last executing test programs: 6m30.682797765s ago: executing program 32 (id=652): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r0 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = getpgid(r0) setpgid(0x0, r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', &(0x7f0000000680), 0x4000) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="fd204dc97c8e6769643d", @ANYRESHEX, @ANYBLOB=',\x00']) 4m45.682106283s ago: executing program 33 (id=2269): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x6, 0x7fff, 0x80000000002, 0x80000000004, 0x400000000000, 0x6, 0x200, 0x0, 0x1, 0x5000, 0x7, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="2705", 0x2}], 0x1}, 0x4000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) shutdown(r0, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x20008045, 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0xfffffffffddfbffc, 0x1501) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000ff85000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 4m16.095944043s ago: executing program 34 (id=2658): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000080)=0x7, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf256300000008000300", @ANYRES32=r5, @ANYBLOB="ceb6bc3ffa6de97cd9fc1fecaa39e4d0dea92c639cf3a05d5072fb3f"], 0x1c}}, 0x4004000) r6 = dup(r2) r7 = socket(0x2, 0x80805, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) set_mempolicy(0x4, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="200000005e00011e00000000000000000c000000010000000000008004000180"], 0x20}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(r2, r8, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="0f01c8660f38cf5700650f3066b8003000000f23d80f21f86635400000100f23f80f23e93e0f23e00f01fabaf80c66b8b806438e66efbafc0c66b883a0000066eff0821205d9ea", 0x47}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4m4.367467692s ago: executing program 6 (id=2764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf3c4}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x21, 0xb, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/57, 0x39}, {0x0}], 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 4m3.99723445s ago: executing program 6 (id=2769): r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x2, 0x35f}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x91a2, 0x0, 0x0, 0x1}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x21, 0x0, 0x5b) (async) setsockopt$inet6_int(r4, 0x29, 0x21, 0x0, 0x5b) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) (async) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r3, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000000000080000000000000000677265000c00028008000700e0000002"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0xae2, 0x802, 0xee01, 0x0, 0x1000, '\x00', 0x1, 0x8, 0xb4e7, 0x320d3873, {0x8003, 0x8}, {0x4000000000006, 0x3}, {0xaeb, 0x7}, {0xf, 0x8}, 0x701, 0xa, 0x8, 0x6}}}}) write$FUSE_INIT(r3, &(0x7f0000001200)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) io_uring_enter(r0, 0x3512, 0x0, 0x0, 0x0, 0x0) 4m3.854608484s ago: executing program 6 (id=2771): sendmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000001200)=@phonet={0x23, 0x80, 0xb, 0x8}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000012c0)="9440fe30336e182ccb", 0x9}], 0x1}}], 0x1, 0x1) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x60400, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00c0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 65) 4m3.605993104s ago: executing program 6 (id=2773): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000280)={{}, 0x78}, 0x10) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = socket(0x15, 0x5, 0x0) r2 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x94040000}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x7ffff, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0xc, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x84, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0x16010000}}], 0x98}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$nfc_llcp(r1, 0x114, 0x2718, 0x0, 0x20000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001080), 0x88000, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f00000011c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x2b08001, &(0x7f0000000340)={[{}, {@subsystem='cpuset'}, {@memory_hugetlb_accounting}, {@memory_recursiveprot}, {}, {@memory_hugetlb_accounting}], [{@appraise_type}, {@appraise_type}, {@dont_appraise}, {@audit}]}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000480)={0x0, r3}, 0x10) read$FUSE(r3, &(0x7f0000004d40)={0x2020}, 0x2020) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(r3, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r5, r6/1000+60000}}) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) recvfrom$inet_nvme(r3, &(0x7f0000001200)=""/4096, 0x1000, 0x3, &(0x7f0000000400)=@x25, 0x80) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 4m3.497042809s ago: executing program 6 (id=2775): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa4c81, 0x0) dup3(r2, r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) 4m3.220127085s ago: executing program 6 (id=2777): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '\x918s\x89X', 0x20, 0xffd}, 0x2f, 0x0) r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0xf1ffffff, 0x0, 0x1}}}}]}, 0x78}}, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x5d, "85bf9eaf1368f15889fbc2762f77266d1008513e78eb9167dabf829e43d3ce8c4692016e4d21a1331c12ca83d9fa7d4ad5eaf242258b517b9ed544a50e8ddc1f9a93682b822dd5f8068544c2edfb2b8af91075c812779907287742f623"}, &(0x7f00000000c0)=0x65) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e21, 0xce37, @local}}}, 0x84) (async) sendmsg$key(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x10d8020, &(0x7f0000000040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB]) (async) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) 4m3.091399037s ago: executing program 35 (id=2777): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '\x918s\x89X', 0x20, 0xffd}, 0x2f, 0x0) r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0xf1ffffff, 0x0, 0x1}}}}]}, 0x78}}, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x5d, "85bf9eaf1368f15889fbc2762f77266d1008513e78eb9167dabf829e43d3ce8c4692016e4d21a1331c12ca83d9fa7d4ad5eaf242258b517b9ed544a50e8ddc1f9a93682b822dd5f8068544c2edfb2b8af91075c812779907287742f623"}, &(0x7f00000000c0)=0x65) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e21, 0xce37, @local}}}, 0x84) (async) sendmsg$key(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x10d8020, &(0x7f0000000040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB]) (async) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) 3m40.786008476s ago: executing program 7 (id=2994): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1800000014000100000080000000000008"], 0x18}], 0x1}, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x3ff, 0x0, 0x4, {0x9, @raw_data="e63e09b33e643600000100cbe6e735d73f64ea1b51edd82d923da428ca836d3295d0c9b12d3bb819c276dfe5003698b901165421f38b48f2e58e6d50f68960de10a1d050641adaff2023ccc507000000b81433647f5d5aee7df2e720468f2fbfc7684178ad817581d3180327796bbec48401556e4429464b7514dcc765288d05c22b02aec6e7cf0e0991b0d8c7bae62d5c2c67542265f7197d9d534aa3f543e7563ccc4bd3e3e7f137e4fd5538e16f7aa9f3b545ae927ed6afc98f34332d0d43d700"}, 0x8}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)={0x77359400}, 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE) io_uring_enter(r3, 0x4866, 0x0, 0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1800000014000100000080000000000008"], 0x18}], 0x1}, 0x0) (async) syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x3ff, 0x0, 0x4, {0x9, @raw_data="e63e09b33e643600000100cbe6e735d73f64ea1b51edd82d923da428ca836d3295d0c9b12d3bb819c276dfe5003698b901165421f38b48f2e58e6d50f68960de10a1d050641adaff2023ccc507000000b81433647f5d5aee7df2e720468f2fbfc7684178ad817581d3180327796bbec48401556e4429464b7514dcc765288d05c22b02aec6e7cf0e0991b0d8c7bae62d5c2c67542265f7197d9d534aa3f543e7563ccc4bd3e3e7f137e4fd5538e16f7aa9f3b545ae927ed6afc98f34332d0d43d700"}, 0x8}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) (async) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000480)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)={0x77359400}, 0x1, 0x0, 0x1}) (async) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE) (async) io_uring_enter(r3, 0x4866, 0x0, 0xb, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) 3m40.727263529s ago: executing program 7 (id=2995): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) setrlimit(0x9, &(0x7f0000000000)) (async) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x1, 0x0, &(0x7f0000000240)) (async) close(0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m40.726164042s ago: executing program 7 (id=2996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800b0001007470726f78790000140002800800034000000016080001400000000a0900010073797a30"], 0xf8}, 0x1, 0x0, 0x3000000}, 0x0) 3m40.637414012s ago: executing program 7 (id=2997): modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x9) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async, rerun: 32) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (rerun: 32) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x96d}}, {@default_permissions}], [{@subj_role}, {@audit}, {@uid_eq={'uid', 0x3d, r2}}]}}) 3m40.637090961s ago: executing program 7 (id=2998): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0xeb41071a079207d6) pread64(r1, &(0x7f0000000200)=""/169, 0xa9, 0x3) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000191407"], 0x10}}, 0x0) removexattr(&(0x7f0000000100)='./file0/file0/file0/file0/file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='uper.*\x00']) 3m40.297336208s ago: executing program 7 (id=3002): prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1fdffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x4) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 3m40.243182956s ago: executing program 36 (id=3002): prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1fdffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x4) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 3m2.906753829s ago: executing program 5 (id=3523): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r3 = fsmount(r1, 0x1, 0x0) fchdir(r3) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0xc4c03d12, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3m2.686298406s ago: executing program 5 (id=3529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) connect$pppl2tp(r1, &(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x0, 0x3, {0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}}, 0x3a) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340), &(0x7f0000000400)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000840)) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x0, {0xfffffffc, 0x7, 0xa, 0x8000}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x2f4, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x38, 0x8}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x7f}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x29f, 0x2a, [@fast_bss_trans={0x37, 0x78, {0x6, 0x2, "56537e47353ebe6f37ff2dc7e16fd695", "cd56f0a294b612b874e9d7bf136f63457a8c560772710924c9840f226412d9bc", "275f67baea8de45ac2bdd4b2e5d434d46df79687d6195ed4007b7b5314a4ba73", [{0x2, 0x13, "1211936b22c72a7f6ed3c2045f939c9732de75"}, {0x1, 0xf, "f508cc70b4e00235cec088dd409be1"}]}}, @mesh_chsw={0x76, 0x6, {0x3, 0x4, 0x10, 0x3}}, @gcr_ga={0xbd, 0x6}, @random={0x2, 0x60, "fd01f92cf030aa16c1af5a112f14b7a0b62d0fb048e1852de9d343f929f1565f3d584cadd9003e90ce3fd3bdd700e9b799cb5234ff55fc31e233c39c41c68123bc38d2673ee19ee10697aba236dbe61a3708c2190bc96b2c92ac393f33b7806b"}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @measure_req={0x26, 0x4c, {0x7, 0x0, 0x0, "a1da3111cf7654087dafccc515bb44df0fd75c416fdd4ae0282b54e2f9fb5bec111c4ba77d78fb8828342ff6f4964bdfb3ed927004b1757e86ed6cf719931d3d25f3972e15131a335e"}}, @perr={0x84, 0xd5, {0x8, 0xd, [{{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x15}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x21}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x3e}, {{}, @device_a, 0x6, @void, 0x18}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x19}, {{}, @broadcast, 0x1, @void, 0xf}, {{0x0, 0x1}, @device_b, 0xc9, @value=@broadcast, 0x11}, {{0x0, 0x1}, @device_b, 0x62b, @value=@broadcast, 0x21}, {{}, @broadcast, 0x9, @void, 0x30}, {{}, @device_a, 0xd458, @void, 0x20}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x3f}, {{}, @device_a, 0x7, @void, 0x11}, {{}, @device_b, 0x5, @void, 0x3c}]}}, @cf={0x4, 0x6, {0x2d, 0x4, 0xc, 0x7}}, @preq={0x82, 0x7d, {{0x0, 0x0, 0x1}, 0x9, 0x0, 0x2, @device_a, 0x4a13, @void, 0x1, 0x0, 0x9, [{{0x0, 0x0, 0x1}, @device_a, 0x10}, {{0x0, 0x0, 0x1}, @broadcast}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{}, @device_b}, {{}, @device_a, 0xd58}, {{0x0, 0x0, 0x1}, @device_b, 0x1}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0xb4}]}}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x3c}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x34}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) listen(0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x0, 0x0) accept$ax25(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat(0xffffffffffffffff, 0x0, 0x105000, 0x6) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000f00)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_ev_le_phy_update_complete={{}, {0x0, 0xc8, 0x6, 0xeb}}}}, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0x5c, 0x3, {{0x30, 0x4, 0x3, 0x4, 0xc0, 0x65, 0x0, 0x6, 0x29, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0x2c, 0x24, 0x1, 0x9, [{@multicast1, 0x8}, {@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x7}, {@local, 0x6}]}, @lsrr={0x83, 0x1f, 0xe5, [@multicast1, @multicast2, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @rr={0x7, 0x17, 0xe7, [@broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @private=0xa010102]}, @rr={0x7, 0x23, 0xf9, [@local, @private=0xa010101, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, @rand_addr=0x64010101, @loopback]}, @timestamp_prespec={0x44, 0x24, 0x4c, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xd7f5}, {@empty, 0x8}, {@local, 0xd}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {0x8, 0x6}, {0xe, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendto(r2, &(0x7f0000000700)="4135d62174741bd347028fdef99a6ede0b1360aa85ec52c521e8bd3ee8969ee4885b751c1331d0aa77de56588a88f68b6bc667954d73369cc7dd2f9949260bfe58d598ddf4e76dc376dcbdf3c97633cb44c810bb350e35ab01e4cca649a5e91e2b873c79a4abfce7380f3d09f1461a1a39e5033b5f0a0b90e62bc446114df8b6a23621f9e21c06340d766fe3de404509c500", 0x92, 0x80, &(0x7f00000007c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) 3m2.636900477s ago: executing program 5 (id=3530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000000000000100"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) 3m2.636078655s ago: executing program 5 (id=3532): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x100, 0x5, 0x2, 0x800, 0x1, "f759e100edc710000000d9fc6300", '\x00\x00\x00@', "06000008", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", "000000ff0000002000002400", "0000000000000000001000"]}) 3m2.557215326s ago: executing program 5 (id=3533): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x5) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x40, 0xb, 0xe1, {0xe1, 0x4, "2af106f152d6e381a1e8be2af628a241722d6d75a29a307bba59e06d1ca6ff599b1846efa7204f7a35ee8405d9a845c033c1d5e528654021f975c90f4ec7035c569a85ea902025233bc9517482c18f08442cad4e6af45208a7387b4036a329556ed2c0065e0a15cad3a482cd6e0d757844bbaa10fedc1384284b1fd60480986bc5651068bdb8c62f9579c1f0c1449cda7de8c10ed02f7f668e2cdf723cd6be6ca9c6a6ad314278445c2c473404747a08cae183d655c7bf9c18dfc8dc46698b13b4021d06c09af157f723177d2c64fb0c1bba993962cf3bc5a4944a0421d998"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}, &(0x7f0000000180)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xc, "207bb33f"}, @local=@item_4={0x3, 0x2, 0x2, "21267a12"}, @global=@item_012={0x2, 0x1, 0x0, '^T'}, @main=@item_012={0x1, 0x0, 0x8, "ac"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x900, 0x0, 0x1, {0x22, 0xb01}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="090f7e000000e069836a8f64570dce8112b9ba8458f39a317245492c66c85de1a0a98e9a272c79ba7f7b64dedba68fcbd53d56f520fe7bf2058edefea22e58e1ce67c40596132726187c940982cda14119a227f3204fba10784699c29c8e431e5841ecf405512990bd058eb7076d1155f39a56be816532547b8efd6e9d1e11fbf3a992c1"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x1, 0x4e, "9a87f0545a22502b9edda2d3b304b42875feb07864202a0ce40102eb415bb0435c32175336507931f8e1fc06d9fff155669245be6d11631b3cb316bc2354ed8ac89aeac0e28be3214112bbbb01b0"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x3}}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 3m1.995133944s ago: executing program 5 (id=3551): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)="e76c9c02414385c0ed39181cc8020705bd9a") r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x800) 2m46.9630583s ago: executing program 37 (id=3551): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)="e76c9c02414385c0ed39181cc8020705bd9a") r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x800) 2m21.124245118s ago: executing program 8 (id=4305): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x40281) (async, rerun: 64) r1 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x7, 0xffffffff, &(0x7f0000000440)}) (async) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x110) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (rerun: 64) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect(r2, &(0x7f0000000280)=@nfc, 0x80) 2m21.056384875s ago: executing program 8 (id=4307): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1e, &(0x7f0000000640)=@mangle={'mangle\x00', 0x2, 0x6, 0x4f0, 0x3e0, 0x1b0, 0xd0, 0xd0, 0x1b0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0xff], 'macvlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0x0, 0x0, 0x0, 0xff000000], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0xfd}, {0xffffffffffffffff}, {}, 0xf3d9, 0x2}}}, {{@ipv6={@mcast1, @remote, [], [0xff, 0x0, 0x0, 0xff], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x31}, [0x0, 0x0, 0xff000000], [0xff000000, 0xff, 0x0, 0xff], 'veth1_to_bond\x00', 'gre0\x00', {}, {0xff}, 0x33, 0x4, 0x5, 0x25}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000300)={0x0, @bt={0x3, 0x2, 0x1, 0x3, 0xef81, 0xffffffff, 0x5, 0x2f89, 0x6, 0x0, 0x8, 0x8, 0xbe6, 0x6, 0x2, 0x20, {0x7, 0x1000}, 0x1, 0x6}}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000002080)=0x3, 0x4) ppoll(&(0x7f0000000180)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000950}, 0x200008c0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4, 0x40010, r1, 0xa8192000) mlock(&(0x7f0000c22000/0x3000)=nil, 0x3000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mlock(&(0x7f0000389000/0x2000)=nil, 0x2000) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x1b8, 0x0, 0x148, 0x0, 0x148, 0x298, 0x240, 0x240, 0x298, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {}, {}, 0x6}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@connlabel={{0x28}, {0x8000}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) ioctl$SG_BLKTRACESTART(r3, 0x1274, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000bc0)={'#! ', './file0', [{0x20, 'team_slave_1\x00'}, {0x20, 'ip6gretap0\x00'}, {0x20, 'recent\x00'}, {0x20, 'veth1_to_bridge\x00'}, {0x20, '\x00'}], 0xa, "371d291fbc568e24f6d8344b07e1327c5466889ece35155080622c621556c96ecfbf41f83caa2ccabf64733454977ae68bbb09218b086dee1048b8549f2af48ba1a6da9b4902ff2046363c8ca6a4af4f28d4d37ca38a28e1602411d790e2f0054a54547f9e34afa76fc1a1f4c8e34e0e1c91ef0e217bb4a7ab8a25a52cb53630fa3b4c74082bcdcb7c6bff5f8d625fa668dbfc2ffaad20d54fbf74eda9a358075aea11489b537d944f95adf501411fddfe94ce2824cab457425c87fbaf6da408e739c50f56c2fd8b357154c22e35cc16387884ce7327af81a8"}, 0x119) 2m20.98600671s ago: executing program 9 (id=4309): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$CDROMVOLCTRL(r0, 0x5392, 0x0) 2m20.982628747s ago: executing program 9 (id=4311): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000680)="93378efcd17301550000c0ba1a6949ae09f9a90efedde424f36d", 0x1a) r4 = accept4(r3, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) read$msr(r4, &(0x7f0000000380)=""/147, 0x93) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad", 0x1}], 0x1, 0x0, 0x0, 0x8004}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = dup3(r2, r0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0, 0x5}, 0x94) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000082000040"]) r10 = fsmount(r6, 0x1, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r12 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r10, 0x1, 0x0, @val=@iter={&(0x7f00000000c0)=@cgroup={0x1, r11, 0xa716}, 0x10}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r12, 0xffffffffffffffff, 0x4, r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 2m20.886373132s ago: executing program 9 (id=4314): r0 = memfd_secret(0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1800, 0x0) io_uring_enter(r1, 0x3a66, 0x2043, 0x20, &(0x7f0000000040)={[0x7]}, 0x8) r2 = syz_io_uring_setup(0x3be9, &(0x7f0000000080)={0x0, 0x3096, 0x20, 0x3, 0x38f, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x118, &(0x7f0000000180)=0x4, 0x0, 0x4) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) r5 = syz_io_uring_complete(r3) r6 = socket$inet6(0xa, 0x800, 0x7) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) r7 = epoll_create1(0x80000) fcntl$addseals(r7, 0x409, 0xa) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x20, 0x0, r5, 0x0, &(0x7f00000001c0)='./file0\x00', 0x90, 0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000240)={0x401, r0, 'id1\x00'}) ioctl$SNDCTL_SEQ_PANIC(r8, 0x5111) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0a41, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x2010, r9, 0x2d103000) fsopen(&(0x7f0000000300)='smb3\x00', 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, &(0x7f0000000480)={0x3, 0xffffffff, 0x9, 0x1, 0x5, 0x80}) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000500)=@usbdevfs_connect={0x101}) ioctl$EVIOCREVOKE(r9, 0x40044591, &(0x7f0000000540)=0x3ff) syz_clone(0x80281300, &(0x7f0000000580)="b5d29eb834dad7448460a276362e15483ec07c196d550828ceeb4dfd4e2a66aa9b", 0x21, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="6f7e03f8e6169bc8b6a805f935083e4517b2a8182cf544f886909c70439c1284af2ecd6b5b5e096b32ef3ff496ebb764768f21e04a8cb960aaf7b74aae5185a8acb5fb2aea77478f59cee5cfafebdaacdb233e395414238cb1e236a7b850cd41a7ba2a2a7f59f6a76d4dcf1ae36fda080831") bind(r2, &(0x7f00000006c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x80) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000740)={0x3e, 0x8, 0x5}) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 2m20.794852541s ago: executing program 9 (id=4316): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x275a, 0x0) readahead(r0, 0x0, 0xffffffffffffff01) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0145401, &(0x7f0000000000)={{0x3, 0x2, 0xfffffffd, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x280, 0x10a, 0x24}, 0x18) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400e41269022141f336022fa0c87b4791422d60988348bceed40b00"/39, @ANYRES16=r3, @ANYBLOB="59cf000000000000000008000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2m20.63638904s ago: executing program 9 (id=4318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800b0001007470726f78790000140002800800034000000016080001400000000a0900010073797a30"], 0xf8}}, 0x2400) 2m20.300348984s ago: executing program 9 (id=4325): setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, {[@rr={0x7, 0x3, 0x69}]}}, {{0xffff, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x800}}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x21, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x400000}}}}}, 0x0) r0 = syz_open_dev$video(&(0x7f00000036c0), 0x3, 0x42000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) preadv(r2, &(0x7f0000001840)=[{&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000001400)=""/148, 0x94}, {&(0x7f0000000280)=""/62, 0x3e}, {&(0x7f00000014c0)=""/171, 0xab}, {&(0x7f0000001580)=""/222, 0xde}, {&(0x7f0000001680)=""/243, 0xf3}, {&(0x7f00000002c0)=""/60, 0x3c}], 0xa, 0x0, 0x1) bind$alg(r2, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x6e) connect$unix(r3, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r5 = dup(r4) write$P9_RMKNOD(r5, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x1, 0x2, 0x3}}, 0xfffffd26) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000020000000001c0012800b00010067726574617000000c00000000"], 0x3c}}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000003800), &(0x7f0000003840)=@v3={0x3000000, [{0x1, 0x7}, {0xfff, 0xc97b}]}, 0x18, 0x2) 2m20.13818729s ago: executing program 38 (id=4325): setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, {[@rr={0x7, 0x3, 0x69}]}}, {{0xffff, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x800}}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x21, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x400000}}}}}, 0x0) r0 = syz_open_dev$video(&(0x7f00000036c0), 0x3, 0x42000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) preadv(r2, &(0x7f0000001840)=[{&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000001400)=""/148, 0x94}, {&(0x7f0000000280)=""/62, 0x3e}, {&(0x7f00000014c0)=""/171, 0xab}, {&(0x7f0000001580)=""/222, 0xde}, {&(0x7f0000001680)=""/243, 0xf3}, {&(0x7f00000002c0)=""/60, 0x3c}], 0xa, 0x0, 0x1) bind$alg(r2, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x6e) connect$unix(r3, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r5 = dup(r4) write$P9_RMKNOD(r5, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x1, 0x2, 0x3}}, 0xfffffd26) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000020000000001c0012800b00010067726574617000000c00000000"], 0x3c}}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000003800), &(0x7f0000003840)=@v3={0x3000000, [{0x1, 0x7}, {0xfff, 0xc97b}]}, 0x18, 0x2) 2m20.096178307s ago: executing program 8 (id=4329): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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"}, 0x50) 2m20.03446966s ago: executing program 8 (id=4330): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) r2 = semget$private(0x0, 0x207, 0x53) semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000002c0)=""/119) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x81, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0x2c, "e3a30541935b7e576dda6570af8b395171de3c8ef8327f9907547413db915d4008da9b95c84a166786085575"}, &(0x7f0000000240)=0x34) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000002c0)={r4, 0x9, 0x80, 0x7, 0x14, 0x8}, &(0x7f0000000300)=0x14) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x8fa084, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 2m19.94779783s ago: executing program 8 (id=4333): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') fsopen(&(0x7f0000000ec0)='zonefs\x00', 0x0) lseek(r1, 0x289e0cb5, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r2, 0x289e0cb5, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xfd10, r1, 0x80000}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) 2m19.390082207s ago: executing program 8 (id=4340): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 2m19.28701739s ago: executing program 39 (id=4340): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 49.385509147s ago: executing program 2 (id=6084): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x400) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x505002, 0x100) (async) memfd_secret(0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) write$cgroup_int(r2, &(0x7f0000000140)=0x400900, 0x12) (async, rerun: 32) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000180)) (async, rerun: 32) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/3:0:0:0\x00', 0x6d669a35a3ec91aa, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x7) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000100)) 49.324384249s ago: executing program 2 (id=6088): open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) mount(&(0x7f00000004c0)=@sr0, &(0x7f0000000500)='./file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x100) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x7}}}}}}, 0x0) 49.204602899s ago: executing program 2 (id=6089): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x6, 0x7fff, 0x80000000002, 0x80000000004, 0x400000000000, 0x6, 0x200, 0x0, 0x1, 0x5000, 0x7, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="2705", 0x2}], 0x1}, 0x4000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) shutdown(r0, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x20008045, 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0xfffffffffddfbffc, 0x1501) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000a1ffffff000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 48.994797182s ago: executing program 2 (id=6092): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100), 0x1004044, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}}, {@huge_within_size}, {@huge_never}, {@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0xe, 0x31]}}}}, {@grpquota}], [{@appraise_type}]}) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049eec8b37f1246ee6674e04c75935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000", 0x78, 0x0, 0x0, 0x0) 48.904777761s ago: executing program 2 (id=6094): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x3a, 0x1, 0x0, 0x20) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xb, 0x2) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x3, @pix_mp={0x0, 0x7, 0x47504a50, 0x3, 0x2, [{0x13, 0xfff}, {0x3, 0x8001}, {0x9e5, 0x2}, {0x6, 0xba}, {0x9}, {0x2, 0xfff}, {0x1, 0xa3ff}, {0x4, 0x8}], 0x3, 0x1, 0x0, 0x1, 0x1}}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000440)={0x6, "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"}) 48.633774901s ago: executing program 2 (id=6100): chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r0 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r4, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x10) capset(&(0x7f0000000080)={0x0, r0}, &(0x7f00000000c0)={0x5, 0x1, 0x503, 0x1, 0x8000ff, 0x3}) 48.538210371s ago: executing program 40 (id=6100): chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r0 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r4, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x10) capset(&(0x7f0000000080)={0x0, r0}, &(0x7f00000000c0)={0x5, 0x1, 0x503, 0x1, 0x8000ff, 0x3}) 12.454322139s ago: executing program 1 (id=6569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c093}, 0xc000) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000814000780080011400000000005001500050000000500010006000000050005000a00000005000400010000000900020073797a30000000000d000300686173683a6e65740000000033a0e6bcd3c0d931b07f54556c49d735e3fde31ac7f12965b842170bcb2cf32e6bf1ce1b35fab7f7e8dca349d96d4ac2bebe6966aa1c4c506f077899a66b8fb69f93e41a53007692a3b0dd085b453b2920c0c34b14b3017b88a2acf143b6788efbf4d3d7a83a10d6d22733380ada38b84d30801b719b829a"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x97, 0x0, 0x2000, 0x0, 0x0, 0xfffffffffffffdfd, 0x4, 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x347, 0x0, 0x774, 0x0, 0x0, 0x0, 0x20001}) 12.183137552s ago: executing program 1 (id=6574): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x1d) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x210, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x118, 0x140, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1a, 0x8, 0x50000000, {0x9}}}, @common=@unspec=@devgroup={{0x38}, {0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xffffffff], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) write$binfmt_elf32(r1, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x8) write$dsp(r1, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x1d) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x210, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x118, 0x140, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1a, 0x8, 0x50000000, {0x9}}}, @common=@unspec=@devgroup={{0x38}, {0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xffffffff], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) (async) write$binfmt_elf32(r1, 0x0, 0x4cd) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x8) (async) write$dsp(r1, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) (async) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1}) (async) 5.559692733s ago: executing program 0 (id=6626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) connect$pppl2tp(r1, &(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x0, 0x3, {0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}}, 0x3a) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340), &(0x7f0000000400)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r3 = socket(0x23, 0x80805, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000840)) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x0, {0xfffffffc, 0x7, 0xa, 0x8000}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x2f4, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x38, 0x8}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x7f}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x29f, 0x2a, [@fast_bss_trans={0x37, 0x78, {0x6, 0x2, "56537e47353ebe6f37ff2dc7e16fd695", "cd56f0a294b612b874e9d7bf136f63457a8c560772710924c9840f226412d9bc", "275f67baea8de45ac2bdd4b2e5d434d46df79687d6195ed4007b7b5314a4ba73", [{0x2, 0x13, "1211936b22c72a7f6ed3c2045f939c9732de75"}, {0x1, 0xf, "f508cc70b4e00235cec088dd409be1"}]}}, @mesh_chsw={0x76, 0x6, {0x3, 0x4, 0x10, 0x3}}, @gcr_ga={0xbd, 0x6}, @random={0x2, 0x60, "fd01f92cf030aa16c1af5a112f14b7a0b62d0fb048e1852de9d343f929f1565f3d584cadd9003e90ce3fd3bdd700e9b799cb5234ff55fc31e233c39c41c68123bc38d2673ee19ee10697aba236dbe61a3708c2190bc96b2c92ac393f33b7806b"}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @measure_req={0x26, 0x4c, {0x7, 0x0, 0x0, "a1da3111cf7654087dafccc515bb44df0fd75c416fdd4ae0282b54e2f9fb5bec111c4ba77d78fb8828342ff6f4964bdfb3ed927004b1757e86ed6cf719931d3d25f3972e15131a335e"}}, @perr={0x84, 0xd5, {0x8, 0xd, [{{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x15}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x21}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x3e}, {{}, @device_a, 0x6, @void, 0x18}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x19}, {{}, @broadcast, 0x1, @void, 0xf}, {{0x0, 0x1}, @device_b, 0xc9, @value=@broadcast, 0x11}, {{0x0, 0x1}, @device_b, 0x62b, @value=@broadcast, 0x21}, {{}, @broadcast, 0x9, @void, 0x30}, {{}, @device_a, 0xd458, @void, 0x20}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x3f}, {{}, @device_a, 0x7, @void, 0x11}, {{}, @device_b, 0x5, @void, 0x3c}]}}, @cf={0x4, 0x6, {0x2d, 0x4, 0xc, 0x7}}, @preq={0x82, 0x7d, {{0x0, 0x0, 0x1}, 0x9, 0x0, 0x2, @device_a, 0x4a13, @void, 0x1, 0x0, 0x9, [{{0x0, 0x0, 0x1}, @device_a, 0x10}, {{0x0, 0x0, 0x1}, @broadcast}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{}, @device_b}, {{}, @device_a, 0xd58}, {{0x0, 0x0, 0x1}, @device_b, 0x1}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0xb4}]}}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x3c}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x34}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) listen(r3, 0x0) socket$alg(0x26, 0x5, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x0, 0x0) accept$ax25(r3, 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat(0xffffffffffffffff, 0x0, 0x105000, 0x6) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000f00)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_ev_le_phy_update_complete={{}, {0x0, 0xc8, 0x6, 0xeb}}}}, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000005c0)={'gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0x5c, 0x3, {{0x2b, 0x4, 0x3, 0x4, 0xac, 0x65, 0x0, 0x6, 0x29, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0x2c, 0x24, 0x1, 0x9, [{@multicast1, 0x8}, {@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x7}, {@local, 0x6}]}, @lsrr={0x83, 0x1f, 0xe5, [@multicast1, @multicast2, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @rr={0x7, 0x3, 0xe7}, @rr={0x7, 0x23, 0xf9, [@local, @private=0xa010101, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, @rand_addr=0x64010101, @loopback]}, @timestamp_prespec={0x44, 0x24, 0x4c, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xd7f5}, {@empty, 0x8}, {@local, 0xd}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {0x8, 0x6}, {0xe, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendto(r2, &(0x7f0000000700)="4135d62174741bd347028fdef99a6ede0b1360aa85ec52c521e8bd3ee8969ee4885b751c1331d0aa77de56588a88f68b6bc667954d73369cc7dd2f9949260bfe58d598ddf4e76dc376dcbdf3c97633cb44c810bb350e35ab01e4cca649a5e91e2b873c79a4abfce7380f3d09f1461a1a39e5033b5f0a0b90e62bc446114df8b6a23621f9e21c06340d766fe3de404509c500", 0x92, 0x80, &(0x7f00000007c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) 5.334493803s ago: executing program 0 (id=6629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000200)=[0x7], 0x22, 0x0, 0x5, 0x0, 0x0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.163282754s ago: executing program 0 (id=6631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x102201, 0x0) write$rfkill(r2, &(0x7f0000000340)={0xe2, 0x8, 0x1, 0x0, 0x1}, 0x8) (async) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 32) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r3, &(0x7f00000004c0)="3ce2de4d8d", 0x5, 0x805, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (async) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000080)=0x8b4011a, 0x4) 5.089145365s ago: executing program 0 (id=6632): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000000c0)=0x20, 0x4) fsync(r0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/crypto\x00', 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40000800}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000100)=0x9, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) connect$inet6(r5, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, &(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) accept4$packet(r3, 0x0, &(0x7f0000000740), 0x80800) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x12, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x831, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x0, 0xb, 0x8, 0x0, 0x30, 0x1}, @func], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0xc9, &(0x7f00000002c0)=""/201, 0x41000, 0x41, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xd, 0x373, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x4, 0x1}, {0x1, 0x1, 0x7, 0x2}, {0x0, 0x2, 0xd, 0xc}, {0x2, 0x5, 0xf, 0x2}, {0x5, 0x5, 0xd, 0x1}], 0x10, 0x7}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r9, r2}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r10, &(0x7f0000000040)=ANY=[], 0xffffff6a) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r10, 0x80045104, &(0x7f00000005c0)) 3.833766192s ago: executing program 1 (id=6635): r0 = socket(0x2, 0x3, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@privport}]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r0, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) syz_extract_tcp_res(&(0x7f0000000380), 0xfffffffb, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, @xdp}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000240)={0x0, 0xfffffffffffffed1, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf250a00000008000300", @ANYRES32=r3, @ANYBLOB="180050800400050008000880ffffffff050002"], 0x34}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) 3.622607907s ago: executing program 1 (id=6636): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x6, 0x7fff, 0x80000000002, 0x80000000004, 0x400000000000, 0x6, 0x200, 0x0, 0x1, 0x5000, 0x7, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="2705", 0x2}], 0x1}, 0x4000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) shutdown(r0, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x20008045, 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0xfffffffffddfbffc, 0x1501) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000ff8900000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3.21397789s ago: executing program 0 (id=6637): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESHEX], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0xe, 0x480) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) recvmmsg$unix(r4, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) fcntl$setstatus(r5, 0x4, 0x2c00) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffe}, 0x1c) sendmmsg(r7, &(0x7f00000043c0)=[{{&(0x7f0000000080)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}}, {{&(0x7f0000000740)=@xdp={0x2c, 0x2, 0x0, 0x39}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20044804) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r8, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0x8}) socket$inet(0x2, 0x1, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000001000000000000000000006112d000010000009500000408000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 3.105141579s ago: executing program 1 (id=6639): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x5) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000580)={{0x1, 0x100, 0x4, 0x1, 0x81, 0x9}, 0x97, [0x4, 0x4, 0x3, 0xe9f5, 0x7, 0xfff, 0x40, 0x3ff, 0x7, 0xfa44, 0x1, 0x6, 0x6, 0xec, 0x7fffffff, 0x168, 0x4, 0x100, 0xb, 0x0, 0x9, 0x7, 0xad2a, 0x3, 0x2, 0x2b0, 0x80, 0xfff, 0x10000, 0xf, 0x1000, 0x7, 0x46e0, 0x5, 0x8, 0x6, 0x6, 0xffffff2b, 0x4, 0x10000, 0x8, 0xb7, 0x3, 0x4, 0x1, 0x9, 0x5, 0x10000, 0x2, 0xff, 0x6, 0xc, 0x3, 0x0, 0x8, 0x6dab, 0x1, 0x6, 0x1, 0x9, 0x2, 0x4, 0x1, 0x947, 0x1, 0x1, 0x1, 0xfffffff9, 0x8, 0x9, 0x7ff, 0xf3, 0x2, 0xdd5, 0x562, 0x61, 0x74720e6a, 0x0, 0x7, 0x5, 0xfffffffe, 0x7, 0xde8, 0x2c, 0x101, 0x4, 0x9, 0x8, 0xc3bf, 0x7fffffff, 0x5, 0xd, 0x8000, 0x2f63, 0x4, 0x6, 0x1, 0x1, 0x2, 0x80000000, 0xffff4104, 0xfff, 0x5, 0xff, 0x0, 0x10000, 0x9, 0x3ff, 0x7, 0x7, 0x8, 0x8000, 0x3, 0x6, 0xf, 0x8, 0xfffffffc, 0x100, 0x8, 0x8, 0x400, 0x2, 0x6, 0x6, 0x4, 0x0, 0x4c5, 0xb794, 0x7, 0x4, 0x4f42, 0x4, 0x8c4, 0x2, 0xa, 0x710, 0x6, 0x80000001, 0x8, 0x5d13, 0x8001, 0x2, 0x7b, 0x64, 0x9, 0x6, 0xf5f0, 0x4, 0x5, 0x100, 0x1, 0x8, 0x8, 0x200, 0x5, 0x2, 0x115, 0x8000, 0x80000000, 0x8, 0x6, 0x7, 0x4, 0x4, 0x80000000, 0x36f, 0x6, 0x7, 0x6, 0x10, 0x5, 0x7, 0x401, 0x6, 0x601, 0x6, 0x5, 0x3, 0x9, 0x60, 0x8, 0x7, 0x0, 0x6, 0x8, 0x0, 0x1ff, 0x6, 0x0, 0xc70, 0x7b, 0x3, 0x7, 0x6, 0x5, 0x3, 0x4, 0x80000001, 0x7, 0xa, 0x9, 0x123a00, 0x6, 0x0, 0x200, 0x80000000, 0x1, 0x81, 0x8001, 0x61c00000, 0xb7, 0x0, 0x6, 0x7f, 0x1000, 0x3, 0x40, 0x80000001, 0x7fffffff, 0x2, 0x18, 0x8, 0x2, 0x5, 0x4, 0x3, 0x9, 0x9, 0x1, 0x5, 0x9, 0xfff, 0x6, 0x7, 0x6, 0x3, 0x8, 0x2, 0x10000, 0x3, 0x6, 0x80000001, 0xfffffc00, 0x3, 0x5, 0x401, 0x800, 0x6, 0x8, 0x400, 0x9, 0x2fa, 0x200, 0x7, 0x8, 0xa9, 0x5, 0x90e, 0xfffffffd, 0x1, 0x0, 0x5c3, 0x40a7c427, 0x8001, 0x45d1, 0x1ff, 0x6, 0x2f, 0x5, 0x56c4, 0x6, 0x7, 0xfdce, 0x9, 0x3, 0x5, 0x4, 0xffffffff, 0x1, 0x0, 0x4, 0x80, 0x8, 0x1d, 0xb, 0x40, 0x400, 0xcd93, 0xfffffffe, 0x6, 0x36, 0xe, 0x9, 0xfffffffb, 0x4, 0x7fff, 0x8, 0x9, 0xff, 0x8000, 0x36, 0x4, 0x68, 0x0, 0xfffffffe, 0x77466976, 0xe, 0x0, 0x1, 0x9, 0x7ff, 0x5, 0xec, 0x6, 0x8, 0x2, 0x8, 0x9, 0x17f5, 0x3, 0x6e, 0x5, 0x6, 0x4, 0x8001, 0x608, 0x4, 0x9e, 0x1, 0x6, 0x5, 0x8, 0x7f, 0x100, 0x81, 0x5, 0x5, 0x4, 0x9, 0x0, 0x52b, 0x1, 0x8, 0x1, 0x9, 0x4, 0x2, 0x4, 0x100, 0x5, 0x2, 0x4, 0x40, 0x40, 0x0, 0xb, 0x9, 0xb, 0x0, 0x4, 0x2, 0xec2, 0xa, 0x7ff, 0x9, 0x7fff, 0x2e32, 0x7ff, 0xb3, 0x22, 0xfeb9, 0x8, 0x3, 0x0, 0x19, 0x83, 0x0, 0xffffffff, 0x4698d2d7, 0x5, 0x0, 0x7, 0x3, 0x0, 0x0, 0x4, 0x6, 0x401, 0x1, 0x200, 0x8, 0x7ff, 0x8, 0x9, 0x8, 0x10, 0xfffffffa, 0x1, 0x8, 0x66e, 0x10001, 0x3, 0x4, 0x5, 0x8, 0x4, 0x40d7, 0x5, 0x0, 0x0, 0xfc, 0xd800, 0x1, 0x9, 0x5, 0x2, 0x9, 0x7, 0x6, 0xff, 0x7, 0x2, 0x400, 0xfffffffb, 0x0, 0x3, 0x1, 0x4, 0x0, 0x3, 0x6, 0xfff, 0x0, 0x6, 0xf, 0x1, 0x4, 0x2, 0x4, 0x8, 0x77, 0x7, 0x101, 0x4, 0xffffffff, 0x4, 0xfffffbdd, 0x0, 0x1, 0x10, 0x3ff, 0x0, 0x6, 0x3f0, 0x1000, 0x5, 0x4, 0x5, 0x4, 0x8bc, 0x1, 0xfffffffd, 0x81, 0x9, 0x0, 0xb2, 0x3, 0x31, 0xfffffff8, 0x5, 0x8000, 0x7, 0x100, 0x3, 0x3, 0x5, 0xfffff001, 0x4, 0x7f, 0x3c, 0x0, 0x3, 0x0, 0x3f6e, 0xaec, 0x0, 0x31ec, 0x7, 0xfffffab3, 0x8a7, 0x7ff, 0x7, 0x2, 0x1, 0x1, 0x7fe, 0xb, 0x6, 0xd, 0x0, 0x44, 0x9, 0x6, 0x8, 0x8001, 0x1, 0x3ff, 0x9, 0xa, 0x6, 0x2, 0x2, 0x9, 0xe, 0xd26, 0x4, 0xfffff2f8, 0x6, 0x6, 0x80, 0x4, 0x7e6bee85, 0x7ff, 0x7fff, 0x5, 0x9, 0x482, 0x7, 0x80000000, 0x1, 0x4, 0xfffffffa, 0x7, 0x8, 0x2, 0x3, 0x698d, 0x0, 0x122, 0xffff6f36, 0x3, 0xffff, 0x4, 0x6, 0x10001, 0xfffffffd, 0x6, 0x7, 0x2, 0x9, 0x0, 0xfff, 0x8, 0x9, 0x400, 0x4, 0x9, 0x3ff, 0x4, 0x0, 0x9, 0x6, 0x5, 0x8, 0x45, 0x2, 0x6, 0x7, 0x3ff, 0x8a8, 0x401, 0x4, 0x0, 0x1ff, 0x5, 0xbf, 0xfffffff8, 0x6, 0x2, 0xe32f, 0x0, 0xffffffff, 0x7, 0x0, 0x4, 0x4, 0x6, 0x8, 0x8, 0x0, 0x8000, 0x9, 0x9, 0x7, 0x7, 0x3, 0x7fffffff, 0x3, 0xfffffff5, 0x6, 0x8001, 0x81, 0x4, 0x3, 0x8000, 0x1, 0xfffffff8, 0x92, 0x7, 0xc, 0xa, 0x4, 0x0, 0x8000, 0xe5, 0x1, 0x6, 0x6, 0x3, 0x9, 0x1, 0x4, 0x5, 0x8, 0x9, 0x252, 0x5, 0x6, 0x1, 0xf204, 0x2, 0x1, 0x5, 0x8001, 0x7, 0x5, 0x5, 0x1, 0x1, 0x5, 0x9, 0xfffffff8, 0x4, 0x7fffffff, 0x6, 0x6, 0x1, 0x9, 0x9, 0x0, 0xc39f, 0x1, 0x3, 0x9, 0x3, 0x7, 0x800, 0xd, 0x5, 0xdc4b, 0x6, 0x9, 0x4fb, 0x5, 0x5, 0x0, 0x4, 0x4, 0x7f, 0x6, 0x5, 0x1000, 0xf, 0x3, 0xb8, 0xffff, 0x0, 0xffffffff, 0x86f, 0x3, 0x2, 0x7fffffff, 0x5, 0x3, 0x4, 0xff, 0x5, 0x0, 0x226c5e59, 0x4, 0x7, 0x3, 0x5, 0x3, 0x1, 0x3, 0x3, 0x50, 0x8858, 0x6, 0x8000, 0xe, 0x6, 0x9, 0x6, 0xffffb3cd, 0x4, 0x3a1a, 0xa4, 0x6, 0x9, 0x44a, 0x5, 0xb1b, 0x3, 0x92be, 0x10, 0x7fffffff, 0xd6b6, 0x7, 0xd7, 0x3, 0x90, 0x0, 0x9, 0x6, 0x2, 0xb95b, 0x5, 0x7, 0x482d, 0x1, 0x3ff, 0x8, 0x8, 0x1ff, 0x20000, 0x9, 0x280, 0x0, 0x64a5c8f, 0x0, 0x3, 0xffffffff, 0x7, 0x100, 0x9, 0x3, 0x8, 0x5, 0xfb31, 0x4, 0x7ff, 0x3, 0x1, 0x2, 0x6363fcbf, 0xbd, 0x0, 0x3ff, 0x40, 0x4, 0x0, 0x5, 0x8, 0x5, 0x5e3, 0xd82, 0x1, 0xfffff001, 0x1, 0x1000, 0x4, 0x0, 0x72, 0x7fffffff, 0x94d, 0x8, 0x4, 0xf, 0x6, 0x2, 0x3ff, 0xa, 0x80, 0xb, 0x5, 0x0, 0x9, 0x9, 0x8001, 0x284, 0x8000, 0x6, 0xffffb6ab, 0x2, 0x1, 0x7, 0x80000000, 0xffffffff, 0x2, 0x3, 0x6, 0x3fbfd950, 0xfffffff7, 0x0, 0x1, 0x4, 0x2, 0x2, 0x5, 0x2, 0x8, 0x0, 0x6, 0x3, 0x7fffffff, 0x7, 0x702, 0x99, 0x2, 0x9, 0x58d, 0x8, 0x2, 0x2, 0x5, 0x1, 0x3c21, 0xd53c, 0xf, 0x5, 0x8, 0x8, 0x3, 0x9, 0x5, 0x7fff, 0x2, 0x2, 0x1, 0x8, 0xfffffffc, 0x4, 0x10, 0x2, 0x2, 0xfff, 0x8, 0x4, 0x51c, 0x4bd50, 0x0, 0x1, 0x57b, 0xffffffaf, 0x9, 0x9, 0x1, 0x2, 0x7f, 0xfcd, 0x10000, 0x6, 0xa0, 0x1, 0x3, 0xfffffff8, 0x4, 0x9, 0x1, 0x7, 0x9, 0xfff, 0x5, 0x8, 0x8, 0xc, 0xfa, 0x1, 0xf287, 0x6d8, 0x81, 0xd, 0x5730, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x9, 0xe64, 0x8000, 0x3, 0x6, 0x1000, 0x4, 0x1, 0x10000, 0x800, 0x10, 0xf, 0x3d7, 0x0, 0x4, 0x1, 0x2a, 0x4, 0xf7cd, 0x68, 0xfffffff9, 0x1, 0x81, 0x7, 0x1000, 0x9403, 0x6, 0x7, 0x401, 0xe, 0xfffffffc, 0x7, 0x1, 0x1, 0xd, 0x3, 0x3, 0x40, 0x4, 0x1, 0xffff701c, 0x3, 0xcc, 0x3, 0x7, 0x9, 0x9, 0x1, 0x0, 0x6, 0x8, 0xc686, 0x56a3, 0x9, 0xdf, 0x1, 0x4, 0x8, 0xc, 0x5, 0x5, 0x7, 0xfff, 0xd, 0xfff, 0x3, 0x1ff, 0xc42, 0x40, 0x5, 0x1, 0x8, 0xbb, 0x2, 0x3, 0x2, 0xfffff801, 0x4c, 0x5, 0x7, 0x10, 0x2, 0x8, 0x101, 0x1, 0x2, 0xfffffff9, 0x3, 0x4, 0x80000, 0xc0000000, 0x0, 0x0, 0x1, 0x1, 0xffff, 0x1, 0x2, 0x9, 0x7fff, 0x81, 0x1, 0x0, 0x5, 0x1, 0x1a, 0x3, 0xfffff7d4, 0x4, 0x28f4, 0x9, 0xfffffe01, 0x6, 0x6, 0x0, 0x18, 0x3, 0x1ff, 0x6, 0x2, 0x9, 0x1, 0xffff2653, 0xfffffff9, 0x3f9e, 0x6, 0x3, 0x400, 0x8, 0x3, 0xe, 0x10, 0x8, 0xffffff81]}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x80102, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.333780454s ago: executing program 3 (id=6646): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000a0000000004009252", @ANYRES32=0x1], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) write$sysctl(r1, &(0x7f0000000000)='4\x00', 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x4e) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x42) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0x0) socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000006040)={0x2020}, 0x2020) chdir(&(0x7f0000000240)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.20485437s ago: executing program 4 (id=6647): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x6, 0x7fff, 0x80000000002, 0x80000000004, 0x400000000000, 0x6, 0x200, 0x0, 0x1, 0x5000, 0x7, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="2705", 0x2}], 0x1}, 0x4000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) shutdown(r0, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x20008045, 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0xfffffffffddfbffc, 0x1501) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000ff8f00000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.20365906s ago: executing program 3 (id=6648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030b00000000000000000600000008000300", @ANYRES32=r3], 0x1c}}, 0x2004c0c0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) 1.094934557s ago: executing program 3 (id=6649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x15, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x240448d4}, 0x200088c0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000040)={{r1}, 0x1, &(0x7f0000000000)=[0x1], 0x0, 0x8}) r2 = timerfd_create(0x1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {r3, r4+60000000}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r5, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) 1.014725756s ago: executing program 4 (id=6650): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000000208010200000000000000000300000806000240000600000900010073797a300000000005000300880000000900010073797a30000000004452476964ecc0467d660906807532a070bb85bc42"], 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x880) ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000000540)=@physical={0x0, 0x3, [{0x0, 0x4, 0x7, 0x8, 0x5, 0x0, 0x1, 0x3, 0x9, 0x0, 0x7, 0x2, 0x5}, {0xc, 0x6, 0x3, 0x6, 0x0, 0x0, 0x1, 0x3, 0x8, 0x0, 0x401, 0x2, 0x2}, {0x6, 0x8, 0x9, 0x4, 0x5, 0x0, 0x2, 0x3, 0x4, 0x1, 0x5, 0x1, 0x6}, {0x9, 0x3, 0x1, 0x4, 0xc, 0x0, 0x3, 0x1, 0x1, 0x0, 0x2, 0x2, 0x600000}]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000080)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @private2}, 0x1c) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x2275, &(0x7f0000000500)={"f0fc000000000000eef800", 0x0, 0xffffffffffffff6b, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0}) 913.533435ms ago: executing program 4 (id=6651): syz_usb_connect(0x5, 0x731, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x89, 0x8, 0xc5, 0x8, 0x5ef, 0x8884, 0xe326, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71f, 0x3, 0x8, 0x2e, 0x40, 0x20, [{{0x9, 0x4, 0xb6, 0x2, 0x2, 0x50, 0xe7, 0x5d, 0x40, [], [{{0x9, 0x5, 0xb, 0x10, 0x40, 0x4, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb1, 0xfffd}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0xd, 0x7, 0x3}}]}}, {{0x9, 0x4, 0x80, 0x0, 0x4, 0xe6, 0x40, 0xf8, 0xf7, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8, 0x0, 0x7}, [@acm={0x4, 0x24, 0x2, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x10, 0xef, 0x6, 0x2, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x101, 0x18}]}, @generic={0xdc, 0xa, "9723233c66ca7d25c756deab47caf89d43db8cfd4b819b699fbdd67e68fca414376cbbe8c55e362caa570b8f663e4989feae9539cb0466e74634dbfcf5c1e271fec9a60ea43d18b04108c63e84f285c51d49fa8acc07519ce1276051eb8318e61803eee87450eb9ebbc5745ba878414db761e158c06269750380dfedeeb24b182c35b247f1b104846e59a739ad5ef647fe8130538c88bf1bea29ab8d754e1d83d03276c318aacb907f9ada78f1645ea05c2491d741e2165ce0ffdc06b0ccd250ac2b2167826bcbe0e60d79a368b14094e9efda7fd72c20b40d1a"}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x6, 0xd, 0x7f, [@generic={0xd3, 0x23, "ff68016d9dd84f2d9c4cb280d6b845192ba86e96a97f27c5dc649a5a5121130789d62776085cceccae90d7ddbfb2d7bf7af61c5ba12aebfaecba36c373b9e87a93b6f231a941e5b01426dcac72213ec4466f9faa15001d1c9e340388742f845702b074e81314ba2586bbc75aec616a0b6f0c1dcc7341fc74d09d4f0eb748c8a4f1ab180bbbfa88d9130e591c37030b46cd17978e77bc93afea6e81ebeb417a65af4007758bd6abeb1aa33cc1c2653f0446bfee3ece807ca51ea12967ff6471381794bed9b74c18d494346d2b131a9ae717"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x75, 0x8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0xf1, 0x48, 0x7, [@generic={0xdb, 0x3, "054cb97b468937990b01e47205c431404e971062f377990c85ea6d3849c46c26656215361a8dc207b9d68f90ecb617f7f81478d3cc468456f3d3d5e76aac05759326e4737ddf4a526dcdc8338fadbf6aaf7d59e25d3a30579175a1782af5e22aa96ea7cbdc2cb64d00d2c65287e5e41022e2ce0eee0a4edd1a750a0f73253ccb906dd4b8b1ad05de700797afaacbd47cdc738c137bf52744da4c570735a7638eba1f386b93fdd2e040b2289af9ec7f3c20c21b5574215cdd5e33c71ccab9369a0950aeb6bc2f7373be11b0ff1380e972ebbc66b831ffd3c9c9"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x6, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x256}]}}]}}, {{0x9, 0x4, 0xe8, 0x3, 0x9, 0x7, 0x91, 0x34, 0xe9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '\t'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xd4, 0x9, 0xe557, 0x40}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x10, 0xa4, 0x43}, @country_functional={0x12, 0x24, 0x7, 0x66, 0xfff, [0x2, 0x0, 0x5, 0xfa62, 0x6, 0x6]}, @dmm={0x7, 0x24, 0x14, 0x8, 0x9}, @country_functional={0x6, 0x24, 0x7, 0x2, 0x9}]}], [{{0x9, 0x5, 0x1be7b9242194602c, 0x3, 0x200, 0x2, 0x9d, 0xc8}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x7, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x7a, 0x6, 0x4, [@generic={0x9f, 0x22, "76e1fc4ce9f57c152030066cf1283da505e79b6ccd86d7118273b7a440cc329dc940ad5e13347ba347bcef5fe3d656b64382c97961da6062f56fd79222f2a4ca8afe40f2e789d8ec9e503bb13b4a7abefa72ad265ad57864f55ad155d448d344713c6e4ae65c638c4605b449de1e6254477fcc9b89395d00acfb6f2bda75eec5a85946c50b51335bb0883a6da7c43b6ff17143f0c52526b594cf63cc1f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x6}]}}, {{0x9, 0x5, 0xb, 0x10, 0x0, 0x9, 0x9, 0x7}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x6, 0x11, 0x7b, [@generic={0xbb, 0x22, "eb52ff1c379c865fd65622261032a1070bc1beea11b855cb93d5991a6bf216d54ef08973cbd514c468b3aeb3b02a81b522ae57b019c4f94c6be107c1846e301d5c72cb0666931a693357dd7cf741cc0f4dad5094e90447e156b7f5670419560b3ce4556b2befd1c32a13a43cb2ae2d6d28cb8797a8e85e08a1812b4a9f0b152b2af666bd062f83bcdce275a1db53f98952c700c162091c63362c224184933805b90f6d6c2e8e361bbd9cab864bf8aeeb322d1157ac8d7e416e"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x5ca0}]}}, {{0x9, 0x5, 0x80, 0x4, 0x0, 0xe0, 0x7, 0xff, [@generic={0xd0, 0x11, "6c0c2c26ec71e853c6cef8ff9bc53ce92ff3c727e1a5e68342c2fb573dcb9b6191ddc7637305ba9dfa9f45da419430edecfffd81e2d4b47a15a31d0cdfa6dee3bcd25956716507e8ba3e736a1282a246062851658e3f6e623be3f6d955fdc6e2fad065dec8388cfe238df1e7c7bbbd12d37453d2cb4c283bbbb8a729c46cb91a1e9565708c7f43552b8f7992aebe57af55f75c9330feb38e97f05785bc5dcab2dc60a87e44442c827d3d968f17b05c255af75dd9f76a6e811da4958849d786aaea36acec0cca5ab4d917e77f1dd6"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x0, 0x1}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x9, 0x5, 0x4, [@generic={0xbe, 0xd, "124f5fc5dcfc2a2ccdce8775d25353a437e1281b048301dfcd5c5edf395328f129d42559dcef0df0c3f6b034fbef55a9a72e8aa80e2fa006e154a99c96dcfc218ebd26fb4f6ffab74d3158276e9c2ac5ce3891061ce9889fceeebb8e4ff0818d5891f8260b53bad29361c4fec79da161eca46f675ad9eeed6f3dcdec1689507890c10d963b161cee750bc8c362f9c4181cc1eeced47cfe29d9ff89b03d67498b0dd93533fe93310768613f4cc805e63c31ac3149d23bf804f3d2b5bd"}, @generic={0x6d, 0xf, "eb37b0f315a67903db9d1acc2ccdbd39ab3ed2afb29f56e3171d2d79498778ac228a275351eef0a43144a8d84da5238d7fe2ab73291b0fdea2f2e931de0e525737f8eeba5710a5a480cfdba6ff72dd3333be486d1af2c0ae169220d4950a19c66b4d6159cb811c78594315"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1, 0x89, 0x9}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x0, 0x7, 0x1, 0x10, 0xb}, 0x34, &(0x7f0000000180)={0x5, 0xf, 0x34, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xe, 0x1, 0xffff, 0xf, 0x2, [0x7ec0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x9, 0x10, 0x2, 0x15}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1a, 0x5, 0xff, 0x9, 0xa}]}, 0x5, [{0xf6, &(0x7f00000009c0)=@string={0xf6, 0x3, "386919586035e669927b0ad0b1fbe55ede34a7d72c2b6886e16a860888e62392b31b702661f4ed7aa563ba66c7aef49e34af31e41be17c456495e63328a0748f72f15c0f4d610a1af5bdf1a7aa45f8cf149a67e3b482067dd79f47229322c14078b26eb6cbd45cb7ba8f30ac386c44c752468f8bef722b46d4f4ae52b4c17590469e6fc75a353645f94a0238d0abe606992752de2c005b9c1ff75ac983e6a27506944ec4cbca7c68375ee406d4b1ac7112cedf38b458fb034cd9a7c0d670b58ce5a49eda7daeba771ac66651ad35fc2b6450f0764eaf993c680b62870b040edfebe309f270800abd4953615c46cfe75561ec1150"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x446}}, {0xc, &(0x7f0000000200)=@string={0xc, 0x3, "3f3c34bccf4c332f9690"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x406}}]}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x11100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="8d37", 0x2}], 0x1, 0x0, 0x1}) syz_io_uring_setup(0xc1, &(0x7f0000000cc0)={0x0, 0xb09e, 0x21, 0x1, 0x217}, &(0x7f0000000b40), &(0x7f0000000c40)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000001240)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r0, 0x0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d40)="50d153d309af3c4cc57d3f5ffdca7b5e46c24b5e97088e9163e8fb4a145e534ef80d3a83a4a8592eeb494aacd23ee94de8a527f1f2fe47031adeafa500364fd2a2f9830c", 0x44}, {&(0x7f0000000dc0)="fd1830180d75d23d9684a7c86c0923909670b5d6201b37895a797243c9cb90b69dc288dc33433c59103c71b5c6c7493f6cdf9473", 0x34}, {&(0x7f0000000e00)="582df24860c12d439bc4959f7e7771c2f3d3876096d0d9760264dee9454c751309dcd2a5714f49a461349ec20c12ce1cb47f5b1ef091e31e3688f6dc6b56d2776701a224203ce1b13ac6e055e24f947d7058bb7195f9bb8c0d7270b3cd397eaca46ca912dc5c20de4daecf772290040a3e6677a444966e2858b11cf71fb611b459be93ad98ca0ac89a15dcfb5046ca20eea120dc9d1c72984bbfbee8717c6f1e34b90bbde6423cdba3071f834c433d89", 0xb0}, {&(0x7f0000000ec0)="a6b4731f308ead4b92a23574e5e2f009614f1877c1c0e6a7fc58d1def0163a9a43ec8ed1c3de096babe7fcf68e0bc73c7b932440a10ede3fb39fddedac0bab28d28d05ef272e2aecfbf0c6e4a15abe7fac3fa1009d0bf804093981e5faff26d4cb2b8de6116fad47e6541b0d56c75f08dae669448046c91109f1d3fec6ce14a3d78806e6ec", 0x85}, {&(0x7f0000000f80)="0b8b0896bafe977a194ce72dfc5531f61fef8c5ae0ce751cd487085075d1d25ab0fb3d67bd4515c280c1e4f2c502553ac89b63e38bea62f1ed1c1274b6a929af877ae687e41bd755ffd99b8341094d92c22999941ccb7341a6e6135ce7b330258f092f6fc2bf37e23e529383d067d2ffcd6ebd7b9c717b0e20e13abcfe6896ab277bff7ad99e272dbfc335a57b0fb2b63fd122c372e64d891350b40baa20056858d32018e635660ced16f6", 0xab}, {&(0x7f0000001040)="a487ab0be4c771ec518987da2a2dce33", 0x10}], 0x6, &(0x7f0000001100)=[{0x58, 0x102, 0x2, "551a7437a8c205ceee4363a79d31a047a025d7b4af39b735cda22058d739f51a0f88de60f4caee4aec4c07d147ef8cd417b77fe8290c0b87204786e7a153969d8a37e1873ece44f0"}, {0x48, 0x10e, 0x4, "c669d8373db20dc1bd7c96b44beb396771d8276cff5b91cd7559509b5af52ae03e80151077ec68bc08633d65b6d6eb47ecbc994903"}], 0xa0}, 0x0, 0x0, 0x1}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r8, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) (async) sendmmsg$inet6(r8, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) (async) sendmmsg$inet6(r8, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000b00)={r8, 0x80, 0x78f8000000000000, 0x6}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async, rerun: 32) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "00cd83f39500", "7979c06f94e1f3ed1945a2b2c7ff1bd557b28d5a73226a963826af565862c109", '\vv?\f', "dbdf3ad7d6801cf6"}, 0x38) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x11a, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 844.581486ms ago: executing program 4 (id=6652): syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb88a834008100300086dd60f91e2e00283c00fe880000000000000000000e00000001ff0200000000000000000000000000010102040108380400fc010000000000000000000000000000000000000401907800706a0100000007"], 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) setreuid(0xee01, 0xee01) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r3, 0xc0285628, &(0x7f0000000040)=0x3) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) tkill(r0, 0x12) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaadaaaaaaaa000800450000ac1414ff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 734.695617ms ago: executing program 4 (id=6653): r0 = socket(0x28, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x1c, r2, 0x301, 0x0, 0x200, {{}, {@val={0x8, 0x1, 0x59}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES16=r1, @ANYBLOB="0000000000008000280012800a00010076786c616e00d68f16f59afd09d624835d7936295e3e543991b152d0cdda2a18d18b21d677e00f312fd9f909948aa0ad906ae26c6b9658df72c46e82808342bb6c8af48c6f608975eb7459768a805bc28077e6bf48230ff34e5494b4ddc341736f2a04136fc1e2a496034bc506b347f30cce3df99223d6ba8df8a3ec99db0182c637d122239a56e2fe64753f8b67a555056d161bb05fbd2ffa4017957ace8faf4360dee5abbf83598ff77209934a2a082e68dba9a3a8f3488a50252fb6df7f83293323"], 0x50}}, 0x400c840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x8, 0x20000000, 0x1ff, 0x8}, 0x41}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xb, 0x0, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/uts\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000071402002bbd7000fcdbdf2508004400", @ANYRES32=r6, @ANYBLOB="0900020073797a3000000000050054000000000008000100010000000900020073797a31000040000900020073797a3200000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x2001) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x623}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x14}, 0x4000051) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) 641.248867ms ago: executing program 4 (id=6654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 204.552952ms ago: executing program 3 (id=6655): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3e}}, './file0\x00'}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1}, 0x6) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x14}}, 0x4001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x82000, 0x0) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) (async) writev(r4, &(0x7f0000000680)=[{&(0x7f0000000300)="dee1d3de991e2c3a8b17a9dc3d86b16b669e13dbdeed4013a826ae250d0f1b56c6b5742e17d4f227d38504ce9f573df2121d24d846e7553d0fd5b8425063d986133bd654065fe3cc11b5", 0x4a}, {&(0x7f0000000380)="fa59ef5c555f80976c2d4ae59b063751eba0acc585d57aa9702b980ad92a7b40694eceba04b1c0820b9c7ec927df29f8b1879120042436482ade0d1aa6e3bb04562ef7d3ff5c5f87dff68b4a148426315068ba3b433cbfcf55156834b899a77da25155e11eede1532029102c86db751056e47704676fc20a1fedfe", 0x7b}, {&(0x7f0000000400)}, {&(0x7f0000000440)="be61a2657a4d235f0fa2363ab5273cdadd24bb8816427430fe5fb6530e4aa91211c92870de4b172a3bd99dfce0f025aa36f82b2a595cfa1ef523b92b9d9ada2f07886b3653b82189ce57a5320f5e3abcefe742a181b3096ec6be202320082df496c7923a6db74be7938b1f56158747997f4e28564573f4040c19e84ab64f643a49be9ec6f9b5ca1249ac4698590152", 0x8f}, {&(0x7f0000000500)="d2236f353bc5de8c48c6edd186210b946b1a17fe643a97142a24e9915585c17ea561ac1cbfcf42fc8bd5e59b835a6cd48e7735e23e95766c5c9fdac4739a0ae0d575c3d69dbb9d691964baee296b16a7aa0f82a0db16fa0c96f3aeefdf2b38a20e7f72197ac74ed926f6433e234a8384a2e3322217aea553208e", 0x7a}, {&(0x7f0000000580)="3312679efe5820274dc7bb9108de2d1020644e6e84d67d50c3133b9ea508546efdcacd7fc398a8f15b6075d6923e9291e212ddfa201e2737ea758653edc106cd02bfe9e2f6e106e514e74061a5d6538fefd475298c8d9a8a283b91938124eb1332169b92836fbd0c71824496ca5ab0094e0939aeca7459e5ef98fe6b625930ae1b8527a071a493d3f64dd4c3ef74978803ba2118e6ff4d237cd986b2f6ebfae1a177d149df492fd357626b992ff389e89378d39bc93af204140c51d2441736ff5ce0801065cb3c4121618821446255be", 0xd0}], 0x6) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x140b, 0x300, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x8004) bind$netlink(r0, &(0x7f0000000800)={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc) (async) ioctl(r1, 0x0, &(0x7f0000000840)="87f1e4a1cccefe24fb3e0b71ce86e8474a1f4076ba805a4046346408266e78db13522a09fc3460b5a4f05ef329c51da14ef206d34dae5377ebfcc2999908bce93bf9aad2fe18ee7868090bb797941667e281c2afb63a2268e1a129e13c2ff7102ef49c89937b71481b7e46091a954e8acea8207b46b4a579475c8aa669312121564e48f2f1222de4") (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r5) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000980)={@private1, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, r6, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x815f}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r6, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) (async, rerun: 32) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000c00)=0x4) (async, rerun: 32) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r8, {0x400}}, './file0\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r9) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x42013000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, r10, 0x113, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4) (async) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x3f) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000e40)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, [0x0, 0xba6, 0xbe, 0x3, 0x8, 0x7, 0x3, 0xffffffffffffffff, 0xf, 0x7fff, 0xda, 0x3, 0x2, 0x7, 0x8]}, &(0x7f0000000f40)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001000)={r12, 0x74, &(0x7f0000000f80)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x94, @local, 0x2c}, @in6={0xa, 0x4e23, 0x7f, @private0, 0xb}]}, &(0x7f0000001040)=0x10) (async) close_range(0xffffffffffffffff, r1, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x9b0355244c9c9ace, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048010}, 0x800) (async) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000001cc0)=[{{&(0x7f0000001180)=@isdn, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001200)=""/67, 0x43}, {&(0x7f0000001280)=""/225, 0xe1}, {&(0x7f0000001380)=""/185, 0xb9}, {&(0x7f0000001440)=""/43, 0x2b}, {&(0x7f0000001480)=""/168, 0xa8}, {&(0x7f0000001540)=""/111, 0x6f}, {&(0x7f00000015c0)=""/86, 0x56}, {&(0x7f0000001640)=""/95, 0x5f}], 0x8, &(0x7f0000001740)=""/213, 0xd5}, 0xf}, {{&(0x7f0000001840)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001940)=[{&(0x7f00000018c0)=""/101, 0x65}], 0x1, &(0x7f0000001980)}, 0xe}, {{&(0x7f00000019c0)=@phonet, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001a40)=""/228, 0xe4}, {&(0x7f0000001b40)=""/178, 0xb2}, {&(0x7f0000001c00)=""/114, 0x72}], 0x3}, 0x8}], 0x3, 0x121, &(0x7f0000001dc0)={r13, r14+10000000}) 105.073684ms ago: executing program 3 (id=6656): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000040)='./control\x00') r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(&(0x7f0000000100)='./control\x00', 0x184) (fail_nth: 26) 381.339µs ago: executing program 3 (id=6657): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x7fff, 0x9, 0x4, 0x81}, 0x5, 0x1, 0x9, 0x2, 0x744, 0x4, 0x1b, 0xb, 0x3, 0x2, {0x8000, 0x4, 0x9, 0x8, 0x2, 0x1400}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r10, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x408d4}, 0x0) socket$inet(0x2, 0x80000, 0x7) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x7}, 0x10) sendmmsg$inet(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) sendto$inet6(r0, &(0x7f0000000900)="7800000016002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 132.886µs ago: executing program 0 (id=6658): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414ff"], 0x24}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000400)=0x1) 0s ago: executing program 1 (id=6659): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x6, 0x7fff, 0x80000000002, 0x80000000004, 0x400000000000, 0x6, 0x200, 0x0, 0x1, 0x5000, 0x7, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="2705", 0x2}], 0x1}, 0x4000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) shutdown(r0, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x20008045, 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0xfffffffffddfbffc, 0x1501) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000ffa100000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) kernel console output (not intermixed with test programs): cuous mode [ 437.264934][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5874'. [ 437.286930][T23798] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 437.290928][T23798] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 437.433125][T23808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.504704][T23808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.851047][T23825] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.5883'. [ 437.902890][ T40] kauditd_printk_skb: 24423 callbacks suppressed [ 437.902901][ T40] audit: type=1400 audit(3502326827.591:33142): avc: denied { create } for pid=23822 comm="syz.0.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 437.912399][ T40] audit: type=1400 audit(3502326827.591:33143): avc: denied { write } for pid=23822 comm="syz.0.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 437.920597][ T40] audit: type=1400 audit(3502326827.591:33144): avc: denied { write } for pid=23822 comm="syz.0.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 437.926155][ T40] audit: type=1400 audit(3502326827.601:33145): avc: denied { write } for pid=23822 comm="syz.0.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 437.933822][ T40] audit: type=1400 audit(3502326827.601:33146): avc: denied { read } for pid=23822 comm="syz.0.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 437.941582][ T40] audit: type=1400 audit(3502326827.601:33147): avc: denied { prog_load } for pid=23827 comm="syz.2.5884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 437.949748][ T40] audit: type=1400 audit(3502326827.601:33148): avc: denied { bpf } for pid=23827 comm="syz.2.5884" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 437.955596][ T40] audit: type=1400 audit(3502326827.611:33149): avc: denied { perfmon } for pid=23827 comm="syz.2.5884" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 437.965318][ T40] audit: type=1400 audit(3502326827.611:33150): avc: denied { perfmon } for pid=23827 comm="syz.2.5884" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 437.973212][ T40] audit: type=1400 audit(3502326827.611:33151): avc: denied { perfmon } for pid=23827 comm="syz.2.5884" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 438.038948][T23830] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 438.043166][T23830] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 438.049674][T23830] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 438.371699][T23849] wg2: entered promiscuous mode [ 438.373737][T23849] wg2: entered allmulticast mode [ 438.572365][T23861] kvm: pic: non byte read [ 438.574792][T23861] kvm: pic: level sensitive irq not supported [ 438.575032][T23861] kvm: pic: non byte read [ 438.582180][T23861] kvm: pic: level sensitive irq not supported [ 438.582450][T23861] kvm: pic: non byte read [ 438.586934][T23861] kvm: pic: level sensitive irq not supported [ 438.587174][T23861] kvm: pic: non byte read [ 438.610083][T23864] __nla_validate_parse: 1 callbacks suppressed [ 438.610095][T23864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5898'. [ 438.624864][T23865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5899'. [ 438.632727][T23864] bridge1: port 1(veth0_to_bond) entered blocking state [ 438.634868][T23864] bridge1: port 1(veth0_to_bond) entered disabled state [ 438.647430][T23864] veth0_to_bond: entered allmulticast mode [ 438.651133][T23864] veth0_to_bond: entered promiscuous mode [ 438.990511][T23889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5908'. [ 439.010425][T23890] x_tables: duplicate underflow at hook 2 [ 439.226433][T23897] x_tables: duplicate underflow at hook 2 [ 439.322844][T23905] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.5915'. [ 439.458470][T23913] xt_nfacct: accounting object `syz1' does not exists [ 439.475996][T23917] xt_hashlimit: size too large, truncated to 1048576 [ 439.527817][ T34] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 439.531992][T23920] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5921'. [ 439.635802][T23928] x_tables: duplicate underflow at hook 2 [ 439.692991][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 439.696320][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 439.702153][ T34] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 439.711693][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.714407][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 439.718702][ T34] usb 6-1: SerialNumber: syz [ 439.721038][T23932] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5927'. [ 439.726214][T23902] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 439.732982][ T34] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 439.945076][T23902] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 439.955914][ T1457] usb 6-1: USB disconnect, device number 18 [ 440.111781][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.114346][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.159127][T23949] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.5932'. [ 440.162825][T23949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5932'. [ 440.541913][T23953] x_tables: duplicate underflow at hook 2 [ 440.542545][T23956] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 440.644672][T23962] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5936'. [ 440.727792][T23964] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5937'. [ 441.040835][T23976] overlayfs: failed to decode file handle (len=6, type=65535, flags=0, err=-22) [ 441.156313][T23987] netlink: 'syz.2.5945': attribute type 1 has an invalid length. [ 441.228961][T23993] x_tables: duplicate underflow at hook 2 [ 441.744690][T24016] x_tables: duplicate underflow at hook 2 [ 442.003528][T24027] trusted_key: encrypted_key: keylen parameter is missing [ 442.012166][T24029] libceph: resolve '4' (ret=-3): failed [ 442.354503][T24055] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 442.512718][T24064] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 442.657101][T24069] /dev/sg0: Can't lookup blockdev [ 442.913601][ T40] kauditd_printk_skb: 1101 callbacks suppressed [ 442.913613][ T40] audit: type=1400 audit(3502326832.601:34253): avc: denied { read write } for pid=19529 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.923732][ T40] audit: type=1400 audit(3502326832.601:34254): avc: denied { read write open } for pid=19529 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.933984][ T40] audit: type=1400 audit(3502326832.601:34255): avc: denied { ioctl } for pid=19529 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.963551][ T40] audit: type=1400 audit(3502326832.651:34256): avc: denied { read write } for pid=22187 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.973644][ T40] audit: type=1400 audit(3502326832.651:34257): avc: denied { read write open } for pid=22187 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.984654][ T40] audit: type=1400 audit(3502326832.651:34258): avc: denied { create } for pid=24080 comm="syz.0.5982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 442.995468][ T40] audit: type=1400 audit(3502326832.651:34259): avc: denied { read write } for pid=19499 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 443.005101][ T40] audit: type=1400 audit(3502326832.651:34260): avc: denied { ioctl } for pid=22187 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 443.014419][ T40] audit: type=1400 audit(3502326832.651:34261): avc: denied { read write open } for pid=19499 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 443.024529][ T40] audit: type=1400 audit(3502326832.651:34262): avc: denied { ioctl } for pid=19499 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 443.311046][T24098] x_tables: duplicate underflow at hook 2 [ 443.721333][T24126] binder: Unknown parameter 'mÎØ*쑨)dÙ9„7‰axf½’@äK' [ 443.857345][ T34] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 444.043842][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 444.055281][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.059878][ T34] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 444.063952][ T34] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 444.085174][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.089119][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.092584][ T34] usb 7-1: Product: syz [ 444.094415][ T34] usb 7-1: Manufacturer: æ¡·ï“诼謵㠯瘘튙糥샆ᬬç¢ï££ä§¤í‹¥áœã—é±æ’ æ›‡è§¤á…ﶄ췻嘷聾ࣼ粿 [ 444.099165][ T34] usb 7-1: SerialNumber: syz [ 444.158642][T24137] __nla_validate_parse: 6 callbacks suppressed [ 444.158659][T24137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6003'. [ 444.327484][ T34] cdc_ncm 7-1:1.0: bind() failure [ 444.349480][ T34] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 444.352446][ T34] cdc_ncm 7-1:1.1: bind() failure [ 444.359925][ T34] usb 7-1: USB disconnect, device number 61 [ 444.500101][T24156] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6009'. [ 444.581987][T24160] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.6011'. [ 445.083572][T24185] netlink: 'syz.4.6021': attribute type 3 has an invalid length. [ 445.083591][T24185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6021'. [ 445.370595][T24204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6027'. [ 445.373531][T24204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6027'. [ 445.981165][T24237] Invalid source name [ 445.982863][T24237] UBIFS error (pid: 24237): cannot open "/dev/sg0", error -22 [ 446.026759][ T5972] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 446.029206][T24240] warn_alloc: 1 callbacks suppressed [ 446.029219][T24240] syz.0.6041: vmalloc error: size 3335753728, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 446.040970][T24240] CPU: 1 UID: 0 PID: 24240 Comm: syz.0.6041 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 446.040998][T24240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 446.041011][T24240] Call Trace: [ 446.041027][T24240] [ 446.041035][T24240] dump_stack_lvl+0x16c/0x1f0 [ 446.041082][T24240] warn_alloc+0x248/0x3a0 [ 446.041110][T24240] ? __pfx_warn_alloc+0x10/0x10 [ 446.041133][T24240] ? __pfx_stack_trace_save+0x10/0x10 [ 446.041159][T24240] ? stack_depot_save_flags+0x28/0xa40 [ 446.041196][T24240] ? kasan_save_stack+0x42/0x60 [ 446.041218][T24240] ? kasan_save_stack+0x33/0x60 [ 446.041240][T24240] ? kasan_save_track+0x14/0x30 [ 446.041262][T24240] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 446.041281][T24240] ? __vb2_queue_alloc+0x8c9/0x1280 [ 446.041336][T24240] ? vb2_core_create_bufs+0x559/0xab0 [ 446.041369][T24240] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 446.041390][T24240] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 446.041422][T24240] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 446.041448][T24240] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 446.041478][T24240] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 446.041496][T24240] vmalloc_user_noprof+0x9e/0xe0 [ 446.041516][T24240] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 446.041534][T24240] vb2_vmalloc_alloc+0x135/0x3f0 [ 446.041559][T24240] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 446.041578][T24240] __vb2_queue_alloc+0x8c9/0x1280 [ 446.041624][T24240] vb2_core_create_bufs+0x559/0xab0 [ 446.041659][T24240] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 446.041692][T24240] ? __pfx___mutex_trylock_common+0x10/0x10 [ 446.041725][T24240] ? __pfx___might_resched+0x10/0x10 [ 446.041753][T24240] ? rcu_is_watching+0x12/0xc0 [ 446.041779][T24240] vb2_create_bufs+0x5e8/0x840 [ 446.041810][T24240] ? __pfx_vb2_create_bufs+0x10/0x10 [ 446.041838][T24240] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.041860][T24240] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.041886][T24240] v4l_create_bufs+0x159/0x270 [ 446.041910][T24240] __video_do_ioctl+0xb3d/0xfc0 [ 446.041935][T24240] ? __might_fault+0xe3/0x190 [ 446.041956][T24240] ? __pfx___video_do_ioctl+0x10/0x10 [ 446.041988][T24240] video_usercopy+0x4cd/0x1720 [ 446.042014][T24240] ? __pfx___video_do_ioctl+0x10/0x10 [ 446.042036][T24240] ? selinux_kernel_read_file+0xf0/0x130 [ 446.042062][T24240] ? __pfx_video_usercopy+0x10/0x10 [ 446.042105][T24240] v4l2_ioctl+0x1ba/0x250 [ 446.042127][T24240] ? __pfx_v4l2_ioctl+0x10/0x10 [ 446.042151][T24240] __x64_sys_ioctl+0x18b/0x210 [ 446.042190][T24240] do_syscall_64+0xcd/0x4c0 [ 446.042221][T24240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.042240][T24240] RIP: 0033:0x7faeed98e929 [ 446.042257][T24240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.042276][T24240] RSP: 002b:00007faeee86c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.042294][T24240] RAX: ffffffffffffffda RBX: 00007faeedbb5fa0 RCX: 00007faeed98e929 [ 446.042306][T24240] RDX: 0000200000000040 RSI: 00000000c100565c RDI: 0000000000000006 [ 446.042317][T24240] RBP: 00007faeeda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 446.042329][T24240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.042339][T24240] R13: 0000000000000000 R14: 00007faeedbb5fa0 R15: 00007ffca7044b08 [ 446.042363][T24240] [ 446.042384][T24240] Mem-Info: [ 446.166746][T24240] active_anon:9685 inactive_anon:1 isolated_anon:0 [ 446.166746][T24240] active_file:2173 inactive_file:53412 isolated_file:0 [ 446.166746][T24240] unevictable:1768 dirty:266 writeback:0 [ 446.166746][T24240] slab_reclaimable:10092 slab_unreclaimable:88192 [ 446.166746][T24240] mapped:26065 shmem:2426 pagetables:1504 [ 446.166746][T24240] sec_pagetables:326 bounce:0 [ 446.166746][T24240] kernel_misc_reclaimable:0 [ 446.166746][T24240] free:418927 free_pcp:18928 free_cma:0 [ 446.186314][T24240] Node 0 active_anon:36536kB inactive_anon:4kB active_file:4160kB inactive_file:213164kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:85324kB dirty:1064kB writeback:0kB shmem:7876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16368kB pagetables:4152kB sec_pagetables:1280kB all_unreclaimable? no Balloon:0kB [ 446.198130][ T5972] usb 7-1: device descriptor read/64, error -71 [ 446.200768][T24240] Node 1 active_anon:2204kB inactive_anon:0kB active_file:4532kB inactive_file:484kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:18936kB dirty:0kB writeback:0kB shmem:1828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1296kB pagetables:1864kB sec_pagetables:24kB all_unreclaimable? no Balloon:0kB [ 446.212580][T24240] Node 0 DMA free:13144kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:44kB free_cma:0kB [ 446.221635][T24240] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 446.224093][T24240] Node 0 DMA32 free:137440kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:2048KB free_highatomic:1332KB active_anon:36404kB inactive_anon:4kB active_file:4160kB inactive_file:213160kB unevictable:3536kB writepending:1064kB present:2080628kB managed:1264692kB mlocked:0kB bounce:0kB free_pcp:36148kB local_pcp:12484kB free_cma:0kB [ 446.235184][T24240] lowmem_reserve[]: 0 0 0 0 0 [ 446.236738][T24240] Node 1 Normal free:1526168kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2204kB inactive_anon:0kB active_file:4532kB inactive_file:484kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:38772kB local_pcp:11940kB free_cma:0kB [ 446.249172][T24240] lowmem_reserve[]: 0 0 0 0 0 [ 446.251156][T24240] Node 0 DMA: 50*4kB (UM) 44*8kB (UM) 45*16kB (UM) 31*32kB (UM) 22*64kB (UM) 14*128kB (UM) 10*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 13144kB [ 446.257703][T24240] Node 0 DMA32: 462*4kB (UMH) 994*8kB (UMEH) 581*16kB (UMEH) 923*32kB (UMH) 239*64kB (UMEH) 104*128kB (UMEH) 92*256kB (UME) 28*512kB (UM) 18*1024kB (UM) 2*2048kB (M) 0*4096kB = 137656kB [ 446.268942][T24240] Node 1 Normal: 1274*4kB (UME) 1208*8kB (UME) 975*16kB (UME) 736*32kB (UME) 456*64kB (UME) 304*128kB (UME) 205*256kB (UME) 122*512kB (UME) 67*1024kB (UM) 24*2048kB (UME) 286*4096kB (UM) = 1526168kB [ 446.276371][T24240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.280243][T24240] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 446.283853][T24240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.287774][T24240] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 446.291433][T24240] 58009 total pagecache pages [ 446.293385][T24240] 1 pages in swap cache [ 446.295083][T24240] Free swap = 124984kB [ 446.297181][T24240] Total swap = 124996kB [ 446.298860][T24240] 1048443 pages RAM [ 446.300410][T24240] 0 pages HighMem/MovableOnly [ 446.302316][T24240] 282941 pages reserved [ 446.303970][T24240] 0 pages cma reserved [ 446.402903][T24253] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 446.426143][T24255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6047'. [ 446.427238][T24253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6046'. [ 446.435165][T24253] "syz.4.6046" (24253) uses obsolete ecb(arc4) skcipher [ 446.466711][ T5972] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 446.515244][T24258] syz.4.6046: attempt to access beyond end of device [ 446.515244][T24258] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 446.519857][T24258] XFS (nbd4): SB validate failed with error -5. [ 446.606779][ T5972] usb 7-1: device descriptor read/64, error -71 [ 446.607803][T14950] IPVS: starting estimator thread 0... [ 446.687847][T24272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6050'. [ 446.697944][T24270] IPVS: using max 43 ests per chain, 103200 per kthread [ 446.716943][ T5972] usb usb7-port1: attempt power cycle [ 447.056757][ T5972] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 447.100252][ T5972] usb 7-1: device descriptor read/8, error -71 [ 447.142786][T24287] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6056'. [ 447.346917][ T5972] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 447.369049][ T5972] usb 7-1: device descriptor read/8, error -71 [ 447.479850][ T5972] usb usb7-port1: unable to enumerate USB device [ 447.839934][T24314] usb usb1: usbfs: process 24314 (syz.1.6067) did not claim interface 0 before use [ 447.856816][T24313] delete_channel: no stack [ 447.918226][ T40] kauditd_printk_skb: 1190 callbacks suppressed [ 447.918244][ T40] audit: type=1400 audit(3502326837.611:35453): avc: denied { write } for pid=24315 comm="syz.1.6068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 447.930707][ T40] audit: type=1400 audit(3502326837.611:35454): avc: denied { watch watch_reads } for pid=24315 comm="syz.1.6068" path="/syzcgroup/net/syz1/syz0" dev="cgroup" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 447.944222][ T40] audit: type=1400 audit(3502326837.621:35455): avc: denied { ioctl } for pid=24309 comm="syz.4.6065" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 447.958744][ T40] audit: type=1400 audit(3502326837.651:35456): avc: denied { read write } for pid=19499 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 447.965883][ T40] audit: type=1400 audit(3502326837.651:35457): avc: denied { read write open } for pid=19499 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 447.975789][ T40] audit: type=1400 audit(3502326837.651:35458): avc: denied { ioctl } for pid=19499 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 447.988824][ T5989] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 447.993904][ T40] audit: type=1400 audit(3502326837.681:35459): avc: denied { ioctl } for pid=24309 comm="syz.4.6065" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.001535][ T40] audit: type=1400 audit(3502326837.681:35460): avc: denied { ioctl } for pid=24309 comm="syz.4.6065" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.009001][ T40] audit: type=1400 audit(3502326837.691:35461): avc: denied { ioctl } for pid=24309 comm="syz.4.6065" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.016387][ T40] audit: type=1400 audit(3502326837.701:35462): avc: denied { create } for pid=24317 comm="syz.1.6069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 448.168806][ T5989] usb 9-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 448.182850][ T5989] usb 9-1: config 1 interface 0 has no altsetting 0 [ 448.194148][ T5989] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 448.198066][ T5989] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 448.201049][ T5989] usb 9-1: SerialNumber: syz [ 448.287033][ T5972] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0 [ 448.289345][ T5972] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0 [ 448.292338][ T5972] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0 [ 448.296670][ T5972] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x2 [ 448.298945][ T5972] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0 [ 448.301208][ T5972] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0 [ 448.303570][ T5972] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0 [ 448.305857][ T5972] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0 [ 448.308182][ T5972] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0 [ 448.310384][ T5972] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0 [ 448.312592][ T5972] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0 [ 448.314895][ T5972] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0 [ 448.318191][ T5972] hid-generic 00A0:0008:0003.0019: hidraw0: HID v0.05 Device [syz1] on syz0 [ 448.422170][ T5989] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 448.447051][ T5989] usb 9-1: USB disconnect, device number 30 [ 448.645190][T24339] netlink: 'syz.0.6076': attribute type 23 has an invalid length. [ 449.069105][T24360] xt_ecn: cannot match TCP bits for non-tcp packets [ 449.454762][T24385] tmpfs: Bad value for 'mpol' [ 449.647467][T24395] __nla_validate_parse: 5 callbacks suppressed [ 449.647478][T24395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6096'. [ 449.685795][T24404] netlink: 'syz.4.6098': attribute type 1 has an invalid length. [ 449.768631][T24407] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 449.772777][T24407] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 449.778887][T24407] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 449.799813][T24409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6098'. [ 449.919871][T24414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24414 comm=syz.4.6098 [ 449.923620][T24404] bond1: entered promiscuous mode [ 449.926526][T24404] bond1: entered allmulticast mode [ 449.981110][T18348] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.999292][T24406] geneve3: entered allmulticast mode [ 450.010399][T24406] bond1: (slave geneve3): making interface the new active one [ 450.013250][T24406] geneve3: entered promiscuous mode [ 450.015451][T24406] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 450.022334][T24409] bond1: left promiscuous mode [ 450.023856][T24409] geneve3: left promiscuous mode [ 450.025568][T24409] bond1: left allmulticast mode [ 450.030989][T24409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.065068][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 450.071806][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 450.075569][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 450.087518][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 450.090840][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 450.105404][T24426] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6104'. [ 450.141958][T24426] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 450.144632][T24426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.148666][T18348] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.148891][T24426] vhci_hcd vhci_hcd.0: Device attached [ 450.162686][T24430] ip6t_rpfilter: unknown options [ 450.241597][T18348] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.330435][T18348] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.332243][T24436] Process accounting resumed [ 450.372370][T24421] chnl_net:caif_netlink_parms(): no params data found [ 450.406776][T14950] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 450.417052][ T5989] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 450.491256][T24421] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.494415][T24421] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.497668][T24421] bridge_slave_0: entered allmulticast mode [ 450.502157][T24421] bridge_slave_0: entered promiscuous mode [ 450.512911][T24421] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.515293][T24421] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.517974][T24421] bridge_slave_1: entered allmulticast mode [ 450.521112][T24421] bridge_slave_1: entered promiscuous mode [ 450.589283][ T5989] usb 5-1: config 0 has no interfaces? [ 450.591072][ T5989] usb 5-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 450.593936][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.600700][ T5989] usb 5-1: config 0 descriptor?? [ 450.631830][T24421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.634987][T18348] bridge_slave_1: left allmulticast mode [ 450.637001][T18348] bridge_slave_1: left promiscuous mode [ 450.638858][T18348] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.642448][T18348] bridge_slave_0: left allmulticast mode [ 450.644230][T18348] bridge_slave_0: left promiscuous mode [ 450.646388][T18348] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.813401][T24427] usbip_core: unknown command [ 450.815370][T24427] vhci_hcd: unknown pdu 134217728 [ 450.818063][T24427] usbip_core: unknown command [ 450.820834][T18346] vhci_hcd: stop threads [ 450.822556][T24426] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 450.822655][T18346] vhci_hcd: release socket [ 450.825006][T24426] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 450.825168][T24426] vhci_hcd vhci_hcd.0: Device attached [ 450.835721][T18346] vhci_hcd: disconnect device [ 450.856099][T24444] vhci_hcd: connection closed [ 450.856337][T18351] vhci_hcd: stop threads [ 450.856788][ T5989] usb 5-1: USB disconnect, device number 32 [ 450.859820][T18351] vhci_hcd: release socket [ 450.863944][T18351] vhci_hcd: disconnect device [ 451.152793][T18348] bond0 (unregistering): (slave þÿÿÿ): Releasing backup interface [ 451.161205][T18348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.165972][T18348] bond0 (unregistering): Released all slaves [ 451.185483][T24421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.235353][T24421] team0: Port device team_slave_0 added [ 451.241590][T24421] team0: Port device team_slave_1 added [ 451.283368][T18348] tipc: Left network mode [ 451.283757][T24451] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 451.285986][T24421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.291182][T24421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.302978][T24421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.312130][T24421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.314851][T24421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.322985][T24421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.380040][T24421] hsr_slave_0: entered promiscuous mode [ 451.382325][T24421] hsr_slave_1: entered promiscuous mode [ 451.384460][T24421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.388354][T24421] Cannot create hsr debugfs directory [ 451.635211][T24461] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 451.640038][T24461] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 451.644926][T24461] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 451.752266][T18348] hsr_slave_0: left promiscuous mode [ 451.759488][T18348] hsr_slave_1: left promiscuous mode [ 451.761675][T18348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.764109][T18348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.823391][T18348] veth1_macvtap: left promiscuous mode [ 451.825481][T18348] veth0_macvtap: left promiscuous mode [ 451.833172][T18348] veth1_vlan: left promiscuous mode [ 451.835576][T18348] veth0_vlan: left promiscuous mode [ 451.928291][T18348] pimreg (unregistering): left allmulticast mode [ 451.981215][T24476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6119'. [ 452.188305][ T5298] Bluetooth: hci3: command tx timeout [ 452.665928][T18348] team0 (unregistering): Port device team_slave_1 removed [ 452.773062][T18348] team0 (unregistering): Port device team_slave_0 removed [ 452.842290][T24483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6122'. [ 452.971018][ T40] kauditd_printk_skb: 794 callbacks suppressed [ 452.971036][ T40] audit: type=1400 audit(3502326842.661:36257): avc: denied { ioctl } for pid=24482 comm="syz.4.6122" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 452.984868][T24485] input: syz0 as /devices/virtual/input/input36 [ 453.006549][ T40] audit: type=1400 audit(3502326842.691:36258): avc: denied { prog_load } for pid=24482 comm="syz.4.6122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 453.016767][ T40] audit: type=1400 audit(3502326842.691:36259): avc: denied { bpf } for pid=24482 comm="syz.4.6122" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.023242][ T40] audit: type=1400 audit(3502326842.691:36260): avc: denied { perfmon } for pid=24482 comm="syz.4.6122" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.036125][ T40] audit: type=1400 audit(3502326842.691:36261): avc: denied { perfmon } for pid=24482 comm="syz.4.6122" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.042985][ T40] audit: type=1400 audit(3502326842.691:36262): avc: denied { perfmon } for pid=24482 comm="syz.4.6122" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.049576][ T40] audit: type=1400 audit(3502326842.691:36263): avc: denied { perfmon } for pid=24482 comm="syz.4.6122" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.056238][ T40] audit: type=1400 audit(3502326842.691:36264): avc: denied { bpf } for pid=24482 comm="syz.4.6122" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.062941][ T40] audit: type=1400 audit(3502326842.691:36265): avc: denied { read write } for pid=24482 comm="syz.4.6122" name="video5" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 453.070458][ T40] audit: type=1400 audit(3502326842.691:36266): avc: denied { read write open } for pid=24482 comm="syz.4.6122" path="/dev/video5" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 453.742284][T24490] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 453.745994][T24490] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 453.751914][T24490] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 453.952449][T14748] udevd[14748]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 454.119334][T24421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 454.125869][T24508] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6129'. [ 454.129449][T24421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 454.135922][T24421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 454.149978][T24421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 454.152995][T14748] udevd[14748]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 454.240929][T24520] kvm: kvm [24519]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008f) [ 454.264756][T24525] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 454.268924][ T5298] Bluetooth: hci3: command tx timeout [ 454.271811][T24525] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 454.277569][T24525] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 454.279854][T24421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.301791][T24421] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.311334][T18362] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.313619][T18362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.324106][T18363] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.326436][T18363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.415812][T24536] o2cb: This node has not been configured. [ 454.418035][T24536] o2cb: Cluster check failed. Fix errors before retrying. [ 454.420305][T24536] (syz.0.6137,24536,2):user_dlm_register:674 ERROR: status = -22 [ 454.422817][T24536] (syz.0.6137,24536,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 454.438808][T24536] o2cb: This node has not been configured. [ 454.440671][T24536] o2cb: Cluster check failed. Fix errors before retrying. [ 454.442898][T24536] (syz.0.6137,24536,1):user_dlm_register:674 ERROR: status = -22 [ 454.445244][T24536] (syz.0.6137,24536,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 454.500929][T24543] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6139'. [ 454.590746][T24548] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6141'. [ 454.599820][T24548] program syz.1.6141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.710126][T24551] sp0: Synchronizing with TNC [ 454.763111][T24421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.854478][T24421] veth0_vlan: entered promiscuous mode [ 454.868173][T24421] veth1_vlan: entered promiscuous mode [ 454.939384][T24421] veth0_macvtap: entered promiscuous mode [ 454.949275][T24421] veth1_macvtap: entered promiscuous mode [ 454.985282][T24421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.008732][T24421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.025734][T24421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.029447][T24421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.032224][T24421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.034950][T24421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.110382][T18348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.112943][T18348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.133714][T18347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.136194][T18347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.515990][T24584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6150'. [ 455.547038][T14950] vhci_hcd: vhci_device speed not set [ 455.806761][T24606] binder: 24604:24606 unknown command 3 [ 455.808988][T24606] binder: 24604:24606 ioctl c0306201 200000000640 returned -22 [ 455.865312][T24612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6160'. [ 455.975639][T24622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6161'. [ 456.087068][T24631] JFS: discard option not supported on device [ 456.089617][T24631] syz.4.6167: attempt to access beyond end of device [ 456.089617][T24631] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 456.094364][T24631] syz.4.6167: attempt to access beyond end of device [ 456.094364][T24631] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 456.099113][T24631] Mount JFS Failure: -5 [ 456.202279][T24637] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 456.282829][T24645] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6173'. [ 456.346933][ T5298] Bluetooth: hci3: command tx timeout [ 456.543929][T24663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6178'. [ 456.649540][T24670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6180'. [ 456.652713][T24670] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 456.661815][T24670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.824429][T24679] netlink: 'syz.3.6182': attribute type 10 has an invalid length. [ 456.833931][T24679] hsr_slave_0: entered allmulticast mode [ 456.837882][T24679] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 456.933336][T24684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 457.211458][T24698] netlink: 'syz.0.6189': attribute type 5 has an invalid length. [ 457.283527][T24702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6190'. [ 457.468047][T24715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6195'. [ 457.573553][T24718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6196'. [ 457.578564][T24718] netlink: 'syz.1.6196': attribute type 7 has an invalid length. [ 457.579789][T24720] netlink: 'syz.0.6197': attribute type 10 has an invalid length. [ 457.581000][T24718] netlink: 'syz.1.6196': attribute type 8 has an invalid length. [ 457.581010][T24718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6196'. [ 457.607618][T24720] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 457.610554][T24720] team0: Failed to send options change via netlink (err -105) [ 457.612923][T24720] team0: Port device geneve0 added [ 457.993087][ T40] kauditd_printk_skb: 1065 callbacks suppressed [ 457.993101][ T40] audit: type=1400 audit(3502326847.681:37332): avc: denied { read write } for pid=21253 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 458.004655][ T40] audit: type=1400 audit(3502326847.681:37333): avc: denied { read write open } for pid=21253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 458.013780][ T40] audit: type=1400 audit(3502326847.681:37334): avc: denied { ioctl } for pid=21253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 458.038070][ T40] audit: type=1400 audit(3502326847.731:37335): avc: denied { read } for pid=24747 comm="syz.4.6206" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 458.045385][ T40] audit: type=1400 audit(3502326847.731:37336): avc: denied { read open } for pid=24747 comm="syz.4.6206" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 458.054691][ T40] audit: type=1400 audit(3502326847.731:37337): avc: denied { create } for pid=24747 comm="syz.4.6206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 458.062514][ T40] audit: type=1400 audit(3502326847.731:37338): avc: denied { write } for pid=24747 comm="syz.4.6206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 458.070994][ T40] audit: type=1400 audit(3502326847.731:37339): avc: denied { read } for pid=24747 comm="syz.4.6206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 458.082046][ T40] audit: type=1400 audit(3502326847.731:37340): avc: denied { read } for pid=24747 comm="syz.4.6206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 458.089483][ T40] audit: type=1400 audit(3502326847.741:37341): avc: denied { create } for pid=24747 comm="syz.4.6206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 458.092113][T24727] 8021q: adding VLAN 0 to HW filter on device bond31 [ 458.427924][ T5298] Bluetooth: hci3: command tx timeout [ 458.482633][T24767] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 458.487091][T24767] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 458.491207][T24767] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 458.609459][T24731] TCP: out of memory -- consider tuning tcp_mem [ 458.692175][T24778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=24778 comm=syz.0.6215 [ 458.927458][T24793] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 458.930847][T24793] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 458.934676][T24793] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 458.999473][T24798] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 459.747886][T24818] openvswitch: netlink: IP tunnel TTL not specified. [ 459.752871][T24817] XFS (nbd4): no-recovery mounts must be read-only. [ 460.322015][T24855] 9pnet_virtio: no channels available for device /dev/nullb0 [ 460.356861][ T1457] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 460.433155][T24857] can: request_module (can-proto-5) failed. [ 460.506768][ T1457] usb 6-1: Using ep0 maxpacket: 8 [ 460.526272][ T1457] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 460.530546][ T1457] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 460.533933][ T1457] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.539386][ T1457] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.543042][T24863] __nla_validate_parse: 9 callbacks suppressed [ 460.543053][T24863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6245'. [ 460.543494][ T1457] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 460.552159][ T1457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.645712][T24866] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1321 (2642 ns) > initial count (56 ns). Using initial count to start timer. [ 460.648438][T24865] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 460.689357][T24863] kvm: MWAIT instruction emulated as NOP! [ 460.771248][ T1457] usb 6-1: GET_CAPABILITIES returned 0 [ 460.773014][ T1457] usbtmc 6-1:16.0: can't read capabilities [ 460.981920][T24847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.986877][T24847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.169877][T24886] xt_l2tp: v2 doesn't support IP mode [ 461.185076][T24886] 9p filesystem being mounted at /532/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 461.742737][T24894] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.792572][T24922] overlay: Unknown parameter 'audit' [ 463.059152][ T40] kauditd_printk_skb: 625 callbacks suppressed [ 463.059164][ T40] audit: type=1400 audit(3502326852.751:37967): avc: denied { read write } for pid=21253 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.069422][ T40] audit: type=1400 audit(3502326852.751:37968): avc: denied { read write open } for pid=21253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.078430][ T40] audit: type=1400 audit(3502326852.751:37969): avc: denied { ioctl } for pid=21253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.107871][ T40] audit: type=1400 audit(3502326852.801:37970): avc: denied { create } for pid=24928 comm="syz.4.6268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 463.111833][T24929] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.6268'. [ 463.114645][ T40] audit: type=1400 audit(3502326852.801:37971): avc: denied { write } for pid=24928 comm="syz.4.6268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 463.118728][ T6003] usb 6-1: USB disconnect, device number 19 [ 463.139201][ T40] audit: type=1400 audit(3502326852.831:37972): avc: denied { read write } for pid=19499 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.147846][ T40] audit: type=1400 audit(3502326852.831:37973): avc: denied { read write open } for pid=19499 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.156704][ T40] audit: type=1400 audit(3502326852.831:37974): avc: denied { ioctl } for pid=19499 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.164820][ T40] audit: type=1400 audit(3502326852.851:37975): avc: denied { read write } for pid=21253 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.172775][ T40] audit: type=1400 audit(3502326852.851:37976): avc: denied { read write open } for pid=21253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.349157][T24936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6271'. [ 463.355580][T24936] xfrm1: entered promiscuous mode [ 463.357439][T24936] xfrm1: entered allmulticast mode [ 463.436007][T24940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6273'. [ 464.389559][T24980] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 464.398275][T24983] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 464.422025][T24983] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 464.481321][T24989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6289'. [ 464.702809][T25002] cgroup: Unknown subsys name 'smackfsroot' [ 464.720854][T25002] 9p filesystem being mounted at /536/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 464.875505][T25005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6294'. [ 464.878723][T25005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6294'. [ 464.979153][T25008] dummy0: default FDB implementation only supports local addresses [ 465.159773][T25011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6295'. [ 465.255542][T25023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6299'. [ 465.404643][T25025] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 465.675841][T25046] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 465.993318][T25062] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6314'. [ 465.996504][T25062] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6314'. [ 466.001504][T25062] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6314'. [ 466.072503][T25069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'. [ 466.096563][T25068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6315'. [ 466.613598][T25092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6324'. [ 466.615604][T25093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6324'. [ 466.683975][T25097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6323'. [ 466.939662][T25107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6328'. [ 467.033408][T25101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6325'. [ 467.084440][ T5298] Bluetooth: Unexpected start frame (len 10) [ 467.199299][T25120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25120 comm=syz.4.6331 [ 467.211378][T25120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25120 comm=syz.4.6331 [ 467.395112][T25134] macvlan0: entered promiscuous mode [ 467.397512][T25134] macvlan0: entered allmulticast mode [ 468.152000][ T40] kauditd_printk_skb: 980 callbacks suppressed [ 468.152017][ T40] audit: type=1400 audit(3502327369.847:38957): avc: denied { read write } for pid=19529 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 468.169840][ T40] audit: type=1400 audit(3502327369.847:38958): avc: denied { read write open } for pid=19529 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 468.184781][ T40] audit: type=1400 audit(3502327369.847:38959): avc: denied { ioctl } for pid=19529 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 468.206315][ T40] audit: type=1400 audit(3502327369.897:38960): avc: denied { read write } for pid=19499 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 468.219582][ T40] audit: type=1400 audit(3502327369.907:38961): avc: denied { read write open } for pid=19499 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 468.229069][ T40] audit: type=1400 audit(3502327369.907:38962): avc: denied { ioctl } for pid=19499 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 468.240021][ T40] audit: type=1400 audit(3502327369.937:38963): avc: denied { create } for pid=25145 comm="syz.0.6340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 468.248794][ T40] audit: type=1400 audit(3502327369.937:38964): avc: denied { create } for pid=25145 comm="syz.0.6340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 468.260278][ T40] audit: type=1400 audit(3502327369.957:38965): avc: denied { read write } for pid=25147 comm="syz.1.6342" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 468.272209][ T40] audit: type=1400 audit(3502327369.957:38966): avc: denied { read write open } for pid=25147 comm="syz.1.6342" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 468.654206][T25165] usb usb8: usbfs: process 25165 (syz.4.6348) did not claim interface 0 before use [ 468.659519][T25165] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 469.011072][T25185] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 469.013695][T25185] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 469.019362][T25185] vhci_hcd vhci_hcd.0: Device attached [ 469.022117][T25186] vhci_hcd: unknown pdu 2 [ 469.024198][T18346] vhci_hcd: stop threads [ 469.025662][T18346] vhci_hcd: release socket [ 469.027316][T18346] vhci_hcd: disconnect device [ 469.037801][T25189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=25189 comm=syz.4.6356 [ 469.044819][T25189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=25189 comm=syz.4.6356 [ 469.749456][T25226] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.752640][T25226] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.755690][T25226] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.760213][T25226] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.763281][T25226] geneve2: entered promiscuous mode [ 469.765022][T25226] geneve2: entered allmulticast mode [ 469.946778][T18358] wlan1: Trigger new scan to find an IBSS to join [ 470.285281][T25236] FAULT_INJECTION: forcing a failure. [ 470.285281][T25236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.289453][T25236] CPU: 2 UID: 0 PID: 25236 Comm: syz.4.6370 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 470.289475][T25236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 470.289484][T25236] Call Trace: [ 470.289490][T25236] [ 470.289497][T25236] dump_stack_lvl+0x16c/0x1f0 [ 470.289536][T25236] should_fail_ex+0x512/0x640 [ 470.289557][T25236] strncpy_from_user+0x3b/0x2e0 [ 470.289572][T25236] getname_flags.part.0+0x8f/0x550 [ 470.289586][T25236] getname_flags+0x93/0xf0 [ 470.289605][T25236] do_sys_openat2+0xb8/0x1d0 [ 470.289616][T25236] ? __pfx_do_sys_openat2+0x10/0x10 [ 470.289628][T25236] ? __fget_files+0x20e/0x3c0 [ 470.289646][T25236] __x64_sys_open+0x153/0x1e0 [ 470.289656][T25236] ? __pfx___x64_sys_open+0x10/0x10 [ 470.289669][T25236] ? rcu_is_watching+0x12/0xc0 [ 470.289685][T25236] do_syscall_64+0xcd/0x4c0 [ 470.289702][T25236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.289713][T25236] RIP: 0033:0x7f46d378e929 [ 470.289723][T25236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.289733][T25236] RSP: 002b:00007f46d4556038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 470.289744][T25236] RAX: ffffffffffffffda RBX: 00007f46d39b6080 RCX: 00007f46d378e929 [ 470.289751][T25236] RDX: 0000000000000000 RSI: 0000000000050500 RDI: 0000200000022ff6 [ 470.289758][T25236] RBP: 00007f46d4556090 R08: 0000000000000000 R09: 0000000000000000 [ 470.289765][T25236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.289771][T25236] R13: 0000000000000001 R14: 00007f46d39b6080 R15: 00007ffc45886698 [ 470.289785][T25236] [ 470.794604][T25250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25250 comm=syz.3.6374 [ 472.190775][T25276] FAULT_INJECTION: forcing a failure. [ 472.190775][T25276] name failslab, interval 1, probability 0, space 0, times 0 [ 472.195278][T25276] CPU: 0 UID: 0 PID: 25276 Comm: syz.4.6385 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 472.195294][T25276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 472.195301][T25276] Call Trace: [ 472.195306][T25276] [ 472.195311][T25276] dump_stack_lvl+0x16c/0x1f0 [ 472.195331][T25276] should_fail_ex+0x512/0x640 [ 472.195345][T25276] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 472.195361][T25276] should_failslab+0xc2/0x120 [ 472.195377][T25276] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 472.195392][T25276] ? alloc_empty_file+0x55/0x1e0 [ 472.195404][T25276] alloc_empty_file+0x55/0x1e0 [ 472.195414][T25276] path_openat+0xda/0x2cb0 [ 472.195428][T25276] ? find_held_lock+0x2b/0x80 [ 472.195443][T25276] ? __up_read+0x1f8/0x750 [ 472.195454][T25276] ? __pfx___up_read+0x10/0x10 [ 472.195465][T25276] ? __pfx_path_openat+0x10/0x10 [ 472.195483][T25276] do_filp_open+0x20b/0x470 [ 472.195497][T25276] ? __pfx_do_filp_open+0x10/0x10 [ 472.195511][T25276] ? rcu_is_watching+0x12/0xc0 [ 472.195538][T25276] ? _raw_spin_unlock+0x28/0x50 [ 472.195552][T25276] ? alloc_fd+0x471/0x7d0 [ 472.195571][T25276] do_sys_openat2+0x11b/0x1d0 [ 472.195581][T25276] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.195592][T25276] ? __fget_files+0x20e/0x3c0 [ 472.195610][T25276] __x64_sys_open+0x153/0x1e0 [ 472.195620][T25276] ? __pfx___x64_sys_open+0x10/0x10 [ 472.195633][T25276] ? rcu_is_watching+0x12/0xc0 [ 472.195647][T25276] do_syscall_64+0xcd/0x4c0 [ 472.195665][T25276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.195677][T25276] RIP: 0033:0x7f46d378e929 [ 472.195686][T25276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.195697][T25276] RSP: 002b:00007f46d4577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 472.195707][T25276] RAX: ffffffffffffffda RBX: 00007f46d39b5fa0 RCX: 00007f46d378e929 [ 472.195714][T25276] RDX: 0000000000000000 RSI: 0000000000050500 RDI: 0000200000022ff6 [ 472.195721][T25276] RBP: 00007f46d4577090 R08: 0000000000000000 R09: 0000000000000000 [ 472.195728][T25276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.195734][T25276] R13: 0000000000000000 R14: 00007f46d39b5fa0 R15: 00007ffc45886698 [ 472.195747][T25276] [ 472.265299][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.541258][T25292] o2cb: This node has not been configured. [ 472.542172][T25291] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 472.542976][T25292] o2cb: Cluster check failed. Fix errors before retrying. [ 472.550706][T25292] (syz.0.6389,25292,3):user_dlm_register:674 ERROR: status = -22 [ 472.551144][T25291] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 472.553409][T25292] (syz.0.6389,25292,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 472.557338][T25291] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 472.564424][T25291] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 472.568521][T25291] geneve2: entered promiscuous mode [ 472.570532][T25291] geneve2: entered allmulticast mode [ 472.730606][T25301] __nla_validate_parse: 2 callbacks suppressed [ 472.730617][T25301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6392'. [ 472.796764][ T1460] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 472.872044][T25308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6393'. [ 472.946737][ T1460] usb 5-1: Using ep0 maxpacket: 32 [ 472.958546][ T1460] usb 5-1: config 0 has no interfaces? [ 472.960740][ T1460] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 472.964328][ T1460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.970985][ T1460] usb 5-1: config 0 descriptor?? [ 473.054474][T25313] FAULT_INJECTION: forcing a failure. [ 473.054474][T25313] name failslab, interval 1, probability 0, space 0, times 0 [ 473.060240][T25313] CPU: 1 UID: 0 PID: 25313 Comm: syz.3.6395 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 473.060270][T25313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 473.060281][T25313] Call Trace: [ 473.060288][T25313] [ 473.060295][T25313] dump_stack_lvl+0x16c/0x1f0 [ 473.060325][T25313] should_fail_ex+0x512/0x640 [ 473.060348][T25313] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 473.060374][T25313] should_failslab+0xc2/0x120 [ 473.060399][T25313] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 473.060421][T25313] ? security_file_alloc+0x34/0x2b0 [ 473.060450][T25313] security_file_alloc+0x34/0x2b0 [ 473.060475][T25313] init_file+0x93/0x4c0 [ 473.060502][T25313] alloc_empty_file+0x73/0x1e0 [ 473.060520][T25313] path_openat+0xda/0x2cb0 [ 473.060557][T25313] ? find_held_lock+0x2b/0x80 [ 473.060581][T25313] ? __up_read+0x1f8/0x750 [ 473.060600][T25313] ? __pfx___up_read+0x10/0x10 [ 473.060618][T25313] ? __pfx_path_openat+0x10/0x10 [ 473.060648][T25313] do_filp_open+0x20b/0x470 [ 473.060672][T25313] ? __pfx_do_filp_open+0x10/0x10 [ 473.060695][T25313] ? rcu_is_watching+0x12/0xc0 [ 473.060733][T25313] ? _raw_spin_unlock+0x28/0x50 [ 473.060754][T25313] ? alloc_fd+0x471/0x7d0 [ 473.060784][T25313] do_sys_openat2+0x11b/0x1d0 [ 473.060801][T25313] ? __pfx_do_sys_openat2+0x10/0x10 [ 473.060819][T25313] ? __fget_files+0x20e/0x3c0 [ 473.060848][T25313] __x64_sys_open+0x153/0x1e0 [ 473.060864][T25313] ? __pfx___x64_sys_open+0x10/0x10 [ 473.060886][T25313] ? rcu_is_watching+0x12/0xc0 [ 473.060909][T25313] do_syscall_64+0xcd/0x4c0 [ 473.060949][T25313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.060969][T25313] RIP: 0033:0x7fb742b8e929 [ 473.060984][T25313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.061002][T25313] RSP: 002b:00007fb743abc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 473.061019][T25313] RAX: ffffffffffffffda RBX: 00007fb742db5fa0 RCX: 00007fb742b8e929 [ 473.061030][T25313] RDX: 0000000000000000 RSI: 0000000000050500 RDI: 0000200000022ff6 [ 473.061041][T25313] RBP: 00007fb743abc090 R08: 0000000000000000 R09: 0000000000000000 [ 473.061072][T25313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.061083][T25313] R13: 0000000000000000 R14: 00007fb742db5fa0 R15: 00007fff71bb6d08 [ 473.061108][T25313] [ 473.179905][ T40] kauditd_printk_skb: 1483 callbacks suppressed [ 473.179922][ T40] audit: type=1400 audit(3502327374.877:40450): avc: denied { create } for pid=25314 comm="syz.1.6396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 473.194803][ T40] audit: type=1400 audit(3502327374.877:40451): avc: denied { add_name } for pid=25290 comm="syz.0.6389" name="blkio.bfq.io_service_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 473.198592][ T5972] usb 5-1: USB disconnect, device number 33 [ 473.205798][ T40] audit: type=1400 audit(3502327374.877:40452): avc: denied { create } for pid=25290 comm="syz.0.6389" name="blkio.bfq.io_service_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 473.219327][ T40] audit: type=1400 audit(3502327374.887:40454): avc: denied { read write } for pid=24421 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 473.231064][ T40] audit: type=1400 audit(3502327374.887:40455): avc: denied { read write open } for pid=24421 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 473.242241][ T40] audit: type=1400 audit(3502327374.887:40456): avc: denied { ioctl } for pid=24421 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 473.251445][ T40] audit: type=1400 audit(3502327374.877:40453): avc: denied { associate } for pid=25290 comm="syz.0.6389" name="blkio.bfq.io_service_time_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 473.260749][T25319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6397'. [ 473.261790][ T40] audit: type=1400 audit(3502327374.897:40457): avc: denied { read write } for pid=21253 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 473.270804][ T40] audit: type=1400 audit(3502327374.897:40458): avc: denied { read write open } for pid=21253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 473.279535][ T40] audit: type=1400 audit(3502327374.897:40459): avc: denied { ioctl } for pid=21253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 473.310189][T25318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6398'. [ 473.471743][T25323] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 473.666700][ T5972] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 473.826783][ T5972] usb 5-1: Using ep0 maxpacket: 32 [ 473.835466][ T5972] usb 5-1: config 0 has no interfaces? [ 473.837287][ T5972] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 473.840248][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.855503][ T5972] usb 5-1: config 0 descriptor?? [ 473.947127][T18363] Bluetooth: hci4: Frame reassembly failed (-84) [ 474.035965][T25365] FAULT_INJECTION: forcing a failure. [ 474.035965][T25365] name failslab, interval 1, probability 0, space 0, times 0 [ 474.056689][T25365] CPU: 0 UID: 0 PID: 25365 Comm: syz.4.6412 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 474.056718][T25365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 474.056729][T25365] Call Trace: [ 474.056736][T25365] [ 474.056744][T25365] dump_stack_lvl+0x16c/0x1f0 [ 474.056774][T25365] should_fail_ex+0x512/0x640 [ 474.056797][T25365] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 474.056824][T25365] should_failslab+0xc2/0x120 [ 474.056850][T25365] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 474.056872][T25365] ? stack_trace_save+0x8e/0xc0 [ 474.056895][T25365] ? __d_alloc+0x31/0xaa0 [ 474.056921][T25365] ? stack_depot_save_flags+0x28/0xa40 [ 474.056947][T25365] __d_alloc+0x31/0xaa0 [ 474.056977][T25365] d_alloc+0x4a/0x1e0 [ 474.057005][T25365] d_alloc_parallel+0xe3/0x12e0 [ 474.057053][T25365] ? find_held_lock+0x2b/0x80 [ 474.057079][T25365] ? __pfx_d_alloc_parallel+0x10/0x10 [ 474.057104][T25365] ? __d_lookup+0x266/0x4a0 [ 474.057131][T25365] lookup_open.isra.0+0x665/0x1580 [ 474.057158][T25365] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 474.057196][T25365] ? dput+0x1f/0x30 [ 474.057212][T25365] ? lookup_fast+0x156/0x610 [ 474.057236][T25365] path_openat+0x893/0x2cb0 [ 474.057266][T25365] ? __pfx___up_read+0x10/0x10 [ 474.057286][T25365] ? __pfx_path_openat+0x10/0x10 [ 474.057317][T25365] do_filp_open+0x20b/0x470 [ 474.057341][T25365] ? __pfx_do_filp_open+0x10/0x10 [ 474.057364][T25365] ? rcu_is_watching+0x12/0xc0 [ 474.057405][T25365] ? _raw_spin_unlock+0x28/0x50 [ 474.057427][T25365] ? alloc_fd+0x471/0x7d0 [ 474.057459][T25365] do_sys_openat2+0x11b/0x1d0 [ 474.057477][T25365] ? __pfx_do_sys_openat2+0x10/0x10 [ 474.057496][T25365] ? __fget_files+0x20e/0x3c0 [ 474.057525][T25365] __x64_sys_open+0x153/0x1e0 [ 474.057543][T25365] ? __pfx___x64_sys_open+0x10/0x10 [ 474.057571][T25365] ? rcu_is_watching+0x12/0xc0 [ 474.057595][T25365] do_syscall_64+0xcd/0x4c0 [ 474.057623][T25365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.057641][T25365] RIP: 0033:0x7f46d378e929 [ 474.057657][T25365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.057674][T25365] RSP: 002b:00007f46d4577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 474.057691][T25365] RAX: ffffffffffffffda RBX: 00007f46d39b5fa0 RCX: 00007f46d378e929 [ 474.057703][T25365] RDX: 0000000000000000 RSI: 0000000000050500 RDI: 0000200000022ff6 [ 474.057715][T25365] RBP: 00007f46d4577090 R08: 0000000000000000 R09: 0000000000000000 [ 474.057726][T25365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.057737][T25365] R13: 0000000000000000 R14: 00007f46d39b5fa0 R15: 00007ffc45886698 [ 474.057762][T25365] [ 474.074081][T25353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6409'. [ 474.532562][T25381] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6417'. [ 474.601435][T25378] netlink: 'syz.4.6417': attribute type 21 has an invalid length. [ 474.604068][T25378] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6417'. [ 474.916854][T18346] wlan1: Trigger new scan to find an IBSS to join [ 475.553749][ T1345] usb 5-1: USB disconnect, device number 34 [ 475.646379][T25392] FAULT_INJECTION: forcing a failure. [ 475.646379][T25392] name failslab, interval 1, probability 0, space 0, times 0 [ 475.653349][T25392] CPU: 1 UID: 0 PID: 25392 Comm: syz.0.6422 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 475.653375][T25392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 475.653386][T25392] Call Trace: [ 475.653394][T25392] [ 475.653401][T25392] dump_stack_lvl+0x16c/0x1f0 [ 475.653432][T25392] should_fail_ex+0x512/0x640 [ 475.653456][T25392] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 475.653480][T25392] should_failslab+0xc2/0x120 [ 475.653497][T25392] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 475.653512][T25392] ? alloc_inode+0xc3/0x240 [ 475.653525][T25392] alloc_inode+0xc3/0x240 [ 475.653536][T25392] iget_locked+0x2e4/0x830 [ 475.653549][T25392] ? __pfx_iget_locked+0x10/0x10 [ 475.653561][T25392] ? find_held_lock+0x2b/0x80 [ 475.653576][T25392] ? kernfs_root+0xee/0x2a0 [ 475.653594][T25392] kernfs_get_inode+0x48/0x460 [ 475.653609][T25392] kernfs_iop_lookup+0x1a7/0x2d0 [ 475.653626][T25392] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 475.653642][T25392] lookup_open.isra.0+0x4da/0x1580 [ 475.653658][T25392] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 475.653680][T25392] ? dput+0x1f/0x30 [ 475.653689][T25392] ? lookup_fast+0x156/0x610 [ 475.653704][T25392] path_openat+0x893/0x2cb0 [ 475.653722][T25392] ? __pfx___up_read+0x10/0x10 [ 475.653733][T25392] ? __pfx_path_openat+0x10/0x10 [ 475.653751][T25392] do_filp_open+0x20b/0x470 [ 475.653766][T25392] ? __pfx_do_filp_open+0x10/0x10 [ 475.653780][T25392] ? rcu_is_watching+0x12/0xc0 [ 475.653803][T25392] ? _raw_spin_unlock+0x28/0x50 [ 475.653818][T25392] ? alloc_fd+0x471/0x7d0 [ 475.653836][T25392] do_sys_openat2+0x11b/0x1d0 [ 475.653846][T25392] ? __pfx_do_sys_openat2+0x10/0x10 [ 475.653858][T25392] ? __fget_files+0x20e/0x3c0 [ 475.653875][T25392] __x64_sys_open+0x153/0x1e0 [ 475.653885][T25392] ? __pfx___x64_sys_open+0x10/0x10 [ 475.653897][T25392] ? getname_flags.part.0+0x1c5/0x550 [ 475.653909][T25392] ? rcu_is_watching+0x12/0xc0 [ 475.653923][T25392] do_syscall_64+0xcd/0x4c0 [ 475.653940][T25392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.653952][T25392] RIP: 0033:0x7faeed98e929 [ 475.653961][T25392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.653971][T25392] RSP: 002b:00007faeee86c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 475.653982][T25392] RAX: ffffffffffffffda RBX: 00007faeedbb5fa0 RCX: 00007faeed98e929 [ 475.653989][T25392] RDX: 0000000000000000 RSI: 0000000000050500 RDI: 0000200000022ff6 [ 475.653996][T25392] RBP: 00007faeee86c090 R08: 0000000000000000 R09: 0000000000000000 [ 475.654002][T25392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.654008][T25392] R13: 0000000000000000 R14: 00007faeedbb5fa0 R15: 00007ffca7044b08 [ 475.654029][T25392] [ 475.946987][ T5941] Bluetooth: hci4: command 0xfc11 tx timeout [ 475.950939][T18362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.951744][ T5298] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 476.113277][T25409] netlink: 'syz.0.6426': attribute type 10 has an invalid length. [ 476.117697][T25409] netlink: 'syz.0.6426': attribute type 10 has an invalid length. [ 477.135839][T25471] FAULT_INJECTION: forcing a failure. [ 477.135839][T25471] name failslab, interval 1, probability 0, space 0, times 0 [ 477.141752][T25471] CPU: 0 UID: 0 PID: 25471 Comm: syz.4.6447 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 477.141778][T25471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 477.141789][T25471] Call Trace: [ 477.141795][T25471] [ 477.141802][T25471] dump_stack_lvl+0x16c/0x1f0 [ 477.141830][T25471] should_fail_ex+0x512/0x640 [ 477.141854][T25471] should_failslab+0xc2/0x120 [ 477.141880][T25471] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 477.141906][T25471] ? __alloc_skb+0x2b2/0x380 [ 477.141932][T25471] __alloc_skb+0x2b2/0x380 [ 477.141952][T25471] ? __pfx___alloc_skb+0x10/0x10 [ 477.141976][T25471] ? do_raw_spin_lock+0x12c/0x2b0 [ 477.142004][T25471] br_info_notify+0x10f/0x2e0 [ 477.142025][T25471] ? br_fdb_delete_bulk+0x1/0xd00 [ 477.142051][T25471] br_device_event+0x30e/0xa00 [ 477.142068][T25471] ? __pfx_br_device_event+0x10/0x10 [ 477.142085][T25471] ? lockdep_rtnl_is_held+0x26/0x40 [ 477.142107][T25471] notifier_call_chain+0xb9/0x410 [ 477.142132][T25471] ? __pfx_br_device_event+0x10/0x10 [ 477.142155][T25471] call_netdevice_notifiers_info+0xbe/0x140 [ 477.142174][T25471] netif_state_change+0x165/0x3b0 [ 477.142191][T25471] ? __pfx_netif_state_change+0x10/0x10 [ 477.142214][T25471] ? netif_change_flags+0x10d/0x160 [ 477.142240][T25471] do_setlink.constprop.0+0x3570/0x4380 [ 477.142272][T25471] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 477.142297][T25471] ? stack_trace_save+0x8e/0xc0 [ 477.142321][T25471] ? __pfx_stack_trace_save+0x10/0x10 [ 477.142346][T25471] ? __lock_acquire+0xb8a/0x1c90 [ 477.142374][T25471] ? find_held_lock+0x2b/0x80 [ 477.142397][T25471] ? br_switchdev_set_port_flag+0x134/0x380 [ 477.142418][T25471] ? __pfx_br_switchdev_set_port_flag+0x10/0x10 [ 477.142452][T25471] ? br_port_flags_change+0x6b/0x1d0 [ 477.142480][T25471] ? br_setport+0x1180/0x17d0 [ 477.142503][T25471] ? __pfx_br_setport+0x10/0x10 [ 477.142520][T25471] ? do_raw_spin_lock+0x12c/0x2b0 [ 477.142543][T25471] ? __local_bh_enable_ip+0xa4/0x120 [ 477.142566][T25471] ? br_port_slave_changelink+0xd9/0x190 [ 477.142585][T25471] ? __local_bh_enable_ip+0xa4/0x120 [ 477.142605][T25471] ? __pfx_br_port_slave_changelink+0x10/0x10 [ 477.142626][T25471] rtnl_newlink+0x1446/0x2000 [ 477.142658][T25471] ? __pfx_rtnl_newlink+0x10/0x10 [ 477.142682][T25471] ? find_held_lock+0x2b/0x80 [ 477.142702][T25471] ? avc_has_perm_noaudit+0x117/0x3b0 [ 477.142735][T25471] ? avc_has_perm_noaudit+0x149/0x3b0 [ 477.142763][T25471] ? cred_has_capability.isra.0+0x193/0x2f0 [ 477.142787][T25471] ? __lock_acquire+0x622/0x1c90 [ 477.142829][T25471] ? __pfx_rtnl_newlink+0x10/0x10 [ 477.142852][T25471] ? __pfx_rtnl_newlink+0x10/0x10 [ 477.142873][T25471] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 477.142897][T25471] ? __pfx_rtnl_newlink+0x10/0x10 [ 477.142920][T25471] rtnetlink_rcv_msg+0x95b/0xe90 [ 477.142944][T25471] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 477.142980][T25471] ? ref_tracker_free+0x37c/0x830 [ 477.143005][T25471] netlink_rcv_skb+0x155/0x420 [ 477.143025][T25471] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 477.143051][T25471] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.143076][T25471] ? netlink_deliver_tap+0x1ae/0xd30 [ 477.143105][T25471] netlink_unicast+0x53d/0x7f0 [ 477.143125][T25471] ? __pfx_netlink_unicast+0x10/0x10 [ 477.143152][T25471] netlink_sendmsg+0x8d1/0xdd0 [ 477.143173][T25471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.143197][T25471] ____sys_sendmsg+0xa95/0xc70 [ 477.143216][T25471] ? copy_msghdr_from_user+0x10a/0x160 [ 477.143239][T25471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.143266][T25471] ___sys_sendmsg+0x134/0x1d0 [ 477.143288][T25471] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.143312][T25471] ? __lock_acquire+0x622/0x1c90 [ 477.143369][T25471] __sys_sendmsg+0x16d/0x220 [ 477.143393][T25471] ? __pfx___sys_sendmsg+0x10/0x10 [ 477.143435][T25471] do_syscall_64+0xcd/0x4c0 [ 477.143465][T25471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.143483][T25471] RIP: 0033:0x7f46d378e929 [ 477.143497][T25471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.143512][T25471] RSP: 002b:00007f46d4577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.143529][T25471] RAX: ffffffffffffffda RBX: 00007f46d39b5fa0 RCX: 00007f46d378e929 [ 477.143539][T25471] RDX: 0000000000048000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 477.143549][T25471] RBP: 00007f46d4577090 R08: 0000000000000000 R09: 0000000000000000 [ 477.143559][T25471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.143569][T25471] R13: 0000000000000000 R14: 00007f46d39b5fa0 R15: 00007ffc45886698 [ 477.143592][T25471] [ 478.017200][T25493] tipc: Trying to set illegal importance in message [ 478.138360][T25502] FAULT_INJECTION: forcing a failure. [ 478.138360][T25502] name failslab, interval 1, probability 0, space 0, times 0 [ 478.144372][T25502] CPU: 0 UID: 0 PID: 25502 Comm: syz.0.6459 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 478.144396][T25502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 478.144406][T25502] Call Trace: [ 478.144414][T25502] [ 478.144422][T25502] dump_stack_lvl+0x16c/0x1f0 [ 478.144454][T25502] should_fail_ex+0x512/0x640 [ 478.144477][T25502] ? fs_reclaim_acquire+0xae/0x150 [ 478.144500][T25502] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 478.144525][T25502] should_failslab+0xc2/0x120 [ 478.144558][T25502] __kmalloc_noprof+0xd2/0x510 [ 478.144587][T25502] tomoyo_realpath_from_path+0xc2/0x6e0 [ 478.144619][T25502] tomoyo_check_open_permission+0x2ab/0x3c0 [ 478.144643][T25502] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 478.144691][T25502] ? do_raw_spin_lock+0x12c/0x2b0 [ 478.144720][T25502] tomoyo_file_open+0x6b/0x90 [ 478.144749][T25502] security_file_open+0x84/0x1e0 [ 478.144776][T25502] do_dentry_open+0x596/0x1c10 [ 478.144808][T25502] vfs_open+0x82/0x3f0 [ 478.144839][T25502] path_openat+0x1de4/0x2cb0 [ 478.144869][T25502] ? __pfx___up_read+0x10/0x10 [ 478.144889][T25502] ? __pfx_path_openat+0x10/0x10 [ 478.144920][T25502] do_filp_open+0x20b/0x470 [ 478.144945][T25502] ? __pfx_do_filp_open+0x10/0x10 [ 478.144967][T25502] ? rcu_is_watching+0x12/0xc0 [ 478.145030][T25502] ? _raw_spin_unlock+0x28/0x50 [ 478.145055][T25502] ? alloc_fd+0x471/0x7d0 [ 478.145086][T25502] do_sys_openat2+0x11b/0x1d0 [ 478.145104][T25502] ? __pfx_do_sys_openat2+0x10/0x10 [ 478.145123][T25502] ? __fget_files+0x20e/0x3c0 [ 478.145153][T25502] __x64_sys_open+0x153/0x1e0 [ 478.145171][T25502] ? __pfx___x64_sys_open+0x10/0x10 [ 478.145193][T25502] ? rcu_is_watching+0x12/0xc0 [ 478.145217][T25502] do_syscall_64+0xcd/0x4c0 [ 478.145260][T25502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.145278][T25502] RIP: 0033:0x7faeed98e929 [ 478.145292][T25502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.145310][T25502] RSP: 002b:00007faeee86c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 478.145327][T25502] RAX: ffffffffffffffda RBX: 00007faeedbb5fa0 RCX: 00007faeed98e929 [ 478.145340][T25502] RDX: 0000000000000000 RSI: 0000000000050500 RDI: 0000200000022ff6 [ 478.145351][T25502] RBP: 00007faeee86c090 R08: 0000000000000000 R09: 0000000000000000 [ 478.145362][T25502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.145373][T25502] R13: 0000000000000000 R14: 00007faeedbb5fa0 R15: 00007ffca7044b08 [ 478.145398][T25502] [ 478.145422][T25502] ERROR: Out of memory at tomoyo_realpath_from_path. [ 478.198902][ T40] kauditd_printk_skb: 841 callbacks suppressed [ 478.198918][ T40] audit: type=1400 audit(3502327379.897:41301): avc: denied { create } for pid=25505 comm="syz.1.6461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 478.265786][ T40] audit: type=1400 audit(3502327379.907:41302): avc: denied { ioctl } for pid=25505 comm="syz.1.6461" path="socket:[141429]" dev="sockfs" ino=141429 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 478.280108][ T40] audit: type=1400 audit(3502327379.927:41303): avc: denied { read write } for pid=19529 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 478.292572][ T40] audit: type=1400 audit(3502327379.927:41304): avc: denied { read write open } for pid=19529 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 478.304483][ T40] audit: type=1400 audit(3502327379.927:41305): avc: denied { ioctl } for pid=19529 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 478.315761][ T40] audit: type=1400 audit(3502327379.937:41306): avc: denied { read write } for pid=25503 comm="syz.3.6460" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 478.325608][ T40] audit: type=1400 audit(3502327379.937:41307): avc: denied { read write open } for pid=25503 comm="syz.3.6460" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 478.337613][ T40] audit: type=1400 audit(3502327379.937:41308): avc: denied { ioctl } for pid=25503 comm="syz.3.6460" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 478.349929][ T40] audit: type=1400 audit(3502327379.937:41309): avc: denied { ioctl } for pid=25503 comm="syz.3.6460" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 478.359400][ T40] audit: type=1400 audit(3502327379.937:41310): avc: denied { ioctl } for pid=25503 comm="syz.3.6460" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 478.446150][T25512] mkiss: ax0: crc mode is auto. [ 478.464752][T25512] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 478.715776][T25519] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 478.720836][T25519] Error validating options; rc = [-22] [ 478.730587][T25519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6466'. [ 478.733387][T25519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6466'. [ 478.904634][T25521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6467'. [ 478.908721][T25521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6467'. [ 479.329668][T25538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 479.786046][T25565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6481'. [ 479.790887][T25565] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 479.793602][T25565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.932265][T25575] kvm: user requested TSC rate below hardware speed [ 479.934891][T25575] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482405019 (445747842432 ns) > initial count (42980439808 ns). Using initial count to start timer. [ 480.173197][T25588] new mount options do not match the existing superblock, will be ignored [ 480.185471][T25588] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 480.204450][T25591] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6490'. [ 480.308849][T25598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.321588][T25599] xt_hashlimit: size too large, truncated to 1048576 [ 480.484177][T25604] binder: BC_ATTEMPT_ACQUIRE not supported [ 480.486096][T25604] binder: 25603:25604 ioctl c0306201 200000000280 returned -22 [ 480.564068][T25608] netlink: 'syz.3.6496': attribute type 1 has an invalid length. [ 480.567322][T25608] netlink: 'syz.3.6496': attribute type 4 has an invalid length. [ 480.570007][T25608] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6496'. [ 480.643922][T25610] cgroup: noprefix used incorrectly [ 480.711685][T25616] netlink: 14212 bytes leftover after parsing attributes in process `syz.4.6500'. [ 480.785780][T25619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6501'. [ 480.789033][T25619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6501'. [ 480.868119][T25622] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 480.871368][T25622] overlayfs: missing 'lowerdir' [ 481.016891][T25637] 0·: renamed from hsr0 (while UP) [ 481.021461][T25637] 0·: entered allmulticast mode [ 481.023062][T25637] hsr_slave_0: entered allmulticast mode [ 481.024877][T25637] hsr_slave_1: entered allmulticast mode [ 481.028623][T25637] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 481.038129][T25640] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 481.049072][T25640] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 481.200438][T25648] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 482.002650][T25665] netlink: 'syz.4.6517': attribute type 2 has an invalid length. [ 482.006495][T25665] nbd: must specify a device to reconfigure [ 482.507097][T25641] Bluetooth: hci0: command 0x0c1a tx timeout [ 482.512186][ T5298] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 482.754214][T25688] NILFS (nbd0): device size too small [ 482.834592][T25692] FAULT_INJECTION: forcing a failure. [ 482.834592][T25692] name failslab, interval 1, probability 0, space 0, times 0 [ 482.840634][T25692] CPU: 3 UID: 0 PID: 25692 Comm: syz.4.6526 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 482.840660][T25692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 482.840672][T25692] Call Trace: [ 482.840680][T25692] [ 482.840687][T25692] dump_stack_lvl+0x16c/0x1f0 [ 482.840739][T25692] should_fail_ex+0x512/0x640 [ 482.840767][T25692] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 482.840796][T25692] should_failslab+0xc2/0x120 [ 482.840822][T25692] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 482.840848][T25692] ? kstrdup_const+0x63/0x80 [ 482.840868][T25692] ? __lock_acquire+0xb8a/0x1c90 [ 482.840896][T25692] kstrdup+0x53/0x100 [ 482.840918][T25692] kstrdup_const+0x63/0x80 [ 482.840939][T25692] __kernfs_new_node+0x9b/0x8e0 [ 482.840989][T25692] ? __pfx___kernfs_new_node+0x10/0x10 [ 482.841017][T25692] ? find_held_lock+0x2b/0x80 [ 482.841037][T25692] ? kernfs_root+0xee/0x2a0 [ 482.841065][T25692] kernfs_new_node+0x13c/0x1e0 [ 482.841099][T25692] __kernfs_create_file+0x53/0x350 [ 482.841124][T25692] cgroup_addrm_files+0x546/0xc20 [ 482.841160][T25692] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 482.841191][T25692] ? css_next_child+0xcf/0x2d0 [ 482.841211][T25692] ? css_next_descendant_pre+0x58/0x1a0 [ 482.841232][T25692] css_populate_dir+0x343/0x580 [ 482.841259][T25692] cgroup_mkdir+0x5cb/0x11f0 [ 482.841285][T25692] ? __pfx_cgroup_mkdir+0x10/0x10 [ 482.841308][T25692] kernfs_iop_mkdir+0x10e/0x190 [ 482.841331][T25692] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 482.841357][T25692] vfs_mkdir+0x593/0x8c0 [ 482.841383][T25692] do_mkdirat+0x304/0x3e0 [ 482.841409][T25692] ? __pfx_do_mkdirat+0x10/0x10 [ 482.841436][T25692] ? getname_flags.part.0+0x1c5/0x550 [ 482.841460][T25692] __x64_sys_mkdir+0xef/0x140 [ 482.841485][T25692] do_syscall_64+0xcd/0x4c0 [ 482.841513][T25692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.841533][T25692] RIP: 0033:0x7f46d378e929 [ 482.841548][T25692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.841566][T25692] RSP: 002b:00007f46d4577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 482.841583][T25692] RAX: ffffffffffffffda RBX: 00007f46d39b5fa0 RCX: 00007f46d378e929 [ 482.841601][T25692] RDX: 0000000000000000 RSI: 0000000000000184 RDI: 0000200000000100 [ 482.841612][T25692] RBP: 00007f46d4577090 R08: 0000000000000000 R09: 0000000000000000 [ 482.841624][T25692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 482.841635][T25692] R13: 0000000000000000 R14: 00007f46d39b5fa0 R15: 00007ffc45886698 [ 482.841661][T25692] [ 482.842285][T25692] cgroup: cgroup_addrm_files: failed to add notify_on_release, err=-12 [ 483.067385][ T5298] Bluetooth: hci4: command 0x1003 tx timeout [ 483.073802][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 483.156974][ T5941] Bluetooth: hci1: command 0x0406 tx timeout [ 483.171647][T25706] netlink: 'syz.4.6530': attribute type 7 has an invalid length. [ 483.174968][T25706] netlink: 'syz.4.6530': attribute type 8 has an invalid length. [ 483.208662][ T40] kauditd_printk_skb: 993 callbacks suppressed [ 483.208679][ T40] audit: type=1400 audit(3502327384.907:42304): avc: denied { read write } for pid=21253 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 483.220183][ T40] audit: type=1400 audit(3502327384.907:42305): avc: denied { read write open } for pid=21253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 483.231604][ T40] audit: type=1400 audit(3502327384.907:42306): avc: denied { ioctl } for pid=21253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 483.243309][T25711] binder: 25709:25711 ioctl c0306201 200000000080 returned -14 [ 483.246202][ T40] audit: type=1400 audit(3502327384.927:42307): avc: denied { read } for pid=25709 comm="syz.4.6534" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 483.253412][T25711] binder_alloc: 25709: binder_alloc_buf, no vma [ 483.255308][ T40] audit: type=1400 audit(3502327384.927:42308): avc: denied { read open } for pid=25709 comm="syz.4.6534" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 483.260148][T25713] binder: BINDER_SET_CONTEXT_MGR already set [ 483.265867][ T40] audit: type=1400 audit(3502327384.927:42309): avc: denied { ioctl } for pid=25709 comm="syz.4.6534" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 483.268947][T25713] binder: 25709:25713 ioctl 4018620d 2000000000c0 returned -16 [ 483.276859][ T40] audit: type=1400 audit(3502327384.927:42310): avc: denied { set_context_mgr } for pid=25709 comm="syz.4.6534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 483.287303][ T40] audit: type=1400 audit(3502327384.927:42311): avc: denied { read } for pid=25709 comm="syz.4.6534" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 483.295904][ T40] audit: type=1400 audit(3502327384.937:42312): avc: denied { read open } for pid=25709 comm="syz.4.6534" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 483.305577][ T40] audit: type=1400 audit(3502327384.937:42313): avc: denied { ioctl } for pid=25709 comm="syz.4.6534" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 483.523144][T25721] veth0_to_bond: entered allmulticast mode [ 483.806241][T25738] FAULT_INJECTION: forcing a failure. [ 483.806241][T25738] name failslab, interval 1, probability 0, space 0, times 0 [ 483.813392][T25738] CPU: 0 UID: 0 PID: 25738 Comm: syz.0.6543 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 483.813418][T25738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 483.813429][T25738] Call Trace: [ 483.813436][T25738] [ 483.813443][T25738] dump_stack_lvl+0x16c/0x1f0 [ 483.813479][T25738] should_fail_ex+0x512/0x640 [ 483.813501][T25738] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 483.813524][T25738] should_failslab+0xc2/0x120 [ 483.813549][T25738] __kmalloc_cache_noprof+0x6a/0x3e0 [ 483.813566][T25738] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 483.813586][T25738] ? blkcg_css_alloc+0x6b/0x910 [ 483.813616][T25738] blkcg_css_alloc+0x6b/0x910 [ 483.813645][T25738] cgroup_apply_control_enable+0x4b0/0xbb0 [ 483.813668][T25738] ? css_populate_dir+0x254/0x580 [ 483.813695][T25738] cgroup_mkdir+0x5e7/0x11f0 [ 483.813719][T25738] ? __pfx_cgroup_mkdir+0x10/0x10 [ 483.813739][T25738] kernfs_iop_mkdir+0x10e/0x190 [ 483.813765][T25738] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 483.813791][T25738] vfs_mkdir+0x593/0x8c0 [ 483.813814][T25738] do_mkdirat+0x304/0x3e0 [ 483.813839][T25738] ? __pfx_do_mkdirat+0x10/0x10 [ 483.813864][T25738] ? getname_flags.part.0+0x1c5/0x550 [ 483.813885][T25738] __x64_sys_mkdir+0xef/0x140 [ 483.813909][T25738] do_syscall_64+0xcd/0x4c0 [ 483.813935][T25738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.813952][T25738] RIP: 0033:0x7faeed98e929 [ 483.813966][T25738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.813982][T25738] RSP: 002b:00007faeee86c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 483.813998][T25738] RAX: ffffffffffffffda RBX: 00007faeedbb5fa0 RCX: 00007faeed98e929 [ 483.814009][T25738] RDX: 0000000000000000 RSI: 0000000000000184 RDI: 0000200000000100 [ 483.814019][T25738] RBP: 00007faeee86c090 R08: 0000000000000000 R09: 0000000000000000 [ 483.814029][T25738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.814039][T25738] R13: 0000000000000000 R14: 00007faeedbb5fa0 R15: 00007ffca7044b08 [ 483.814063][T25738] [ 483.963897][T25744] IPVS: length: 184 != 24 [ 484.356151][T25759] __nla_validate_parse: 7 callbacks suppressed [ 484.356162][T25759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6549'. [ 484.523112][T25763] netlink: 'syz.1.6550': attribute type 3 has an invalid length. [ 484.525830][T25763] netlink: 'syz.1.6550': attribute type 1 has an invalid length. [ 484.528397][T25763] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6550'. [ 485.321929][T25781] netlink: 'syz.4.6556': attribute type 1 has an invalid length. [ 485.613873][T25789] input: syz0 as /devices/virtual/input/input37 [ 485.810491][ T5937] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 485.912014][T25802] delete_channel: no stack [ 485.924800][ T5937] Bluetooth: hci1: unexpected event for opcode 0x080e [ 486.010005][T25811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6569'. [ 486.012710][T25811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6569'. [ 486.341947][T25828] 9pnet_virtio: no channels available for device syz [ 487.013208][T25850] netlink: 'syz.4.6581': attribute type 10 has an invalid length. [ 487.059294][ T5941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 487.065713][ T5941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 487.070888][ T5941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 487.080650][ T5941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 487.087550][ T5941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 487.136759][T25854] input: syz1 as /devices/virtual/input/input38 [ 487.173923][T18348] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.187663][T25856] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6583'. [ 487.221748][T25864] netlink: 'syz.3.6584': attribute type 4 has an invalid length. [ 487.255694][T18348] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.333796][T25871] No such timeout policy "syz1" [ 487.400417][T18348] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.424589][T25851] chnl_net:caif_netlink_parms(): no params data found [ 487.483242][T18348] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.517200][T25881] trusted_key: encrypted_key: master key parameter '' is invalid [ 487.542087][T25851] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.547303][T25851] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.549753][T25851] bridge_slave_0: entered allmulticast mode [ 487.552538][T25851] bridge_slave_0: entered promiscuous mode [ 487.558124][T25851] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.560993][T25851] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.563428][T25851] bridge_slave_1: entered allmulticast mode [ 487.566466][T25851] bridge_slave_1: entered promiscuous mode [ 487.634294][T25851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.648366][T25851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.726252][T25851] team0: Port device team_slave_0 added [ 487.729306][T18348] bridge_slave_1: left allmulticast mode [ 487.731446][T18348] bridge_slave_1: left promiscuous mode [ 487.733288][T18348] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.738225][T18348] bridge_slave_0: left allmulticast mode [ 487.740033][T18348] bridge_slave_0: left promiscuous mode [ 487.742031][T18348] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.991241][T18348] team0: Port device geneve0 removed [ 488.274284][ T40] kauditd_printk_skb: 1000 callbacks suppressed [ 488.274299][ T40] audit: type=1400 audit(3502327389.967:43314): avc: denied { read write } for pid=21253 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 488.287726][ T40] audit: type=1400 audit(3502327389.977:43315): avc: denied { read write open } for pid=21253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 488.295410][ T40] audit: type=1400 audit(3502327389.977:43316): avc: denied { ioctl } for pid=21253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 488.315917][T18348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.324543][T18348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.329575][T18348] bond0 (unregistering): Released all slaves [ 488.337487][T18348] bond1 (unregistering): Released all slaves [ 488.447800][T18348] bond2 (unregistering): Released all slaves [ 488.456928][T25851] team0: Port device team_slave_1 added [ 488.501860][ T40] audit: type=1400 audit(3502327390.197:43317): avc: denied { read write } for pid=24421 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 488.517511][ T40] audit: type=1400 audit(3502327390.197:43318): avc: denied { read write open } for pid=24421 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 488.526030][ T40] audit: type=1400 audit(3502327390.197:43319): avc: denied { ioctl } for pid=24421 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 488.536391][ T40] audit: type=1400 audit(3502327390.217:43320): avc: denied { read write } for pid=21253 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 488.543453][T25851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.548676][ T40] audit: type=1400 audit(3502327390.217:43321): avc: denied { read write open } for pid=21253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 488.550443][T25851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.560737][ T40] audit: type=1400 audit(3502327390.217:43322): avc: denied { ioctl } for pid=21253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 488.572132][T25851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.582807][ T40] audit: type=1400 audit(3502327390.267:43323): avc: denied { create } for pid=25892 comm="syz.3.6591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 488.594523][T25893] : entered promiscuous mode [ 488.605185][T25851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.607892][T25895] netlink: 'syz.4.6592': attribute type 10 has an invalid length. [ 488.611036][T25851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.621464][T25851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.635488][T25895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.641688][T25895] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 488.644421][T25893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6591'. [ 488.670342][T25895] fuse: Bad value for 'group_id' [ 488.671986][T25895] fuse: Bad value for 'group_id' [ 488.687835][T25851] hsr_slave_0: entered promiscuous mode [ 488.690328][T25851] hsr_slave_1: entered promiscuous mode [ 488.692746][T25851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.695607][T25851] Cannot create hsr debugfs directory [ 488.698359][T25895] only policy match revision 0 supported [ 488.698368][T25895] unable to load match [ 488.908848][T25904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6595'. [ 488.984362][T25904] IPVS: persistence engine module ip_vs_pe_s not found [ 488.988157][T25909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6595'. [ 489.132240][T25913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6598'. [ 489.146790][ T5937] Bluetooth: hci4: command tx timeout [ 489.202845][T25917] xt_hashlimit: size too large, truncated to 1048576 [ 489.282826][T25920] bond1: entered promiscuous mode [ 489.284785][T25920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.381382][T25851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 489.388521][T25851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 489.394055][T25851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 489.399291][T25851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 489.518739][T25851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.550490][T25851] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.599652][T18346] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.601944][T18346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.610218][T18346] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.612470][T18346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.621751][T25938] tmpfs: Bad value for 'huge' [ 490.067162][T25851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.193874][T25851] veth0_vlan: entered promiscuous mode [ 490.230644][T25851] veth1_vlan: entered promiscuous mode [ 490.263802][T18348] hsr_slave_0: left promiscuous mode [ 490.266017][T18348] hsr_slave_1: left promiscuous mode [ 490.268654][T18348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.271170][T18348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.314510][T18348] veth1_macvtap: left promiscuous mode [ 490.317038][T18348] veth0_macvtap: left promiscuous mode [ 490.884648][T18348] team0 (unregistering): Port device team_slave_1 removed [ 490.983961][T18348] team0 (unregistering): Port device team_slave_0 removed [ 491.226857][ T5937] Bluetooth: hci4: command tx timeout [ 491.634702][T25967] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6610'. [ 491.691399][T25851] veth0_macvtap: entered promiscuous mode [ 491.701292][T25851] veth1_macvtap: entered promiscuous mode [ 491.737638][T25851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.751988][T25851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.765154][T25851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.768930][T25851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.771980][T25851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.775572][T25851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.815010][T25983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6615'. [ 491.867488][T18347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.870606][T18347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.894954][T18347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.898976][T18347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.933148][T25986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6616'. [ 491.947689][T25986] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6616'. [ 492.311830][T26007] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6620'. [ 492.315207][T26007] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 492.345618][T26018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6619'. [ 492.504383][T26031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6625'. [ 492.574137][T18348] bond0 (unregistering): Released all slaves [ 492.583172][T18348] bond1 (unregistering): Released all slaves [ 492.693132][T18348] bond2 (unregistering): Released all slaves [ 492.699747][T18348] bond3 (unregistering): Released all slaves [ 492.814346][T18348] bond4 (unregistering): Released all slaves [ 492.931250][T18348] : left promiscuous mode [ 493.299246][ T40] kauditd_printk_skb: 1046 callbacks suppressed [ 493.299257][ T40] audit: type=1400 audit(3502327394.997:44370): avc: denied { read write } for pid=25851 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 493.309592][ T5937] Bluetooth: hci4: command tx timeout [ 493.311324][ T40] audit: type=1400 audit(3502327395.007:44371): avc: denied { read write open } for pid=25851 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 493.323433][ T40] audit: type=1400 audit(3502327395.007:44372): avc: denied { ioctl } for pid=25851 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 493.364313][ T40] audit: type=1400 audit(3502327395.057:44373): avc: denied { read } for pid=26054 comm="syz.0.6632" dev="nsfs" ino=4026533185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 493.371137][ T40] audit: type=1400 audit(3502327395.057:44374): avc: denied { read open } for pid=26054 comm="syz.0.6632" path="net:[4026533185]" dev="nsfs" ino=4026533185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 493.375218][T26055] netlink: 'syz.0.6632': attribute type 1 has an invalid length. [ 493.380138][ T40] audit: type=1400 audit(3502327395.057:44375): avc: denied { create } for pid=26054 comm="syz.0.6632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 493.389664][ T40] audit: type=1400 audit(3502327395.077:44376): avc: denied { ioctl } for pid=26045 comm="syz.4.6630" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 493.400634][ T40] audit: type=1400 audit(3502327395.077:44377): avc: denied { ioctl } for pid=26045 comm="syz.4.6630" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64bc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 493.411058][ T40] audit: type=1400 audit(3502327395.077:44378): avc: denied { write } for pid=26045 comm="syz.4.6630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 493.419997][ T40] audit: type=1400 audit(3502327395.087:44379): avc: denied { read } for pid=26045 comm="syz.4.6630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 494.712446][T26063] 9pnet_rdma: rdma_create_trans (26063): problem binding to privport: 13 [ 495.159247][T26055] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 495.256881][T26074] kAFS: unable to lookup cell '/,c¾ûL' [ 495.256992][T26072] SELinux: policydb string does not match my string SE Linux [ 495.273231][T26072] SELinux: failed to load policy [ 495.281765][T26073] SELinux: policydb version -795922377 does not match my version range 15-34 [ 495.286741][T26073] SELinux: failed to load policy [ 495.390354][ T5937] Bluetooth: hci4: command tx timeout [ 495.391859][T26081] syzkaller1: entered promiscuous mode [ 495.397230][T26081] syzkaller1: entered allmulticast mode [ 495.516734][T14950] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 495.596801][ T61] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 495.612097][T18348] IPVS: stop unused estimator thread 0... [ 495.667461][T14950] usb 5-1: Using ep0 maxpacket: 8 [ 495.675743][T14950] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 495.678483][T14950] usb 5-1: config 179 has no interface number 0 [ 495.680621][T14950] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 495.684109][T14950] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 495.688508][T14950] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 495.693227][T14950] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 495.697525][T14950] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 495.702978][T14950] usb 5-1: config 179 interface 65 has no altsetting 0 [ 495.705468][T14950] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 495.708948][T14950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.733892][T14950] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input39 [ 495.776198][ T61] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 495.782314][ T61] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.791461][ T61] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 495.794918][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.019356][ T61] usb 6-1: usb_control_msg returned -32 [ 496.021558][ T61] usbtmc 6-1:16.0: can't read capabilities [ 496.176688][ T6002] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 496.326704][ T6002] usb 9-1: Using ep0 maxpacket: 32 [ 496.348336][T26090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.351760][T26090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.358404][ T6002] usb 9-1: unable to get BOS descriptor or descriptor too short [ 496.364931][ T6002] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 496.369807][ T6002] usb 9-1: can't read configurations, error -71 [ 496.968152][T26097] SELinux: ebitmap start bit (2863311360) is beyond the end of the bitmap (320) [ 496.975565][T26097] SELinux: failed to load policy [ 497.072867][T26099] FAULT_INJECTION: forcing a failure. [ 497.072867][T26099] name failslab, interval 1, probability 0, space 0, times 0 [ 497.079008][T26099] CPU: 2 UID: 0 PID: 26099 Comm: syz.4.6645 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 497.079025][T26099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 497.079033][T26099] Call Trace: [ 497.079037][T26099] [ 497.079051][T26099] dump_stack_lvl+0x16c/0x1f0 [ 497.079090][T26099] should_fail_ex+0x512/0x640 [ 497.079108][T26099] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 497.079127][T26099] should_failslab+0xc2/0x120 [ 497.079143][T26099] __kmalloc_cache_noprof+0x6a/0x3e0 [ 497.079156][T26099] ? bfq_cpd_alloc+0x96/0x150 [ 497.079171][T26099] ? kasan_save_track+0x14/0x30 [ 497.079187][T26099] bfq_cpd_alloc+0x96/0x150 [ 497.079202][T26099] blkcg_css_alloc+0x193/0x910 [ 497.079218][T26099] ? __pfx_bfq_cpd_alloc+0x10/0x10 [ 497.079235][T26099] cgroup_apply_control_enable+0x4b0/0xbb0 [ 497.079251][T26099] ? css_populate_dir+0x254/0x580 [ 497.079268][T26099] cgroup_mkdir+0x5e7/0x11f0 [ 497.079284][T26099] ? __pfx_cgroup_mkdir+0x10/0x10 [ 497.079297][T26099] kernfs_iop_mkdir+0x10e/0x190 [ 497.079314][T26099] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 497.079331][T26099] vfs_mkdir+0x593/0x8c0 [ 497.079345][T26099] do_mkdirat+0x304/0x3e0 [ 497.079361][T26099] ? __pfx_do_mkdirat+0x10/0x10 [ 497.079378][T26099] ? getname_flags.part.0+0x1c5/0x550 [ 497.079391][T26099] __x64_sys_mkdir+0xef/0x140 [ 497.079406][T26099] do_syscall_64+0xcd/0x4c0 [ 497.079423][T26099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.079435][T26099] RIP: 0033:0x7f46d378e929 [ 497.079445][T26099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.079455][T26099] RSP: 002b:00007f46d4577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 497.079467][T26099] RAX: ffffffffffffffda RBX: 00007f46d39b5fa0 RCX: 00007f46d378e929 [ 497.079474][T26099] RDX: 0000000000000000 RSI: 0000000000000184 RDI: 0000200000000100 [ 497.079480][T26099] RBP: 00007f46d4577090 R08: 0000000000000000 R09: 0000000000000000 [ 497.079487][T26099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.079493][T26099] R13: 0000000000000000 R14: 00007f46d39b5fa0 R15: 00007ffc45886698 [ 497.079508][T26099] [ 497.154731][ C2] vkms_vblank_simulate: vblank timer overrun [ 497.706241][T26121] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6653'. [ 497.724789][T26121] xt_l2tp: v2 doesn't support IP mode [ 498.159518][T26107] 9pnet_fd: p9_fd_create_tcp (26107): problem connecting socket to 127.0.0.1 [ 498.344326][ T61] usb 5-1: USB disconnect, device number 35 [ 498.344444][ C2] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 498.349712][T26131] FAULT_INJECTION: forcing a failure. [ 498.349712][T26131] name failslab, interval 1, probability 0, space 0, times 0 [ 498.350412][ T40] kauditd_printk_skb: 527 callbacks suppressed [ 498.350422][ T40] audit: type=1400 audit(3502327400.037:44907): avc: denied { watch watch_reads } for pid=26130 comm="syz.3.6656" path="/syzcgroup/net/syz3/syz0" dev="cgroup" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 498.353632][T26131] CPU: 0 UID: 0 PID: 26131 Comm: syz.3.6656 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 498.353649][T26131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 498.353657][T26131] Call Trace: [ 498.353661][T26131] [ 498.353666][T26131] dump_stack_lvl+0x16c/0x1f0 [ 498.353686][T26131] should_fail_ex+0x512/0x640 [ 498.353702][T26131] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 498.353716][T26131] should_failslab+0xc2/0x120 [ 498.353733][T26131] __kmalloc_cache_noprof+0x6a/0x3e0 [ 498.353746][T26131] ? percpu_ref_init+0xec/0x410 [ 498.353759][T26131] ? __pfx_css_release+0x10/0x10 [ 498.353770][T26131] percpu_ref_init+0xec/0x410 [ 498.353781][T26131] ? init_and_link_css+0x32c/0x700 [ 498.353797][T26131] cgroup_apply_control_enable+0x50b/0xbb0 [ 498.353812][T26131] ? css_populate_dir+0x254/0x580 [ 498.353829][T26131] cgroup_mkdir+0x5e7/0x11f0 [ 498.353843][T26131] ? __pfx_cgroup_mkdir+0x10/0x10 [ 498.353857][T26131] kernfs_iop_mkdir+0x10e/0x190 [ 498.353874][T26131] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 498.353890][T26131] vfs_mkdir+0x593/0x8c0 [ 498.353904][T26131] do_mkdirat+0x304/0x3e0 [ 498.353920][T26131] ? __pfx_do_mkdirat+0x10/0x10 [ 498.353937][T26131] ? getname_flags.part.0+0x1c5/0x550 [ 498.353950][T26131] __x64_sys_mkdir+0xef/0x140 [ 498.353965][T26131] do_syscall_64+0xcd/0x4c0 [ 498.353982][T26131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.354012][T26131] RIP: 0033:0x7fb742b8e929 [ 498.354023][T26131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.354034][T26131] RSP: 002b:00007fb743abc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 498.354044][T26131] RAX: ffffffffffffffda RBX: 00007fb742db5fa0 RCX: 00007fb742b8e929 [ 498.354051][T26131] RDX: 0000000000000000 RSI: 0000000000000184 RDI: 0000200000000100 [ 498.354058][T26131] RBP: 00007fb743abc090 R08: 0000000000000000 R09: 0000000000000000 [ 498.354064][T26131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.354071][T26131] R13: 0000000000000000 R14: 00007fb742db5fa0 R15: 00007fff71bb6d08 [ 498.354085][T26131] [ 498.358124][ T61] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 498.380345][ T40] audit: type=1400 audit(3502327400.067:44908): avc: denied { read write } for pid=25851 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 498.402775][ T1460] usb 6-1: USB disconnect, device number 20 [ 498.418920][ T6002] BUG: unable to handle page fault for address: ffffed101acea401 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 498.433347][ T40] audit: type=1400 audit(3502327400.067:44909): avc: denied { read write open } for pid=25851 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 498.433805][ T6002] #PF: supervisor read access in kernel mode [ 498.436298][ T40] audit: type=1400 audit(3502327400.067:44910): avc: denied { ioctl } for pid=25851 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 498.439490][ T6002] #PF: error_code(0x0000) - not-present page [ 498.439504][ T6002] PGD 17ffee067 P4D 17ffee067 PUD 7ffd3067 PMD 0 [ 498.439535][ T6002] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 498.439553][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: kworker/0:4 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 498.439576][ T6002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 498.448422][ T40] audit: type=1400 audit(3502327400.077:44911): avc: denied { read write } for pid=24421 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 498.454206][ T6002] Workqueue: cgroup_destroy css_free_rwork_fn [ 498.454235][ T6002] RIP: 0010:css_rstat_flush+0x372/0x23f0 [ 498.466201][ T40] audit: type=1400 audit(3502327400.077:44912): avc: denied { read write open } for pid=24421 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 498.470575][ T6002] Code: 92 c3 31 ff 89 de e8 fd 2d 07 00 84 db 0f 85 01 11 00 00 e8 10 33 07 00 48 8b 44 24 08 48 83 c0 08 48 89 44 24 10 48 c1 e8 03 <42> 80 3c 38 00 0f 85 b8 15 00 00 48 8b 44 24 08 48 8b 58 08 48 85 [ 498.470597][ T6002] RSP: 0018:ffffc90004a2fb18 EFLAGS: 00010802 [ 498.470614][ T6002] RAX: 1ffff1101acea401 RBX: 0000000000000001 RCX: ffffffff81b4fe71 [ 498.472467][ T40] audit: type=1400 audit(3502327400.077:44913): avc: denied { ioctl } for pid=24421 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 498.482570][ T6002] RDX: ffff8880329aa440 RSI: ffffffff81b4ed60 RDI: 0000000000000001 [ 498.482587][ T6002] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 498.482599][ T6002] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88803a64e000 [ 498.482611][ T6002] R13: ffff888053e68000 R14: 0000000000000001 R15: dffffc0000000000 [ 498.482623][ T6002] FS: 0000000000000000(0000) GS:ffff8880d6752000(0000) knlGS:0000000000000000 [ 498.553516][ T6002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.555743][ T6002] CR2: ffffed101acea401 CR3: 000000003409f000 CR4: 0000000000352ef0 [ 498.558508][ T6002] DR0: 000003fffffffffe DR1: 0000000000000ddb DR2: 0000000000000006 [ 498.561370][ T6002] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 498.563899][ T6002] Call Trace: [ 498.565031][ T6002] [ 498.566027][ T6002] ? __lock_acquire+0x1053/0x1c90 [ 498.567674][ T6002] ? debug_object_deactivate+0x1ec/0x3a0 [ 498.569690][ T6002] css_rstat_exit+0xa2/0x470 [ 498.571231][ T6002] css_free_rwork_fn+0x80/0x12e0 [ 498.572840][ T6002] ? rcu_is_watching+0x12/0xc0 [ 498.574418][ T6002] process_one_work+0x9cc/0x1b70 [ 498.576060][ T6002] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 498.578247][ T6002] ? __pfx_process_one_work+0x10/0x10 [ 498.580156][ T6002] ? assign_work+0x1a0/0x250 [ 498.582139][ T6002] worker_thread+0x6c8/0xf10 [ 498.584112][ T6002] ? __kthread_parkme+0x19e/0x250 [ 498.586272][ T6002] ? __pfx_worker_thread+0x10/0x10 [ 498.588430][ T6002] kthread+0x3c2/0x780 [ 498.590187][ T6002] ? __pfx_kthread+0x10/0x10 [ 498.592154][ T6002] ? rcu_is_watching+0x12/0xc0 [ 498.594198][ T6002] ? __pfx_kthread+0x10/0x10 [ 498.596144][ T6002] ret_from_fork+0x5d4/0x6f0 [ 498.598110][ T6002] ? __pfx_kthread+0x10/0x10 [ 498.600024][ T6002] ret_from_fork_asm+0x1a/0x30 [ 498.602033][ T6002] [ 498.603357][ T6002] Modules linked in: [ 498.605026][ T6002] CR2: ffffed101acea401 [ 498.606802][ T6002] ---[ end trace 0000000000000000 ]--- [ 498.609059][ T6002] RIP: 0010:css_rstat_flush+0x372/0x23f0 [ 498.611436][ T6002] Code: 92 c3 31 ff 89 de e8 fd 2d 07 00 84 db 0f 85 01 11 00 00 e8 10 33 07 00 48 8b 44 24 08 48 83 c0 08 48 89 44 24 10 48 c1 e8 03 <42> 80 3c 38 00 0f 85 b8 15 00 00 48 8b 44 24 08 48 8b 58 08 48 85 [ 498.619201][ T6002] RSP: 0018:ffffc90004a2fb18 EFLAGS: 00010802 [ 498.621730][ T6002] RAX: 1ffff1101acea401 RBX: 0000000000000001 RCX: ffffffff81b4fe71 [ 498.625132][ T6002] RDX: ffff8880329aa440 RSI: ffffffff81b4ed60 RDI: 0000000000000001 [ 498.628434][ T6002] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 498.631735][ T6002] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88803a64e000 [ 498.634995][ T6002] R13: ffff888053e68000 R14: 0000000000000001 R15: dffffc0000000000 [ 498.638230][ T6002] FS: 0000000000000000(0000) GS:ffff8880d6752000(0000) knlGS:0000000000000000 [ 498.641944][ T6002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.644716][ T6002] CR2: ffffed101acea401 CR3: 000000003409f000 CR4: 0000000000352ef0 [ 498.648053][ T6002] DR0: 000003fffffffffe DR1: 0000000000000ddb DR2: 0000000000000006 [ 498.651436][ T6002] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 498.654784][ T6002] Kernel panic - not syncing: Fatal exception [ 499.737719][ T6002] Shutting down cpus with NMI [ 499.740397][ T6002] Kernel Offset: disabled [ 499.742069][ T6002] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:14:04 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bfaf5 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc90004a2f2e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000069647561 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0882e0 R15=ffffffff855bfa90 RIP=ffffffff855bfb1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffed101acea401 CR3=000000003409f000 CR4=00352ef0 DR0=000003fffffffffe DR1=0000000000000ddb DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46d3811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46d3811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46d3811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46d3811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46d3811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46d3811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c70f41eddb45f23e 000000001dc70f4c d9010f00000001b8 8e72010fddd8d901 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f7c70f41eddb45f2 3e000000001dc70f 4cd9010f00000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010f00000de1b900 000005b8647af138 0ff26df2c0220f44 0000000535c0200f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000002 RBX=0000000000000001 RCX=ffffffff848fee0e RDX=0000000000000000 RSI=ffffffff8c157c20 RDI=ffffffff8c157c60 RBP=0000000000000206 RSP=ffffc9000370f818 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff848fee40 R13=ffffffff9af33bc8 R14=0000000000000031 R15=0000000000000000 RIP=ffffffff8b80e3fd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558b9f8500 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe2aa0aff0 CR3=0000000034b4b000 CR4=00352ef0 DR0=0000000000000040 DR1=0000000000000004 DR2=0000000000000003 DR3=000000007fffffff DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080001 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2aa0b1d0 00007ffe2aa0b1d0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2aa0d300 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558ba1536a 000055558ba14fb0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558ba1ad22 000055558ba1aac0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67617265766f4361 7274784500637072 2076636572206f74 2064656c69616600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 42445740534a4344 57515d4500465557 0553464057054a51 054140494c444300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a1ff0000 0001000000000000 0000000000000002 ff00070000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0107f7de10000980 0401000004080606 017cd20427891129 442900b8c173a278 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 22eb47c7a788310b 09c31039681d0275 6e008c6f032b0000 00003fee00000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000789000860000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00a1ff0000000100 0000000000000000 0000000002ff0007 0000000000000035 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffff8880483d0e20 RDX=ffff88803972c880 RSI=ffffffff82112dad RDI=ffffc9000449b000 RBP=ffffc9000449c000 RSP=ffffc9000d297778 R8 =0000000000000005 R9 =000000000000000c R10=000000000000000c R11=00000000000a8070 R12=000000000000000c R13=ffffc9000449b000 R14=ffffc9000449c000 R15=1ffff92001a52f04 RIP=ffffffff82112dad RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558948e500 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8b9f9b7bac CR3=000000004e71c000 CR4=00352ef0 DR0=000003fffffffffe DR1=0000000000000ddb DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdced56d10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f461e211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f461e211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f461e211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f461e211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f461e211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f461e211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000035800000004 ffffffff000001a0 000000d000000000 ffffffffffffffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffffff000001a0 000000d000000000 ffffffff0000000e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000214 0000000000000005 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff816a2256 RDX=ffff88802a85c880 RSI=ffffffff816a52ac RDI=0000000000000000 RBP=ffffffff8f122c20 RSP=ffffc90006f8f9a0 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000002c00 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a73b240 R15=fffffbfff1e24584 RIP=ffffffff816a52ad RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb742db7bac CR3=000000005116f000 CR4=00352ef0 DR0=000003fffffffffe DR1=0000000000000ddb DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000006070600 Opmask01=0000000000000fff Opmask02=000000001f3fefff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f0fab1ed90 000055f0fab1ed90 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f0fa8c94d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4686df1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4686df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4203431e161e035c 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007465676461 00006364755f796d 6d75643d454d414e 5f4344555f425355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000049585a595c 00005e59485f4450 50485900454d414e 5f4344555f425355 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f0fab11990 000055f0fab05630 000055f0fab03400 000055f0fab17550 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f0fab06520 000055f0fab014c0 000055f0fab167b0 000055f0fab16730 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f0fab147f0 000055f0fab14770 000055f0fab14870 000055f0fab17150 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f0fab170f0 000055f0fab17070 000055f0fab13bd0 000055f0fab19920 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000