 284.417589][ T9062] usb 12-1: Invalid ep0 maxpacket: 64 [ 284.419470][ T9062] usb usb12-port1: unable to enumerate USB device [ 285.100164][T17598] netlink: 'syz.8.2978': attribute type 5 has an invalid length. [ 285.181483][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2981'. [ 285.288798][T17644] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 285.487102][T17649] futex_wake_op: syz.8.2985 tries to shift op by 32; fix this program [ 285.638367][T17660] trusted_key: encrypted_key: insufficient parameters specified [ 286.057021][T17679] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2993'. [ 286.061169][ T7965] bond0: (slave bond_slave_0): interface is now down [ 286.064725][ T7965] bond0: (slave bond_slave_1): interface is now down [ 286.075638][ T7965] bond0: now running without any active interface! [ 286.157926][T17694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.164103][T17694] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 286.266282][T17701] fuse: Bad value for 'rootmode' [ 286.332690][T17708] netlink: 'syz.8.2996': attribute type 1 has an invalid length. [ 286.379992][T17713] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 286.472643][T17720] binder_alloc: 17719: binder_alloc_buf, no vma [ 286.781202][T17727] infiniband syz0: set down [ 286.783440][T17727] infiniband syz0: added bond_slave_0 [ 286.808085][T17727] RDS/IB: syz0: added [ 286.810468][T17727] smc: adding ib device syz0 with port count 1 [ 286.812670][T17727] smc: ib device syz0 port 1 has pnetid [ 287.013056][T17743] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3006'. [ 287.216231][T17755] xfrm0 speed is unknown, defaulting to 1000 [ 287.263645][T17759] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3007'. [ 287.283685][T17759] bond2: entered promiscuous mode [ 287.287260][T17759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.291720][T17759] bond0: (slave bond2): Enslaving as an active interface with an up link [ 287.319797][ T55] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 287.390653][T17796] netlink: 'syz.8.3009': attribute type 1 has an invalid length. [ 287.506671][ T55] usb 8-1: Invalid ep0 maxpacket: 16 [ 287.510345][T17819] netlink: 'syz.8.3012': attribute type 1 has an invalid length. [ 287.534388][T17819] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.565579][T17819] veth3: entered promiscuous mode [ 287.572091][T17819] bond3: (slave veth3): Enslaving as an active interface with a down link [ 287.611498][T17919] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 287.626979][T17819] vlan0: entered allmulticast mode [ 287.629155][T17819] bond3: entered allmulticast mode [ 287.632521][T17819] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 287.646437][ T55] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 287.661461][T17919] ip6gre3: entered allmulticast mode [ 287.676959][ T40] kauditd_printk_skb: 179 callbacks suppressed [ 287.676974][ T40] audit: type=1400 audit(1758428518.541:92804): avc: denied { write } for pid=17918 comm="syz.9.3013" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 287.691023][ T40] audit: type=1400 audit(1758428518.550:92805): avc: denied { map } for pid=17918 comm="syz.9.3013" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 287.711486][ T40] audit: type=1400 audit(1758428518.578:92806): avc: denied { read write } for pid=17918 comm="syz.9.3013" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 287.721006][ T40] audit: type=1400 audit(1758428518.578:92807): avc: denied { open } for pid=17918 comm="syz.9.3013" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 287.730571][ T40] audit: type=1400 audit(1758428518.578:92808): avc: denied { read write } for pid=17918 comm="syz.9.3013" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 287.739082][ T40] audit: type=1400 audit(1758428518.578:92809): avc: denied { open } for pid=17918 comm="syz.9.3013" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 287.752416][ T40] audit: type=1400 audit(1758428518.578:92810): avc: denied { ioctl } for pid=17918 comm="syz.9.3013" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 287.762817][ T40] audit: type=1400 audit(1758428518.597:92811): avc: denied { create } for pid=17918 comm="syz.9.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 287.782018][T17935] sock: sock_timestamping_bind_phc: sock not bind to device [ 287.791805][ T40] audit: type=1400 audit(1758428518.606:92812): avc: denied { sys_admin } for pid=17918 comm="syz.9.3013" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 287.806829][ T40] audit: type=1400 audit(1758428518.634:92813): avc: denied { create } for pid=17933 comm="syz.7.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.812983][ T5981] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 287.816633][ T5981] Bluetooth: hci0: Injecting HCI hardware error event [ 287.822270][ T5329] Bluetooth: hci0: hardware error 0x00 [ 287.853686][ T55] usb 8-1: Invalid ep0 maxpacket: 16 [ 287.855602][ T55] usb usb8-port1: attempt power cycle [ 287.892707][T17949] SELinux: policydb string does not match my string SE Linux [ 287.895182][T17949] SELinux: failed to load policy [ 288.223166][ T55] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 288.245323][ T55] usb 8-1: Invalid ep0 maxpacket: 16 [ 288.351084][ T10] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 288.393914][ T55] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 288.416897][ T55] usb 8-1: Invalid ep0 maxpacket: 16 [ 288.419680][ T55] usb usb8-port1: unable to enumerate USB device [ 288.422631][T17980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.508027][T17983] syzkaller0: entered promiscuous mode [ 288.509724][T17983] syzkaller0: entered allmulticast mode [ 288.543682][ T10] usb 12-1: Using ep0 maxpacket: 32 [ 288.550900][T17963] netlink: 'syz.7.3020': attribute type 1 has an invalid length. [ 288.554382][T17963] __nla_validate_parse: 2 callbacks suppressed [ 288.554393][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3020'. [ 288.619888][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3020'. [ 288.674919][T17995] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3020'. [ 289.091582][T18007] qrtr: Invalid version 49 [ 289.889143][ T10] usb 12-1: unable to get BOS descriptor or descriptor too short [ 289.892765][ T10] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 289.895212][ T10] usb 12-1: can't read configurations, error -71 [ 289.899090][T18002] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3027'. [ 290.000305][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3029'. [ 290.006920][T18022] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 290.040790][ T5329] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 290.297708][ T29] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 290.436132][ T29] usb 13-1: device descriptor read/64, error -71 [ 290.692624][ T29] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 290.713828][ T55] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 290.765068][T18051] overlayfs: statfs failed on './file0' [ 290.770575][T18053] 9pnet_virtio: no channels available for device syz [ 290.831425][ T29] usb 13-1: device descriptor read/64, error -71 [ 290.897563][ T55] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 290.899955][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 290.903303][ T55] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.907026][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 290.910544][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 290.914763][ T55] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 290.917297][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 290.919467][T18060] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3037'. [ 290.920575][ T55] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.928527][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 290.932279][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 290.936399][ T55] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 290.938707][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 290.942206][ T55] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.945639][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 290.949012][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 290.949182][ T29] usb usb13-port1: attempt power cycle [ 290.954758][ T55] usb 8-1: string descriptor 0 read error: -22 [ 290.956745][ T55] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 290.959722][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.967359][ T55] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 290.970664][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3038'. [ 290.976112][T18065] Bluetooth: MGMT ver 1.23 [ 291.180332][T18041] netlink: 'syz.3.3032': attribute type 1 has an invalid length. [ 291.204366][T18041] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 291.210947][ T7971] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 291.222250][T18041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.230335][ T10] usb 8-1: USB disconnect, device number 7 [ 291.313679][ T29] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 291.334603][ T29] usb 13-1: device descriptor read/8, error -71 [ 291.344665][ T7971] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 291.376342][T18133] MTD: Attempt to mount non-MTD device "/dev/nbd9" [ 291.379346][T18133] cramfs: wrong magic [ 291.453730][T18133] fuse: Bad value for 'user_id' [ 291.455533][T18133] fuse: Bad value for 'user_id' [ 291.590653][ T29] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 291.612291][ T29] usb 13-1: device descriptor read/8, error -71 [ 291.654641][ T54] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 291.711076][T18146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.729714][ T29] usb usb13-port1: unable to enumerate USB device [ 291.800218][T18149] block nbd3: Attempted send on invalid socket [ 291.802750][T18149] I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 291.806239][T18149] gfs2: error -5 reading superblock [ 291.811678][T18148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3046'. [ 291.814587][T18148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3046'. [ 291.818003][ T54] usb 12-1: Using ep0 maxpacket: 16 [ 291.820611][T18148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3046'. [ 291.822481][T18150] overlay: Unknown parameter 'smackfshat' [ 291.827385][ T54] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.828938][T18150] overlay: Unknown parameter 'smackfshat' [ 291.831107][ T54] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 291.831143][ T54] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 291.840952][ T54] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.841243][T18150] overlay: Unknown parameter 'smackfshat' [ 291.844885][ T54] usb 12-1: config 0 descriptor?? [ 291.847101][T18150] overlay: Unknown parameter 'smackfshat' [ 291.849272][T18150] overlay: Unknown parameter 'smackfshat' [ 291.851356][T18150] overlay: Unknown parameter 'smackfshat' [ 291.853417][T18150] overlay: Unknown parameter 'smackfshat' [ 291.855595][T18150] overlay: Unknown parameter 'smackfshat' [ 291.857960][T18150] overlay: Unknown parameter 'smackfshat' [ 291.859993][T18150] overlay: Unknown parameter 'smackfshat' [ 291.861958][T18150] overlay: Unknown parameter 'smackfshat' [ 291.864162][T18150] overlay: Unknown parameter 'smackfshat' [ 291.866571][T18150] overlay: Unknown parameter 'smackfshat' [ 291.869355][T18150] overlay: Unknown parameter 'smackfshat' [ 291.871533][T18150] overlay: Unknown parameter 'smackfshat' [ 291.873592][T18150] overlay: Unknown parameter 'smackfshat' [ 291.875677][T18150] overlay: Unknown parameter 'smackfshat' [ 291.877764][T18150] overlay: Unknown parameter 'smackfshat' [ 291.880007][T18150] overlay: Unknown parameter 'smackfshat' [ 291.882106][T18150] overlay: Unknown parameter 'smackfshat' [ 291.884090][T18150] overlay: Unknown parameter 'smackfshat' [ 291.886061][T18150] overlay: Unknown parameter 'smackfshat' [ 291.888062][T18150] overlay: Unknown parameter 'smackfshat' [ 291.890795][T18150] overlay: Unknown parameter 'smackfshat' [ 291.893127][T18150] overlay: Unknown parameter 'smackfshat' [ 291.895386][T18150] overlay: Unknown parameter 'smackfshat' [ 291.897670][T18150] overlay: Unknown parameter 'smackfshat' [ 291.899923][T18150] overlay: Unknown parameter 'smackfshat' [ 291.902420][T18150] overlay: Unknown parameter 'smackfshat' [ 291.904678][T18150] overlay: Unknown parameter 'smackfshat' [ 291.906919][T18150] overlay: Unknown parameter 'smackfshat' [ 291.909168][T18150] overlay: Unknown parameter 'smackfshat' [ 291.912751][T18150] overlay: Unknown parameter 'smackfshat' [ 292.154688][T18167] openvswitch: netlink: Duplicate key (type 0). [ 292.169824][T18167] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 292.197100][ T54] usbhid 12-1:0.0: can't add hid device: -71 [ 292.199057][ T54] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 292.202995][ T54] usb 12-1: USB disconnect, device number 24 [ 292.468377][T18194] new mount options do not match the existing superblock, will be ignored [ 292.991461][T18245] netlink: 'syz.7.3070': attribute type 18 has an invalid length. [ 292.995399][T18245] netlink: 'syz.7.3070': attribute type 18 has an invalid length. [ 292.998127][T18247] input: syz1 as /devices/virtual/input/input34 [ 293.028064][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 293.028075][ T40] audit: type=1400 audit(1758428523.545:92929): avc: denied { write } for pid=18250 comm="syz.7.3072" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 293.038936][ T40] audit: type=1400 audit(1758428523.545:92930): avc: denied { setattr } for pid=18250 comm="syz.7.3072" name="HIDP" dev="sockfs" ino=79396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 293.060180][ T40] audit: type=1400 audit(1758428523.573:92931): avc: denied { write } for pid=18246 comm="syz.9.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.070211][T18254] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 293.241756][ T40] audit: type=1400 audit(1758428523.742:92932): avc: denied { wake_alarm } for pid=18266 comm="syz.7.3076" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 293.242325][T18267] netlink: 'syz.7.3076': attribute type 13 has an invalid length. [ 293.304666][ T40] audit: type=1400 audit(1758428523.807:92933): avc: denied { mounton } for pid=18274 comm="syz.7.3078" path="/proc/1395/task" dev="proc" ino=79404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 293.312786][ T40] audit: type=1400 audit(1758428523.807:92934): avc: denied { create } for pid=18276 comm="syz.8.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 293.320554][ T40] audit: type=1400 audit(1758428523.807:92935): avc: denied { mount } for pid=18274 comm="syz.7.3078" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 293.324007][T18275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=18275 comm=syz.7.3078 [ 293.329693][ T40] audit: type=1400 audit(1758428523.807:92936): avc: denied { read write } for pid=18276 comm="syz.8.3079" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 293.334577][T18275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=18275 comm=syz.7.3078 [ 293.343687][ T40] audit: type=1400 audit(1758428523.807:92937): avc: denied { open } for pid=18276 comm="syz.8.3079" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 293.343725][ T40] audit: type=1400 audit(1758428523.807:92938): avc: denied { mount } for pid=18276 comm="syz.8.3079" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 293.367880][T18275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=18275 comm=syz.7.3078 [ 293.812605][T18301] netlink: 'syz.3.3084': attribute type 2 has an invalid length. [ 293.817906][T18301] nbd: must specify a device to reconfigure [ 293.944536][ T1123] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 293.948140][ T1123] sr 2:0:0:0: [sr0] tag#16 Sense Key : Illegal Request [current] [ 293.951352][ T1123] sr 2:0:0:0: [sr0] tag#16 Add. Sense: Invalid command operation code [ 293.954863][ T1123] sr 2:0:0:0: [sr0] tag#16 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 293.958164][ T1123] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 293.962541][ T1123] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 294.098221][T18325] binder: 18322:18325 ioctl c0306201 2000000003c0 returned -14 [ 294.189553][T18338] kernel read not supported for file /file1 (pid: 18338 comm: syz.9.3094) [ 294.283869][T18346] overlayfs: missing 'workdir' [ 294.362811][T18355] binder: BINDER_SET_CONTEXT_MGR already set [ 294.362871][T18355] binder: 18353:18355 ioctl 4018620d 2000000000c0 returned -16 [ 294.446347][T18362] gre0: Master is either lo or non-ether device [ 294.613229][ T29] IPVS: starting estimator thread 0... [ 294.617270][T18399] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 294.701412][T18401] IPVS: using max 28 ests per chain, 67200 per kthread [ 294.861727][ T55] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 294.907893][T18408] overlayfs: failed lookup in lower (newroot/88, name='file1', err=-40): overlapping layers [ 295.043425][ T55] usb 12-1: Using ep0 maxpacket: 8 [ 295.047531][ T55] usb 12-1: config 0 has no interfaces? [ 295.049953][ T55] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 295.053875][ T55] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.059910][ T55] usb 12-1: config 0 descriptor?? [ 295.207198][ T7959] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 295.210720][ T7959] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 295.214343][ T7959] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 295.219594][ T7959] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 295.278329][T18391] tipc: Started in network mode [ 295.280667][T18391] tipc: Node identity 080211000001, cluster identity 4711 [ 295.283229][T18391] tipc: Enabled bearer , priority 0 [ 295.286749][T18391] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode [ 295.289163][T18391] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode [ 295.295514][ T9062] usb 12-1: USB disconnect, device number 25 [ 295.770954][ T55] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 295.953798][ T55] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 295.957080][ T55] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 295.960956][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 295.965394][ T55] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 295.968849][ T55] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 295.972041][ T55] usb 8-1: Product: syz [ 295.973770][ T55] usb 8-1: Manufacturer: syz [ 295.975318][ T55] usb 8-1: SerialNumber: syz [ 295.977837][ T55] usb 8-1: config 0 descriptor?? [ 295.981235][ T55] hub 8-1:0.0: bad descriptor, ignoring hub [ 295.983535][ T55] hub 8-1:0.0: probe with driver hub failed with error -5 [ 295.987607][ T55] usb 8-1: selecting invalid altsetting 0 [ 296.118203][T18531] __nla_validate_parse: 133 callbacks suppressed [ 296.118220][T18531] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3135'. [ 296.124494][T18531] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3135'. [ 296.359768][ T9062] tipc: Node number set to 134418688 [ 296.438233][T18474] usb 8-1: reset high-speed USB device number 8 using dummy_hcd [ 296.445515][T18474] usb 8-1: device reset changed ep0 maxpacket size! [ 296.460641][ T29] usb 8-1: USB disconnect, device number 8 [ 296.585878][T18609] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 296.589111][T18609] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 296.592549][T18607] No source specified [ 296.615374][ T29] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 296.627371][T18607] kvm: pic: non byte write [ 296.739559][T18629] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 296.775639][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 296.778582][ T29] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 296.781258][ T29] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 296.784378][ T29] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.789580][ T29] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.792800][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.795268][ T29] usb 8-1: Product: syz [ 296.796648][ T29] usb 8-1: Manufacturer: syz [ 296.798128][ T29] usb 8-1: SerialNumber: syz [ 296.888454][T18635] ip6tnl0: Caught tx_queue_len zero misconfig [ 297.023546][ T29] usb 8-1: 0:2 : does not exist [ 297.038445][ T29] usb 8-1: USB disconnect, device number 9 [ 297.439009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 297.593024][T18666] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3155'. [ 297.769878][ T29] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 297.930396][ T29] usb 14-1: Using ep0 maxpacket: 8 [ 298.045566][T18690] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3161'. [ 298.066358][T18694] sock: sock_timestamping_bind_phc: sock not bind to device [ 298.244051][T18710] block nbd8: Attempted send on invalid socket [ 298.246057][T18710] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 298.249029][T18710] XFS (nbd8): SB validate failed with error -5. [ 298.253247][T18713] loop9: detected capacity change from 0 to 524287999 [ 298.385473][ T40] kauditd_printk_skb: 265 callbacks suppressed [ 298.385491][ T40] audit: type=1400 audit(1758428528.550:93204): avc: denied { read write } for pid=18732 comm="syz.8.3171" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 298.403055][ T40] audit: type=1400 audit(1758428528.550:93205): avc: denied { open } for pid=18732 comm="syz.8.3171" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 298.413182][ T40] audit: type=1400 audit(1758428528.568:93206): avc: denied { ioctl } for pid=18732 comm="syz.8.3171" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 298.421169][ T29] usb 14-1: unable to get BOS descriptor or descriptor too short [ 298.426301][T18735] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 298.427273][ T40] audit: type=1400 audit(1758428528.568:93207): avc: denied { write } for pid=18732 comm="syz.8.3171" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 298.440234][ T29] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 298.442642][ T29] usb 14-1: can't read configurations, error -71 [ 298.445560][ T40] audit: type=1400 audit(1758428528.568:93208): avc: denied { accept } for pid=18732 comm="syz.8.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 298.452612][ T40] audit: type=1400 audit(1758428528.578:93209): avc: denied { write } for pid=18734 comm="syz.3.3172" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 298.460118][ T40] audit: type=1400 audit(1758428528.578:93210): avc: denied { create } for pid=18734 comm="syz.3.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 298.469167][T18713] kvm: pic: non byte write [ 298.473395][ T40] audit: type=1400 audit(1758428528.578:93211): avc: denied { setopt } for pid=18734 comm="syz.3.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 298.480332][ T40] audit: type=1400 audit(1758428528.578:93212): avc: denied { append } for pid=18732 comm="syz.8.3171" name="dlm_plock" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.489297][ T40] audit: type=1400 audit(1758428528.624:93213): avc: denied { mounton } for pid=18743 comm="syz.8.3173" path="/236/file0" dev="tmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 299.403266][T18782] program syz.3.3181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.636129][T18809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.639547][ T7971] Bluetooth: hci4: Frame reassembly failed (-90) [ 299.836397][T18832] netlink: 'syz.9.3194': attribute type 10 has an invalid length. [ 300.083814][T18747] Set syz1 is full, maxelem 65536 reached [ 300.168408][T18876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3205'. [ 300.374562][T18921] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3214'. [ 300.377395][T18921] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3214'. [ 300.586223][T18942] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3219'. [ 300.695922][T18948] random: crng reseeded on system resumption [ 301.832012][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 301.834974][ T5329] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 301.977725][T18999] netlink: 'syz.7.3232': attribute type 21 has an invalid length. [ 301.991910][T18999] netlink: 'syz.7.3232': attribute type 21 has an invalid length. [ 301.995584][T18999] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3232'. [ 302.023886][T19004] mac80211_hwsim hwsim21 syzkaller0: Caught tx_queue_len zero misconfig [ 302.223209][T19026] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3238'. [ 302.850900][T19064] tmpfs: Bad value for 'nr_blocks' [ 303.542702][ T5329] Bluetooth: hci5: command 0x1003 tx timeout [ 303.542976][ T5981] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 303.669187][T19155] FAULT_INJECTION: forcing a failure. [ 303.669187][T19155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.675357][T19155] CPU: 3 UID: 0 PID: 19155 Comm: syz.8.3270 Not tainted syzkaller #0 PREEMPT(full) [ 303.675377][T19155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 303.675386][T19155] Call Trace: [ 303.675391][T19155] [ 303.675397][T19155] dump_stack_lvl+0x16c/0x1f0 [ 303.675442][T19155] should_fail_ex+0x512/0x640 [ 303.675464][T19155] _copy_to_user+0x32/0xd0 [ 303.675486][T19155] simple_read_from_buffer+0xcb/0x170 [ 303.675502][T19155] proc_fail_nth_read+0x197/0x240 [ 303.675520][T19155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.675537][T19155] ? rw_verify_area+0xcf/0x6c0 [ 303.675558][T19155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.675575][T19155] vfs_read+0x1e1/0xcf0 [ 303.675591][T19155] ? __pfx___mutex_lock+0x10/0x10 [ 303.675610][T19155] ? __pfx_vfs_read+0x10/0x10 [ 303.675629][T19155] ? __fget_files+0x20e/0x3c0 [ 303.675650][T19155] ksys_read+0x12a/0x250 [ 303.675663][T19155] ? __pfx_ksys_read+0x10/0x10 [ 303.675683][T19155] do_syscall_64+0xcd/0x4e0 [ 303.675703][T19155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.675718][T19155] RIP: 0033:0x7f9cc6f8d63c [ 303.675729][T19155] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 303.675743][T19155] RSP: 002b:00007f9cc7ea6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.675757][T19155] RAX: ffffffffffffffda RBX: 00007f9cc71d5fa0 RCX: 00007f9cc6f8d63c [ 303.675766][T19155] RDX: 000000000000000f RSI: 00007f9cc7ea60a0 RDI: 0000000000000004 [ 303.675774][T19155] RBP: 00007f9cc7ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 303.675782][T19155] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 303.675790][T19155] R13: 00007f9cc71d6038 R14: 00007f9cc71d5fa0 R15: 00007ffccd463e98 [ 303.675808][T19155] [ 303.752467][ T40] kauditd_printk_skb: 229 callbacks suppressed [ 303.752483][ T40] audit: type=1400 audit(1758428533.573:93443): avc: denied { mounton } for pid=19156 comm="syz.3.3271" path="/proc/401/task" dev="proc" ino=86056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 303.765725][ T40] audit: type=1400 audit(1758428533.573:93444): avc: denied { mount } for pid=19156 comm="syz.3.3271" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 303.777415][ T40] audit: type=1400 audit(1758428533.591:93445): avc: denied { associate } for pid=19161 comm="syz.3.3271" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 303.855971][ T40] audit: type=1400 audit(1758428533.676:93446): avc: denied { sys_module } for pid=19159 comm="syz.8.3272" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 303.947969][ T40] audit: type=1400 audit(1758428533.750:93447): avc: denied { ioctl } for pid=19179 comm="syz.8.3275" path="socket:[85131]" dev="sockfs" ino=85131 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 303.975922][ T40] audit: type=1400 audit(1758428533.788:93448): avc: denied { accept } for pid=19186 comm="syz.3.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 303.985664][ T40] audit: type=1400 audit(1758428533.788:93449): avc: denied { mounton } for pid=19186 comm="syz.3.3276" path="/138/file0" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 304.005878][ T40] audit: type=1400 audit(1758428533.816:93450): avc: denied { read write } for pid=14448 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.017600][ T40] audit: type=1400 audit(1758428533.816:93451): avc: denied { open } for pid=14448 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.028025][ T40] audit: type=1400 audit(1758428533.816:93452): avc: denied { ioctl } for pid=14448 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.131163][T19200] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 304.165739][T19208] netlink: 'syz.8.3281': attribute type 1 has an invalid length. [ 304.329790][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.329790][T19267] [ 304.334048][T19267] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 304.337820][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.337820][T19267] [ 304.341907][T19267] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 304.346062][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.346062][T19267] [ 304.350100][T19267] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 304.354030][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.354030][T19267] [ 304.358375][T19267] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 304.362199][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.362199][T19267] [ 304.366244][T19267] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 304.370282][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.370282][T19267] [ 304.374578][T19267] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 304.378087][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.378087][T19267] [ 304.381598][T19267] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 304.384964][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.384964][T19267] [ 304.389191][T19267] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 304.393095][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.393095][T19267] [ 304.397209][T19267] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 304.399132][T19273] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3290'. [ 304.401454][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.401454][T19267] [ 304.407332][T19267] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 304.411277][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.411277][T19267] [ 304.415549][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.415549][T19267] [ 304.419871][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.419871][T19267] [ 304.424037][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.424037][T19267] [ 304.428249][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.428249][T19267] [ 304.432579][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.432579][T19267] [ 304.437012][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.437012][T19267] [ 304.440364][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.440364][T19267] [ 304.444188][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.444188][T19267] [ 304.448187][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.448187][T19267] [ 304.452142][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.452142][T19267] [ 304.455489][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.455489][T19267] [ 304.459573][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.459573][T19267] [ 304.463687][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.463687][T19267] [ 304.467767][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.467767][T19267] [ 304.471782][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.471782][T19267] [ 304.476679][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.476679][T19267] [ 304.480881][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.480881][T19267] [ 304.485022][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.485022][T19267] [ 304.488900][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.488900][T19267] [ 304.493132][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.493132][T19267] [ 304.497057][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.497057][T19267] [ 304.500404][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.500404][T19267] [ 304.503681][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.503681][T19267] [ 304.506937][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.506937][T19267] [ 304.510119][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.510119][T19267] [ 304.513604][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.513604][T19267] [ 304.517254][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.517254][T19267] [ 304.520825][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.520825][T19267] [ 304.524757][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.524757][T19267] [ 304.528371][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.528371][T19267] [ 304.531732][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.531732][T19267] [ 304.535142][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.535142][T19267] [ 304.538500][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.538500][T19267] [ 304.541662][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.541662][T19267] [ 304.544895][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.544895][T19267] [ 304.548274][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.548274][T19267] [ 304.551447][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.551447][T19267] [ 304.554629][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.554629][T19267] [ 304.557817][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.557817][T19267] [ 304.561802][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.561802][T19267] [ 304.565501][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.565501][T19267] [ 304.568818][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.568818][T19267] [ 304.571958][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.571958][T19267] [ 304.575120][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.575120][T19267] [ 304.578686][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.578686][T19267] [ 304.582179][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.582179][T19267] [ 304.585423][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.585423][T19267] [ 304.588655][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.588655][T19267] [ 304.591999][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.591999][T19267] [ 304.595400][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.595400][T19267] [ 304.598505][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.598505][T19267] [ 304.601961][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.601961][T19267] [ 304.605138][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.605138][T19267] [ 304.608309][T19267] CIFS mount error: No usable UNC path provided in device string! [ 304.608309][T19267] [ 304.764303][T19309] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3298'. [ 305.175172][T13451] hid-generic 0005:16C0:5505.000C: item fetching failed at offset 0/1 [ 305.178930][T13451] hid-generic 0005:16C0:5505.000C: probe with driver hid-generic failed with error -22 [ 305.226868][T19369] nbd: must specify a size in bytes for the device [ 305.232785][T19372] netlink: 9512 bytes leftover after parsing attributes in process `syz.9.3312'. [ 305.338796][ T55] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 305.443017][T19378] vivid-000: ================= START STATUS ================= [ 305.445950][T19378] vivid-000: Test Pattern: 75% Colorbar [ 305.448714][T19378] vivid-000: Fill Percentage of Frame: 100 [ 305.450684][T19378] vivid-000: Horizontal Movement: No Movement [ 305.452792][T19378] vivid-000: Vertical Movement: No Movement [ 305.454726][T19378] vivid-000: OSD Text Mode: All [ 305.457415][T19378] vivid-000: Show Border: false [ 305.459052][T19378] vivid-000: Show Square: false [ 305.460961][T19378] vivid-000: Sensor Flipped Horizontally: false [ 305.463092][T19378] vivid-000: Sensor Flipped Vertically: false [ 305.465146][T19378] vivid-000: Insert SAV Code in Image: true [ 305.467354][T19378] vivid-000: Insert EAV Code in Image: false [ 305.469851][T19378] vivid-000: Insert Video Guard Band: false [ 305.471815][T19378] vivid-000: Reduced Framerate: false [ 305.473884][T19378] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 305.476934][T19378] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 305.480122][T19378] vivid-000: Enable Capture Cropping: true grabbed [ 305.482583][T19378] vivid-000: Enable Capture Composing: true grabbed [ 305.484613][T19378] vivid-000: Enable Capture Scaler: true grabbed [ 305.486568][T19378] vivid-000: Timestamp Source: End of Frame [ 305.488559][T19378] vivid-000: Colorspace: Rec. 709 [ 305.490156][T19378] vivid-000: Transfer Function: sRGB [ 305.491802][T19378] vivid-000: Y'CbCr Encoding: Default [ 305.493772][T19378] vivid-000: HSV Encoding: Hue 0-179 [ 305.495927][T19378] vivid-000: Quantization: Limited Range [ 305.498152][T19378] vivid-000: Apply Alpha To Red Only: true [ 305.500268][ T55] usb 13-1: Using ep0 maxpacket: 32 [ 305.500631][T19378] vivid-000: Standard Aspect Ratio: 4x3 [ 305.503855][T19378] vivid-000: DV Timings Signal Mode: Current DV Timings [ 305.505987][T19378] vivid-000: DV Timings: 640x480p59 inactive [ 305.507721][ T55] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 305.507811][T19378] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 305.511568][ T55] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9566, setting to 1024 [ 305.514182][T19378] vivid-000: Maximum EDID Blocks: [ 305.517775][ T55] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.519932][ T55] usb 13-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 305.524923][T19378] 1 [ 305.527694][ T55] usb 13-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 305.527709][ T55] usb 13-1: Product: syz [ 305.528656][T19378] vivid-000: Limited RGB Range (16-235): [ 305.531181][ T55] usb 13-1: Manufacturer: syz [ 305.531192][ T55] usb 13-1: SerialNumber: syz [ 305.534668][T19351] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 305.535165][T19378] true [ 305.540267][ T55] input: appletouch as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/input/input36 [ 305.541685][T19378] [ 305.547313][T19378] vivid-000: Rx RGB Quantization Range: Automatic [ 305.549451][T19378] vivid-000: Power Present: 0x00000001 [ 305.551325][T19378] tpg source WxH: 1280x720 (R'G'B) [ 305.553197][T19378] tpg field: 1 [ 305.554352][T19378] tpg crop: (0,704)/16x16 [ 305.555803][T19378] tpg compose: (0,0)/16x16 [ 305.557307][T19378] tpg colorspace: 3 [ 305.558665][T19378] tpg transfer function: 2/2 [ 305.560551][T19378] tpg quantization: 2/2 [ 305.562436][T19378] tpg RGB range: 0/1 [ 305.564101][T19378] vivid-000: ================== END STATUS ================== [ 305.594151][T19394] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3314'. [ 305.813476][ T29] usb 13-1: USB disconnect, device number 13 [ 305.826087][ T29] appletouch 13-1:1.0: input: appletouch disconnected [ 305.826357][T19408] tun0: tun_chr_ioctl cmd 1074025675 [ 305.830865][T19408] tun0: persist enabled [ 305.833326][T19408] tun0: tun_chr_ioctl cmd 1074025675 [ 305.835420][T19408] tun0: persist enabled [ 305.941311][T19427] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3320'. [ 305.968048][T19435] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 305.970787][T19435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 305.973214][T19432] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 305.975946][T19432] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 305.979160][T19435] vhci_hcd vhci_hcd.0: Device attached [ 305.980497][T19432] vhci_hcd vhci_hcd.0: Device attached [ 305.987671][T19435] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 305.988279][T19442] ptrace attach of "/syz-executor exec"[9951] was attempted by ""[19442] [ 305.990309][T19435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 305.990453][T19435] vhci_hcd vhci_hcd.0: Device attached [ 306.000374][T19443] vhci_hcd: connection closed [ 306.000604][T19438] vhci_hcd: connection closed [ 306.000649][ T7957] vhci_hcd: stop threads [ 306.000663][T19437] vhci_hcd: connection closed [ 306.006502][ T7957] vhci_hcd: release socket [ 306.009714][ T7957] vhci_hcd: disconnect device [ 306.011501][ T7957] vhci_hcd: stop threads [ 306.013025][ T7957] vhci_hcd: release socket [ 306.014413][ T7957] vhci_hcd: disconnect device [ 306.015953][ T7957] vhci_hcd: stop threads [ 306.017253][ T7957] vhci_hcd: release socket [ 306.018722][ T7957] vhci_hcd: disconnect device [ 306.116934][T19449] kvm: pic: non byte read [ 306.119551][T19449] kvm: pic: level sensitive irq not supported [ 306.119784][T19449] kvm: pic: non byte read [ 306.124034][T19449] kvm: pic: single mode not supported [ 306.124043][T19449] kvm: pic: level sensitive irq not supported [ 306.125922][T19449] kvm: pic: non byte read [ 306.131591][T19449] kvm: pic: non byte read [ 306.134289][T19449] kvm: pic: non byte read [ 306.137012][T19449] kvm: pic: non byte read [ 306.139402][T19449] kvm: pic: non byte read [ 306.142929][T19449] kvm: pic: single mode not supported [ 306.143163][T19449] kvm: pic: non byte read [ 306.147799][T19449] kvm: pic: single mode not supported [ 306.148027][T19449] kvm: pic: non byte read [ 306.573721][T19479] netlink: 'syz.3.3335': attribute type 25 has an invalid length. [ 306.576494][T19479] netlink: 'syz.3.3335': attribute type 28 has an invalid length. [ 306.735529][T19498] xfrm0 speed is unknown, defaulting to 1000 [ 306.923871][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3339'. [ 306.955993][T19525] binder: 19524:19525 ioctl 4018620d 0 returned -22 [ 307.225153][T19542] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3343'. [ 307.264718][T19542] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3343'. [ 307.267883][T19542] nbd: device at index 64 is going down [ 307.269738][T19543] nbd: device at index 64 is going down [ 307.384930][T19558] bond5 (unregistering): Released all slaves [ 307.540815][ T9062] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 307.590105][T19632] overlay: Unknown parameter 'dont_hash' [ 307.703278][ T9062] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.708575][ T9062] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.708600][ T9062] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.708639][ T9062] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.708661][ T9062] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.711077][ T9062] usb 14-1: config 0 descriptor?? [ 307.927331][T19551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.931400][T19551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.935538][T19551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.939756][T19551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.943792][T19551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.946626][T19551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.950047][T19551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.953113][T19551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.956069][T19551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.959196][T19551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.982771][ T9062] usbhid 14-1:0.0: can't add hid device: -71 [ 307.985708][ T9062] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 307.987394][T19687] CIFS mount error: No usable UNC path provided in device string! [ 307.987394][T19687] [ 307.991483][ T9062] usb 14-1: USB disconnect, device number 11 [ 308.152392][T19701] /dev/sr0: Can't open blockdev [ 308.295846][T19709] deleting an unspecified loop device is not supported. [ 308.475021][T19721] siw: device registration error -23 [ 308.631898][T19737] __nla_validate_parse: 2 callbacks suppressed [ 308.631917][T19737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3367'. [ 308.892250][T19790] overlayfs: statfs failed on './file0' [ 309.111180][T19806] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3377'. [ 309.119729][ T40] kauditd_printk_skb: 282 callbacks suppressed [ 309.119740][ T40] audit: type=1400 audit(1758428538.596:93735): avc: denied { mount } for pid=19805 comm="syz.7.3377" name="/" dev="ramfs" ino=84723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 309.124047][T19806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=19806 comm=syz.7.3377 [ 309.130463][ T40] audit: type=1400 audit(1758428538.596:93736): avc: denied { read write } for pid=13757 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.139258][T19806] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3377'. [ 309.149677][ T40] audit: type=1400 audit(1758428538.596:93737): avc: denied { open } for pid=13757 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.162011][ T40] audit: type=1400 audit(1758428538.596:93738): avc: denied { ioctl } for pid=13757 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.201351][ T40] audit: type=1400 audit(1758428538.671:93739): avc: denied { allowed } for pid=19816 comm="syz.8.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 309.270867][ T40] audit: type=1400 audit(1758428538.736:93740): avc: denied { read } for pid=19827 comm="syz.8.3382" name="cec0" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.275093][T19819] sctp: [Deprecated]: syz.7.3381 (pid 19819) Use of int in maxseg socket option. [ 309.275093][T19819] Use struct sctp_assoc_value instead [ 309.278732][ T40] audit: type=1400 audit(1758428538.736:93741): avc: denied { open } for pid=19827 comm="syz.8.3382" path="/dev/cec0" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.283352][T19819] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3381'. [ 309.290231][ T40] audit: type=1400 audit(1758428538.736:93742): avc: denied { create } for pid=19817 comm="syz.7.3381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 309.301549][ T40] audit: type=1400 audit(1758428538.736:93743): avc: denied { setopt } for pid=19817 comm="syz.7.3381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 309.396535][ T40] audit: type=1400 audit(1758428538.858:93744): avc: denied { write } for pid=19827 comm="syz.8.3382" name="swradio7" dev="devtmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.487684][T19839] could not open pipe file descriptor [ 309.795170][T19850] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3387'. [ 309.799616][T19850] netlink: 'syz.8.3387': attribute type 1 has an invalid length. [ 309.802908][T19850] netlink: 'syz.8.3387': attribute type 1 has an invalid length. [ 309.806115][T19850] netlink: 'syz.8.3387': attribute type 2 has an invalid length. [ 309.810084][T19850] netlink: 'syz.8.3387': attribute type 1 has an invalid length. [ 310.046390][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3389'. [ 310.101689][T19857] SELinux: ebitmap: high bit 1536 is not equal to the expected value 1152 [ 310.107507][T19857] SELinux: failed to load policy [ 310.474147][T19874] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 310.476892][T19874] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 310.480273][T19874] vhci_hcd vhci_hcd.0: Device attached [ 310.484803][T19874] veth0: entered promiscuous mode [ 310.492377][T19873] veth0: left promiscuous mode [ 310.496256][T19876] vhci_hcd: connection closed [ 310.496631][ T7971] vhci_hcd: stop threads [ 310.500614][ T7971] vhci_hcd: release socket [ 310.502592][ T7971] vhci_hcd: disconnect device [ 311.118485][T19884] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3394'. [ 311.128675][T19886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.424427][T19891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19891 comm=syz.9.3398 [ 311.458446][T19891] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 311.487042][T19896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3397'. [ 311.487513][T19899] tmpfs: Bad value for 'mpol' [ 311.489840][T19896] batadv0: left allmulticast mode [ 311.489852][T19896] batadv0: left promiscuous mode [ 311.494898][T19896] bridge0: port 3(batadv0) entered disabled state [ 311.498724][T19896] bridge_slave_1: left allmulticast mode [ 311.500505][T19896] bridge_slave_1: left promiscuous mode [ 311.502426][T19896] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.506021][T19896] bridge_slave_0: left allmulticast mode [ 311.507992][T19896] bridge_slave_0: left promiscuous mode [ 311.509820][T19896] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.526858][T19891] kvm: pic: non byte read [ 311.546959][T19903] tmpfs: Bad value for 'mpol' [ 311.704675][T19911] netlink: 'syz.7.3401': attribute type 1 has an invalid length. [ 311.737195][T19911] bond6: (slave geneve2): making interface the new active one [ 311.740786][T19911] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 311.747175][ T7962] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 311.771927][ T7962] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 311.775510][ T7962] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 311.778676][ T7962] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 311.948081][T19992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3415'. [ 312.359068][T20021] bridge2: entered allmulticast mode [ 312.515064][T20040] ip6erspan0: entered promiscuous mode [ 312.682971][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 312.743200][T20056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20056 comm=syz.8.3428 [ 312.865578][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 312.868687][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 312.871819][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.876031][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 312.879269][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.883144][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.888644][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 312.892044][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.044975][T20083] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3434'. [ 313.112857][ T9] usb 8-1: usb_control_msg returned -32 [ 313.114718][ T9] usbtmc 8-1:16.0: can't read capabilities [ 313.651812][T20104] dvmrp17: entered allmulticast mode [ 313.659855][T20104] IPVS: set_ctl: invalid protocol: 127 224.0.0.1:20004 [ 313.664854][T20104] dvmrp17: left allmulticast mode [ 313.694470][T20110] openvswitch: netlink: Unknown key attributes 2 [ 314.258557][T20149] ntfs3(nbd7): try to read out of volume at offset 0x0 [ 314.266107][T20149] netlink: 'syz.7.3450': attribute type 21 has an invalid length. [ 314.309214][T20155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=20155 comm=syz.7.3451 [ 314.355125][T20157] futex_wake_op: syz.7.3452 tries to shift op by 32; fix this program [ 314.426091][T20162] pim6reg: entered allmulticast mode [ 314.429581][T20162] pim6reg: left allmulticast mode [ 314.497674][T20169] xfrm0 speed is unknown, defaulting to 1000 [ 314.716799][ T40] kauditd_printk_skb: 200 callbacks suppressed [ 314.716813][ T40] audit: type=1400 audit(1758428543.834:93945): avc: denied { ioctl } for pid=20194 comm="syz.8.3455" path="socket:[87313]" dev="sockfs" ino=87313 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 314.719591][T20195] __nla_validate_parse: 1 callbacks suppressed [ 314.719606][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3455'. [ 315.173953][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 315.174055][ T5329] Bluetooth: hci4: command 0x1003 tx timeout [ 315.285261][ T40] audit: type=1400 audit(1758428544.367:93946): avc: denied { create } for pid=20200 comm="syz.9.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 315.292857][ T40] audit: type=1400 audit(1758428544.367:93947): avc: denied { bind } for pid=20200 comm="syz.9.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 315.299038][ T40] audit: type=1400 audit(1758428544.367:93948): avc: denied { setopt } for pid=20200 comm="syz.9.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 315.307035][ T40] audit: type=1400 audit(1758428544.367:93949): avc: denied { allowed } for pid=20200 comm="syz.9.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 315.311057][T20206] netlink: 'syz.8.3457': attribute type 3 has an invalid length. [ 315.315835][ T40] audit: type=1400 audit(1758428544.377:93950): avc: denied { create } for pid=20200 comm="syz.9.3456" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 315.318635][T20206] netlink: 'syz.8.3457': attribute type 3 has an invalid length. [ 315.327515][ T40] audit: type=1400 audit(1758428544.377:93951): avc: denied { map } for pid=20200 comm="syz.9.3456" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=90162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 315.327560][ T40] audit: type=1400 audit(1758428544.377:93952): avc: denied { read write } for pid=20200 comm="syz.9.3456" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=90162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 315.327600][ T40] audit: type=1400 audit(1758428544.377:93953): avc: denied { create } for pid=20200 comm="syz.9.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 315.330862][T20206] netlink: 'syz.8.3457': attribute type 3 has an invalid length. [ 315.340794][ T40] audit: type=1400 audit(1758428544.377:93954): avc: denied { setopt } for pid=20200 comm="syz.9.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 315.369553][T20206] netlink: 'syz.8.3457': attribute type 3 has an invalid length. [ 315.372931][T20206] netlink: 'syz.8.3457': attribute type 3 has an invalid length. [ 315.376143][T20206] netlink: 'syz.8.3457': attribute type 3 has an invalid length. [ 315.379567][T20206] netlink: 'syz.8.3457': attribute type 3 has an invalid length. [ 315.382695][T20206] netlink: 'syz.8.3457': attribute type 3 has an invalid length. [ 315.385797][T20206] netlink: 'syz.8.3457': attribute type 3 has an invalid length. [ 315.390231][T20209] netlink: 120 bytes leftover after parsing attributes in process `syz.7.3458'. [ 315.580992][T20223] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 315.633902][ T55] usb 8-1: USB disconnect, device number 10 [ 315.692508][T20271] binder: BC_ACQUIRE_RESULT not supported [ 315.694849][T20271] binder: 20270:20271 ioctl c0306201 2000000003c0 returned -22 [ 315.704417][T20271] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.3468'. [ 315.901540][T20306] IPVS: Scheduler module ip_vs_sip not found [ 316.003055][T20331] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 316.075071][T20343] bridge3: entered promiscuous mode [ 316.079548][T20343] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 316.086398][T20343] SELinux: failed to load policy [ 316.173773][T20353] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3483'. [ 316.198696][T20376] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 316.226485][T20401] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3486'. [ 316.230332][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3486'. [ 316.259828][T20401] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3486'. [ 316.263159][T20401] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3486'. [ 316.514781][T20472] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 316.564023][T13442] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 316.681471][ T9] usb 13-1: new low-speed USB device number 14 using dummy_hcd [ 316.758185][T13442] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 316.762831][T13442] usb 8-1: config 1 has no interface number 0 [ 316.765428][T13442] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 316.773566][T13442] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 316.774929][T20507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.777186][T13442] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 316.782990][T13442] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.785272][T20507] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 316.789127][T13442] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 316.793654][T13442] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.797225][T13442] usb 8-1: Product: syz [ 316.799455][T13442] usb 8-1: Manufacturer: syz [ 316.801313][T13442] usb 8-1: SerialNumber: syz [ 316.811467][T20434] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 316.813896][T20434] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 316.848931][ T9] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 316.852149][ T9] usb 13-1: config 0 has no interface number 0 [ 316.854771][ T9] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 316.858859][ T9] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 8224, setting to 8 [ 316.865875][ T9] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 316.870745][ T9] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 316.874968][ T9] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 316.878268][ T9] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 316.882672][ T9] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 316.887679][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.891867][ T9] usb 13-1: config 0 descriptor?? [ 316.894682][T20461] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 316.897763][T20461] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 316.903484][ T9] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 316.939623][T20521] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 316.942115][T20521] overlayfs: failed to set xattr on upper [ 316.944198][T20521] overlayfs: ...falling back to redirect_dir=nofollow. [ 316.947058][T20521] overlayfs: ...falling back to index=off. [ 316.949974][T20521] overlayfs: ...falling back to uuid=null. [ 316.980642][ T6051] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 317.117927][T20461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.119616][ T6051] usb 12-1: device descriptor read/64, error -71 [ 317.121804][T20461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.141035][ T9] usb 13-1: USB disconnect, device number 14 [ 317.145965][ T9] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 317.248523][T20434] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.251333][T20434] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.311293][T20555] overlayfs: missing 'workdir' [ 317.360525][T20558] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 317.376358][ T6051] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 317.468934][T20434] No control pipe specified [ 317.516364][ T6051] usb 12-1: device descriptor read/64, error -71 [ 317.633087][ T6051] usb usb12-port1: attempt power cycle [ 317.698646][T20578] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3515'. [ 317.996328][ T6051] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 318.021101][ T6051] usb 12-1: device descriptor read/8, error -71 [ 318.034036][T20604] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3519'. [ 318.037831][T20604] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 318.041841][T20604] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 318.044675][T20604] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 318.275141][ T6051] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 318.296097][ T6051] usb 12-1: device descriptor read/8, error -71 [ 318.392043][ T29] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 318.416353][ T6051] usb usb12-port1: unable to enumerate USB device [ 318.530876][ T29] usb 14-1: device descriptor read/64, error -71 [ 318.812678][ T29] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 318.947754][ T29] usb 14-1: device descriptor read/64, error -71 [ 319.076976][ T29] usb usb14-port1: attempt power cycle [ 319.460849][ T29] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 319.483291][ T29] usb 14-1: device descriptor read/8, error -71 [ 319.504463][T13442] usb 8-1: Incompatible driver and firmware versions [ 319.513762][T13442] usb 8-1: USB disconnect, device number 11 [ 319.546486][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 319.547032][ T5329] Bluetooth: hci4: command 0x1003 tx timeout [ 319.739036][ T29] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 319.760921][ T29] usb 14-1: device descriptor read/8, error -71 [ 319.880560][ T29] usb usb14-port1: unable to enumerate USB device [ 319.909106][T20647] validate_nla: 38 callbacks suppressed [ 319.909124][T20647] netlink: 'syz.3.3527': attribute type 10 has an invalid length. [ 320.099568][T20659] ipip0: entered promiscuous mode [ 320.106901][T20659] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 320.124703][ T40] kauditd_printk_skb: 232 callbacks suppressed [ 320.124720][ T40] audit: type=1400 audit(1758428548.885:94187): avc: denied { accept } for pid=20654 comm="syz.3.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 320.810229][ T40] audit: type=1400 audit(1758428549.531:94188): avc: denied { module_request } for pid=20663 comm="syz.8.3530" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 320.871393][ T40] audit: type=1400 audit(1758428549.587:94189): avc: denied { create } for pid=20663 comm="syz.8.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 320.880191][ T40] audit: type=1400 audit(1758428549.596:94190): avc: denied { unmount } for pid=15286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 320.890715][ T40] audit: type=1400 audit(1758428549.596:94191): avc: denied { create } for pid=20670 comm="syz.7.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 320.897944][ T40] audit: type=1400 audit(1758428549.605:94192): avc: denied { getopt } for pid=20670 comm="syz.7.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 320.908058][ T40] audit: type=1400 audit(1758428549.624:94193): avc: denied { write } for pid=20672 comm="syz.3.3532" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 320.918738][ T40] audit: type=1400 audit(1758428549.624:94194): avc: denied { create } for pid=20672 comm="syz.3.3532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 320.930185][ T40] audit: type=1400 audit(1758428549.624:94195): avc: denied { bind } for pid=20672 comm="syz.3.3532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 320.932689][T20668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=20668 comm=syz.8.3530 [ 320.938018][ T40] audit: type=1400 audit(1758428549.624:94196): avc: denied { setopt } for pid=20672 comm="syz.3.3532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 320.954863][T20680] futex_wake_op: syz.7.3534 tries to shift op by -1; fix this program [ 320.962038][T20681] overlayfs: overlapping lowerdir path [ 320.964429][T20685] futex_wake_op: syz.7.3534 tries to shift op by -1; fix this program [ 320.968317][T20664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.974561][ T9062] Process accounting resumed [ 320.998927][T20683] Process accounting resumed [ 321.030517][T20694] FAULT_INJECTION: forcing a failure. [ 321.030517][T20694] name failslab, interval 1, probability 0, space 0, times 0 [ 321.036514][T20694] CPU: 3 UID: 0 PID: 20694 Comm: syz.3.3536 Not tainted syzkaller #0 PREEMPT(full) [ 321.036540][T20694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 321.036552][T20694] Call Trace: [ 321.036559][T20694] [ 321.036567][T20694] dump_stack_lvl+0x16c/0x1f0 [ 321.036620][T20694] should_fail_ex+0x512/0x640 [ 321.036653][T20694] ? fs_reclaim_acquire+0xae/0x150 [ 321.036679][T20694] ? bio_kmalloc+0x41/0x70 [ 321.036700][T20694] should_failslab+0xc2/0x120 [ 321.036723][T20694] __kmalloc_noprof+0xd2/0x510 [ 321.036743][T20694] ? __pfx___debug_object_init+0x10/0x10 [ 321.036768][T20694] bio_kmalloc+0x41/0x70 [ 321.036790][T20694] blk_rq_map_kern+0x387/0x6d0 [ 321.036826][T20694] scsi_execute_cmd+0xbd9/0xef0 [ 321.036863][T20694] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 321.036897][T20694] ? find_held_lock+0x2b/0x80 [ 321.036925][T20694] sr_do_ioctl+0x219/0x840 [ 321.036956][T20694] ? __pfx_sr_do_ioctl+0x10/0x10 [ 321.036980][T20694] ? arch_stack_walk+0xa6/0x100 [ 321.037018][T20694] sr_packet+0xee/0x1c0 [ 321.037041][T20694] cdrom_get_disc_info+0xf5/0x260 [ 321.037064][T20694] ? __pfx_cdrom_get_disc_info+0x10/0x10 [ 321.037096][T20694] cdrom_get_last_written+0x2ed/0x790 [ 321.037119][T20694] ? __pfx_cdrom_get_last_written+0x10/0x10 [ 321.037143][T20694] ? find_held_lock+0x2b/0x80 [ 321.037181][T20694] mmc_ioctl_cdrom_last_written+0x9b/0x230 [ 321.037205][T20694] ? __pfx_mmc_ioctl_cdrom_last_written+0x10/0x10 [ 321.037227][T20694] ? lockdep_hardirqs_on+0x7c/0x110 [ 321.037260][T20694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 321.037284][T20694] cdrom_ioctl+0x2553/0x3190 [ 321.037306][T20694] ? __pfx_cdrom_ioctl+0x10/0x10 [ 321.037328][T20694] ? rpm_resume+0x80c/0x1310 [ 321.037350][T20694] ? rcu_is_watching+0x12/0xc0 [ 321.037371][T20694] ? rpm_resume+0x80c/0x1310 [ 321.037392][T20694] ? trace_rpm_return_int+0x196/0x220 [ 321.037414][T20694] ? rpm_resume+0x811/0x1310 [ 321.037442][T20694] ? __pfx_rpm_resume+0x10/0x10 [ 321.037462][T20694] ? do_raw_spin_lock+0x12c/0x2b0 [ 321.037483][T20694] ? find_held_lock+0x2b/0x80 [ 321.037509][T20694] ? lockdep_hardirqs_on+0x7c/0x110 [ 321.037531][T20694] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 321.037553][T20694] ? __pm_runtime_resume+0xc3/0x170 [ 321.037579][T20694] sr_block_ioctl+0x1b0/0x250 [ 321.037603][T20694] ? __pfx_sr_block_ioctl+0x10/0x10 [ 321.037626][T20694] blkdev_ioctl+0x274/0x6d0 [ 321.037645][T20694] ? __pfx_blkdev_ioctl+0x10/0x10 [ 321.037662][T20694] ? selinux_file_ioctl+0x180/0x270 [ 321.037687][T20694] ? selinux_file_ioctl+0xb4/0x270 [ 321.037713][T20694] ? __pfx_blkdev_ioctl+0x10/0x10 [ 321.037733][T20694] __x64_sys_ioctl+0x18e/0x210 [ 321.037762][T20694] do_syscall_64+0xcd/0x4e0 [ 321.037787][T20694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.037806][T20694] RIP: 0033:0x7f3846f8ec29 [ 321.037823][T20694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.037840][T20694] RSP: 002b:00007f3847de4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.037858][T20694] RAX: ffffffffffffffda RBX: 00007f38471d5fa0 RCX: 00007f3846f8ec29 [ 321.037870][T20694] RDX: 00002000000024c0 RSI: 0000000000005395 RDI: 0000000000000003 [ 321.037880][T20694] RBP: 00007f3847de4090 R08: 0000000000000000 R09: 0000000000000000 [ 321.037898][T20694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.037908][T20694] R13: 00007f38471d6038 R14: 00007f38471d5fa0 R15: 00007ffd470a1fb8 [ 321.037934][T20694] [ 321.219110][T20703] tipc: Started in network mode [ 321.221762][T20703] tipc: Node identity 520310f6e6d, cluster identity 4711 [ 321.227190][T20703] tipc: Enabled bearer , priority 0 [ 321.231785][T20703] syzkaller0: entered promiscuous mode [ 321.234407][T20703] syzkaller0: entered allmulticast mode [ 321.247035][T20703] tipc: Resetting bearer [ 321.251009][T20702] tipc: Resetting bearer [ 321.268686][T20702] tipc: Disabling bearer [ 321.462708][T20739] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 321.472965][T20739] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 321.516106][T20745] vlan0: entered promiscuous mode [ 321.518605][T20745] vlan0: entered allmulticast mode [ 321.520793][T20745] hsr_slave_1: entered allmulticast mode [ 321.747884][T20760] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=20760 comm=syz.7.3549 [ 321.769421][T20760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.875819][T20771] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 321.878797][T20771] overlayfs: failed to set xattr on upper [ 321.880977][T20771] overlayfs: ...falling back to redirect_dir=nofollow. [ 321.883540][T20771] overlayfs: ...falling back to index=off. [ 321.885764][T20771] overlayfs: ...falling back to uuid=null. [ 321.888231][T20771] overlayfs: ...falling back to xino=off. [ 322.143213][T20787] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3556'. [ 322.176655][ T5329] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.178401][T20794] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 322.181867][T20794] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 322.182202][ T5329] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.184208][T20794] vhci_hcd vhci_hcd.0: Device attached [ 322.190749][ T5329] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.193276][T20794] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(8) [ 322.194632][ T5329] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.195937][T20794] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 322.199197][ T5329] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.201616][T20794] vhci_hcd vhci_hcd.0: Device attached [ 322.207059][T20794] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 322.215194][T20794] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 322.218360][T20794] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 322.226446][T20789] xfrm0 speed is unknown, defaulting to 1000 [ 322.231086][T20794] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3557'. [ 322.237039][T20797] vhci_hcd: connection closed [ 322.237693][T20795] vhci_hcd: connection closed [ 322.239887][ T7957] vhci_hcd: stop threads [ 322.242875][ T7957] vhci_hcd: release socket [ 322.244327][ T7957] vhci_hcd: disconnect device [ 322.245890][ T7957] vhci_hcd: stop threads [ 322.247257][ T7957] vhci_hcd: release socket [ 322.248680][ T7957] vhci_hcd: disconnect device [ 322.487615][T20789] chnl_net:caif_netlink_parms(): no params data found [ 322.489422][T20909] overlayfs: conflicting options: userxattr,metacopy=on [ 322.561753][T13451] libceph: connect (1)[c::]:6789 error -101 [ 322.566879][T13451] libceph: mon0 (1)[c::]:6789 connect error [ 322.597766][T20789] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.600745][T20789] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.603033][T20789] bridge_slave_0: entered allmulticast mode [ 322.606322][T20789] bridge_slave_0: entered promiscuous mode [ 322.609603][T20789] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.611788][T20789] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.613991][T20789] bridge_slave_1: entered allmulticast mode [ 322.616790][T20789] bridge_slave_1: entered promiscuous mode [ 322.658755][ T7954] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.663050][ T7954] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 322.693506][T21177] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=21177 comm=syz.3.3561 [ 322.694500][T20789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.704152][T20789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.717779][T21251] netlink: 604 bytes leftover after parsing attributes in process `syz.9.3560'. [ 322.760571][ T7954] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.763691][ T7954] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 322.770893][T20789] team0: Port device team_slave_0 added [ 322.774104][T20789] team0: Port device team_slave_1 added [ 322.821119][T20789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.823582][T20789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.835176][T20789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.841589][T20789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.844214][T20789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.845348][T13451] libceph: connect (1)[c::]:6789 error -101 [ 322.855782][T20789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.855996][T13451] libceph: mon0 (1)[c::]:6789 connect error [ 322.877825][ T7954] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.882347][ T7954] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 322.987506][ T7954] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.992561][ T7954] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 323.005908][T20789] hsr_slave_0: entered promiscuous mode [ 323.008530][T20789] hsr_slave_1: entered promiscuous mode [ 323.011816][T20789] debugfs: 'hsr0' already exists in 'hsr' [ 323.013610][T20789] Cannot create hsr debugfs directory [ 323.044526][ T6033] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 323.224324][ T6033] usb 8-1: Using ep0 maxpacket: 8 [ 323.234208][ T6033] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.238736][ T6033] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 323.241556][ T6033] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 323.245892][ T6033] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 323.249437][ T6033] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 323.253015][ T6033] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.261176][ T6033] hub 8-1:1.0: bad descriptor, ignoring hub [ 323.263410][ T6033] hub 8-1:1.0: probe with driver hub failed with error -5 [ 323.266038][ T6033] cdc_wdm 8-1:1.0: skipping garbage [ 323.268315][ T6033] cdc_wdm 8-1:1.0: skipping garbage [ 323.272029][ T6033] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 323.273995][ T6033] cdc_wdm 8-1:1.0: Unknown control protocol [ 323.329045][ T7954] bond6 (unregistering): (slave geneve2): Releasing active interface [ 323.427330][T13451] libceph: connect (1)[c::]:6789 error -101 [ 323.429848][T13451] libceph: mon0 (1)[c::]:6789 connect error [ 323.430909][T20971] ceph: No mds server is up or the cluster is laggy [ 323.579195][T21844] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3565'. [ 323.598527][T13451] usb 8-1: USB disconnect, device number 12 [ 323.764022][T21856] block device autoloading is deprecated and will be removed. [ 323.799460][T21860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21860 comm=syz.8.3568 [ 323.887291][ T7954] bond1 (unregistering): Released all slaves [ 323.986415][ T7954] bond2 (unregistering): Released all slaves [ 324.097827][ T7954] bond3 (unregistering): Released all slaves [ 324.109272][ T7954] bond4 (unregistering): Released all slaves [ 324.117276][ T7954] bond5 (unregistering): Released all slaves [ 324.128111][ T7954] bond0 (unregistering): Released all slaves [ 324.139649][ T7954] bond6 (unregistering): Released all slaves [ 324.219487][T21870] netdevsim netdevsim8: Direct firmware load for . [ 324.219487][T21870] failed with error -2 [ 324.261092][T21870] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 324.261092][T21870] [ 324.266408][ T7954] : left promiscuous mode [ 324.376502][ T7954] tipc: Disabling bearer [ 324.386189][ T7954] tipc: Left network mode [ 324.389751][ T7954] IPVS: stopping backup sync thread 17168 ... [ 324.410629][ T5981] Bluetooth: hci4: command tx timeout [ 324.514128][T21912] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3578'. [ 324.518423][T21912] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 324.521375][T21912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.621082][ T7954] hsr_slave_0: left promiscuous mode [ 324.623804][ T7954] hsr_slave_1: left promiscuous mode [ 324.637621][ T7954] pim6reg (unregistering): left allmulticast mode [ 324.640710][T21917] FAULT_INJECTION: forcing a failure. [ 324.640710][T21917] name failslab, interval 1, probability 0, space 0, times 0 [ 324.646129][T21917] CPU: 1 UID: 0 PID: 21917 Comm: syz.9.3579 Not tainted syzkaller #0 PREEMPT(full) [ 324.646153][T21917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 324.646167][T21917] Call Trace: [ 324.646173][T21917] [ 324.646180][T21917] dump_stack_lvl+0x16c/0x1f0 [ 324.646231][T21917] should_fail_ex+0x512/0x640 [ 324.646256][T21917] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 324.646288][T21917] should_failslab+0xc2/0x120 [ 324.646307][T21917] __kmalloc_cache_noprof+0x6a/0x3e0 [ 324.646332][T21917] ? sr_read_tocentry.isra.0+0xab/0x540 [ 324.646358][T21917] sr_read_tocentry.isra.0+0xab/0x540 [ 324.646382][T21917] ? __pfx_sr_read_tocentry.isra.0+0x10/0x10 [ 324.646412][T21917] ? sr_packet+0x120/0x1c0 [ 324.646433][T21917] sr_audio_ioctl+0x282/0x2f0 [ 324.646456][T21917] ? __pfx_sr_audio_ioctl+0x10/0x10 [ 324.646483][T21917] ? find_held_lock+0x2b/0x80 [ 324.646508][T21917] cdrom_get_last_written+0x1f3/0x790 [ 324.646531][T21917] ? __pfx_cdrom_get_last_written+0x10/0x10 [ 324.646569][T21917] mmc_ioctl_cdrom_last_written+0x9b/0x230 [ 324.646590][T21917] ? __pfx_mmc_ioctl_cdrom_last_written+0x10/0x10 [ 324.646611][T21917] ? __pfx___schedule+0x10/0x10 [ 324.646632][T21917] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 324.646653][T21917] cdrom_ioctl+0x2553/0x3190 [ 324.646673][T21917] ? __pfx_cdrom_ioctl+0x10/0x10 [ 324.646696][T21917] ? rpm_resume+0x80c/0x1310 [ 324.646719][T21917] ? rcu_is_watching+0x12/0xc0 [ 324.646745][T21917] ? rpm_resume+0x80c/0x1310 [ 324.646766][T21917] ? trace_rpm_return_int+0x196/0x220 [ 324.646786][T21917] ? rpm_resume+0x811/0x1310 [ 324.646811][T21917] ? __pfx_rpm_resume+0x10/0x10 [ 324.646829][T21917] ? do_raw_spin_lock+0x12c/0x2b0 [ 324.646847][T21917] ? find_held_lock+0x2b/0x80 [ 324.646878][T21917] ? lockdep_hardirqs_on+0x7c/0x110 [ 324.646898][T21917] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 324.646918][T21917] ? __pm_runtime_resume+0xc3/0x170 [ 324.646940][T21917] sr_block_ioctl+0x1b0/0x250 [ 324.646967][T21917] ? __pfx_sr_block_ioctl+0x10/0x10 [ 324.646989][T21917] blkdev_ioctl+0x274/0x6d0 [ 324.647007][T21917] ? __pfx_blkdev_ioctl+0x10/0x10 [ 324.647022][T21917] ? selinux_file_ioctl+0x180/0x270 [ 324.647044][T21917] ? selinux_file_ioctl+0xb4/0x270 [ 324.647069][T21917] ? __pfx_blkdev_ioctl+0x10/0x10 [ 324.647086][T21917] __x64_sys_ioctl+0x18e/0x210 [ 324.647113][T21917] do_syscall_64+0xcd/0x4e0 [ 324.647135][T21917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.647152][T21917] RIP: 0033:0x7f202698ec29 [ 324.647167][T21917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.647183][T21917] RSP: 002b:00007f20278c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.647199][T21917] RAX: ffffffffffffffda RBX: 00007f2026bd5fa0 RCX: 00007f202698ec29 [ 324.647210][T21917] RDX: 00002000000024c0 RSI: 0000000000005395 RDI: 0000000000000003 [ 324.647221][T21917] RBP: 00007f20278c1090 R08: 0000000000000000 R09: 0000000000000000 [ 324.647230][T21917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.647240][T21917] R13: 00007f2026bd6038 R14: 00007f2026bd5fa0 R15: 00007fff76821c88 [ 324.647263][T21917] [ 325.725105][ T7965] smc: removing ib device syz0 [ 326.091089][T21924] ipvlan0: entered promiscuous mode [ 326.093225][T21924] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 326.095821][T21924] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 326.119292][ T40] kauditd_printk_skb: 166 callbacks suppressed [ 326.119350][ T40] audit: type=1400 audit(1758428554.498:94363): avc: denied { append } for pid=21945 comm="syz.3.3585" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 326.130824][ T40] audit: type=1400 audit(1758428554.498:94364): avc: denied { allowed } for pid=21945 comm="syz.3.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 326.152637][ T40] audit: type=1400 audit(1758428554.498:94365): avc: denied { sys_module } for pid=21939 comm="syz.8.3584" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 326.165607][ T40] audit: type=1400 audit(1758428554.507:94366): avc: denied { create } for pid=21945 comm="syz.3.3585" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 326.180416][ T40] audit: type=1400 audit(1758428554.507:94367): avc: denied { map } for pid=21945 comm="syz.3.3585" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 326.199675][ T40] audit: type=1400 audit(1758428554.507:94368): avc: denied { read write } for pid=21945 comm="syz.3.3585" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 326.208652][T21960] netlink: 'syz.3.3586': attribute type 1 has an invalid length. [ 326.211600][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3586'. [ 326.226106][ T40] audit: type=1400 audit(1758428554.582:94369): avc: denied { create } for pid=21959 comm="syz.3.3586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.235669][ T40] audit: type=1400 audit(1758428554.582:94370): avc: denied { write } for pid=21959 comm="syz.3.3586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.244308][ T40] audit: type=1400 audit(1758428554.582:94371): avc: denied { read } for pid=21959 comm="syz.3.3586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.250336][ T40] audit: type=1400 audit(1758428554.582:94372): avc: denied { ioctl } for pid=21959 comm="syz.3.3586" path="socket:[91612]" dev="sockfs" ino=91612 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.271850][T21965] netlink: 'syz.3.3586': attribute type 1 has an invalid length. [ 326.275044][T21965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3586'. [ 326.329756][T21964] FAULT_INJECTION: forcing a failure. [ 326.329756][T21964] name failslab, interval 1, probability 0, space 0, times 0 [ 326.335465][T21964] CPU: 1 UID: 0 PID: 21964 Comm: syz.9.3587 Not tainted syzkaller #0 PREEMPT(full) [ 326.335491][T21964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.335502][T21964] Call Trace: [ 326.335509][T21964] [ 326.335517][T21964] dump_stack_lvl+0x16c/0x1f0 [ 326.335545][T21964] should_fail_ex+0x512/0x640 [ 326.335568][T21964] ? fs_reclaim_acquire+0xae/0x150 [ 326.335594][T21964] ? bio_kmalloc+0x41/0x70 [ 326.335614][T21964] should_failslab+0xc2/0x120 [ 326.335641][T21964] __kmalloc_noprof+0xd2/0x510 [ 326.335661][T21964] ? __pfx___debug_object_init+0x10/0x10 [ 326.335684][T21964] bio_kmalloc+0x41/0x70 [ 326.335704][T21964] blk_rq_map_kern+0x387/0x6d0 [ 326.335739][T21964] scsi_execute_cmd+0xbd9/0xef0 [ 326.335770][T21964] ? cdrom_ioctl+0x2553/0x3190 [ 326.335796][T21964] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 326.335831][T21964] sr_do_ioctl+0x219/0x840 [ 326.335862][T21964] ? __pfx_sr_do_ioctl+0x10/0x10 [ 326.335900][T21964] sr_read_tocentry.isra.0+0x180/0x540 [ 326.335926][T21964] ? __pfx_sr_read_tocentry.isra.0+0x10/0x10 [ 326.335959][T21964] ? sr_packet+0x120/0x1c0 [ 326.335984][T21964] sr_audio_ioctl+0x282/0x2f0 [ 326.336009][T21964] ? __pfx_sr_audio_ioctl+0x10/0x10 [ 326.336046][T21964] cdrom_get_last_written+0x1f3/0x790 [ 326.336071][T21964] ? __pfx_cdrom_get_last_written+0x10/0x10 [ 326.336093][T21964] ? find_held_lock+0x2b/0x80 [ 326.336136][T21964] mmc_ioctl_cdrom_last_written+0x9b/0x230 [ 326.336160][T21964] ? __pfx_mmc_ioctl_cdrom_last_written+0x10/0x10 [ 326.336182][T21964] ? lockdep_hardirqs_on+0x7c/0x110 [ 326.336207][T21964] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 326.336230][T21964] cdrom_ioctl+0x2553/0x3190 [ 326.336254][T21964] ? __pfx_cdrom_ioctl+0x10/0x10 [ 326.336275][T21964] ? rpm_resume+0x80c/0x1310 [ 326.336297][T21964] ? rcu_is_watching+0x12/0xc0 [ 326.336319][T21964] ? rpm_resume+0x80c/0x1310 [ 326.336338][T21964] ? trace_rpm_return_int+0x196/0x220 [ 326.336360][T21964] ? rpm_resume+0x811/0x1310 [ 326.336388][T21964] ? __pfx_rpm_resume+0x10/0x10 [ 326.336408][T21964] ? do_raw_spin_lock+0x12c/0x2b0 [ 326.336429][T21964] ? find_held_lock+0x2b/0x80 [ 326.336456][T21964] ? lockdep_hardirqs_on+0x7c/0x110 [ 326.336477][T21964] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 326.336499][T21964] ? __pm_runtime_resume+0xc3/0x170 [ 326.336525][T21964] sr_block_ioctl+0x1b0/0x250 [ 326.336548][T21964] ? __pfx_sr_block_ioctl+0x10/0x10 [ 326.336572][T21964] blkdev_ioctl+0x274/0x6d0 [ 326.336591][T21964] ? __pfx_blkdev_ioctl+0x10/0x10 [ 326.336608][T21964] ? selinux_file_ioctl+0x180/0x270 [ 326.336638][T21964] ? selinux_file_ioctl+0xb4/0x270 [ 326.336666][T21964] ? __pfx_blkdev_ioctl+0x10/0x10 [ 326.336685][T21964] __x64_sys_ioctl+0x18e/0x210 [ 326.336715][T21964] do_syscall_64+0xcd/0x4e0 [ 326.336740][T21964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.336759][T21964] RIP: 0033:0x7f202698ec29 [ 326.336774][T21964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.336791][T21964] RSP: 002b:00007f20278c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.336810][T21964] RAX: ffffffffffffffda RBX: 00007f2026bd5fa0 RCX: 00007f202698ec29 [ 326.336823][T21964] RDX: 00002000000024c0 RSI: 0000000000005395 RDI: 0000000000000003 [ 326.336834][T21964] RBP: 00007f20278c1090 R08: 0000000000000000 R09: 0000000000000000 [ 326.336845][T21964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.336856][T21964] R13: 00007f2026bd6038 R14: 00007f2026bd5fa0 R15: 00007fff76821c88 [ 326.336880][T21964] [ 326.359609][T20789] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 326.506842][T20789] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 326.511834][T20789] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 326.519001][T20789] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 326.591046][T20789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.600227][T20789] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.616929][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.619532][ T7967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.647407][ T7967] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.650060][ T7967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.652552][ T5981] Bluetooth: hci4: command tx timeout [ 326.724590][T22009] block nbd9: Attempted send on invalid socket [ 326.749454][T22009] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.760925][ T7954] IPVS: stop unused estimator thread 0... [ 326.764109][T22009] vxfs: unable to read disk superblock at 1 [ 326.768042][T22009] block nbd9: Attempted send on invalid socket [ 326.770165][T22009] I/O error, dev nbd9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.772878][T22009] vxfs: unable to read disk superblock at 8 [ 326.777328][T22009] vxfs: can't find superblock. [ 326.800753][T22017] netlink: 344 bytes leftover after parsing attributes in process `syz.3.3594'. [ 326.815046][T20789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.882696][T22025] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3595'. [ 327.038687][T20789] veth0_vlan: entered promiscuous mode [ 327.053612][T20789] veth1_vlan: entered promiscuous mode [ 327.078035][T20789] veth0_macvtap: entered promiscuous mode [ 327.086509][T20789] veth1_macvtap: entered promiscuous mode [ 327.100272][T20789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.112873][T20789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.122575][ T7967] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.127124][ T7967] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.132258][ T7967] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.135725][ T7967] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.193290][ T7967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.195753][ T7967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.212430][ T7959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.215455][ T7959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.340599][ T6033] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 327.350585][T13451] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 327.534710][ T6033] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 327.538669][ T6033] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.544382][T13451] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 327.544411][ T6033] usb 13-1: Product: syz [ 327.547310][T13451] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.553729][ T6033] usb 13-1: Manufacturer: syz [ 327.554015][T13451] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 327.557623][ T6033] usb 13-1: SerialNumber: syz [ 327.559415][T13451] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 327.559438][T13451] usb 8-1: Manufacturer: syz [ 327.569608][ T6033] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 327.571592][T13451] usb 8-1: config 0 descriptor?? [ 327.617284][ T1339] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 327.639120][T13451] rc_core: IR keymap rc-hauppauge not found [ 327.639138][T13451] Registered IR keymap rc-empty [ 327.642059][T13451] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 327.645134][T13451] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input38 [ 327.728755][T22112] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3602'. [ 327.798601][T22058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3601'. [ 327.805166][T13451] usb 8-1: USB disconnect, device number 13 [ 327.915057][ T6033] usb 13-1: USB disconnect, device number 15 [ 328.327717][T22189] block nbd7: Attempted send on invalid socket [ 328.330228][T22189] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 328.333822][T22189] vxfs: unable to read disk superblock at 1 [ 328.336412][T22189] block nbd7: Attempted send on invalid socket [ 328.338838][T22189] I/O error, dev nbd7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 328.345362][T22189] vxfs: unable to read disk superblock at 8 [ 328.347187][T22189] vxfs: can't find superblock. [ 328.526586][T22204] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3610'. [ 328.726002][T22214] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.3614'. [ 328.772418][ T1339] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 328.774648][ T1339] ath9k_htc: Failed to initialize the device [ 328.778674][ T6033] usb 13-1: ath9k_htc: USB layer deinitialized [ 328.840671][T22228] 9pnet_fd: Insufficient options for proto=fd [ 328.858045][ T5981] Bluetooth: hci4: command tx timeout [ 329.260259][ T7957] bridge_slave_1: left allmulticast mode [ 329.262672][ T7957] bridge_slave_1: left promiscuous mode [ 329.268289][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.273887][ T7957] bridge_slave_0: left allmulticast mode [ 329.276457][ T7957] bridge_slave_0: left promiscuous mode [ 329.279206][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.304258][ T5329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.310879][ T5329] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.322027][ T5329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.333730][ T5329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.337623][ T5329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.513386][T22211] delete_channel: no stack [ 329.867590][ T7957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.871284][ T7957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.874725][ T7957] bond0 (unregistering): (slave bond2): Releasing backup interface [ 329.877953][ T7957] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 329.882046][ T7957] bond0 (unregistering): Released all slaves [ 329.974860][ T7957] bond1 (unregistering): Released all slaves [ 330.065355][ T7957] bond2 (unregistering): Released all slaves [ 330.092038][T22256] xfrm0 speed is unknown, defaulting to 1000 [ 330.113833][T22291] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 330.119083][T22291] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3626'. [ 330.254110][T22256] chnl_net:caif_netlink_parms(): no params data found [ 330.357175][T22256] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.359793][T22256] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.362444][T22256] bridge_slave_0: entered allmulticast mode [ 330.367057][T22256] bridge_slave_0: entered promiscuous mode [ 330.370433][T22256] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.372735][T22256] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.375053][T22256] bridge_slave_1: entered allmulticast mode [ 330.381843][T22256] bridge_slave_1: entered promiscuous mode [ 330.427011][ T7957] hsr_slave_0: left promiscuous mode [ 330.431941][ T7957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.475135][ T54] usb 12-1: new low-speed USB device number 30 using dummy_hcd [ 330.638428][ T54] usb 12-1: config index 0 descriptor too short (expected 1307, got 27) [ 330.640939][ T54] usb 12-1: config 0 has an invalid interface number: 0 but max is -1 [ 330.645374][ T54] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 330.648129][ T54] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 330.651563][ T54] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 330.654723][ T54] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 330.657592][ T54] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 330.663912][ T54] usb 12-1: string descriptor 0 read error: -22 [ 330.666198][ T54] usb 12-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 330.669132][ T54] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.673204][ T54] usb 12-1: config 0 descriptor?? [ 330.676617][ T54] hub 12-1:0.0: bad descriptor, ignoring hub [ 330.678697][ T54] hub 12-1:0.0: probe with driver hub failed with error -5 [ 330.688602][ T54] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input39 [ 330.832791][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.834772][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.025024][ T54] usb 12-1: USB disconnect, device number 30 [ 331.227163][ T7957] team0 (unregistering): Port device team_slave_1 removed [ 331.338953][ T7957] team0 (unregistering): Port device team_slave_0 removed [ 331.601521][ T40] kauditd_printk_skb: 166 callbacks suppressed [ 331.601535][ T40] audit: type=1400 audit(1758428559.624:94539): avc: denied { write } for pid=22288 comm="syz.3.3626" name="sockstat6" dev="proc" ino=4026534131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 331.605821][ T5329] Bluetooth: hci2: command tx timeout [ 331.668914][ T40] audit: type=1400 audit(1758428559.680:94540): avc: denied { read } for pid=22682 comm="syz.7.3630" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 331.671274][T22683] binder: 22682:22683 unknown command 0 [ 331.677941][ T40] audit: type=1400 audit(1758428559.680:94541): avc: denied { open } for pid=22682 comm="syz.7.3630" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 331.679479][T22683] binder: 22682:22683 ioctl c0306201 200000000300 returned -22 [ 331.688868][ T40] audit: type=1400 audit(1758428559.689:94542): avc: denied { ioctl } for pid=22682 comm="syz.7.3630" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 331.801666][ T40] audit: type=1400 audit(1758428559.811:94543): avc: denied { module_request } for pid=22685 comm="syz.7.3631" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 331.830729][ T40] audit: type=1400 audit(1758428559.848:94544): avc: denied { sys_module } for pid=22685 comm="syz.7.3631" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 331.897115][ T40] audit: type=1400 audit(1758428559.904:94545): avc: denied { create } for pid=22693 comm="syz.3.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 331.956580][ T40] audit: type=1400 audit(1758428559.951:94546): avc: denied { read write } for pid=22693 comm="syz.3.3633" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 331.966028][ T40] audit: type=1400 audit(1758428559.951:94547): avc: denied { open } for pid=22693 comm="syz.3.3633" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 331.974953][ T40] audit: type=1400 audit(1758428559.951:94548): avc: denied { ioctl } for pid=22693 comm="syz.3.3633" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 332.143265][T22256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.148749][T22256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.175004][T22775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.272103][T22256] team0: Port device team_slave_0 added [ 332.277059][T22256] team0: Port device team_slave_1 added [ 332.361520][T22256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.368993][T22256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.380610][T22256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.387384][T22256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.389949][T22256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.400327][T22256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.488915][T22256] hsr_slave_0: entered promiscuous mode [ 332.492209][T22256] hsr_slave_1: entered promiscuous mode [ 332.497247][T22256] debugfs: 'hsr0' already exists in 'hsr' [ 332.499491][T22256] Cannot create hsr debugfs directory [ 332.609360][T23151] netlink: 'syz.8.3641': attribute type 10 has an invalid length. [ 332.637507][T23151] hsr_slave_0: left promiscuous mode [ 332.644661][T23151] hsr_slave_1: left promiscuous mode [ 332.682322][T23289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3643'. [ 332.713721][ T7957] IPVS: stop unused estimator thread 0... [ 332.753056][T23370] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3644'. [ 332.786276][T22256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 332.789916][T22256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.885582][T22256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 332.890605][T22256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.961415][T22256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 332.965450][T22256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.039187][T22256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 333.043140][T22256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.090555][T23398] netlink: 276 bytes leftover after parsing attributes in process `syz.8.3648'. [ 333.161859][T22256] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 333.168702][T22256] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 333.178235][T22256] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 333.183425][T22256] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 333.201208][T23404] ------------[ cut here ]------------ [ 333.202980][T23404] WARNING: CPU: 3 PID: 23404 at arch/x86/kvm/x86.c:11563 kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 333.206255][T23404] Modules linked in: [ 333.208203][T23404] CPU: 3 UID: 0 PID: 23404 Comm: syz.8.3649 Not tainted syzkaller #0 PREEMPT(full) [ 333.213798][T23404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 333.217473][T23404] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 333.219615][T23404] Code: 0a 00 00 00 00 00 00 e8 dc 69 be 1e 31 ff 89 c5 89 c6 e8 94 f5 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 42 fa 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 34 fa 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 333.226236][T23404] RSP: 0018:ffffc90003bb7c30 EFLAGS: 00010293 [ 333.226486][T22256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.228146][T23404] RAX: 0000000000000000 RBX: ffff88802a400000 RCX: ffffffff814192bf [ 333.233064][T23404] RDX: ffff88802926a440 RSI: ffffffff8141a33e RDI: 0000000000000007 [ 333.235628][T23404] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 333.238139][T23404] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805cf59000 [ 333.240647][T23404] R13: ffff88802a4000d8 R14: 0000000000000000 R15: ffff88802a400334 [ 333.243200][T23404] FS: 00007f9cc7e856c0(0000) GS:ffff8880d69b2000(0000) knlGS:0000000000000000 [ 333.246085][T23404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.248294][T23404] CR2: 000000005200000c CR3: 000000005f44b000 CR4: 0000000000352ef0 [ 333.251429][T23404] Call Trace: [ 333.252626][T23404] [ 333.253584][T23404] kvm_vcpu_ioctl+0x5eb/0x1690 [ 333.254692][T23403] binder: BC_ATTEMPT_ACQUIRE not supported [ 333.255166][T23404] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 333.257125][T23403] binder: 23402:23403 ioctl c0306201 200000000300 returned -22 [ 333.258698][T23404] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 333.258717][T23404] ? do_vfs_ioctl+0x128/0x14f0 [ 333.258736][T23404] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 333.266180][T23404] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 333.268548][T23404] ? hook_file_ioctl_common+0x145/0x410 [ 333.270726][T23404] ? selinux_file_ioctl+0x180/0x270 [ 333.272920][T23404] ? selinux_file_ioctl+0xb4/0x270 [ 333.274935][T23404] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 333.276604][T23404] __x64_sys_ioctl+0x18e/0x210 [ 333.278705][T23404] do_syscall_64+0xcd/0x4e0 [ 333.280713][T23404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.283251][T23404] RIP: 0033:0x7f9cc6f8ec29 [ 333.285541][T23404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.293526][T23404] RSP: 002b:00007f9cc7e85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.297097][T23404] RAX: ffffffffffffffda RBX: 00007f9cc71d6090 RCX: 00007f9cc6f8ec29 [ 333.300411][T23404] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 333.303739][T23404] RBP: 00007f9cc7011e41 R08: 0000000000000000 R09: 0000000000000000 [ 333.307017][T23404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.310237][T23404] R13: 00007f9cc71d6128 R14: 00007f9cc71d6090 R15: 00007ffccd463e98 [ 333.313548][T23404] [ 333.314915][T23404] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 333.318052][T23404] CPU: 3 UID: 0 PID: 23404 Comm: syz.8.3649 Not tainted syzkaller #0 PREEMPT(full) [ 333.321953][T23404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 333.326451][T23404] Call Trace: [ 333.327890][T23404] [ 333.329236][T23404] dump_stack_lvl+0x3d/0x1f0 [ 333.331256][T23404] vpanic+0x6e8/0x7a0 [ 333.332992][T23404] ? __pfx_vpanic+0x10/0x10 [ 333.334945][T23404] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 333.337406][T23404] panic+0xca/0xd0 [ 333.339030][T23404] ? __pfx_panic+0x10/0x10 [ 333.340960][T23404] ? check_panic_on_warn+0x1f/0xb0 [ 333.343154][T23404] check_panic_on_warn+0xab/0xb0 [ 333.345261][T23404] __warn+0xf6/0x3c0 [ 333.346966][T23404] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 333.349041][T23404] report_bug+0x3c3/0x580 [ 333.350464][T23404] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 333.352328][T23404] handle_bug+0x184/0x210 [ 333.353711][T23404] exc_invalid_op+0x17/0x50 [ 333.355414][T23404] asm_exc_invalid_op+0x1a/0x20 [ 333.357309][T23404] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 333.359651][T23404] Code: 0a 00 00 00 00 00 00 e8 dc 69 be 1e 31 ff 89 c5 89 c6 e8 94 f5 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 42 fa 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 34 fa 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 333.365988][T23404] RSP: 0018:ffffc90003bb7c30 EFLAGS: 00010293 [ 333.368314][T23404] RAX: 0000000000000000 RBX: ffff88802a400000 RCX: ffffffff814192bf [ 333.371536][T23404] RDX: ffff88802926a440 RSI: ffffffff8141a33e RDI: 0000000000000007 [ 333.374613][T23404] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 333.377233][T23404] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805cf59000 [ 333.379825][T23404] R13: ffff88802a4000d8 R14: 0000000000000000 R15: ffff88802a400334 [ 333.382801][T23404] ? kvm_arch_vcpu_ioctl_run+0x45f/0x1980 [ 333.385014][T23404] ? kvm_arch_vcpu_ioctl_run+0x14de/0x1980 [ 333.387125][T23404] kvm_vcpu_ioctl+0x5eb/0x1690 [ 333.389100][T23404] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 333.391251][T23404] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 333.393665][T23404] ? do_vfs_ioctl+0x128/0x14f0 [ 333.395524][T23404] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 333.397588][T23404] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 333.400348][T23404] ? hook_file_ioctl_common+0x145/0x410 [ 333.402604][T23404] ? selinux_file_ioctl+0x180/0x270 [ 333.404602][T23404] ? selinux_file_ioctl+0xb4/0x270 [ 333.406395][T23404] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 333.408416][T23404] __x64_sys_ioctl+0x18e/0x210 [ 333.410019][T23404] do_syscall_64+0xcd/0x4e0 [ 333.411521][T23404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.413365][T23404] RIP: 0033:0x7f9cc6f8ec29 [ 333.414852][T23404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.420989][T23404] RSP: 002b:00007f9cc7e85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.423609][T23404] RAX: ffffffffffffffda RBX: 00007f9cc71d6090 RCX: 00007f9cc6f8ec29 [ 333.426718][T23404] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 333.429426][T23404] RBP: 00007f9cc7011e41 R08: 0000000000000000 R09: 0000000000000000 [ 333.431966][T23404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.434487][T23404] R13: 00007f9cc71d6128 R14: 00007f9cc71d6090 R15: 00007ffccd463e98 [ 333.436963][T23404] [ 333.438665][T23404] Kernel Offset: disabled [ 333.440079][T23404] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:22:55 Registers: info registers vcpu 0 CPU#0 RAX=ffff800000000000 RBX=0000000000000000 RCX=ffffffff81a7da12 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff90ab7590 RBP=ffff888060055828 RSP=ffffc90000007d18 R8 =0000000000000000 R9 =0000000000000007 R10=ffffffff90ab7597 R11=0000000000000000 R12=fffff52000000fc1 R13=ffff88806a425b00 R14=dffffc0000000000 R15=ffffc90000007e08 RIP=ffffffff8221fdea RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d66b2000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000048c7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000b7ed DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006f6c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0af8d776 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0af8d776 00007ffd0af8d77c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa816812e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa816812e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa816812e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa816812e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa816812f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa816812fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e88e00a3b838ae0f 66c0220ffec70ff3 c0200fd101c1007c d8000f0109b8ed0c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa81750d100 00007fa8169a7460 00007fa8169a0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8169a74b8 00007fa8169a74b0 00007fa8169a74a8 00007fa8169a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000e0000011 RBX=0800000000000008 RCX=0000000000000009 RDX=000000007fffffff RSI=0000000000000006 RDI=0000000000000005 RBP=000000000000b608 RSP=ffffc900043b7968 R8 =0000000000000006 R9 =0000000000000002 R10=fffffffffffffe01 R11=7fffffffffffffff R12=0000000000000c6b R13=0000000000000003 R14=0000000000000042 R15=0000000000000101 RIP=ffffffff8b9471f0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007fa8175516c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d67b2000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000000000b CR3=0000000048c7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000000c RBX=00007ffdf7ba2dd0 RCX=0000000000000001 RDX=00007ffdf7ba2a2c RSI=00007ffdf7ba2dd0 RDI=00007ffdf7ba2dd0 RBP=0000000000000002 RSP=00007ffdf7ba29f8 R8 =000000000000000c R9 =00007ffdf7ba27f6 R10=0000000000000000 R11=0000000000000012 R12=00007ffdf7ba2a2c R13=00007efdf3012eb9 R14=00007efdf3d04620 R15=00007efdf3012eb9 RIP=00007efdf2f678e0 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555586fd4500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efdf3d035c0 CR3=000000005e093000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf7ba2a60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efdf3012e43 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efdf3012e3b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efdf3012e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efdf3012e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efdf3012e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efdf3012e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efdf3012f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efdf3012fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a303063660064 656c696166206e6f 74705f74656e6920 306576656e656700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f1f151546430041 40494c4443054b4a 51555f51404b4c05 154053404b404200 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c0d5 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc90003bb75a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b1180e0 R15=ffffffff8564c070 RIP=ffffffff8564c0ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f9cc7e856c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d69b2000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=000000005f44b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006f6c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0af8d776 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0af8d776 00007ffd0af8d77c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa816812e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa816812e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa816812e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa816812e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa816812f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa816812fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000