last executing test programs: 1m16.486576261s ago: executing program 2 (id=15): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x80000000}]}, &(0x7f0000000240)=0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x163a02, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x3) (async) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="ab553fec94248732e27d04000000288a", 0x10) (async) r3 = accept$alg(r1, 0x0, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x200000c4) (async) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) r5 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) (async) tkill(r5, 0x7) (async) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x2000000) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mlockall(0x3) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = getpid() sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffa, 0x0, {0x1d, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@filename='./file0\x00', r10, &(0x7f0000000140)='./file0/file0\x00') (async) getresgid(&(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) lchown(&(0x7f0000000840)='\x00', r10, r11) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/191, 0xbf}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f0000000a00), 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xca, &(0x7f0000008000)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0xffffffffffffffff, r11}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {r10, r12}}, './file0\x00'}) 1m16.485590151s ago: executing program 2 (id=16): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @bcast}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) r3 = socket(0x10, 0x3, 0x6) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_getaddr={0x5c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x3, 0x0, 0x23, 0xfe}, [@IFA_LOCAL={0x14, 0x2, @private1}, @IFA_CACHEINFO={0x14, 0x6, {0x100, 0x9d, 0x3, 0xfff}}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_getaddr={0x5c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x3, 0x0, 0x23, 0xfe}, [@IFA_LOCAL={0x14, 0x2, @private1}, @IFA_CACHEINFO={0x14, 0x6, {0x100, 0x9d, 0x3, 0xfff}}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 1m16.417533123s ago: executing program 2 (id=17): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000700)="2e3665f2af6766c74424005f0000006766c7442402000000006766c744240600000000670f011c2466b9030100c066b85bd1e45366bad6062a620f3066b9370200000f320f01d1440f20c066350f000000440f22c066660f383b8032500fe99400003e2e660fc7b302000f20e06635200000000f22e0", 0x76}], 0xaaaaaaaaaaaaaae, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1800000800230064010100"], 0x18}], 0x1, 0x0, 0x0, 0x4}, 0x20000880) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000000009010100000000000000000a000007080005400000000c0900010073797a310000ff000c00048008090000000000063c0002000c00028005000100010000002c0001"], 0x70}}, 0x80) (async, rerun: 32) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x80600, 0x0) (rerun: 32) openat(r5, &(0x7f0000000100)='./file0\x00', 0x80200, 0x0) 1m16.198756903s ago: executing program 2 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x3091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2081c80, 0x0) move_mount(r0, &(0x7f0000000280)='./file0\x00', r0, 0x0, 0x272) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = socket$isdn(0x22, 0x3, 0x1) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x3091, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) (async) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2081c80, 0x0) (async) move_mount(r0, &(0x7f0000000280)='./file0\x00', r0, 0x0, 0x272) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) (async) socket$isdn(0x22, 0x3, 0x1) (async) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) (async) close(r2) (async) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) (async) 1m16.198454676s ago: executing program 2 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000002680)='\x00') mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002640)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES16=r1, @ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="08ed"], 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c4000740ab487b1b512f33a8dbd67a8b35f2405127f309901ea13e31d5810f85eae8f528c938c24abb1b1abbda2e7fa6e0758629bb09ed64a8ba5b2ef3c3591fd06d7e10d93c0857ecac854ac51ad69639d98adb2c1464e444cc1a6a2e7ee244622433b51f58606b063f4938101a7e764c957eba2e913b2ac10435471fa769740a1275cb467e5264b71bc8727fc12e9aba46e4a8abf3dda91e0da608d6a0a35573d5524fb25451cc23051887de4df85c8e771260c4943e78905aa1e7493027366ed1bea0d80304804800018008000100667764003c000280080001"], 0x558}}, 0x40) 1m15.128274379s ago: executing program 2 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r0) unshare(0x6020400) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000840)='io.pressure\x00', 0x2, 0x0) read(r3, &(0x7f0000000040)=""/252, 0xfc) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROMREADAUDIO(r4, 0x5392, &(0x7f0000000140)={@msf={0x3, 0x8, 0x2}, 0x2, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000200)=0x1b) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xb3d) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000000801010000000000090000000000070600024088630000040004800900010073797a3000000000050003002f000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xffffff8e, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) 1m15.070321475s ago: executing program 32 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r0) unshare(0x6020400) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000840)='io.pressure\x00', 0x2, 0x0) read(r3, &(0x7f0000000040)=""/252, 0xfc) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROMREADAUDIO(r4, 0x5392, &(0x7f0000000140)={@msf={0x3, 0x8, 0x2}, 0x2, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000200)=0x1b) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xb3d) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000000801010000000000090000000000070600024088630000040004800900010073797a3000000000050003002f000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xffffff8e, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) 1m10.802093607s ago: executing program 3 (id=72): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000001380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000318e00033a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xb0, @mcast2, 0xfffd}}}, 0x3a) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ptrace(0x10, 0x0) mlockall(0x6) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) brk(0x400000ffc020) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0xffffffffffffff9c, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRESHEX=r6], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@loopback, 0x4e23, 0x0, 0x4e24, 0xfffa, 0xa, 0x80, 0x0, 0x2e, r5, r7}, {0x2, 0xb9a, 0x3, 0x4f, 0x5, 0x2, 0x12, 0x6}, {0x8, 0x22c3, 0x4, 0x4}, 0x7, 0x6e6bb1, 0x1, 0x1, 0x3, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x4d6, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3500, 0x0, 0x3, 0x3, 0x4, 0x3}}, 0xe8) 1m10.148541137s ago: executing program 3 (id=78): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x14, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffc0, 0xb}}}}]}, 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x18, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x5, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}]}, 0x20008080) r6 = dup2(r5, r4) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000300)=@ethtool_wolinfo={0x5, 0x7ff, 0xfffffa40, "999540b44119"}}) process_madvise(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="332898d3c630b59d7fe07988fb3801c73268239b4da89af90d6a892ec97eae07ea11f363cd06933883aac865ad85", 0x2e}, {&(0x7f0000000100)="1129cd34d499069a1df180a44ba9dd54cb5e987a688b3a36c37ac6ee2aaa35538fa7f0d92e11a9a26c5a2dfb70d2e300acd918a48dd68ed854f76595289a6747cd0b4fe8961bd54987d0469e421b8f60540ebcf3d1f7722cba8a915e770c13a00cbabb0bb404dda9c97594ed891a400034236c0e12fe2ae34e5863ba6d23d3a552215e845d01274618309f48f738a7374d54634ee9d86969f641fed6514c070a60d9c2bfd36cf70afb4bcd526e09fe5fccebe5897657ce3523f8c4d9ea88bc58590d802342fbb43f1986b01984efbf790a9706386c247e82b68ec6740bb8494199bd92916a33", 0xe6}, {&(0x7f0000000200)="eda82ba20e0a30a825c6fe32739e5228e449aed8847f35d91da9bcd3bee5951918b8875266095b7199696450f00d9fd5ae42e5f9dbfec4867dd1b9", 0x3b}, {&(0x7f0000000940)="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", 0x191}], 0x4, 0x1, 0x0) 1m9.907722817s ago: executing program 3 (id=80): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x78a20, 0x7f}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[], 0x1c, 0x0) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) 1m9.903103081s ago: executing program 3 (id=81): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x68, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00', [], "97c7"}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc040ff0b, &(0x7f0000000180)) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000000bbeedaff0900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="660f38803f0fc72eb3b0c3f2f3660f009eb99b3e67640f3802410166b9aa08000066b82600000066ba000000000f3083e100660feb791d67666467f2a70f850900", 0x87}], 0x1, 0xe9, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002240), 0x20000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000004380)={0x1, 0x3, 0x7, 0x0, 0x4}) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000240)) 1m9.827822604s ago: executing program 3 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122800000000030000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = io_uring_setup(0x54c2, &(0x7f0000000000)={0x0, 0xf887, 0x0, 0x0, 0x25a}) r1 = syz_io_uring_setup(0x1b68, &(0x7f0000000380)={0x0, 0x1040, 0x10, 0x1003, 0x101, 0x0, r0}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r4, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x300}, {0x0}], 0x5) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0xc0505405, &(0x7f00000000c0)={0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000000c0)={0x8000, r1, 0x12, {0x6, 0x1}, 0x5}, 0x1) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="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"], 0x270}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r11 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4000, 0xb3) ftruncate(r11, 0x6000000) copy_file_range(r11, 0x0, r11, &(0x7f00000004c0)=0x100, 0x9, 0x0) 1m9.350353971s ago: executing program 3 (id=89): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) io_setup(0x9, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) io_setup(0x9, &(0x7f0000000100)=0x0) io_pgetevents(r5, 0x1, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180), &(0x7f00000002c0)={&(0x7f0000000240)={[0x7]}, 0x8}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xaeb04f8da6008764, 0x0) read$FUSE(r6, &(0x7f0000008340)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x3ec0) close_range(r8, 0xffffffffffffffff, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$KVM_RUN(r13, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 54.21547167s ago: executing program 33 (id=89): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) io_setup(0x9, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) io_setup(0x9, &(0x7f0000000100)=0x0) io_pgetevents(r5, 0x1, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180), &(0x7f00000002c0)={&(0x7f0000000240)={[0x7]}, 0x8}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xaeb04f8da6008764, 0x0) read$FUSE(r6, &(0x7f0000008340)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x3ec0) close_range(r8, 0xffffffffffffffff, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$KVM_RUN(r13, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 23.178359731s ago: executing program 4 (id=371): r0 = getpgid(0xffffffffffffffff) timer_create(0x3, &(0x7f0000000080)={0x0, 0x33, 0x0, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_emit_ethernet(0xc9, &(0x7f0000000140)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @igmp={{0x27, 0x4, 0x2, 0x4, 0xbb, 0x66, 0x0, 0x5, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x7, "44e795f978"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0xc7, 0x3, 0xa, [{@broadcast, 0xc10a}, {@multicast1, 0x8}, {@multicast2, 0xdff}, {@multicast2, 0x4}, {@remote, 0x10}, {@rand_addr=0x64010100, 0x4}]}, @rr={0x7, 0x1f, 0x35, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x44}, @broadcast]}, @noop, @lsrr={0x83, 0x27, 0x9b, [@multicast2, @private=0xa010100, @local, @multicast2, @multicast1, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {0x14, 0x40, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, "65ffa6563dd6997f309d3a87552668317fc327507e3ff2"}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30"], 0x1f4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @any, 0x7, 0x1}, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c00030026ad3dc548f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 23.037845296s ago: executing program 4 (id=375): r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x830200) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f00000000c0)) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x20000000000000, 0x40001) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0xffff0000, 0x40, '\x00', &(0x7f0000000080)=0x4}) (async) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0xffff0000, 0x40, '\x00', &(0x7f0000000080)=0x4}) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000100)={0x2, 0x49c4}) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000160000ffff00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 22.89449751s ago: executing program 4 (id=376): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88acff25, 0x60e1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x2) 22.80534629s ago: executing program 4 (id=377): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x300, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10080) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10000004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="f210040fbc756187152d608a2bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"}) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x113, 0x0, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x1000}]}, 0x140}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) request_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000300)='syzkaller0\x00', 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xbe, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) signalfd4(r6, &(0x7f0000000040)={[0x4]}, 0x8, 0x80000) 22.702043835s ago: executing program 4 (id=381): io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}]) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x14, 0x10f}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) ptrace(0x10, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000001080)=""/188, 0xbc, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000001840)=""/141, 0x8d, 0x0, 0x2, 0x2}}, 0x48) close_range(r0, r0, 0x2) write$vhost_msg(r2, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0)=0x34, 0x4) ptrace$setregs(0x1a, 0x0, 0xc, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000a000000140002"], 0x34}}, 0x0) sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES8=r2, @ANYBLOB="7f0000017f00000a0000002800"/28, @ANYRESDEC=r2, @ANYBLOB="7f000001ac1414000000886b1c0e0000220000000000842fa4b4006a18b662efc744fd1b9ab1d72386b9084f7e873c90771d5878fc6f786bc88ced99a941af72741f5c2ea91e0973af580d73ec5fb531733b0f60b3ac9f51688f4cb88099100672a719a06eb39014e55f89b2bde071ea679ba28d7c0f0f679728e65666420a81"], 0x230}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) write$vhost_msg(r2, &(0x7f0000000200)={0x1, {&(0x7f0000000100), 0x0, &(0x7f0000000b00)=""/247, 0x3, 0x2}}, 0x48) ioctl$KVM_CREATE_VM(r5, 0xae01, 0xb) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000700)={0x1, 0x0, @ioapic={0x4, 0xb, 0x100, 0x3, 0x0, [{0x1, 0x6, 0x7, '\x00', 0x81}, {0x7, 0x45, 0x1, '\x00', 0x7f}, {0x4, 0x5, 0x2, '\x00', 0x3}, {0x18, 0x5, 0x0, '\x00', 0xf5}, {0x4, 0x0, 0xd, '\x00', 0x7}, {0x3, 0x8, 0x3e, '\x00', 0xa}, {0x81, 0x7, 0x5, '\x00', 0x9}, {0x1, 0xe, 0x6}, {0x6, 0x0, 0xf}, {0x6, 0x9, 0x7f, '\x00', 0x5}, {0x4, 0x10, 0xc, '\x00', 0x4}, {0x1, 0x4, 0x0, '\x00', 0x3}, {0x4, 0x0, 0xde, '\x00', 0x80}, {0x2, 0x16, 0x40, '\x00', 0x9}, {0x4, 0x9, 0x6, '\x00', 0x49}, {0x2, 0x5, 0xa, '\x00', 0x5}, {0x5e, 0x3, 0x5, '\x00', 0x7}, {0x16, 0x1, 0x9, '\x00', 0xfe}, {0x1, 0x3, 0x5}, {0x9, 0x0, 0x3, '\x00', 0x7}, {0x92, 0x6, 0xff, '\x00', 0x2}, {0x9, 0x10, 0x4, '\x00', 0x1}, {0x6, 0x9, 0x1, '\x00', 0x20}, {0x9, 0x0, 0x7, '\x00', 0xe}]}}) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 22.001362933s ago: executing program 4 (id=391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0x200ce4, r1}, 0x78) 6.768925159s ago: executing program 34 (id=391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0x200ce4, r1}, 0x78) 4.88526352s ago: executing program 5 (id=483): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000300)={0x6000, 0x399000, 0x8}) getpid() (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x3e, 0x5c3, 0x7ffffffa}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x3e, 0x5c3, 0x7ffffffa}) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f92524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff8, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff8, 0x2) r8 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_add_vcpu$x86(r8, &(0x7f0000000180)={0x0, 0x0}) (async) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000180)={0x0, 0x0}) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000280)={0x3000, 0x10e000}) (async) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000280)={0x3000, 0x10e000}) 4.257952895s ago: executing program 5 (id=484): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000080)={0x2, 0x4, 0x1, 0x6}) 4.138328212s ago: executing program 5 (id=485): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x28, r0, 0x329, 0xfffffffc, 0x0, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xffff) fchdir(r3) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000000)='binder\x00', 0x2200892, 0x0) unshare(0x6a040200) 2.617534697s ago: executing program 0 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90a0fdc4, 0x0, 0xfffd, 0x0, 0x4, 0x0, 0x0, 0x100, 0x10001}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) syz_pidfd_open(r2, 0x0) 1.732141848s ago: executing program 0 (id=494): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x10) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in6=@remote, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'nr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) (async) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be004411fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40600, 0x0) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x0) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.594211705s ago: executing program 0 (id=495): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd2b, 0x25cfdbfd, {0x7, 0x0, 0x68, r2, 0x12318, 0x22264}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x8004) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00P', @ANYRES16=r0, @ANYBLOB="00042bbd7000f6dbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x1c000000}, 0x80) (async) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000006c0), 0x100, 0x0) ioctl$CDROM_DEBUG(r4, 0x5323, 0x1) 1.303508547s ago: executing program 1 (id=497): r0 = socket(0x10, 0x80002, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x17) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7}, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x13, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x10, 0x8, 0x1b6, &(0x7f0000000340)="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"}) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) 1.154410097s ago: executing program 1 (id=498): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040)=0x2, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040)=0x2, 0x4) (async) 1.009068134s ago: executing program 1 (id=499): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x30040, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1, r2}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={r0, r3}) io_uring_enter(r3, 0x6217, 0xfad8, 0x59, &(0x7f0000000100)={[0x9]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f0000000140)=@hsc={0x1, 0x0, "0d676644020e9abd90f6"}) close(r3) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000200)={0x0, 0xfffffffffffff87f, 0x5, 0x1}) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl(r3, 0xe32, &(0x7f0000000600)="417df91359222d048d0dc5f74696fc73e1825684f228ad69511d79502e65b2b8fddd7e6b677d745f0c8b05fcc747e8827778b0dcf9b29672449e7bdf78eae1c9be56255826f6ef074fd14dababb7994dbaf57ab58af221235f41e55d85343c636f778f7c5b10d402d9e6d953fd5d2f") getsockopt$inet_buf(r3, 0x0, 0x2e, &(0x7f0000000680)=""/239, &(0x7f0000000780)=0xef) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xab}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8c}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}}, 0x4000800) r5 = fcntl$getown(r3, 0x9) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000940)=0xffffffffffffffff, 0x4) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000980)={0x9, 0x7}) read$FUSE(r2, &(0x7f00000009c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f0000002a00)={0x28, 0x0, r6, {{0x5, 0xfffffffffffff801, 0x0, r5}}}, 0x28) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000002a40)={0xb6, 0x0, 0x4}) r7 = open(&(0x7f0000002ac0)='./file0\x00', 0x20000, 0x10) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000002b00)={0x80, 0x0, 0x2d0}) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000002c40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x18, 0x1402, 0x608, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x2004) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000002c80)={r2, 0x1000, {0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0xa, 0x3, 0x5, "e91cd8d27a5f03e2eb56785b285394299cc8de8b06d8cd65b99fd3719e1e04d17ed7439a0fbf49a4b4bf9139088cf7621a85b60e79dbdcd5197f25c271f3897f", "2b89d9f9080252d848b8dc7f12f2970713a4254246d74381deb4980bd78144dc52f00d9febaf0a6c07d4c6085f206a73be5c70a6f4e557394bb3af1257784e5b", "a5402db1d03db2fdbf2ae93521bc828729edd8336808a614fbb071712b237473", [0x80000001, 0x100]}}) fcntl$setstatus(r2, 0x4, 0x400) ioctl$TCSETS(r7, 0x5402, &(0x7f0000002dc0)={0xfffffc01, 0x401, 0xfffffc01, 0x1, 0xf, "c67b1b572697faf00335d17c5a4e913e4fda17"}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000002e80)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xff}) 937.401098ms ago: executing program 1 (id=500): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000240)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x2, 'gre0\x00', {0x6}, 0x8001}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2812ef068abc33b8331f5e1001000010000d3d30e2de570000200000000000", @ANYRES32=0x0, @ANYRES16=0x0], 0x110}}, 0x4000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x15}, 0x20) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e21, 0xfffffffb, @empty, 0x3}, {0xa, 0x4e1f, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1, {[0x72bb, 0xfff, 0x5, 0x6, 0x80000000, 0x2, 0x2]}}, 0x5c) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x9, 0x20, 0x2, 0x0, 0x2004cc, 0x8000002, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_REGS(r5, 0x8090ae81, &(0x7f0000000640)) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 557.351419ms ago: executing program 0 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90a0fdc4, 0x0, 0xfffd, 0x0, 0x4, 0x0, 0x0, 0x100, 0x10001}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) (fail_nth: 1) syz_pidfd_open(r2, 0x0) 448.851861ms ago: executing program 1 (id=502): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f00000bd000/0x2000)=nil, 0x2000, 0x15) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)="1371977c"}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)="1371977c"}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r1, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) (async) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) socket$inet(0x10, 0x3, 0x0) (async) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) (async) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) creat(&(0x7f0000000ac0)='./file0\x00', 0x63) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}}, 0x0) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) (async) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 277.704774ms ago: executing program 0 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='exfat\x00', 0x400080, &(0x7f00000001c0)='discard') openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$afs(&(0x7f0000000000)=@cell={0x25, '', 'syz1', '.backup'}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f0000000200)={[{@flock_write}, {@flock_openafs}], [{@pcr={'pcr', 0x3d, 0x14}}, {@dont_hash}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '-N*\\'}}, {@smackfsdef={'smackfsdef', 0x3d, ':'}}, {@fsname={'fsname', 0x3d, '{/#%+\'(-+\xa8*'}}, {@smackfsroot={'smackfsroot', 0x3d, '!%{:-@&*'}}, {@fowner_lt={'fowner<', 0xee00}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r1, &(0x7f00000003c0)=ANY=[], 0xa30900) 276.813869ms ago: executing program 5 (id=504): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') write$sysctl(r0, &(0x7f0000000140)='5\x00', 0x2) read$rfkill(r0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaab4aaaaaa0180c200000008003300005c001000000011"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'wlan1\x00'}, {0x20, 'GPL\x00'}, {0x20, '@'}], 0xa, "dabe2fba1178c71d4522e8ef2db3eb82e441e880f39cb15b24cd1ce1d7d7cbda13a00aa1cd3a0f4eca79714e69"}, 0x46) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, &(0x7f00000000c0), &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 67.627457ms ago: executing program 5 (id=505): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x3], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) 63.207448ms ago: executing program 0 (id=506): mknodat(0xffffffffffffffff, 0x0, 0x800, 0x4) syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_read_bd_addr={{0x8}, {0xfb, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}}, 0xd) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x8000000000000000]}, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x8) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x10000004) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x10000004) sendfile(r0, r0, 0x0, 0xa) (async) sendfile(r0, r0, 0x0, 0xa) r1 = syz_open_dev$loop(&(0x7f0000002180), 0xffffffffffff0000, 0x2000) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) (async) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x105042, 0x189) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) (async) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r2, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) (async) recvmsg$unix(r2, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r2, &(0x7f0000000bc0)={0x0, 0x1100, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000bc0)={0x0, 0x1100, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1}, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x201, 0x4800003e, r4, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r6, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000380)=""/251, 0xfffffc27, 0x0, 0x3, 0x2}}, 0x48) (async) write$vhost_msg_v2(r6, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000380)=""/251, 0xfffffc27, 0x0, 0x3, 0x2}}, 0x48) open(&(0x7f0000000140)='./file2\x00', 0x101102, 0xa8) 896.793µs ago: executing program 5 (id=507): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"]) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 0s ago: executing program 1 (id=508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r1, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000001580)={@void, @val={0x2, 0x555409cce955aad9, 0x3, 0x9, 0x5, 0x1}, @ipv6=@icmpv6={0x9, 0x6, "bc8008", 0x268, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, {[@srh={0x2f, 0x6, 0x4, 0x3, 0x1, 0x50, 0x6, [@local, @dev={0xfe, 0x80, '\x00', 0xe}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x2f, 0x5, '\x00', [@ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x28, {0x0, 0x8, 0x81, 0x1000, [0x8, 0x2, 0x6, 0x4]}}]}, @dstopts={0x2c, 0x29, '\x00', [@ra={0x5, 0x2, 0x4}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn, @generic={0x1, 0xbe, "6059c994178747d10b832fc9bbf5e2f50ee2023189cbaa6ab413ee9ebb1c1f19aa8f1bec6e5a5ec4c0a4bf2afdfbbf539957529f7932d205a8de39db7e597e5883fb140c1f6f2c664f9afb6e63cbf09ec38b81319cad4392e76086e2d34d22ef5ad3c53897c34eba3749b221bc90deba768524578683172fa24f5d0c10909ce305108c39e90df740993553bd41164adebec0b1bc3898f769f2943bff547486527571ab504e196d9a3fbbed4332cccab5ae5217b533d97d5488a431d4eb38"}, @generic={0x3, 0x17, "54b0a36324828e40ab8cc00e537beca99ed233df97c0b7"}, @calipso={0x7, 0x38, {0x2, 0xc, 0x4, 0x101, [0x2, 0x67, 0x2, 0x0, 0x0, 0x80000000]}}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x3, 0x28, "9d6c944e616d9fc3c597f646dbb1775c684fc13f9bc29a2781c60eb21e0322f628c01dd5d4047500"}, @pad1]}, @routing={0x32, 0x6, 0x1, 0x1, 0x0, [@local, @loopback, @private2]}, @routing={0x89, 0x8, 0x1, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0]}, @fragment={0x5c, 0x0, 0x40, 0x1, 0x0, 0x3, 0x68}], @mld={0x84, 0x0, 0x0, 0x8000, 0xffff, @remote}}}}, 0x29a) kernel console output (not intermixed with test programs): _adv: batadv0: Adding interface: batadv_slave_1 [ 48.902719][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.911427][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.916679][ T5973] team0: Port device team_slave_1 added [ 48.987308][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.990140][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.000854][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.005741][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.007896][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.015965][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.020351][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.023518][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.031416][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.048926][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.056593][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.067185][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.104215][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.106875][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.116990][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.121772][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.123967][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.132053][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.189083][ T5968] hsr_slave_0: entered promiscuous mode [ 49.191948][ T5968] hsr_slave_1: entered promiscuous mode [ 49.197686][ T5976] hsr_slave_0: entered promiscuous mode [ 49.199982][ T5976] hsr_slave_1: entered promiscuous mode [ 49.202248][ T5976] debugfs: 'hsr0' already exists in 'hsr' [ 49.204155][ T5976] Cannot create hsr debugfs directory [ 49.261028][ T5973] hsr_slave_0: entered promiscuous mode [ 49.264657][ T5973] hsr_slave_1: entered promiscuous mode [ 49.267241][ T5973] debugfs: 'hsr0' already exists in 'hsr' [ 49.269003][ T5973] Cannot create hsr debugfs directory [ 49.297362][ T5967] hsr_slave_0: entered promiscuous mode [ 49.299556][ T5967] hsr_slave_1: entered promiscuous mode [ 49.301656][ T5967] debugfs: 'hsr0' already exists in 'hsr' [ 49.303465][ T5967] Cannot create hsr debugfs directory [ 49.611648][ T5975] Bluetooth: hci3: command tx timeout [ 49.691625][ T5975] Bluetooth: hci2: command tx timeout [ 49.692113][ T5333] Bluetooth: hci0: command tx timeout [ 49.693595][ T63] Bluetooth: hci1: command tx timeout [ 49.741821][ T5968] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.748229][ T5968] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.752248][ T5968] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.763245][ T5968] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.810926][ T5976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.818300][ T5976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.835583][ T5976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.842033][ T5976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.884873][ T5973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.895892][ T5973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.902548][ T5973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.914474][ T5973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.997033][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.023834][ T5967] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.030501][ T5967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.041893][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.051734][ T5967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.057835][ T5967] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.064509][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.067721][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.085056][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.088067][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.156193][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.166609][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.179116][ T5968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.191155][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.203064][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.208192][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.210506][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.213026][ T40] audit: type=1400 audit(1756885264.013:89): avc: denied { sys_module } for pid=5968 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 50.216434][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.221493][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.232439][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.234728][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.245025][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.247317][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.287489][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.304083][ T5976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.317780][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.330373][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.332638][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.340693][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.347991][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.350956][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.401142][ T5968] veth0_vlan: entered promiscuous mode [ 50.412741][ T5968] veth1_vlan: entered promiscuous mode [ 50.432671][ T5968] veth0_macvtap: entered promiscuous mode [ 50.436177][ T5968] veth1_macvtap: entered promiscuous mode [ 50.450601][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.459398][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.468365][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.477166][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.479964][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.484645][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.487481][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.490211][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.563153][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.566600][ T5976] veth0_vlan: entered promiscuous mode [ 50.573016][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.573517][ T5973] veth0_vlan: entered promiscuous mode [ 50.575493][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.593591][ T5976] veth1_vlan: entered promiscuous mode [ 50.606455][ T5973] veth1_vlan: entered promiscuous mode [ 50.612948][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.615783][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.634214][ T5967] veth0_vlan: entered promiscuous mode [ 50.645953][ T5967] veth1_vlan: entered promiscuous mode [ 50.653284][ T5976] veth0_macvtap: entered promiscuous mode [ 50.658663][ T5968] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.659121][ T5973] veth0_macvtap: entered promiscuous mode [ 50.667669][ T5976] veth1_macvtap: entered promiscuous mode [ 50.672826][ T5973] veth1_macvtap: entered promiscuous mode [ 50.687841][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.692443][ T5967] veth0_macvtap: entered promiscuous mode [ 50.706342][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.712839][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.717374][ T5967] veth1_macvtap: entered promiscuous mode [ 50.720902][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.724745][ T1148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.727532][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.746487][ T1148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.750685][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.761937][ T1148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.769964][ T1148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.774223][ T1148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.779344][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.790356][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.802361][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.822822][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.834417][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.836839][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.842835][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.846926][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.861911][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.873804][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.877586][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.922819][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.926060][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.976238][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.979607][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.003906][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.006981][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.019227][ T6075] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.023262][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.025285][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 51.027260][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.032938][ T6075] tipc: Enabling of bearer rejected, failed to enable media [ 51.107458][ T6086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9'. [ 51.109300][ T6082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.110217][ T6086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9'. [ 51.121547][ T6086] syz_tun: entered promiscuous mode [ 51.125300][ T6086] batadv_slave_1: entered promiscuous mode [ 51.154853][ T6082] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 51.173620][ T6082] kvm: pic: level sensitive irq not supported [ 51.173975][ T6082] kvm: pic: non byte read [ 51.178903][ T6082] kvm: pic: level sensitive irq not supported [ 51.179486][ T6082] kvm: pic: non byte read [ 51.374831][ T6102] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET) [ 51.461957][ T6053] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.631448][ T6053] usb 5-1: Using ep0 maxpacket: 8 [ 51.635027][ T6053] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 51.637346][ T6053] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 51.640745][ T6053] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.659358][ T6053] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 51.674153][ T6053] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 51.681452][ T6053] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 51.683744][ T6053] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 51.687430][ T6053] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.691018][ T6053] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 51.695025][ T6053] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 51.695258][ T63] Bluetooth: hci3: command tx timeout [ 51.701136][ T6053] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 51.704177][ T6053] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 51.707944][ T6053] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.711717][ T6053] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 51.716162][ T6053] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 51.726122][ T6053] usb 5-1: string descriptor 0 read error: -22 [ 51.728785][ T6053] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 51.733031][ T6053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.749441][ T6053] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 51.771582][ T63] Bluetooth: hci0: command tx timeout [ 51.781641][ T63] Bluetooth: hci1: command tx timeout [ 51.783369][ T63] Bluetooth: hci2: command tx timeout [ 52.007369][ T6029] usb 5-1: USB disconnect, device number 2 [ 52.222244][ T6094] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11'. [ 52.379705][ T40] kauditd_printk_skb: 106 callbacks suppressed [ 52.379716][ T40] audit: type=1400 audit(1756885266.173:196): avc: denied { create } for pid=6139 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.387762][ T40] audit: type=1400 audit(1756885266.173:197): avc: denied { connect } for pid=6139 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.416001][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.419193][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.661968][ T6070] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.823377][ T6070] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 52.827175][ T6070] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 52.830904][ T6070] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.843643][ T6070] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 52.847179][ T6070] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 52.851759][ T6070] usb 8-1: Product: syz [ 52.853396][ T6070] usb 8-1: Manufacturer: syz [ 52.855147][ T6070] usb 8-1: SerialNumber: syz [ 52.885639][ T6149] Zero length message leads to an empty skb [ 52.984803][ T40] audit: type=1400 audit(1756885266.783:198): avc: denied { mount } for pid=6151 comm="syz.1.27" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 53.017721][ T1153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.083250][ T40] audit: type=1400 audit(1756885266.883:199): avc: denied { unmount } for pid=5976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 53.113657][ T6159] overlayfs: conflicting lowerdir path [ 53.186751][ T40] audit: type=1400 audit(1756885266.983:200): avc: denied { ioctl } for pid=6163 comm="syz-executor" path="socket:[7924]" dev="sockfs" ino=7924 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.190458][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.197979][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.200986][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.205016][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.207811][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.321231][ T40] audit: type=1400 audit(1756885267.113:201): avc: denied { append } for pid=6168 comm="syz.1.32" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.342031][ T6163] chnl_net:caif_netlink_parms(): no params data found [ 53.439623][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.442969][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.446779][ T6163] bridge_slave_0: entered allmulticast mode [ 53.450507][ T6163] bridge_slave_0: entered promiscuous mode [ 53.458120][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.460510][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.462970][ T6163] bridge_slave_1: entered allmulticast mode [ 53.466562][ T6163] bridge_slave_1: entered promiscuous mode [ 53.527207][ T6163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.534947][ T6163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.595698][ T6163] team0: Port device team_slave_0 added [ 53.601213][ T6163] team0: Port device team_slave_1 added [ 53.653653][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.656736][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.667825][ T6163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.674829][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.677857][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.689921][ T6163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.770867][ T6163] hsr_slave_0: entered promiscuous mode [ 53.776010][ T63] Bluetooth: hci3: command tx timeout [ 53.776635][ T6163] hsr_slave_1: entered promiscuous mode [ 53.780271][ T6163] debugfs: 'hsr0' already exists in 'hsr' [ 53.782712][ T6163] Cannot create hsr debugfs directory [ 53.853147][ T63] Bluetooth: hci2: command tx timeout [ 53.855900][ T5333] Bluetooth: hci1: command tx timeout [ 53.942607][ T6163] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.947529][ T6163] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.952601][ T6163] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.957529][ T6163] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.972185][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.975893][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.979717][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.982146][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.010300][ T6163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.019772][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.023963][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.041924][ T6163] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.050030][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.052967][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.059514][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.061919][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.103063][ T1464] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.113604][ T40] audit: type=1400 audit(1756885267.913:202): avc: denied { sys_module } for pid=6163 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.180433][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.261633][ T1464] usb 5-1: Using ep0 maxpacket: 8 [ 54.267835][ T1464] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 54.271399][ T1464] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 54.274677][ T1464] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.278588][ T1464] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.283382][ T1464] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 54.310627][ T1464] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 54.313099][ T1464] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 54.319467][ T1464] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.326205][ T1153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.330766][ T1464] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.337288][ T1464] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 54.343101][ T1464] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 54.345591][ T1464] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 54.349371][ T1464] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.354211][ T1464] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.357885][ T1464] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 54.365169][ T1464] usb 5-1: string descriptor 0 read error: -22 [ 54.367074][ T6163] veth0_vlan: entered promiscuous mode [ 54.367210][ T1464] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 54.372476][ T1464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.372557][ T6163] veth1_vlan: entered promiscuous mode [ 54.375749][ T6070] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 54.392726][ T6070] usb 8-1: USB disconnect, device number 2 [ 54.395740][ T6163] veth0_macvtap: entered promiscuous mode [ 54.396830][ T6070] usblp0: removed [ 54.402113][ T6163] veth1_macvtap: entered promiscuous mode [ 54.418428][ T1153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.423254][ T1464] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 54.450419][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.458323][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.466563][ T73] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.469276][ T73] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.477359][ T73] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.480423][ T73] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.503574][ T1153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.533263][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.536584][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.555026][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.558652][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.565703][ T40] audit: type=1400 audit(1756885268.363:203): avc: denied { mount } for pid=6163 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.566793][ T6206] Bluetooth: MGMT ver 1.23 [ 54.646760][ T6208] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 54.649855][ T6208] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.659921][ T6208] vhci_hcd vhci_hcd.0: Device attached [ 54.666171][ T34] usb 5-1: USB disconnect, device number 3 [ 54.678350][ T40] audit: type=1400 audit(1756885268.473:204): avc: denied { ioctl } for pid=6209 comm="syz.3.38" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 54.678562][ T1153] bridge_slave_1: left allmulticast mode [ 54.690237][ T1153] bridge_slave_1: left promiscuous mode [ 54.691811][ T40] audit: type=1400 audit(1756885268.483:205): avc: denied { search } for pid=5684 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.703023][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.704266][ T6210] vhci_hcd: connection closed [ 54.708950][ T73] vhci_hcd: stop threads [ 54.712555][ T73] vhci_hcd: release socket [ 54.714036][ T73] vhci_hcd: disconnect device [ 54.716385][ T1153] bridge_slave_0: left allmulticast mode [ 54.718154][ T1153] bridge_slave_0: left promiscuous mode [ 54.719956][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.746670][ T6217] IPv6: addrconf: prefix option has invalid lifetime [ 54.973339][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.979521][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.985625][ T1153] bond0 (unregistering): Released all slaves [ 55.290954][ T1153] hsr_slave_0: left promiscuous mode [ 55.293355][ T63] Bluetooth: hci0: command tx timeout [ 55.297745][ T1153] hsr_slave_1: left promiscuous mode [ 55.300747][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.307762][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.312041][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.315414][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.330495][ T6237] block nbd3: Attempted send on invalid socket [ 55.333410][ T6237] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 55.336536][ T6237] block nbd3: Attempted send on invalid socket [ 55.338522][ T6237] I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 55.339173][ T1153] veth1_macvtap: left promiscuous mode [ 55.342150][ T6237] Mount JFS Failure: -5 [ 55.344185][ T1153] veth0_macvtap: left promiscuous mode [ 55.345501][ T6237] jfs_mount failed w/return code = -5 [ 55.348169][ T1153] veth1_vlan: left promiscuous mode [ 55.352535][ T1153] veth0_vlan: left promiscuous mode [ 55.819733][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 55.851863][ T63] Bluetooth: hci3: command tx timeout [ 55.876365][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 55.942486][ T63] Bluetooth: hci2: command tx timeout [ 55.942522][ T5333] Bluetooth: hci1: command tx timeout [ 56.343516][ T6263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.47'. [ 56.514540][ T6298] comedi comedi0: Cannot bond this driver to itself! [ 56.550739][ T6300] input: syz0 as /devices/virtual/input/input5 [ 56.857180][ T6330] openvswitch: netlink: Tunnel attr 16371 out of range max 16 [ 57.056373][ T6353] kvm: pic: non byte read [ 57.059327][ T6353] kvm: pic: non byte read [ 57.153310][ T6346] /dev/sr0: Can't open blockdev [ 57.170762][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 57.205933][ T6367] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 57.238106][ T6370] netlink: 'syz.1.69': attribute type 9 has an invalid length. [ 57.240436][ T6370] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.69'. [ 57.246984][ T6375] netlink: 3 bytes leftover after parsing attributes in process `syz.0.70'. [ 57.253730][ T6375] program syz.0.70 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.371402][ T5333] Bluetooth: hci0: command tx timeout [ 57.541524][ T1458] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.541573][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 57.691382][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 57.695598][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 57.698765][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 57.704056][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.708879][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 57.713711][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 57.719326][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 57.722166][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 57.722811][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 57.722820][ T40] audit: type=1400 audit(1756885271.513:258): avc: denied { ioctl } for pid=6383 comm="syz.4.74" path="socket:[10035]" dev="sockfs" ino=10035 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 57.726073][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.728691][ T1458] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.736793][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 57.740163][ T1458] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.744287][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 57.747986][ T1458] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.761357][ T1458] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 57.762834][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 57.764305][ T1458] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 57.767267][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 57.770612][ T1458] usb 6-1: Product: syz [ 57.776496][ T1458] usb 6-1: Manufacturer: syz [ 57.777964][ T1458] usb 6-1: SerialNumber: syz [ 57.779082][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.784372][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 57.788899][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 57.796449][ T10] usb 5-1: string descriptor 0 read error: -22 [ 57.799080][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 57.803124][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.827332][ T40] audit: type=1400 audit(1756885271.623:259): avc: denied { create } for pid=6387 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.830288][ T10] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 57.845096][ T40] audit: type=1400 audit(1756885271.633:260): avc: denied { ioctl } for pid=6387 comm="syz.4.76" path="socket:[10040]" dev="sockfs" ino=10040 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.855338][ T40] audit: type=1400 audit(1756885271.633:261): avc: denied { write } for pid=6387 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.863702][ T40] audit: type=1400 audit(1756885271.633:262): avc: denied { remount } for pid=6387 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.984151][ T1458] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 58.070537][ T29] usb 5-1: USB disconnect, device number 4 [ 58.135688][ T40] audit: type=1400 audit(1756885271.933:263): avc: denied { create } for pid=6397 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 58.152391][ T40] audit: type=1400 audit(1756885271.953:264): avc: denied { write } for pid=6397 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.154681][ T6398] block nbd3: Attempted send on invalid socket [ 58.158638][ T40] audit: type=1400 audit(1756885271.953:265): avc: denied { read } for pid=6397 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.160972][ T6398] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 58.170020][ T6398] SQUASHFS error: Failed to read block 0x0: -5 [ 58.173135][ T6398] unable to read squashfs_super_block [ 58.198089][ T6377] SELinux: syz.1.71 (6377) set checkreqprot to 1. This is no longer supported. [ 58.198578][ T40] audit: type=1400 audit(1756885271.993:266): avc: denied { setcheckreqprot } for pid=6376 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 58.207786][ T40] audit: type=1400 audit(1756885271.993:267): avc: denied { setopt } for pid=6402 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.208984][ T6070] usb 6-1: USB disconnect, device number 2 [ 58.218157][ T6070] usblp1: removed [ 58.315144][ T6418] netlink: 'syz.4.84': attribute type 1 has an invalid length. [ 58.371588][ T6431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.84'. [ 58.374435][ T6431] xfrm0: entered promiscuous mode [ 58.376128][ T6431] xfrm0: entered allmulticast mode [ 58.425420][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.347282][ T6470] trusted_key: encrypted_key: insufficient parameters specified [ 59.451512][ T5333] Bluetooth: hci0: command tx timeout [ 60.363973][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96'. [ 60.435788][ T6489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.97'. [ 60.501050][ T5974] udevd[5974]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 61.436214][ T6507] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 61.541466][ T5333] Bluetooth: hci0: command tx timeout [ 61.572685][ T6512] capability: warning: `syz.0.103' uses 32-bit capabilities (legacy support in use) [ 61.580561][ T6514] 9pnet_virtio: no channels available for device syz [ 61.583250][ T6514] 9pnet_virtio: no channels available for device syz [ 61.585781][ T6514] 9pnet_virtio: no channels available for device syz [ 61.588212][ T6514] 9pnet_virtio: no channels available for device syz [ 61.590532][ T6514] 9pnet_virtio: no channels available for device syz [ 61.592968][ T6514] 9pnet_virtio: no channels available for device syz [ 61.595390][ T6514] 9pnet_virtio: no channels available for device syz [ 61.598156][ T6514] 9pnet_virtio: no channels available for device syz [ 61.600482][ T6514] 9pnet_virtio: no channels available for device syz [ 61.602932][ T6514] 9pnet_virtio: no channels available for device syz [ 61.605381][ T6514] 9pnet_virtio: no channels available for device syz [ 61.607573][ T6514] 9pnet_virtio: no channels available for device syz [ 61.609776][ T6514] 9pnet_virtio: no channels available for device syz [ 61.612457][ T6514] 9pnet_virtio: no channels available for device syz [ 61.614839][ T6514] 9pnet_virtio: no channels available for device syz [ 61.617732][ T6514] 9pnet_virtio: no channels available for device syz [ 61.620016][ T6514] 9pnet_virtio: no channels available for device syz [ 61.623304][ T6514] 9pnet_virtio: no channels available for device syz [ 61.625803][ T6514] 9pnet_virtio: no channels available for device syz [ 61.628198][ T6514] 9pnet_virtio: no channels available for device syz [ 61.630550][ T6514] 9pnet_virtio: no channels available for device syz [ 61.633412][ T6514] 9pnet_virtio: no channels available for device syz [ 61.636075][ T6514] 9pnet_virtio: no channels available for device syz [ 61.638965][ T6514] 9pnet_virtio: no channels available for device syz [ 61.641456][ T6514] 9pnet_virtio: no channels available for device syz [ 61.643784][ T6514] 9pnet_virtio: no channels available for device syz [ 61.646265][ T6514] 9pnet_virtio: no channels available for device syz [ 61.648585][ T6514] 9pnet_virtio: no channels available for device syz [ 61.650809][ T6514] 9pnet_virtio: no channels available for device syz [ 61.653210][ T6514] 9pnet_virtio: no channels available for device syz [ 61.655346][ T6514] 9pnet_virtio: no channels available for device syz [ 61.657585][ T6514] 9pnet_virtio: no channels available for device syz [ 61.918578][ T6521] dummy0: entered promiscuous mode [ 61.986064][ T6528] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 62.002012][ T6528] overlay: filesystem on ./bus not supported as upperdir [ 62.019471][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 62.025272][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 62.028964][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 62.033115][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 62.196089][ T6536] geneve2: entered promiscuous mode [ 62.198175][ T6536] geneve2: entered allmulticast mode [ 62.511372][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 62.641691][ T24] usb 9-1: device descriptor read/64, error -71 [ 62.786930][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 62.786944][ T40] audit: type=1400 audit(1756885276.583:299): avc: denied { append } for pid=6555 comm="syz.1.117" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.881522][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 63.011424][ T24] usb 9-1: device descriptor read/64, error -71 [ 63.121602][ T24] usb usb9-port1: attempt power cycle [ 63.436692][ T40] audit: type=1400 audit(1756885277.233:300): avc: denied { read write } for pid=6561 comm="syz.0.119" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.443659][ T40] audit: type=1400 audit(1756885277.233:301): avc: denied { open } for pid=6561 comm="syz.0.119" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.450393][ T40] audit: type=1400 audit(1756885277.233:302): avc: denied { ioctl } for pid=6561 comm="syz.0.119" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.481509][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 63.512010][ T24] usb 9-1: device descriptor read/8, error -71 [ 63.597769][ T40] audit: type=1400 audit(1756885277.393:303): avc: denied { create } for pid=6565 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.603974][ T40] audit: type=1400 audit(1756885277.393:304): avc: denied { ioctl } for pid=6565 comm="syz.0.120" path="socket:[14388]" dev="sockfs" ino=14388 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.611378][ T5333] Bluetooth: hci0: command tx timeout [ 63.613769][ T40] audit: type=1400 audit(1756885277.403:305): avc: denied { getopt } for pid=6565 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.649148][ T40] audit: type=1400 audit(1756885277.443:306): avc: denied { ioctl } for pid=6567 comm="syz.0.121" path="socket:[12081]" dev="sockfs" ino=12081 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.714431][ T40] audit: type=1400 audit(1756885277.513:307): avc: denied { name_bind } for pid=6574 comm="syz.0.123" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 63.756104][ T40] audit: type=1400 audit(1756885277.553:308): avc: denied { create } for pid=6576 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 63.771803][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 63.774755][ T6577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.124'. [ 63.780048][ T6577] random: crng reseeded on system resumption [ 63.787552][ T6577] netlink: 292 bytes leftover after parsing attributes in process `syz.0.124'. [ 63.792519][ T24] usb 9-1: device descriptor read/8, error -71 [ 63.877451][ T6580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.901602][ T24] usb usb9-port1: unable to enumerate USB device [ 63.969242][ T6582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.126'. [ 64.072558][ T6589] netlink: 'syz.0.129': attribute type 21 has an invalid length. [ 64.075471][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 64.124201][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 64.126954][ T6589] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 64.129235][ T6589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.326439][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'. [ 65.691957][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 65.853026][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 65.856910][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 65.859158][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 65.862942][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.866597][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 65.870019][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 65.874463][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 65.876856][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 65.880246][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.884175][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 65.887499][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 65.892428][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 65.895119][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 65.898561][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.902564][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 65.906019][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 65.911648][ T24] usb 9-1: string descriptor 0 read error: -22 [ 65.913704][ T24] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 65.916441][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.925317][ T24] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 66.084518][ T6605] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 66.087229][ T6605] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 66.089814][ T6605] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 66.092720][ T6605] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 66.179053][ T9] usb 9-1: USB disconnect, device number 6 [ 66.663183][ T6646] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 66.868047][ T6665] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 66.873616][ T6665] overlay: filesystem on ./bus not supported as upperdir [ 67.261404][ T6070] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 67.411319][ T6070] usb 5-1: Using ep0 maxpacket: 8 [ 67.414260][ T6070] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 67.416940][ T6070] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 67.421053][ T6070] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.425688][ T6070] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 67.429431][ T6070] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 67.434609][ T6070] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 67.437121][ T6070] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 67.441053][ T6070] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.445524][ T6070] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 67.450103][ T6070] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 67.456026][ T6070] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 67.458731][ T6070] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 67.462633][ T6070] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.466229][ T6070] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 67.469651][ T6070] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 67.475404][ T6070] usb 5-1: string descriptor 0 read error: -22 [ 67.477418][ T6070] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 67.480169][ T6070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.487480][ T6070] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 67.741363][ T34] usb 5-1: USB disconnect, device number 5 [ 67.853057][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 67.853072][ T40] audit: type=1400 audit(1756885281.653:328): avc: denied { read write } for pid=6676 comm="syz.1.153" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.865810][ T40] audit: type=1400 audit(1756885281.653:329): avc: denied { open } for pid=6676 comm="syz.1.153" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.880090][ T6677] futex_wake_op: syz.1.153 tries to shift op by -1; fix this program [ 67.923422][ T40] audit: type=1400 audit(1756885281.723:330): avc: denied { getopt } for pid=6678 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.993380][ T6684] __nla_validate_parse: 2 callbacks suppressed [ 67.993391][ T6684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.155'. [ 68.012965][ T6684] netlink: 'syz.1.155': attribute type 1 has an invalid length. [ 68.012988][ T6684] netlink: 224 bytes leftover after parsing attributes in process `syz.1.155'. [ 68.065847][ T40] audit: type=1400 audit(1756885281.863:331): avc: denied { map } for pid=6683 comm="syz.1.155" path="socket:[13664]" dev="sockfs" ino=13664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.073442][ T40] audit: type=1400 audit(1756885281.863:332): avc: denied { read accept } for pid=6683 comm="syz.1.155" path="socket:[13664]" dev="sockfs" ino=13664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.139987][ T6684] overlayfs: failed to resolve './file0::../file0': -2 [ 68.187120][ T40] audit: type=1400 audit(1756885281.983:333): avc: denied { getopt } for pid=6692 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.301226][ T40] audit: type=1400 audit(1756885282.093:334): avc: denied { bind } for pid=6692 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.310435][ T40] audit: type=1400 audit(1756885282.103:335): avc: denied { shutdown } for pid=6692 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.319040][ T40] audit: type=1400 audit(1756885282.103:336): avc: denied { ioctl } for pid=6692 comm="syz.1.156" path="socket:[14547]" dev="sockfs" ino=14547 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.414877][ T6709] misc userio: Invalid payload size [ 68.417432][ T6709] misc userio: Invalid payload size [ 68.481964][ T6714] tmpfs: Too few inodes for current use [ 68.496224][ T40] audit: type=1400 audit(2000000000.080:337): avc: denied { unmount } for pid=5973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.602768][ T6718] block nbd1: Attempted send on invalid socket [ 68.605795][ T6718] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 68.609318][ T6718] XFS (nbd1): SB validate failed with error -5. [ 68.708335][ T6727] geneve2: entered promiscuous mode [ 68.710060][ T6727] geneve2: entered allmulticast mode [ 68.714333][ T61] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.717165][ T61] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.721149][ T61] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.725062][ T61] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.993720][ T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 69.151365][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 69.155291][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 69.158528][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 69.163693][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.168776][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.173651][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 69.182323][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 69.185505][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 69.190124][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.194181][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 69.195946][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.200448][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 69.204897][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 69.211488][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 69.214701][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 69.220217][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.226295][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.230951][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 69.240296][ T34] usb 5-1: string descriptor 0 read error: -22 [ 69.245259][ T34] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 69.249247][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.250798][ T6758] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 69.271754][ T34] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 69.382491][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.175'. [ 69.385747][ T6769] bridge_slave_1: left allmulticast mode [ 69.387786][ T6769] bridge_slave_1: left promiscuous mode [ 69.389718][ T6769] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.394934][ T6769] bridge_slave_0: left allmulticast mode [ 69.396707][ T6769] bridge_slave_0: left promiscuous mode [ 69.399253][ T6769] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.466651][ T34] usb 5-1: USB disconnect, device number 6 [ 69.862544][ T6781] batadv_slave_1: entered promiscuous mode [ 69.870424][ T6780] batadv_slave_1: left promiscuous mode [ 70.057604][ T6788] netlink: 'syz.1.180': attribute type 28 has an invalid length. [ 70.336577][ T6797] netlink: 108 bytes leftover after parsing attributes in process `syz.1.183'. [ 70.533171][ T6806] netlink: 40 bytes leftover after parsing attributes in process `syz.1.185'. [ 70.665245][ T6812] netlink: 'syz.1.187': attribute type 1 has an invalid length. [ 70.680449][ T6813] veth3: entered promiscuous mode [ 70.809542][ T6819] tls_set_device_offload: netdev not found [ 71.162897][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.304214][ C3] vkms_vblank_simulate: vblank timer overrun [ 71.348939][ T6829] overlayfs: failed to resolve './file1': -2 [ 71.544221][ C3] vkms_vblank_simulate: vblank timer overrun [ 71.577221][ T6832] netlink: 'syz.0.190': attribute type 1 has an invalid length. [ 71.659113][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 71.665091][ T6834] binder: 6833:6834 ioctl c02064b2 200000000180 returned -22 [ 71.669995][ T6834] binder: 6833:6834 ioctl c00464b4 200000000280 returned -22 [ 71.924365][ T6839] overlayfs: failed to resolve './file1': -2 [ 71.957679][ C3] vkms_vblank_simulate: vblank timer overrun [ 71.993083][ T6836] overlayfs: failed to resolve './file1': -2 [ 72.262534][ T6857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.396157][ C3] vkms_vblank_simulate: vblank timer overrun [ 72.552718][ T6869] netlink: 'syz.0.200': attribute type 83 has an invalid length. [ 73.064202][ C3] vkms_vblank_simulate: vblank timer overrun [ 73.317349][ T6887] overlayfs: failed to resolve './file1': -2 [ 73.338424][ T6887] overlayfs: failed to resolve './file1': -2 [ 73.462692][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 73.462714][ T40] audit: type=1400 audit(2000000005.040:359): avc: denied { create } for pid=6888 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.493826][ C3] vkms_vblank_simulate: vblank timer overrun [ 73.569860][ T40] audit: type=1400 audit(2000000005.140:360): avc: denied { bind } for pid=6888 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.640448][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'. [ 73.647643][ T40] audit: type=1400 audit(2000000005.220:361): avc: denied { write } for pid=6890 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.934109][ T40] audit: type=1400 audit(2000000005.520:362): avc: denied { execute } for pid=6897 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 73.972339][ T40] audit: type=1400 audit(2000000005.540:363): avc: denied { execute_no_trans } for pid=6897 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 74.006269][ C3] vkms_vblank_simulate: vblank timer overrun [ 74.210721][ T6904] capability: warning: `syz.0.213' uses deprecated v2 capabilities in a way that may be insecure [ 74.443847][ T40] audit: type=1400 audit(2000000006.010:364): avc: denied { add_name } for pid=6910 comm="syz.4.214" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.472758][ T40] audit: type=1400 audit(2000000006.020:365): avc: denied { create } for pid=6910 comm="syz.4.214" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.512194][ T40] audit: type=1400 audit(2000000006.020:366): avc: denied { associate } for pid=6910 comm="syz.4.214" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.523188][ T40] audit: type=1400 audit(2000000006.020:367): avc: denied { write } for pid=6910 comm="syz.4.214" name="file1" dev="9p" ino=35913896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.541666][ C3] vkms_vblank_simulate: vblank timer overrun [ 74.545259][ T6919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.591458][ T40] audit: type=1400 audit(2000000006.050:368): avc: denied { append } for pid=6910 comm="syz.4.214" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.719886][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.746625][ C3] vkms_vblank_simulate: vblank timer overrun [ 74.754761][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.806380][ C3] vkms_vblank_simulate: vblank timer overrun [ 74.810052][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.844229][ C3] vkms_vblank_simulate: vblank timer overrun [ 74.894577][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.917593][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.966393][ C3] vkms_vblank_simulate: vblank timer overrun [ 75.176119][ C3] vkms_vblank_simulate: vblank timer overrun [ 75.323238][ T6943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.624647][ T1148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.878527][ T1148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.892288][ T6036] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.064166][ T6036] usb 5-1: Using ep0 maxpacket: 8 [ 76.072519][ T1148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.072555][ T6036] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 76.086058][ T6036] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 76.093138][ T6036] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 76.100063][ T6036] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 76.106198][ T6036] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 76.117004][ T6964] netlink: 132 bytes leftover after parsing attributes in process `syz.4.229'. [ 76.131500][ T6036] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 76.137712][ T6922] chnl_net:caif_netlink_parms(): no params data found [ 76.152509][ T6036] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 76.159479][ T6036] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 76.191406][ T6036] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 76.210053][ T6036] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 76.233607][ T6036] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 76.237324][ T6036] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 76.270359][ T6036] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 76.289342][ T6036] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 76.310781][ T6036] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 76.324432][ C3] vkms_vblank_simulate: vblank timer overrun [ 76.378841][ C3] vkms_vblank_simulate: vblank timer overrun [ 76.402953][ T1148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.459419][ T6036] usb 5-1: string descriptor 0 read error: -22 [ 76.463943][ T6036] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 76.470952][ T6036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.502624][ T6036] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 76.660923][ T29] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 76.713766][ T6036] usb 5-1: USB disconnect, device number 7 [ 76.847821][ T29] usb 9-1: unable to get BOS descriptor or descriptor too short [ 76.852823][ T29] usb 9-1: not running at top speed; connect to a high speed hub [ 76.872579][ T29] usb 9-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.890851][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.907177][ T29] usb 9-1: config 1 interface 0 has no altsetting 0 [ 76.908163][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.919549][ T6922] bridge_slave_0: entered allmulticast mode [ 76.936549][ T29] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.940502][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.953760][ T6922] bridge_slave_0: entered promiscuous mode [ 76.967606][ T29] usb 9-1: Product: syz [ 76.970498][ T29] usb 9-1: Manufacturer: syz [ 76.975011][ T29] usb 9-1: SerialNumber: syz [ 76.980895][ T6922] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.009452][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.032782][ T6922] bridge_slave_1: entered allmulticast mode [ 77.045200][ T6922] bridge_slave_1: entered promiscuous mode [ 77.061456][ T63] Bluetooth: hci4: command tx timeout [ 77.233663][ T29] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 77.256403][ T29] usb 9-1: USB disconnect, device number 7 [ 77.446161][ T6922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.469684][ T6922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.713876][ T6922] team0: Port device team_slave_0 added [ 77.720133][ T6922] team0: Port device team_slave_1 added [ 78.101922][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.105321][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.131185][ C3] vkms_vblank_simulate: vblank timer overrun [ 78.200851][ T6922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.212712][ T1148] bridge_slave_1: left allmulticast mode [ 78.215482][ T1148] bridge_slave_1: left promiscuous mode [ 78.219374][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.317123][ T1148] bridge_slave_0: left allmulticast mode [ 78.319823][ T1148] bridge_slave_0: left promiscuous mode [ 78.326762][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.429073][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.246'. [ 78.444603][ T7055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.246'. [ 79.135689][ T63] Bluetooth: hci4: command tx timeout [ 79.514964][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.591025][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.597403][ T1148] bond0 (unregistering): Released all slaves [ 79.601223][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 79.601239][ T40] audit: type=1400 audit(2000000011.180:385): avc: denied { map } for pid=7060 comm="syz.1.250" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.631144][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.635442][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.642606][ T40] audit: type=1400 audit(2000000011.180:386): avc: denied { execute } for pid=7060 comm="syz.1.250" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.658209][ T6922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.776082][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.844137][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.193411][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.331232][ T7077] netlink: 'syz.4.253': attribute type 3 has an invalid length. [ 80.335214][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 80.342246][ T7076] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.366771][ T7076] overlay: filesystem on ./bus not supported as upperdir [ 80.477802][ T6922] hsr_slave_0: entered promiscuous mode [ 80.499838][ T6922] hsr_slave_1: entered promiscuous mode [ 80.506686][ T6922] debugfs: 'hsr0' already exists in 'hsr' [ 80.509126][ T6922] Cannot create hsr debugfs directory [ 80.704255][ T40] audit: type=1400 audit(2000000012.290:387): avc: denied { write } for pid=7086 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.869095][ T40] audit: type=1400 audit(2000000012.440:388): avc: denied { read } for pid=7086 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.160179][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.221214][ T1148] hsr_slave_0: left promiscuous mode [ 81.222745][ T63] Bluetooth: hci4: command tx timeout [ 81.244126][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.270433][ T1148] hsr_slave_1: left promiscuous mode [ 81.273643][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.276964][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.286421][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.289668][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.375466][ T60] cfg80211: failed to load regulatory.db [ 81.396515][ T1148] veth1_macvtap: left promiscuous mode [ 81.399182][ T1148] veth0_macvtap: left promiscuous mode [ 81.415416][ T1148] veth1_vlan: left promiscuous mode [ 81.418224][ T1148] veth0_vlan: left promiscuous mode [ 82.424096][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.467741][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.721875][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.779945][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.302744][ T63] Bluetooth: hci4: command tx timeout [ 83.732201][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 84.020228][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.050001][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 84.621555][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.493726][ T40] audit: type=1400 audit(2000000018.070:389): avc: denied { create } for pid=7116 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.583431][ T6922] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.586856][ T40] audit: type=1400 audit(2000000018.070:390): avc: denied { write } for pid=7116 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.619093][ T6922] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.679208][ T6922] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.689049][ T6922] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.940546][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'. [ 87.183293][ T6922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.274843][ T6922] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.291014][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.304552][ T7031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.367727][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.370779][ T7027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.414579][ T40] audit: type=1400 audit(2000000018.990:391): avc: denied { append } for pid=7145 comm="syz.1.264" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.550976][ T40] audit: type=1400 audit(2000000019.090:392): avc: denied { ioctl } for pid=7145 comm="syz.1.264" path="socket:[16264]" dev="sockfs" ino=16264 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.898501][ T6922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.917621][ T40] audit: type=1400 audit(2000000019.500:393): avc: denied { setopt } for pid=7132 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.003058][ T7150] misc userio: Invalid payload size [ 88.418725][ T40] audit: type=1400 audit(2000000019.960:394): avc: denied { write } for pid=7169 comm="syz.1.265" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.462422][ T40] audit: type=1400 audit(2000000020.040:395): avc: denied { ioctl } for pid=7169 comm="syz.1.265" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.533662][ T6922] veth0_vlan: entered promiscuous mode [ 88.552933][ T6922] veth1_vlan: entered promiscuous mode [ 88.600757][ T6922] veth0_macvtap: entered promiscuous mode [ 88.633097][ T6922] veth1_macvtap: entered promiscuous mode [ 88.660263][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.669045][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.713657][ T7027] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.719491][ T7027] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.732891][ T7027] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.736779][ T7027] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.953405][ T7030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.957701][ T7030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.065614][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.068787][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.100793][ T40] audit: type=1400 audit(2000000020.670:396): avc: denied { mounton } for pid=6922 comm="syz-executor" path="/syzkaller.1WMqcA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 89.152959][ T7183] overlayfs: failed to resolve './file0': -2 [ 89.187406][ T7183] overlayfs: failed to resolve './file0': -2 [ 89.431336][ T40] audit: type=1400 audit(2000000020.990:397): avc: denied { read } for pid=7184 comm="syz.5.211" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 89.449843][ T7189] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.455757][ T40] audit: type=1400 audit(2000000021.010:398): avc: denied { open } for pid=7184 comm="syz.5.211" path="/0/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 89.472909][ T7189] block device autoloading is deprecated and will be removed. [ 89.518688][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.211'. [ 89.525553][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.271'. [ 90.975711][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.276'. [ 91.118501][ T7221] tmpfs: Bad value for 'mpol' [ 91.165821][ T7232] fuse: Unknown parameter 'groqp_id' [ 91.168517][ T7232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7232 comm=syz.4.281 [ 91.404450][ T7234] raw_sendmsg: syz.4.282 forgot to set AF_INET. Fix it! [ 91.731413][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 91.731430][ T40] audit: type=1400 audit(2000000023.300:404): avc: denied { getopt } for pid=7252 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.782600][ T40] audit: type=1400 audit(2000000023.340:405): avc: denied { kexec_image_load } for pid=7245 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 91.802767][ T40] audit: type=1400 audit(2000000023.370:406): avc: denied { create } for pid=7249 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 91.850656][ T7251] syz.1.285: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 91.860205][ T40] audit: type=1400 audit(2000000023.430:407): avc: denied { bind } for pid=7261 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.882922][ T7251] CPU: 2 UID: 0 PID: 7251 Comm: syz.1.285 Not tainted syzkaller #0 PREEMPT(full) [ 91.882943][ T7251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.882952][ T7251] Call Trace: [ 91.882957][ T7251] [ 91.882963][ T7251] dump_stack_lvl+0x16c/0x1f0 [ 91.883008][ T7251] warn_alloc+0x248/0x3a0 [ 91.883030][ T7251] ? __pfx_warn_alloc+0x10/0x10 [ 91.883054][ T7251] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 91.883074][ T7251] ? __vmalloc_node_noprof+0xad/0xf0 [ 91.883100][ T7251] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 91.883128][ T7251] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 91.883153][ T7251] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 91.883182][ T7251] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 91.883202][ T7251] vmalloc_user_noprof+0x9e/0xe0 [ 91.883222][ T7251] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 91.883242][ T7251] vb2_vmalloc_alloc+0x135/0x3f0 [ 91.883263][ T7251] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 91.883283][ T7251] __vb2_queue_alloc+0x8c9/0x1280 [ 91.883314][ T7251] vb2_core_reqbufs+0xa90/0xfe0 [ 91.883345][ T7251] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 91.883366][ T7251] ? __pfx___might_resched+0x10/0x10 [ 91.883389][ T7251] ? __mutex_lock+0x1c5/0x1060 [ 91.883411][ T7251] ? avc_has_extended_perms+0x47c/0x1090 [ 91.883431][ T7251] vb2_reqbufs+0x1a3/0x1f0 [ 91.883448][ T7251] ? __pfx_vb2_reqbufs+0x10/0x10 [ 91.883462][ T7251] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 91.883479][ T7251] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.883498][ T7251] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 91.883519][ T7251] v4l_reqbufs+0x152/0x1e0 [ 91.883543][ T7251] __video_do_ioctl+0xb40/0xfc0 [ 91.883561][ T7251] ? __might_fault+0xe3/0x190 [ 91.883575][ T7251] ? __pfx___video_do_ioctl+0x10/0x10 [ 91.883598][ T7251] video_usercopy+0x4d0/0x1720 [ 91.883615][ T7251] ? __pfx___video_do_ioctl+0x10/0x10 [ 91.883629][ T7251] ? selinux_kernel_read_file+0xa0/0x130 [ 91.883651][ T7251] ? __pfx_video_usercopy+0x10/0x10 [ 91.883682][ T7251] v4l2_ioctl+0x1bd/0x250 [ 91.883695][ T7251] ? __pfx_v4l2_ioctl+0x10/0x10 [ 91.883710][ T7251] __x64_sys_ioctl+0x18e/0x210 [ 91.883734][ T7251] do_syscall_64+0xcd/0x4c0 [ 91.883753][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.883767][ T7251] RIP: 0033:0x7fc91478ebe9 [ 91.883779][ T7251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.883793][ T7251] RSP: 002b:00007fc915616038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.883807][ T7251] RAX: ffffffffffffffda RBX: 00007fc9149c5fa0 RCX: 00007fc91478ebe9 [ 91.883816][ T7251] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000005 [ 91.883824][ T7251] RBP: 00007fc914811e19 R08: 0000000000000000 R09: 0000000000000000 [ 91.883833][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.883841][ T7251] R13: 00007fc9149c6038 R14: 00007fc9149c5fa0 R15: 00007ffecba60c38 [ 91.883861][ T7251] [ 91.883867][ T7251] Mem-Info: [ 91.922218][ T40] audit: type=1400 audit(2000000023.430:408): avc: denied { listen } for pid=7261 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.931818][ T7251] active_anon:8680 inactive_anon:0 isolated_anon:0 [ 91.931818][ T7251] active_file:13289 inactive_file:40617 isolated_file:0 [ 91.931818][ T7251] unevictable:1768 dirty:86 writeback:0 [ 91.931818][ T7251] slab_reclaimable:12232 slab_unreclaimable:69536 [ 91.931818][ T7251] mapped:24462 shmem:2401 pagetables:1291 [ 91.931818][ T7251] sec_pagetables:305 bounce:0 [ 91.931818][ T7251] kernel_misc_reclaimable:0 [ 91.931818][ T7251] free:458780 free_pcp:10762 free_cma:0 [ 91.931866][ T7251] Node 0 active_anon:34720kB inactive_anon:0kB active_file:53156kB inactive_file:162272kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97848kB dirty:336kB writeback:0kB shmem:6068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13040kB pagetables:4976kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB [ 91.931930][ T7251] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 91.931964][ T7251] Node 0 DMA free:15328kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 91.932008][ T7251] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 91.932041][ T7251] Node 0 DMA32 free:210660kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34720kB inactive_anon:0kB active_file:53156kB inactive_file:162272kB unevictable:3536kB writepending:336kB present:2080628kB managed:1263464kB mlocked:0kB bounce:0kB free_pcp:35096kB local_pcp:6988kB free_cma:0kB [ 91.932086][ T7251] lowmem_reserve[]: 0 0 0 0 0 [ 91.932119][ T7251] Node 1 Normal free:1609132kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:7920kB local_pcp:1600kB free_cma:0kB [ 91.932165][ T7251] lowmem_reserve[]: 0 0 0 0 0 [ 91.932196][ T7251] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 91.932354][ T7251] Node 0 DMA32: 809*4kB (ME) 484*8kB (UME) 230*16kB (UME) 250*32kB (UME) 262*64kB (UME) 73*128kB (UME) 23*256kB (M) 30*512kB (UM) 17*1024kB (UME) 8*2048kB (UME) 27*4096kB (UM) = 210532kB [ 91.932505][ T7251] Node 1 Normal: 5*4kB (UME) 11*8kB (UME) 26*16kB (UME) 51*32kB (UME) 19*64kB (UME) 9*128kB (UME) 4*256kB (UE) 4*512kB (UM) 2*1024kB (UE) 1*2048kB (M) 390*4096kB (M) = 1609132kB [ 91.932659][ T7251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.932671][ T7251] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.932683][ T7251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.932696][ T7251] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.932708][ T7251] 56303 total pagecache pages [ 91.932714][ T7251] 0 pages in swap cache [ 91.932719][ T7251] Free swap = 124996kB [ 91.932725][ T7251] Total swap = 124996kB [ 91.932732][ T7251] 1048443 pages RAM [ 91.932739][ T7251] 0 pages HighMem/MovableOnly [ 91.932745][ T7251] 283264 pages reserved [ 91.932750][ T7251] 0 pages cma reserved [ 92.041829][ T63] Bluetooth: hci4: command tx timeout [ 92.042360][ T40] audit: type=1400 audit(2000000023.430:409): avc: denied { write } for pid=7261 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.876792][ T7293] warning: `syz.1.297' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.908368][ T40] audit: type=1400 audit(2000000024.490:410): avc: denied { unmount } for pid=6922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 92.922794][ T40] audit: type=1400 audit(2000000024.490:411): avc: denied { connect } for pid=7294 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.991615][ T40] audit: type=1400 audit(2000000024.490:412): avc: denied { write } for pid=7294 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.166151][ T7310] batadv_slave_1: Device is already in use. [ 93.189014][ T7311] process 'syz.5.304' launched './file0' with NULL argv: empty string added [ 93.219295][ T40] audit: type=1400 audit(2000000024.800:413): avc: denied { execute_no_trans } for pid=7307 comm="syz.5.304" path="/7/file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.825025][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.312'. [ 94.343791][ T7347] bridge_slave_0: left allmulticast mode [ 94.350624][ T7347] bridge_slave_0: left promiscuous mode [ 94.353752][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.425449][ T7347] bridge_slave_1: left allmulticast mode [ 94.436941][ T7347] bridge_slave_1: left promiscuous mode [ 94.439517][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.557832][ T7347] bond0: (slave bond_slave_0): Releasing backup interface [ 94.612989][ T7347] bond0: (slave bond_slave_1): Releasing backup interface [ 94.614407][ T7361] program syz.1.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.625327][ T7363] ubi31: attaching mtd0 [ 94.639485][ T7363] ubi31: scanning is finished [ 94.643578][ T7363] ubi31: empty MTD device detected [ 94.666456][ T7347] team0: Port device team_slave_0 removed [ 94.710259][ T7347] team0: Port device team_slave_1 removed [ 94.715465][ T7347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.725040][ T7347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.732108][ T7347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.736915][ T7347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.790233][ T7363] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 94.795688][ T7363] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 94.800986][ T7363] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 94.808612][ T7363] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 94.815409][ T7363] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 94.819299][ T7363] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 94.826716][ T7363] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1719630023 [ 94.835012][ T7363] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 94.867009][ T7372] ubi31: background thread "ubi_bgt31d" started, PID 7372 [ 95.590561][ T7389] SELinux: policydb string does not match my string SE Linux [ 95.598828][ T7389] SELinux: failed to load policy [ 95.892276][ T7409] overlayfs: missing 'workdir' [ 95.939529][ T7412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.333'. [ 95.965436][ T7413] netlink: 'syz.1.333': attribute type 7 has an invalid length. [ 95.997627][ T7413] : entered promiscuous mode [ 96.153996][ T7420] netlink: 48 bytes leftover after parsing attributes in process `syz.4.336'. [ 96.270973][ T7424] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 96.288972][ T7424] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 96.348438][ T7424] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 96.353350][ T7424] overlayfs: failed to look up (tracing) for ino (-66) [ 96.358499][ T7424] 9pnet_virtio: no channels available for device syz [ 96.735730][ T7432] sysfs: Unknown parameter 'barrier' [ 96.752535][ T7432] SELinux: Context system_u:object_r:syslog_conf_t:s0 is not valid (left unmapped). [ 96.759079][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 96.759094][ T40] audit: type=1400 audit(2000000284.324:429): avc: denied { relabelto } for pid=7431 comm="syz.4.340" name="syz4" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 96.790262][ T40] audit: type=1400 audit(2000000284.324:430): avc: denied { associate } for pid=7431 comm="syz.4.340" name="syz4" dev="cgroup2" ino=154 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslog_conf_t:s0" [ 97.159996][ T40] audit: type=1400 audit(2000000284.714:431): avc: denied { module_request } for pid=7436 comm="syz.1.342" kmod="algif-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 97.174454][ T6029] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 97.361402][ T6029] usb 9-1: Using ep0 maxpacket: 16 [ 97.368729][ T6029] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.386322][ T6029] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 97.391581][ T6029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.397031][ T6029] usb 9-1: config 0 descriptor?? [ 97.719049][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 97.724582][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 97.920255][ T6029] usbhid 9-1:0.0: can't add hid device: -71 [ 97.926349][ T6029] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 97.936309][ T6029] usb 9-1: USB disconnect, device number 8 [ 98.002243][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.009212][ T7450] batadv_slave_0: entered promiscuous mode [ 98.276648][ T7454] syzkaller1: entered promiscuous mode [ 98.279687][ T7454] syzkaller1: entered allmulticast mode [ 102.694729][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 102.949206][ T7498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.356'. [ 102.978822][ T40] audit: type=1400 audit(2000000290.534:432): avc: denied { create } for pid=7497 comm="syz.4.356" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.006750][ T60] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 103.032442][ T40] audit: type=1400 audit(2000000290.534:433): avc: denied { read } for pid=7497 comm="syz.4.356" name="file0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.055599][ T40] audit: type=1400 audit(2000000290.534:434): avc: denied { open } for pid=7497 comm="syz.4.356" path="/76/file0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.087946][ T1458] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 103.100170][ T60] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 103.113972][ T40] audit: type=1400 audit(2000000290.534:435): avc: denied { ioctl } for pid=7497 comm="syz.4.356" path="/76/file0" dev="tmpfs" ino=445 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.148973][ T40] audit: type=1400 audit(2000000290.534:436): avc: denied { read write } for pid=7493 comm="syz.1.355" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 103.227216][ T7505] fido_id[7505]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.229030][ T40] audit: type=1400 audit(2000000290.534:437): avc: denied { open } for pid=7493 comm="syz.1.355" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 103.272469][ T7514] overlay: filesystem on ./bus not supported as upperdir [ 103.286994][ T7515] No control pipe specified [ 103.289327][ T40] audit: type=1400 audit(2000000290.574:438): avc: denied { shutdown } for pid=7493 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.311456][ T1458] usb 10-1: Using ep0 maxpacket: 8 [ 103.320424][ T1458] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 103.320469][ T1458] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 103.320490][ T1458] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.320507][ T1458] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.320528][ T1458] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.332036][ T1458] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 103.332084][ T1458] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 103.332108][ T1458] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.332131][ T1458] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.332154][ T1458] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.358259][ T1458] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 103.369627][ T40] audit: type=1400 audit(2000000290.684:439): avc: denied { unlink } for pid=6163 comm="syz-executor" name="file0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.386073][ T1458] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 103.529571][ T1458] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.555242][ T1458] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.559382][ T1458] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.576146][ T7525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.360'. [ 103.614800][ T1458] usb 10-1: string descriptor 0 read error: -22 [ 103.632202][ T1458] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 103.637405][ T1458] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.709613][ T1458] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 103.811477][ T7521] cdrom: dropping to single frame dma [ 103.963525][ T53] usb 10-1: USB disconnect, device number 2 [ 104.082681][ T7548] syzkaller1: entered promiscuous mode [ 104.086287][ T7548] syzkaller1: entered allmulticast mode [ 104.348761][ T40] audit: type=1400 audit(2000000291.924:440): avc: denied { connect } for pid=7542 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.410119][ T40] audit: type=1400 audit(2000000291.984:441): avc: denied { ioctl } for pid=7542 comm="syz.4.365" path="socket:[16937]" dev="sockfs" ino=16937 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.664604][ T7564] afs: Unknown parameter 'n' [ 104.675985][ T7564] ======================================================= [ 104.675985][ T7564] WARNING: The mand mount option has been deprecated and [ 104.675985][ T7564] and is ignored by this kernel. Remove the mand [ 104.675985][ T7564] option from the mount to silence this warning. [ 104.675985][ T7564] ======================================================= [ 104.727482][ T7564] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 104.730807][ T7564] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 104.743104][ T7564] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 104.935632][ T7572] netlink: 284 bytes leftover after parsing attributes in process `syz.4.371'. [ 104.969407][ T7569] overlay: filesystem on ./bus not supported as upperdir [ 105.298530][ T7586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7586 comm=syz.4.377 [ 105.316265][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.377'. [ 105.418014][ T7590] netlink: 'syz.0.380': attribute type 4 has an invalid length. [ 105.422376][ T7590] netlink: 152 bytes leftover after parsing attributes in process `syz.0.380'. [ 105.435160][ T7588] netlink: 108 bytes leftover after parsing attributes in process `syz.5.378'. [ 105.474615][ T7590] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 105.519904][ T7595] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 105.541708][ T7595] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.695716][ T7595] netlink: 'syz.4.381': attribute type 3 has an invalid length. [ 105.705476][ T7605] i2c i2c-1: Invalid block write size 34 [ 105.708469][ T7595] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.381'. [ 105.725069][ T7608] option changes via remount are deprecated (pid=7607 comm=syz.5.385) [ 105.730680][ T7608] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 105.736699][ C2] vkms_vblank_simulate: vblank timer overrun [ 105.750372][ T7606] i2c i2c-1: Invalid block write size 34 [ 105.757811][ T7605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.096388][ T7621] comedi comedi0: Minor 3 could not be opened [ 106.903940][ C2] vkms_vblank_simulate: vblank timer overrun [ 106.939809][ C2] vkms_vblank_simulate: vblank timer overrun [ 107.207855][ C2] vkms_vblank_simulate: vblank timer overrun [ 107.475848][ C2] vkms_vblank_simulate: vblank timer overrun [ 107.570312][ T7657] netlink: 'syz.0.398': attribute type 2 has an invalid length. [ 107.907894][ C2] vkms_vblank_simulate: vblank timer overrun [ 107.975815][ C2] vkms_vblank_simulate: vblank timer overrun [ 108.590652][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 108.590670][ T40] audit: type=1400 audit(2000000296.164:446): avc: denied { ioctl } for pid=7689 comm="syz.1.406" path="socket:[17161]" dev="sockfs" ino=17161 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.626948][ T7694] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 108.633505][ T7694] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 108.659400][ T40] audit: type=1400 audit(2000000296.204:447): avc: denied { mount } for pid=7693 comm="syz.0.407" name="/" dev="hugetlbfs" ino=18272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 108.832943][ T7699] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 109.006793][ T7705] syz.1.413: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 109.020115][ T7705] CPU: 0 UID: 0 PID: 7705 Comm: syz.1.413 Not tainted syzkaller #0 PREEMPT(full) [ 109.020141][ T7705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.020154][ T7705] Call Trace: [ 109.020160][ T7705] [ 109.020168][ T7705] dump_stack_lvl+0x16c/0x1f0 [ 109.020195][ T7705] warn_alloc+0x248/0x3a0 [ 109.020218][ T7705] ? __pfx_warn_alloc+0x10/0x10 [ 109.020234][ T7705] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.020263][ T7705] ? kasan_save_stack+0x42/0x60 [ 109.020280][ T7705] ? kasan_save_stack+0x33/0x60 [ 109.020296][ T7705] ? kasan_save_track+0x14/0x30 [ 109.020312][ T7705] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 109.020335][ T7705] ? __vb2_queue_alloc+0x8c9/0x1280 [ 109.020355][ T7705] ? vb2_core_create_bufs+0x559/0xab0 [ 109.020378][ T7705] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 109.020401][ T7705] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 109.020445][ T7705] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 109.020476][ T7705] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 109.020507][ T7705] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 109.020531][ T7705] vmalloc_user_noprof+0x9e/0xe0 [ 109.020556][ T7705] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 109.020580][ T7705] vb2_vmalloc_alloc+0x135/0x3f0 [ 109.020605][ T7705] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 109.020628][ T7705] __vb2_queue_alloc+0x8c9/0x1280 [ 109.020667][ T7705] vb2_core_create_bufs+0x559/0xab0 [ 109.020693][ T7705] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 109.020725][ T7705] ? __mutex_trylock_common+0xe9/0x250 [ 109.020755][ T7705] vb2_create_bufs+0x5e8/0x840 [ 109.020781][ T7705] ? __pfx_vb2_create_bufs+0x10/0x10 [ 109.020804][ T7705] ? v4l_sanitize_colorspace+0x213/0x400 [ 109.020830][ T7705] vb2_ioctl_create_bufs+0x244/0x3e0 [ 109.020851][ T7705] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.020873][ T7705] vidioc_create_bufs+0x7d/0xf0 [ 109.020894][ T7705] v4l_create_bufs+0x156/0x270 [ 109.020922][ T7705] __video_do_ioctl+0xb40/0xfc0 [ 109.020942][ T7705] ? __might_fault+0xe3/0x190 [ 109.020960][ T7705] ? __pfx___video_do_ioctl+0x10/0x10 [ 109.020987][ T7705] video_usercopy+0x4d0/0x1720 [ 109.021006][ T7705] ? __pfx___video_do_ioctl+0x10/0x10 [ 109.021021][ T7705] ? selinux_kernel_read_file+0xa0/0x130 [ 109.021045][ T7705] ? __pfx_video_usercopy+0x10/0x10 [ 109.021079][ T7705] v4l2_ioctl+0x1bd/0x250 [ 109.021095][ T7705] ? __pfx_v4l2_ioctl+0x10/0x10 [ 109.021111][ T7705] __x64_sys_ioctl+0x18e/0x210 [ 109.021137][ T7705] do_syscall_64+0xcd/0x4c0 [ 109.021158][ T7705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.021175][ T7705] RIP: 0033:0x7fc91478ebe9 [ 109.021190][ T7705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.021208][ T7705] RSP: 002b:00007fc915616038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.021225][ T7705] RAX: ffffffffffffffda RBX: 00007fc9149c5fa0 RCX: 00007fc91478ebe9 [ 109.021237][ T7705] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000004 [ 109.021276][ T7705] RBP: 00007fc914811e19 R08: 0000000000000000 R09: 0000000000000000 [ 109.021289][ T7705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.021300][ T7705] R13: 00007fc9149c6038 R14: 00007fc9149c5fa0 R15: 00007ffecba60c38 [ 109.021324][ T7705] [ 109.041681][ T40] audit: type=1400 audit(2000000296.614:448): avc: denied { create } for pid=7700 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 109.047481][ T7705] Mem-Info: [ 109.203471][ T7705] active_anon:9306 inactive_anon:0 isolated_anon:0 [ 109.203471][ T7705] active_file:13322 inactive_file:40623 isolated_file:0 [ 109.203471][ T7705] unevictable:1768 dirty:174 writeback:0 [ 109.203471][ T7705] slab_reclaimable:12492 slab_unreclaimable:70362 [ 109.203471][ T7705] mapped:25497 shmem:2416 pagetables:1401 [ 109.203471][ T7705] sec_pagetables:305 bounce:0 [ 109.203471][ T7705] kernel_misc_reclaimable:0 [ 109.203471][ T7705] free:452104 free_pcp:16703 free_cma:0 [ 109.253028][ T7705] Node 0 active_anon:37224kB inactive_anon:0kB active_file:53288kB inactive_file:162296kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:101988kB dirty:696kB writeback:0kB shmem:6128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13264kB pagetables:5416kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB [ 109.287575][ T7705] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 109.299866][ T7705] Node 0 DMA free:15328kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 109.312673][ T7705] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 109.335224][ T7705] Node 0 DMA32 free:183700kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37100kB inactive_anon:0kB active_file:53288kB inactive_file:162296kB unevictable:3536kB writepending:696kB present:2080628kB managed:1263464kB mlocked:0kB bounce:0kB free_pcp:59524kB local_pcp:2052kB free_cma:0kB [ 109.373148][ T7705] lowmem_reserve[]: 0 0 0 0 0 [ 109.376550][ T7705] Node 1 Normal free:1609388kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:7696kB local_pcp:1632kB free_cma:0kB [ 109.396764][ T7705] lowmem_reserve[]: 0 0 0 0 0 [ 109.399050][ T7705] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 109.406184][ T7705] Node 0 DMA32: 519*4kB (ME) 923*8kB (UME) 519*16kB (UM) 435*32kB (UME) 330*64kB (UME) 99*128kB (UME) 46*256kB (UME) 30*512kB (ME) 13*1024kB (UME) 4*2048kB (UM) 17*4096kB (UM) = 183748kB [ 109.414601][ T7705] Node 1 Normal: 5*4kB (UME) 11*8kB (UME) 26*16kB (UME) 59*32kB (UME) 19*64kB (UME) 9*128kB (UME) 4*256kB (UE) 4*512kB (UM) 2*1024kB (UE) 1*2048kB (M) 390*4096kB (M) = 1609388kB [ 109.425535][ T7705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.430067][ T7705] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.435818][ T7705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.439916][ T7705] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.444016][ T7705] 56357 total pagecache pages [ 109.447411][ T7705] 0 pages in swap cache [ 109.449646][ T7705] Free swap = 124996kB [ 109.452833][ T7705] Total swap = 124996kB [ 109.454561][ T7705] 1048443 pages RAM [ 109.456193][ T7705] 0 pages HighMem/MovableOnly [ 109.458237][ T7705] 283264 pages reserved [ 109.461013][ T7705] 0 pages cma reserved [ 109.474440][ T7718] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 109.478809][ T7718] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 109.506836][ T7720] netlink: 44 bytes leftover after parsing attributes in process `syz.1.417'. [ 109.601825][ T40] audit: type=1400 audit(2000000297.174:449): avc: denied { create } for pid=7721 comm="syz.5.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 109.614644][ T40] audit: type=1400 audit(2000000297.174:450): avc: denied { write } for pid=7721 comm="syz.5.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 109.664266][ T7724] MPI: mpi too large (16392 bits) [ 109.704258][ T40] audit: type=1400 audit(2000000297.284:451): avc: denied { write } for pid=7728 comm="syz.5.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 109.931242][ T7737] overlayfs: missing 'workdir' [ 110.046861][ T7740] nvme_fabrics: missing parameter 'transport=%s' [ 110.102397][ T7740] nvme_fabrics: missing parameter 'nqn=%s' [ 110.128151][ T7746] netlink: 68 bytes leftover after parsing attributes in process `syz.0.424'. [ 110.148392][ T40] audit: type=1400 audit(2000000297.694:452): avc: denied { create } for pid=7745 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.157598][ T40] audit: type=1400 audit(2000000297.694:453): avc: denied { write } for pid=7745 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.185782][ C2] vkms_vblank_simulate: vblank timer overrun [ 110.190953][ T40] audit: type=1400 audit(2000000297.694:454): avc: denied { nlmsg_write } for pid=7745 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.282992][ T40] audit: type=1400 audit(2000000297.854:455): avc: denied { write } for pid=7745 comm="syz.0.424" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.293323][ T7743] nvme_fabrics: missing parameter 'transport=%s' [ 110.322256][ C2] vkms_vblank_simulate: vblank timer overrun [ 110.329897][ T7743] nvme_fabrics: missing parameter 'nqn=%s' [ 110.432554][ T7744] nvme_fabrics: missing parameter 'transport=%s' [ 110.435539][ T7744] nvme_fabrics: missing parameter 'nqn=%s' [ 111.244480][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.433'. [ 111.272634][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.433'. [ 112.267070][ T7822] netlink: 'syz.0.444': attribute type 13 has an invalid length. [ 112.332664][ T7825] usb usb4: usbfs: process 7825 (syz.1.445) did not claim interface 0 before use [ 112.387635][ T7822] gretap0: refused to change device tx_queue_len [ 112.394411][ T7822] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 112.459128][ T7831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.446'. [ 113.002814][ T7842] netlink: 68 bytes leftover after parsing attributes in process `syz.5.451'. [ 113.334316][ T7850] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 113.338873][ T7850] UDF-fs: Scanning with blocksize 2048 failed [ 113.371776][ T7850] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 113.375590][ T7850] UDF-fs: Scanning with blocksize 4096 failed [ 113.476838][ T7852] netlink: 6 bytes leftover after parsing attributes in process `syz.5.453'. [ 113.480455][ T7853] 9pnet_fd: Insufficient options for proto=fd [ 113.597253][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 113.597269][ T40] audit: type=1400 audit(2000000301.174:465): avc: denied { bind } for pid=7854 comm="syz.5.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 114.246123][ T7887] netlink: 27 bytes leftover after parsing attributes in process `syz.5.460'. [ 114.348415][ T7893] netlink: 'syz.0.461': attribute type 1 has an invalid length. [ 114.402078][ T7894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7894 comm=syz.0.461 [ 114.423812][ T7893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.447927][ T40] audit: type=1400 audit(2000000302.014:466): avc: denied { setattr } for pid=7897 comm="syz.5.462" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.478509][ T7894] veth5: entered promiscuous mode [ 114.489200][ T7894] bond2: (slave veth5): Enslaving as an active interface with a down link [ 114.507470][ T7893] vlan2: entered allmulticast mode [ 114.516334][ T7893] bond2: entered allmulticast mode [ 114.523968][ T7893] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 114.844842][ T7908] netlink: 'syz.5.465': attribute type 39 has an invalid length. [ 114.853751][ T7908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19989 sclass=netlink_route_socket pid=7908 comm=syz.5.465 [ 115.696320][ T40] audit: type=1400 audit(2000000303.274:467): avc: denied { setopt } for pid=7918 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.699919][ T7921] netlink: 'syz.0.470': attribute type 30 has an invalid length. [ 115.727927][ T40] audit: type=1400 audit(2000000303.274:468): avc: denied { getopt } for pid=7918 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.131581][ T7933] tipc: Started in network mode [ 116.133744][ T7933] tipc: Node identity dedcd09f3084, cluster identity 4711 [ 116.136730][ T7933] tipc: Enabled bearer , priority 0 [ 116.214260][ T7932] tipc: Resetting bearer [ 116.549634][ T7935] autofs: Unknown parameter ' [ 116.549634][ T7935] piӞFAZ( g!l/^7~A(}"/óuNФ'&jzLBVZ/' [ 116.582771][ T7935] netlink: 'syz.1.473': attribute type 11 has an invalid length. [ 116.915337][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.475'. [ 116.930879][ T7940] nfs: Unknown parameter 'Uي\mO҉6V(*0FX OihKz_lz3{Ѻ"0)5Q؁؆ 1 [ 121.681207][ T5333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.689031][ T5333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.727989][ T5333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.754759][ T5333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.970107][ T7932] tipc: Disabling bearer [ 123.063530][ T40] audit: type=1400 audit(2000000310.634:470): avc: denied { ioctl } for pid=7952 comm="syz.0.479" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.475956][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.591702][ T7030] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.693177][ T24] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 123.705508][ T24] usb 6-1: config 1 has no interface number 0 [ 123.755962][ T24] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 123.770968][ T24] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 123.776262][ T24] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 123.799610][ T24] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 123.809266][ T63] Bluetooth: hci1: command tx timeout [ 123.813426][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.817773][ T24] usb 6-1: Product: syz [ 123.819691][ T24] usb 6-1: Manufacturer: syz [ 123.845118][ T24] usb 6-1: SerialNumber: syz [ 123.854721][ T7968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.989858][ T7030] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.050323][ T7950] chnl_net:caif_netlink_parms(): no params data found [ 124.089556][ T7968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.100754][ T24] usb 6-1: No status endpoint found [ 124.315881][ T7030] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.360516][ T7993] overlay: filesystem on ./bus not supported as upperdir [ 124.699491][ T7030] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.731940][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.732048][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.732196][ T7950] bridge_slave_0: entered allmulticast mode [ 124.735060][ T7950] bridge_slave_0: entered promiscuous mode [ 124.774484][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.798231][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.803823][ T7950] bridge_slave_1: entered allmulticast mode [ 124.807921][ T7950] bridge_slave_1: entered promiscuous mode [ 125.062706][ T7950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.183247][ T7950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.357865][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.390373][ T8011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.491'. [ 125.394292][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 125.401231][ T7950] team0: Port device team_slave_0 added [ 125.427480][ T7950] team0: Port device team_slave_1 added [ 125.634598][ T7950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.637389][ T7950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.649437][ T7950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.706526][ T7950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.709698][ T7950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.739439][ T7950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.773113][ T7030] bridge_slave_1: left allmulticast mode [ 125.775543][ T7030] bridge_slave_1: left promiscuous mode [ 125.778119][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.798272][ T7030] bridge_slave_0: left allmulticast mode [ 125.800584][ T7030] bridge_slave_0: left promiscuous mode [ 125.803041][ T7030] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.851638][ T63] Bluetooth: hci1: command tx timeout [ 126.277865][ T24] usb 6-1: USB disconnect, device number 3 [ 127.124350][ T40] audit: type=1400 audit(2000000314.654:471): avc: denied { ioctl } for pid=8041 comm="syz.1.499" path="socket:[21734]" dev="sockfs" ino=21734 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.223117][ T8044] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 127.233765][ T7030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.282438][ T8045] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 127.294878][ T8045] CIFS mount error: No usable UNC path provided in device string! [ 127.294878][ T8045] [ 127.300491][ T8045] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 127.300668][ T7030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.325641][ T7030] bond0 (unregistering): Released all slaves [ 127.346083][ T7030] bond1 (unregistering): Released all slaves [ 127.627501][ T7950] hsr_slave_0: entered promiscuous mode [ 127.632096][ T7950] hsr_slave_1: entered promiscuous mode [ 127.667023][ T8048] FAULT_INJECTION: forcing a failure. [ 127.667023][ T8048] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.697427][ T8050] netlink: 'syz.1.502': attribute type 10 has an invalid length. [ 127.721795][ T8048] CPU: 1 UID: 0 PID: 8048 Comm: syz.0.501 Not tainted syzkaller #0 PREEMPT(full) [ 127.721821][ T8048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.721831][ T8048] Call Trace: [ 127.721837][ T8048] [ 127.721845][ T8048] dump_stack_lvl+0x16c/0x1f0 [ 127.721889][ T8048] should_fail_ex+0x512/0x640 [ 127.721918][ T8048] _copy_to_user+0x32/0xd0 [ 127.721941][ T8048] simple_read_from_buffer+0xcb/0x170 [ 127.721962][ T8048] proc_fail_nth_read+0x197/0x240 [ 127.721982][ T8048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.722003][ T8048] ? rw_verify_area+0xcf/0x6c0 [ 127.722027][ T8048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.722045][ T8048] vfs_read+0x1e1/0xcf0 [ 127.722063][ T8048] ? __pfx___mutex_lock+0x10/0x10 [ 127.722089][ T8048] ? __pfx_vfs_read+0x10/0x10 [ 127.722111][ T8048] ? __fget_files+0x20e/0x3c0 [ 127.722136][ T8048] ksys_read+0x12a/0x250 [ 127.722153][ T8048] ? __pfx_ksys_read+0x10/0x10 [ 127.722175][ T8048] do_syscall_64+0xcd/0x4c0 [ 127.722195][ T8048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.722217][ T8048] RIP: 0033:0x7fadc998d5fc [ 127.722231][ T8048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.722246][ T8048] RSP: 002b:00007fadca839030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.722262][ T8048] RAX: ffffffffffffffda RBX: 00007fadc9bc6090 RCX: 00007fadc998d5fc [ 127.722272][ T8048] RDX: 000000000000000f RSI: 00007fadca8390a0 RDI: 0000000000000005 [ 127.722281][ T8048] RBP: 00007fadca839090 R08: 0000000000000000 R09: 0000000000000000 [ 127.722292][ T8048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.722300][ T8048] R13: 00007fadc9bc6128 R14: 00007fadc9bc6090 R15: 00007ffdceea6938 [ 127.722323][ T8048] [ 127.785923][ T8051] binder: 8049:8051 ioctl c0306201 200000000700 returned -11 [ 127.928850][ T8057] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 127.939864][ T8057] exFAT-fs (nullb0): invalid boot record signature [ 127.946007][ T8057] exFAT-fs (nullb0): failed to read boot sector [ 127.947310][ T63] Bluetooth: hci1: command tx timeout [ 127.949021][ T8057] exFAT-fs (nullb0): failed to recognize exfat type [ 128.008592][ T8058] afs: Unknown parameter 'pcr' [ 128.083820][ T8050] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 128.141690][ T8064] overlayfs: failed to clone upperpath [ 128.144635][ C3] ================================================================== [ 128.147883][ C3] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 128.150976][ C3] Read of size 1 at addr ffff8880329f4418 by task migration/3/32 [ 128.165683][ C3] [ 128.169299][ C3] CPU: 3 UID: 0 PID: 32 Comm: migration/3 Not tainted syzkaller #0 PREEMPT(full) [ 128.169326][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.169338][ C3] Stopper: active_load_balance_cpu_stop+0x0/0xdb0 <- sched_balance_rq+0x2128/0x3110 [ 128.169385][ C3] Call Trace: [ 128.169394][ C3] [ 128.169402][ C3] dump_stack_lvl+0x116/0x1f0 [ 128.169422][ C3] print_report+0xcd/0x630 [ 128.169442][ C3] ? __virt_addr_valid+0x81/0x610 [ 128.169463][ C3] ? __phys_addr+0xe8/0x180 [ 128.169484][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 128.169501][ C3] kasan_report+0xe0/0x110 [ 128.169520][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 128.169536][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 128.169552][ C3] __kasan_check_byte+0x36/0x50 [ 128.169572][ C3] lock_acquire+0xfc/0x350 [ 128.169597][ C3] ? do_raw_spin_unlock+0x53/0x230 [ 128.169614][ C3] ? .slowpath+0x9/0x18 [ 128.169633][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 128.169648][ C3] ? p9_req_put+0xaf/0x250 [ 128.169667][ C3] p9_req_put+0xaf/0x250 [ 128.169684][ C3] req_done+0x1dc/0x2e0 [ 128.169709][ C3] ? __pfx_req_done+0x10/0x10 [ 128.169733][ C3] ? debug_object_activate+0x2ec/0x4c0 [ 128.169758][ C3] ? __pfx_req_done+0x10/0x10 [ 128.169781][ C3] vring_interrupt+0x31b/0x400 [ 128.169805][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 128.169828][ C3] __handle_irq_event_percpu+0x22c/0x7d0 [ 128.169851][ C3] handle_irq_event+0xab/0x1e0 [ 128.169871][ C3] handle_edge_irq+0x3ca/0x9e0 [ 128.169893][ C3] __common_interrupt+0xcd/0x2f0 [ 128.169918][ C3] common_interrupt+0x61/0xe0 [ 128.169942][ C3] asm_common_interrupt+0x26/0x40 [ 128.169965][ C3] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 128.169988][ C3] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 20 a8 ab 8b e8 c8 e3 17 0a 65 66 c7 05 26 4f 5a 12 00 00 e8 69 44 47 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 20 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 128.170005][ C3] RSP: 0018:ffffc900006f8f28 EFLAGS: 00000202 [ 128.170021][ C3] RAX: 0000000000000bec RBX: 00000000ffffffff RCX: ffffffff81c3747f [ 128.170032][ C3] RDX: 0000000000000000 RSI: ffffffff8de513b8 RDI: ffffffff8c162b00 [ 128.170044][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 128.170054][ C3] R10: ffffffff90ab5c97 R11: 0000000000000000 R12: 0000000000000280 [ 128.170065][ C3] R13: 000000000000000a R14: 1ffff920000df1ed R15: ffffed1003d52000 [ 128.170080][ C3] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 128.170103][ C3] ? handle_softirqs+0x1d7/0x8e0 [ 128.170119][ C3] ? __pfx_sched_clock_cpu+0x10/0x10 [ 128.170140][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 128.170162][ C3] __irq_exit_rcu+0x109/0x170 [ 128.170181][ C3] irq_exit_rcu+0x9/0x30 [ 128.170200][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 128.170218][ C3] [ 128.170224][ C3] [ 128.170231][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 128.170249][ C3] RIP: 0010:active_load_balance_cpu_stop+0x43e/0xdb0 [ 128.170276][ C3] Code: df 85 c0 0f 85 85 02 00 00 48 83 c7 18 44 89 ee e8 67 71 0a 00 48 89 df e8 6f 20 fc ff e8 9a 94 36 00 fb 48 8b 8d d8 fe ff ff <48> b8 00 00 00 00 00 fc ff df 48 01 c1 48 c7 01 00 00 00 00 48 c7 [ 128.170292][ C3] RSP: 0018:ffffc900006bfc58 EFLAGS: 00000206 [ 128.170305][ C3] RAX: 0000000000000be7 RBX: ffff88806a63a300 RCX: 1ffff920000d7f94 [ 128.170316][ C3] RDX: 0000000000000000 RSI: ffffffff8de513b8 RDI: ffffffff8c162b00 [ 128.170327][ C3] RBP: ffffc900006bfdb0 R08: 0000000000000001 R09: 0000000000000001 [ 128.170337][ C3] R10: ffffffff90ab5c97 R11: 0000000000000002 R12: ffff88801deb0000 [ 128.170349][ C3] R13: 00000000000002b9 R14: ffff88806a63b170 R15: ffff88806a73a300 [ 128.170367][ C3] ? active_load_balance_cpu_stop+0x436/0xdb0 [ 128.170395][ C3] ? __pfx_active_load_balance_cpu_stop+0x10/0x10 [ 128.170423][ C3] ? rcu_is_watching+0x12/0xc0 [ 128.170444][ C3] ? sched_balance_rq+0x2128/0x3110 [ 128.170462][ C3] ? __pfx_active_load_balance_cpu_stop+0x10/0x10 [ 128.170483][ C3] cpu_stopper_thread+0x21b/0x490 [ 128.170526][ C3] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 128.170545][ C3] ? smpboot_thread_fn+0x326/0xae0 [ 128.170567][ C3] smpboot_thread_fn+0x3f7/0xae0 [ 128.170591][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 128.170613][ C3] kthread+0x3c2/0x780 [ 128.170630][ C3] ? __pfx_kthread+0x10/0x10 [ 128.170646][ C3] ? rcu_is_watching+0x12/0xc0 [ 128.170665][ C3] ? __pfx_kthread+0x10/0x10 [ 128.170681][ C3] ret_from_fork+0x5d4/0x6f0 [ 128.170697][ C3] ? __pfx_kthread+0x10/0x10 [ 128.170712][ C3] ret_from_fork_asm+0x1a/0x30 [ 128.170738][ C3] [ 128.170743][ C3] [ 128.198868][ T8069] overlayfs: failed to clone upperpath [ 128.208717][ C3] Allocated by task 8064: [ 128.208739][ C3] kasan_save_stack+0x33/0x60 [ 128.208765][ C3] kasan_save_track+0x14/0x30 [ 128.208780][ C3] __kasan_kmalloc+0xaa/0xb0 [ 128.208795][ C3] p9_client_create+0xc7/0x11c0 [ 128.208814][ C3] v9fs_session_init+0x1f7/0x1a80 [ 128.208838][ C3] v9fs_mount+0xc5/0xa90 [ 128.208851][ C3] legacy_get_tree+0x10c/0x220 [ 128.208871][ C3] vfs_get_tree+0x8e/0x340 [ 128.208895][ C3] path_mount+0x1513/0x2000 [ 128.208922][ C3] __x64_sys_mount+0x28d/0x310 [ 128.208943][ C3] do_syscall_64+0xcd/0x4c0 [ 128.208963][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.208980][ C3] [ 128.208984][ C3] Freed by task 8064: [ 128.208994][ C3] kasan_save_stack+0x33/0x60 [ 128.209010][ C3] kasan_save_track+0x14/0x30 [ 128.209025][ C3] kasan_save_free_info+0x3b/0x60 [ 128.209048][ C3] __kasan_slab_free+0x60/0x70 [ 128.209064][ C3] kfree+0x2b4/0x4d0 [ 128.209090][ C3] p9_client_create+0xa28/0x11c0 [ 128.209109][ C3] v9fs_session_init+0x1f7/0x1a80 [ 128.209133][ C3] v9fs_mount+0xc5/0xa90 [ 128.209148][ C3] legacy_get_tree+0x10c/0x220 [ 128.209166][ C3] vfs_get_tree+0x8e/0x340 [ 128.209188][ C3] path_mount+0x1513/0x2000 [ 128.209207][ C3] __x64_sys_mount+0x28d/0x310 [ 128.209225][ C3] do_syscall_64+0xcd/0x4c0 [ 128.209243][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.209259][ C3] [ 128.209264][ C3] The buggy address belongs to the object at ffff8880329f4400 [ 128.209264][ C3] which belongs to the cache kmalloc-512 of size 512 [ 128.209280][ C3] The buggy address is located 24 bytes inside of [ 128.209280][ C3] freed 512-byte region [ffff8880329f4400, ffff8880329f4600) [ 128.209298][ C3] [ 128.209303][ C3] The buggy address belongs to the physical page: [ 128.209313][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x329f4 [ 128.209331][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 128.209344][ C3] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 128.209360][ C3] page_type: f5(slab) [ 128.209375][ C3] raw: 00fff00000000040 ffff88801b842c80 0000000000000000 dead000000000001 [ 128.209389][ C3] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 128.209404][ C3] head: 00fff00000000040 ffff88801b842c80 0000000000000000 dead000000000001 [ 128.209419][ C3] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 128.209434][ C3] head: 00fff00000000002 ffffea0000ca7d01 00000000ffffffff 00000000ffffffff [ 128.209449][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 128.209458][ C3] page dumped because: kasan: bad access detected [ 128.209466][ C3] page_owner tracks the page as allocated [ 128.209472][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5400, tgid 5400 (udevadm), ts 23166431305, free_ts 23154060610 [ 128.209503][ C3] post_alloc_hook+0x1c0/0x230 [ 128.209525][ C3] get_page_from_freelist+0x132b/0x38e0 [ 128.209541][ C3] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 128.209557][ C3] alloc_pages_mpol+0x1fb/0x550 [ 128.209573][ C3] new_slab+0x247/0x330 [ 128.209593][ C3] ___slab_alloc+0xcf2/0x1740 [ 128.209613][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 128.209635][ C3] __kmalloc_cache_noprof+0xfb/0x3e0 [ 128.209657][ C3] kernfs_fop_open+0x244/0xda0 [ 128.209673][ C3] do_dentry_open+0x982/0x1530 [ 128.209688][ C3] vfs_open+0x82/0x3f0 [ 128.209707][ C3] path_openat+0x1de4/0x2cb0 [ 128.209725][ C3] do_filp_open+0x20b/0x470 [ 128.209742][ C3] do_sys_openat2+0x11b/0x1d0 [ 128.209761][ C3] __x64_sys_openat+0x174/0x210 [ 128.209783][ C3] do_syscall_64+0xcd/0x4c0 [ 128.209803][ C3] page last free pid 5392 tgid 5392 stack trace: [ 128.209813][ C3] __free_frozen_pages+0x7d5/0x10f0 [ 128.209837][ C3] __put_partials+0x165/0x1c0 [ 128.209861][ C3] qlist_free_all+0x4d/0x120 [ 128.209877][ C3] kasan_quarantine_reduce+0x195/0x1e0 [ 128.209894][ C3] __kasan_slab_alloc+0x69/0x90 [ 128.209910][ C3] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 128.209933][ C3] getname_flags.part.0+0x4c/0x550 [ 128.209956][ C3] getname_flags+0x93/0xf0 [ 128.209970][ C3] do_sys_openat2+0xb8/0x1d0 [ 128.209990][ C3] __x64_sys_openat+0x174/0x210 [ 128.210011][ C3] do_syscall_64+0xcd/0x4c0 [ 128.210027][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.210043][ C3] [ 128.210047][ C3] Memory state around the buggy address: [ 128.210056][ C3] ffff8880329f4300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 128.210068][ C3] ffff8880329f4380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 128.210079][ C3] >ffff8880329f4400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.210087][ C3] ^ [ 128.210095][ C3] ffff8880329f4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.210105][ C3] ffff8880329f4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.210114][ C3] ================================================================== [ 128.210122][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 128.210135][ C3] CPU: 3 UID: 0 PID: 32 Comm: migration/3 Not tainted syzkaller #0 PREEMPT(full) [ 128.210153][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.210163][ C3] Stopper: active_load_balance_cpu_stop+0x0/0xdb0 <- sched_balance_rq+0x2128/0x3110 [ 128.210200][ C3] Call Trace: [ 128.210210][ C3] [ 128.210217][ C3] dump_stack_lvl+0x3d/0x1f0 [ 128.210235][ C3] vpanic+0x6e8/0x7a0 [ 128.210258][ C3] ? __pfx_vpanic+0x10/0x10 [ 128.210280][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 128.210302][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 128.210315][ C3] panic+0xca/0xd0 [ 128.210338][ C3] ? __pfx_panic+0x10/0x10 [ 128.210362][ C3] ? end_report+0x4c/0x170 [ 128.210378][ C3] ? rcu_is_watching+0x12/0xc0 [ 128.210399][ C3] ? lock_release+0x201/0x2f0 [ 128.210424][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 128.210441][ C3] check_panic_on_warn+0xab/0xb0 [ 128.210458][ C3] end_report+0x107/0x170 [ 128.210474][ C3] kasan_report+0xee/0x110 [ 128.210489][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 128.210504][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 128.210517][ C3] __kasan_check_byte+0x36/0x50 [ 128.210536][ C3] lock_acquire+0xfc/0x350 [ 128.210557][ C3] ? do_raw_spin_unlock+0x53/0x230 [ 128.210573][ C3] ? .slowpath+0x9/0x18 [ 128.210589][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 128.210602][ C3] ? p9_req_put+0xaf/0x250 [ 128.210619][ C3] p9_req_put+0xaf/0x250 [ 128.210634][ C3] req_done+0x1dc/0x2e0 [ 128.210657][ C3] ? __pfx_req_done+0x10/0x10 [ 128.210682][ C3] ? debug_object_activate+0x2ec/0x4c0 [ 128.210707][ C3] ? __pfx_req_done+0x10/0x10 [ 128.210731][ C3] vring_interrupt+0x31b/0x400 [ 128.210755][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 128.210776][ C3] __handle_irq_event_percpu+0x22c/0x7d0 [ 128.210797][ C3] handle_irq_event+0xab/0x1e0 [ 128.210816][ C3] handle_edge_irq+0x3ca/0x9e0 [ 128.210837][ C3] __common_interrupt+0xcd/0x2f0 [ 128.210862][ C3] common_interrupt+0x61/0xe0 [ 128.210884][ C3] asm_common_interrupt+0x26/0x40 [ 128.210898][ C3] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 128.210922][ C3] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 20 a8 ab 8b e8 c8 e3 17 0a 65 66 c7 05 26 4f 5a 12 00 00 e8 69 44 47 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 20 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 128.210939][ C3] RSP: 0018:ffffc900006f8f28 EFLAGS: 00000202 [ 128.210953][ C3] RAX: 0000000000000bec RBX: 00000000ffffffff RCX: ffffffff81c3747f [ 128.210961][ C3] RDX: 0000000000000000 RSI: ffffffff8de513b8 RDI: ffffffff8c162b00 [ 128.210970][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 128.210977][ C3] R10: ffffffff90ab5c97 R11: 0000000000000000 R12: 0000000000000280 [ 128.210985][ C3] R13: 000000000000000a R14: 1ffff920000df1ed R15: ffffed1003d52000 [ 128.210996][ C3] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 128.211014][ C3] ? handle_softirqs+0x1d7/0x8e0 [ 128.211028][ C3] ? __pfx_sched_clock_cpu+0x10/0x10 [ 128.211047][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 128.211064][ C3] __irq_exit_rcu+0x109/0x170 [ 128.211079][ C3] irq_exit_rcu+0x9/0x30 [ 128.211093][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 128.211107][ C3] [ 128.211111][ C3] [ 128.211116][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 128.211129][ C3] RIP: 0010:active_load_balance_cpu_stop+0x43e/0xdb0 [ 128.211150][ C3] Code: df 85 c0 0f 85 85 02 00 00 48 83 c7 18 44 89 ee e8 67 71 0a 00 48 89 df e8 6f 20 fc ff e8 9a 94 36 00 fb 48 8b 8d d8 fe ff ff <48> b8 00 00 00 00 00 fc ff df 48 01 c1 48 c7 01 00 00 00 00 48 c7 [ 128.211162][ C3] RSP: 0018:ffffc900006bfc58 EFLAGS: 00000206 [ 128.211173][ C3] RAX: 0000000000000be7 RBX: ffff88806a63a300 RCX: 1ffff920000d7f94 [ 128.211181][ C3] RDX: 0000000000000000 RSI: ffffffff8de513b8 RDI: ffffffff8c162b00 [ 128.211189][ C3] RBP: ffffc900006bfdb0 R08: 0000000000000001 R09: 0000000000000001 [ 128.211198][ C3] R10: ffffffff90ab5c97 R11: 0000000000000002 R12: ffff88801deb0000 [ 128.211206][ C3] R13: 00000000000002b9 R14: ffff88806a63b170 R15: ffff88806a73a300 [ 128.211219][ C3] ? active_load_balance_cpu_stop+0x436/0xdb0 [ 128.211241][ C3] ? __pfx_active_load_balance_cpu_stop+0x10/0x10 [ 128.211264][ C3] ? rcu_is_watching+0x12/0xc0 [ 128.211283][ C3] ? sched_balance_rq+0x2128/0x3110 [ 128.211300][ C3] ? __pfx_active_load_balance_cpu_stop+0x10/0x10 [ 128.211320][ C3] cpu_stopper_thread+0x21b/0x490 [ 128.211339][ C3] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 128.211356][ C3] ? smpboot_thread_fn+0x326/0xae0 [ 128.211373][ C3] smpboot_thread_fn+0x3f7/0xae0 [ 128.211390][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 128.211408][ C3] kthread+0x3c2/0x780 [ 128.211421][ C3] ? __pfx_kthread+0x10/0x10 [ 128.211433][ C3] ? rcu_is_watching+0x12/0xc0 [ 128.211448][ C3] ? __pfx_kthread+0x10/0x10 [ 128.211464][ C3] ret_from_fork+0x5d4/0x6f0 [ 128.211478][ C3] ? __pfx_kthread+0x10/0x10 [ 128.211490][ C3] ret_from_fork_asm+0x1a/0x30 [ 128.211509][ C3] [ 128.225424][ C3] Kernel Offset: disabled VM DIAGNOSIS: 07:42:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a73fe80 RCX=ffffffff81af8ed1 RDX=ffff88802d21c880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90004e3f888 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4e7fd1 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81af8ed1 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fab991c1250 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01fb000000050000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014010000000000 000800080007000c 00080000000c0000 01ec000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01f6000000200000 0001000000100008 0000000000000004 000c001a00100000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ac000000a40000 00bc000000c80000 00d4000000e00000 00f8000000f00000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010c000001180000 0094000001280000 0134000001440000 0154000001680000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0028000000000000 0000000000000000 009c000000001d62 9540000000180000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00200000000e0014 000c000000080004 0020000e00000000 0000000000000000 ZMM24=7074440570744405 7074440570744405 7074440570744405 7074440570744405 7074440570744405 7074440570744405 7074440570744405 7074440570744405 ZMM25=63994b2063994b20 63994b2063994b20 63994b2063994b20 63994b2063994b20 63994b2063994b20 63994b2063994b20 63994b2063994b20 63994b2063994b20 ZMM26=e53a9805e53a9805 e53a9805e53a9805 e53a9805e53a9805 e53a9805e53a9805 e53a9805e53a9805 e53a9805e53a9805 e53a9805e53a9805 e53a9805e53a9805 ZMM27=fc2af2f3fc2af2f3 fc2af2f3fc2af2f3 fc2af2f3fc2af2f3 fc2af2f3fc2af2f3 fc2af2f3fc2af2f3 fc2af2f3fc2af2f3 fc2af2f3fc2af2f3 fc2af2f3fc2af2f3 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4906000049060000 4906000049060000 4906000049060000 4906000049060000 4906000049060000 4906000049060000 4906000049060000 4906000049060000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88802cb12440 RCX=ffff8880594b2180 RDX=0000000000000000 RSI=ffffffff8b610ae6 RDI=ffff88802cb12884 RBP=ffff88802cb12440 RSP=ffffc90005d7fb10 R8 =0000000000000004 R9 =000000000000037f R10=0000000000000400 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81a0a047 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555600de808 CR3=0000000029559000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000202 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7665642f01ffff ffffffffffffe908 1380032600000338 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000490033e080004 88030c0800048003 0281a08010000210 000b800406047594 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023647261632f69 72642f7665642f01 ffffffffffffffff e1080b8003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0210000680040602 7594002364726163 2f6972642f766564 2f01ffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffe10806800300 040004a880080013 800401c710000800 43e0003170736461 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080980030f800400 08000fffffdfff10 0001000000080608 0151b807fbfe0800 ZMM25=4b5ff0294b5ff029 4b5ff0294b5ff029 4b5ff0294b5ff029 4b5ff0294b5ff029 4b5ff0294b5ff029 4b5ff0294b5ff029 4b5ff0294b5ff029 4b5ff0294b5ff029 ZMM26=a21c6af6a21c6af6 a21c6af6a21c6af6 a21c6af6a21c6af6 a21c6af6a21c6af6 a21c6af6a21c6af6 a21c6af6a21c6af6 a21c6af6a21c6af6 a21c6af6a21c6af6 ZMM27=0720978807209788 0720978807209788 0720978807209788 0720978807209788 0720978807209788 0720978807209788 0720978807209788 0720978807209788 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5e0300005e030000 5e0300005e030000 5e0300005e030000 5e0300005e030000 5e0300005e030000 5e0300005e030000 5e0300005e030000 5e0300005e030000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff88802ce68000 RCX=0000000000000000 RDX=1ffff110059cd00b RSI=ffff88802227c900 RDI=ffff88802ce68000 RBP=0000000000000409 RSP=ffffc90000648c10 R8 =0000000000000000 R9 =fffffbfff2156b92 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000000 R14=ffff88802227c900 R15=0000000000000000 RIP=ffffffff818e22cd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31c23ffc CR3=0000000029559000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=a05eceaafeff8c85 637f145dc62489c8 a05eceaafeff8c85 637f145dc62489c8 a05eceaafeff8c85 637f145dc62489c8 a05eceaafeff8c85 637f145dc62489c8 ZMM18=fc2af2f3e53a9805 63994b2070744405 fc2af2f3e53a9805 63994b2070744405 fc2af2f3e53a9805 63994b2070744405 fc2af2f3e53a9805 63994b2070744405 ZMM19=4a06000000000000 0000000000000005 4a06000000000000 0000000000000004 4a06000000000000 0000000000000003 4a06000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023647261632f69 72642f7665642f01 ffffffffffffffff e1080b8003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0210000680040602 7594002364726163 2f6972642f766564 2f01ffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffe10806800300 040004a880080013 800401c710000800 43e0003170736461 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080980030f800400 08000fffffdfff10 0001000000080608 0151b807fbfe0800 ZMM25=4b5ff0294b5ff029 4b5ff0294b5ff029 4b5ff0294b5ff029 4b5ff0294b5ff029 4b5ff0294b5ff029 4b5ff0294b5ff029 4b5ff0294b5ff029 4b5ff0294b5ff029 ZMM26=a21c6af6a21c6af6 a21c6af6a21c6af6 a21c6af6a21c6af6 a21c6af6a21c6af6 a21c6af6a21c6af6 a21c6af6a21c6af6 a21c6af6a21c6af6 a21c6af6a21c6af6 ZMM27=0720978807209788 0720978807209788 0720978807209788 0720978807209788 0720978807209788 0720978807209788 0720978807209788 0720978807209788 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5e0300005e030000 5e0300005e030000 5e0300005e030000 5e0300005e030000 5e0300005e030000 5e0300005e030000 5e0300005e030000 5e0300005e030000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85644730 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc900006f8520 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff3622466 R15=dffffc0000000000 RIP=ffffffff85644757 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff8880d69b8000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fab99e00f98 CR3=0000000046612000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf11b8ac0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf11b8c46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf11b8c46 00007ffdf11b8c4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab99012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab99012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab99012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab99012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab99012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab99012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000