last executing test programs: 1.621656336s ago: executing program 2 (id=44): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10200, 0x1) syz_clone(0x40000000, &(0x7f0000000240)="9ccc74833a97e22bb428b7e3d8251afce106b3e6585a7288585b170298db342993741bca92f68d3e5bb92bd884d36373af484077252b9140c4761536f11e7e58454383c5cf0a68d7664396755ac43236db403249df97ba47a37e89cfb50594f0593491198863fc6d35563936c81677e37cc00f25ff8f9f3e11e136258d0f854024f96116e348a7922dd41efac4cd4e0916742239b4ee", 0x96, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)="258c1658e29b6c6a694f682ee950ab9215a30ea73312b91e3c1d252e18f758d425277876bd893ba4e1c0268b1a92b542a52523dd00799d1f546191b7e4e9a2e6d8fd7ae786b1939c7c54b579968292ce8764cc34220a38b3f1353c3ed398e35c7cb3d7fff5645fb1d7cbf066e61ccdf124") syz_open_procfs$userns(r0, &(0x7f00000000c0)) setns(r1, 0x24020000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') syz_open_procfs(r0, &(0x7f00000001c0)='net/tcp6\x00') r2 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) sendfile(r2, r2, 0x0, 0x24002de8) umount2(&(0x7f0000000040)='.\x00', 0x2) mkdir(&(0x7f00000000c0)='./bus\x00', 0xcd) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.417416629s ago: executing program 2 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2b0, 0x0, 0x304, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0x228, 0x8, 0x0, 0x1, [{0x200, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0xa}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fffffff}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4801}, 0x4000080) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000004c0)={'gretap0\x00', &(0x7f00000003c0)={'tunl0\x00', r1, 0x700, 0x700, 0x7, 0x800, {{0x37, 0x4, 0x2, 0x0, 0xdc, 0x67, 0x0, 0x0, 0x4, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x27, 0xc3, [@private=0xa010100, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @rand_addr=0x64010100, @broadcast, @empty, @local, @dev={0xac, 0x14, 0x14, 0x31}]}, @ssrr={0x89, 0x1b, 0xb9, [@multicast1, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0xffffffff]}, @ssrr={0x89, 0xb, 0x31, [@multicast2, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xde, 0x3, 0xe, [{@rand_addr=0x64010100, 0xffffffff}, {@private=0xa010101, 0x6}, {@private=0xa010100, 0x6}]}, @cipso={0x86, 0x28, 0x0, [{0x0, 0xb, "09e772ff5c7844cf02"}, {0x0, 0xd, "d7321b48cf44f750578e77"}, {0x6, 0xa, "334eb6cbf3ec9403"}]}, @ssrr={0x89, 0x13, 0xc6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @rand_addr=0x64010101]}, @rr={0x7, 0x23, 0x42, [@private=0xa010101, @remote, @loopback, @remote, @rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) r3 = socket$inet6(0xa, 0x80000, 0x6) r4 = openat2(r0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x10000, 0x2, 0x9}, 0x18) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x9, 0x500, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008891}, 0x20000000) setsockopt$inet6_buf(r3, 0x29, 0x2c, &(0x7f0000000680)="048526efa9c8134b05eac66fea1959b90c5ce79ae2e05f87ddf57d92f9cf5702", 0x20) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000006c0)=0x0) capset(&(0x7f0000000700)={0x20071026, r5}, &(0x7f0000000740)={0xffffffff, 0xffff, 0x0, 0x7, 0xc, 0x7fff}) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ppoll(&(0x7f0000000780)=[{r0, 0x21}, {r6, 0x821d}, {r2, 0x110}, {0xffffffffffffffff, 0x4000}, {r0, 0x2003}], 0x5, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={[0x10]}, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'ip6_vti0\x00'}) close(r2) socket(0x26, 0x1, 0xc9) setsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000880)="e7ebb21ef4a8da3b46a043a90d092860656117a9673d36a24416605dc73a784c2598eec19bf7eb1a5840bb8d055b4dcc195e964774148f3210c8bf7be446", 0x3e) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f00000008c0)={@local, @broadcast, @dev={0xac, 0x14, 0x14, 0x1b}}, 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000900)={0x73622a85, 0x18b, 0x1}) setsockopt(0xffffffffffffffff, 0x5892, 0x6, &(0x7f0000000940)="378c8de0a6d47af5a6673f70b5991d2f243e1ccd41a2b75d323ba4b07b587e059db7", 0x22) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000980)) r8 = openat(r4, &(0x7f00000009c0)='./file0\x00', 0x404002, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f0000000a00)="d2de28afd06d0f3abc3b6e0dba394b565803c9ee4f3657169b6f55e5558e4951bf1efb7e4e", 0x25}], 0x1) syz_open_dev$MSR(&(0x7f0000000a80), 0x8, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000ac0)={0xaa, 0x729}) write$bt_hci(r3, &(0x7f0000000b00)={0x1, @write_local_name={{0xc13, 0xf8}, {"4f010f6200844107ab519d4c02f078e868a1008daabec5f469bdb633004a0b50ecd1cf5c37082f11c862e9a60c4d53e7dd010c251ccfd55c4262bd193d4112406df0e0f72597129c72fb1e4175ccdc4e1f75c93dbac6068a1be186878756657c7e4263ebb42f1f110c3eb3b23bdea0ae6c0eb434ed098bc48783f310a2ac3cbbf0ef86811964c9be1faec26be4dc459023b62bd79c0497478110a9598a3d5ab38397720c1014a3fe1b218fdbf8972942662f6973e2a332fb0ba90c6f1aab6f45839ab62280b663152b5091079154f53db47dac28befc431fafcadcf2d335be24ad6b448708be1f819ae6170073965ac5bfdd45257f9469e4"}}}, 0xfc) sendto$inet6(r3, &(0x7f0000000c00)="88698e4183bb4aba0c8c37b2a617e49ecfe6cae9719ade39835f8d1ae5eb7953fac50b834d5ee052c40060016cffc7abf60fc51dea28fc5c8995d6be39a785722a15b7066472a6fbf615e50851936084da3720193cca3aaef7ab1ec1e613aa8f9128489c5e4ac675270a421f7051fe9703545317b40167179c89fcd754ee78f5b19b5bd3951fcf73487ed02c55945970255e1e7805010c6ace40836d7a5362c98325c024b10943f76b0ff57de80c338c0f9f31b8d1b65e3c7a779a63d86733aa9a820e10dd12460610f06dfd19171e15b1ef46303c51d226a65bfa62f84515147e89a2f0", 0xe4, 0x4005, 0x0, 0x0) r9 = syz_usb_connect$cdc_ncm(0x4, 0x197, &(0x7f0000000d00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x185, 0x2, 0x1, 0x81, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "61207abc9c"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8, 0x3, 0x4}, {0x6, 0x24, 0x1a, 0x430, 0x3}, [@mdlm_detail={0x103, 0x24, 0x13, 0xc, "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"}, @mdlm_detail={0x21, 0x24, 0x13, 0x8, "35b91efd71316af2a061f5bde9ef3702dd121eb4f8ff03d957cba9a6c6"}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x2, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x4d, 0x1}}}}}}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x310, 0x7, 0x1, 0x7, 0x10, 0xad}, 0xc, &(0x7f0000000f00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0xb, 0x6}]}, 0x5, [{0xf8, &(0x7f0000000f40)=@string={0xf8, 0x3, "2bbe9257379b78ad090b601e421072313c71ed188377458e1b9ff8cb1e5c53dc676a6334472d5ed62da6a849be5a195f4485008ff4ca36ee4688f5d1a4a6f19c6a7708e0ca9f2236144b1f3cac027ecaace9e285c1ec5d04ea21da753de72f68992f54c1dcb259ea41d812bdf6f0f77127ab6607029cc1b2cd6045d4511e036fabfd6071af2143de7514479d5d5be31175830220b08d22b2a05cca2fbf582431c38387ae67921222e0400fc6d90f59f25cb7023b8b762df4d1a332f7170b5f72990e8f7e3f0d5742a2a80361ad2ac1a0b14d0c2276cf30c9f13e2bbb87304e88be3e3e7732427d45cb49b49d732ec94704196b2ec7aa"}}, {0xe, &(0x7f0000001040)=@string={0xe, 0x3, "96d6e95a78399215881acec7"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0xc0a}}, {0x2a, &(0x7f00000010c0)=@string={0x2a, 0x3, "0e88b95143145168b0a3a07ce88025e6b0f5b1cc182505583c6aedd28f32aee9ea028f4c8f6332d9"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x455}}]}) syz_usb_control_io$cdc_ncm(r9, &(0x7f00000012c0)={0x14, &(0x7f00000011c0)={0x40, 0xe, 0x95, {0x95, 0x6, "362d1fb1d0911370993d2935741890c88d0072943009f72961a1025347f1b305d01029dde789171593a256d800295cfa44d4d06654674d92549c7b23865697154f900804904cfc8ecb88851509d3c6d0b28e5fdcd1b8ed34bc4534d515e92d30898e2463e57d6b50814a25bd522d7bd20f5dcbb482abe252328ca8799b05710756b84858197606a072ca1c910feb22d9c63871"}}, &(0x7f0000001280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001540)={0x44, &(0x7f0000001300)={0x40, 0xd, 0x48, "5a8c4b9b1bd6b1d2c51cc9a317ee513e38eef7be77c1083568ff9ad501d394f99aceb2f08e88cc51b56644bc7b24afb77f65121a7914a1de7e65696344053c78e14ed79e2d453ff1"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001400)={0x20, 0x80, 0x1c, {0x9, 0x1, 0x3, 0x7, 0x7ff, 0x10, 0x2, 0x2, 0x8, 0x7fff, 0x0, 0xfff}}, &(0x7f0000001440)={0x20, 0x85, 0x4, 0x4e2b}, &(0x7f0000001480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000014c0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000001500)={0x20, 0x89, 0x2}}) 1.405667899s ago: executing program 0 (id=40): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(r0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e24, @private=0xa010101}, {0x2, 0x4e22, @multicast1}, 0x290, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='bridge_slave_0\x00', 0x7, 0x7, 0x4}) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r0, r1, 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="81", 0x1}], 0x1, 0x8, 0x2) 1.166419853s ago: executing program 1 (id=45): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x0, 0x7f}, {0x0, 0x8, 0x81}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}}, 0xf0}}, 0x804) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}, {@uuid_on}, {@verity_require}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x800, 0x0) 1.094676924s ago: executing program 0 (id=46): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10200, 0x1) syz_clone(0x40000000, &(0x7f0000000240)="9ccc74833a97e22bb428b7e3d8251afce106b3e6585a7288585b170298db342993741bca92f68d3e5bb92bd884d36373af484077252b9140c4761536f11e7e58454383c5cf0a68d7664396755ac43236db403249df97ba47a37e89cfb50594f0593491198863fc6d35563936c81677e37cc00f25ff8f9f3e11e136258d0f854024f96116e348a7922dd41efac4cd4e0916742239b4ee", 0x96, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)="258c1658e29b6c6a694f682ee950ab9215a30ea73312b91e3c1d252e18f758d425277876bd893ba4e1c0268b1a92b542a52523dd00799d1f546191b7e4e9a2e6d8fd7ae786b1939c7c54b579968292ce8764cc34220a38b3f1353c3ed398e35c7cb3d7fff5645fb1d7cbf066e61ccdf124") syz_open_procfs$userns(r0, &(0x7f00000000c0)) setns(r1, 0x24020000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') syz_open_procfs(r0, &(0x7f00000001c0)='net/tcp6\x00') r2 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) sendfile(r2, r2, 0x0, 0x24002de8) umount2(&(0x7f0000000040)='.\x00', 0x2) mkdir(&(0x7f00000000c0)='./bus\x00', 0xcd) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.086310784s ago: executing program 1 (id=47): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x190, 0x12, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x5f], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}, @INET_DIAG_REQ_BYTECODE={0x23, 0x1, "90b4febe19f3a1cc04b81b577d7a6bd57c51b78a277387b0f6426559a8ed37"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "948bebce36563a6ed591e3474ee1e0a4f37216aeddb9763b065ee4b1ba658363c09b8990129045f14228de753dfe58349386dea68ecefcd016f9da6f2948b9781323573048278bcb1f4e410176200da926198aabddc3987a97a7b11a58f64ad4d21c1be03ec8858a36ca22947b3895fd2a8b582afdbc599b9f95767b2c3fd998bcd364ca427d5626d5a887906b197541"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "9c1846b0dd5fffa300accb156960febf9d01ba5cba7058540e8474e53198cacb05a4e97133aa358fe9b41ae517e24a1b89ceef0af0a1514d0108aa5ab0675066d543de67ac45c79bdf6dee69105c748f4aab58220c302b2c5a0019d42d618b5ab23771f4ffde7867debab736768e68479e94ea500e43dc6c6078f0d9c4e5"}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004010) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000007) read(r0, 0x0, 0x0) 983.651625ms ago: executing program 0 (id=48): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000000)) 934.693626ms ago: executing program 1 (id=49): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf4, 0x40020}, 0x20) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf4, 0x40020}, 0x20) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) (async) 934.359446ms ago: executing program 1 (id=50): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x9, 0x4) recvfrom(r2, 0x0, 0x0, 0x120, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x3000, 0xd) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f00000001c0)) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0208000002", @ANYRES64=r1], 0x10}}, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x75b, 0x5d9702) r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x20000, 0x128) execveat$binfmt(0xffffffffffffffff, r4, 0x0, 0x0, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) 932.096866ms ago: executing program 0 (id=57): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10200, 0x1) syz_clone(0x40000000, &(0x7f0000000240)="9ccc74833a97e22bb428b7e3d8251afce106b3e6585a7288585b170298db342993741bca92f68d3e5bb92bd884d36373af484077252b9140c4761536f11e7e58454383c5cf0a68d7664396755ac43236db403249df97ba47a37e89cfb50594f0593491198863fc6d35563936c81677e37cc00f25ff8f9f3e11e136258d0f854024f96116e348a7922dd41efac4cd4e0916742239b4ee", 0x96, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)="258c1658e29b6c6a694f682ee950ab9215a30ea73312b91e3c1d252e18f758d425277876bd893ba4e1c0268b1a92b542a52523dd00799d1f546191b7e4e9a2e6d8fd7ae786b1939c7c54b579968292ce8764cc34220a38b3f1353c3ed398e35c7cb3d7fff5645fb1d7cbf066e61ccdf124") syz_open_procfs$userns(r0, &(0x7f00000000c0)) setns(r1, 0x24020000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') syz_open_procfs(r0, &(0x7f00000001c0)='net/tcp6\x00') r2 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) sendfile(r2, r2, 0x0, 0x24002de8) umount2(&(0x7f0000000040)='.\x00', 0x2) mkdir(&(0x7f00000000c0)='./bus\x00', 0xcd) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 846.483218ms ago: executing program 2 (id=51): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000f6ffffb00000409567c7053e5eec00000008"]) 799.741568ms ago: executing program 2 (id=52): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x8, 0x5, 0x4, 0x1, 0x3, 0x3d, 0x69, 0x99, 0x38, 0x1ce, 0x0, 0x81, 0x20, 0x3, 0x0, 0x9, 0x6}, [{0x4, 0x4, 0xc, 0x7fffffff, 0xd98, 0x342, 0x7b, 0x6}, {0x60000000, 0x3, 0xffff, 0x690, 0x7fffffff, 0x5e42, 0x6, 0x6}, {0x7, 0x80000003, 0x50, 0x7f, 0xb6b6, 0x5, 0x1, 0x5}], "9168bc2a0f44445a113885d5d8d3585c58cd5f161afa59078c62cf2630223cf0384b6ebc27cd799b39588be3aa775ac67708319994518a3ecb94ef25a2948788c92da630e3a7cce92e37259df2ac30cfcce2759dec0431032038ae44b7bd1381f78a1352a867aa648e0b02afd651837725b09d468ede68838206", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x612) (async) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x8, 0x5, 0x4, 0x1, 0x3, 0x3d, 0x69, 0x99, 0x38, 0x1ce, 0x0, 0x81, 0x20, 0x3, 0x0, 0x9, 0x6}, [{0x4, 0x4, 0xc, 0x7fffffff, 0xd98, 0x342, 0x7b, 0x6}, {0x60000000, 0x3, 0xffff, 0x690, 0x7fffffff, 0x5e42, 0x6, 0x6}, {0x7, 0x80000003, 0x50, 0x7f, 0xb6b6, 0x5, 0x1, 0x5}], "9168bc2a0f44445a113885d5d8d3585c58cd5f161afa59078c62cf2630223cf0384b6ebc27cd799b39588be3aa775ac67708319994518a3ecb94ef25a2948788c92da630e3a7cce92e37259df2ac30cfcce2759dec0431032038ae44b7bd1381f78a1352a867aa648e0b02afd651837725b09d468ede68838206", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x612) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) 710.710249ms ago: executing program 2 (id=53): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000600)=0xdfa, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 702.82783ms ago: executing program 0 (id=54): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf8, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0xd4, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xae2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4e31c5cc}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xcda}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x63}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1800}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8c1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe5a}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4d}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40801}, 0x8000) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) lseek(r0, 0x9, 0x3) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000200)) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) mount$binderfs(&(0x7f0000000280), &(0x7f00000002c0)='./binderfs2\x00', &(0x7f0000000300), 0xa0, &(0x7f0000000380)={[{@max={'max', 0x3d, 0x1}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x3}}], [{@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<', 0xee00}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@dont_measure}, {@measure}]}) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000480), &(0x7f00000004c0)=0x14) syz_open_dev$evdev(&(0x7f0000000500), 0x1ff, 0x2140) sendmsg$inet(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)="7a5b05f694e91507941d8c8c0288c85a0234cd8c8f06b9cb5d01b2e93210323f62e8df22bbc9bcaf97ddcc3a4f72cb0a1521e2a83b33c7887e4f1ca6e624508e85cfcb3a41be01288d10be03f834d16e40705369e70859946685a34dd8725458f7ff5dd1950d4ed2269621e5407c34401c542be25b206a3272acfc612631d9dba0a25d0d49c984487da1003fb5dc4f8e77bd939c1d93cde245187db53214b7db33a6f91336bb95f18f71afafc92669efab53f4dbc5a28c0a029c1b394e95145de69662e57d4c6731711068525733306812680a076604bd778e8d34eb", 0xdc}, {&(0x7f0000000640)="c13b14f0179257c99731c6d6c12575e29d1c079590", 0x15}, {&(0x7f0000000680)="f3adbec95aab0b357126d08656519469b78fe6cce643f6ce3bda9ee8ab30f28cbeff6d768dc4f2d1e878eb4a94c67977903abd30ee655afd9bfc4795bf880bdd3f1db3488b06064a53f5e5c195b05aacf3987a6ea8af97bc5bb6fd113e29", 0x5e}, {&(0x7f0000000700)="b6f4dcfff28bdc2ad04642f8caa081210a2e2efccf17bd1bbc7f4d8ab238328e0e08ecdf1b4dee8d55b39f61f1847cca1645c656076db4e50bfab13931a3f6c6abb5b916af39ca5dfb6c39f5e1f4008a1168ec5a11513c366289423aa55acfdd78a46507f8b2f7981ca976a6dded0ceaeb1a4915cddd55472e8620d73ea17b4b22aa133c75e99167693b7c3a9b6cbccc83bb40968469cc2ead61d7dd1aa6cb05f14bed4a609eaf7c33ec0bf5353b59de7bb5b36255fdac5ea7899b85260fc1840c659ceb3c303b2af26718e276f71313d6786c1e689ef73ea9ff", 0xda}, {&(0x7f0000000800)="146a7c9dd55f25f5be4588ec1b64b99236abd4b189bda9753e81846dcfdd3460307713ff851c59a8c47337b6bbf3a5283f6f54f84280df87bae5de5e9ed2d2fe846cde23bc17600d015620049ba109546ee8ca6bdb433c51e65803af385bdb95b90cfa1932ebad7b58fb39b5d635f2f733cb84d66ab8b24b81a70ace4fd620fe3a896610b4b6c4", 0x87}, {&(0x7f00000008c0)="3436c05ad747f42df674998aa6832cf213ed488cd2c748207e96e87c7046a7b8f5e98b936aa0c2e9f8ed23e9c819c5780824fcd799cd694e01e4007073ab3b4500d5a6750e99af985a77a0fab770ca8d5acf27c7d098c2465b7a97ef02f86a5a93f5096e18d28d40329575b8f31f6d984d92fd6e7fe6346ea1a00b6409857d60335299179e7c51ac9c437397849ad85b628f82abb4b0f02958937ae369b5aab0a854f3252fc8cae807f9", 0xaa}, {&(0x7f0000000980)="5077004dd59f672498b4fd6fc26fd045d158a35dcaa932984b7614a69b53ab7cbb0a9d5368995b291432ae057db4664a429c394de871ce0b3541ada57487db9b4438b3b137c6145e5ab70e8279b369aa3d27ac78501047a1c17f5c93953eb1", 0x5f}], 0x7}, 0x4040010) r3 = add_key$keyring(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x6bb) write$char_usb(r4, &(0x7f0000000bc0)="698d10ffdda7f3696763aa0446cea5bea5ac3275c4acbcdf4db1881a15e1acb94dd862dca8b22eddb0d402890f3709eba200f15ce0a1e87352ac0d942a77324548569de730bdf72249558f4e9b77e1f009cfa50d47dd396661095731f0784b3e894ef46d96b7a890", 0x68) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x11f980, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000c80)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020, 0x0, 0x0}, 0x2020) r8 = getegid() read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = getgid() write$FUSE_DIRENTPLUS(r6, &(0x7f0000004d80)={0x2a0, 0x0, r7, [{{0x5, 0x1, 0x2200000000000000, 0x9, 0x5, 0x1, {0x2, 0x2, 0x6, 0x7, 0x4, 0xc, 0x8, 0x7, 0x7, 0x4000, 0x9, r2, r8, 0xb1, 0x1ff}}, {0x1, 0xd2fc, 0x9, 0xffff, 'MAY_WRITE'}}, {{0x5, 0x2, 0x2, 0x7fffffff, 0x7, 0xfffffffb, {0x0, 0x1, 0x2, 0x240, 0x800, 0x6, 0x7, 0x9, 0x4, 0x2000, 0x6, r2, r9, 0x4, 0xc081}}, {0x4, 0x13, 0x5, 0x8, '$!]\xcf-'}}, {{0x3, 0x1, 0x0, 0x1ff, 0x10, 0x7, {0x3, 0x9, 0x2, 0x9, 0x7, 0x40, 0xe, 0x7fff, 0x6e7, 0x6000, 0x6f, r2, 0xee01, 0xff, 0xddf0}}, {0x1, 0x7, 0x1, 0x7, '}'}}, {{0x0, 0x0, 0x9, 0x325a6fe3, 0x4, 0x5a, {0x4, 0x9, 0x4f09, 0x6, 0x6a, 0x8, 0x8, 0x8, 0x8, 0x8000, 0x2b, r2, r10, 0x9, 0xaa}}, {0x1, 0x6e8, 0xc, 0x0, 'stats=global'}}]}, 0x2a0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000005040)={@mcast2, 0x6e}) r11 = fsopen(&(0x7f0000005080)='sysv\x00', 0x0) fstat(r11, &(0x7f00000050c0)) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000005280)={0x24, &(0x7f0000005140)={0x0, 0x1, 0x68, {0x68, 0xc, "cc5863b6e3059b4c6d89963630361b4f12cd5102f4ddc829959ea870f76b232b8d4fcc6a8ff13e6d5e68b3b42b82466e0755aa97d445dfa2f2c4f4fe224e6c3517846929c93c5419cc0ec334e71264746017fbbf7ebc0e62752a687a736201a114df4d11fd07"}}, &(0x7f00000051c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, &(0x7f0000005200)={0x0, 0x22, 0xb, {[@main=@item_012={0x0, 0x0, 0xa}, @main=@item_012={0x2, 0x0, 0x9, "09a3"}, @global=@item_012={0x1, 0x1, 0x0, 'D'}, @global=@item_4={0x3, 0x1, 0x4, "df778d3f"}]}}, &(0x7f0000005240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x80, 0x1, {0x22, 0x6ce}}}}, &(0x7f00000054c0)={0x2c, &(0x7f00000052c0)={0x0, 0xa, 0x50, "206d78ae8660c70838d3be5ca7aed1535352e949f3f6a921c135dc4057c9101f9927363123dcb39dd4e326bf71965e866f3b1ce02502072dbeadbcc5b600f0c3927c9ac1ede8f885d9dc1cf2a1a8f2ab"}, &(0x7f0000005340)={0x0, 0xa, 0x1, 0x42}, &(0x7f0000005380)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000053c0)={0x20, 0x1, 0x8a, "a3338a2ff719954db79d9ad58e3fd6fb186e0cfbfdd770a76ccea0e17ce6bcbbdd99fcd25f70bb6d4ef67016bee622713c4109d482d897a1551aadad8970ddb0631a894ee6bda71f073c0cb7846561cbdd8d7f502e982c0e4c8b84f43783d71828078386f4bf3996beef94049aac011f57818383c0fb1b84a726bc4384e0ed1694a2f4fc2c30bd101075"}, &(0x7f0000005480)={0x20, 0x3, 0x1, 0x3}}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000005500)={0x1, 0x5, [@empty, @empty, @remote, @empty, @random="ca187e4849ef"]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x110, r11, 0x4e5c2000) 685.91613ms ago: executing program 2 (id=55): ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0xfffffffffffffffd}) r0 = socket$inet6(0xa, 0x800, 0x3) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = dup2(r3, r1) write$cgroup_int(r4, &(0x7f0000000540)=0xfffffffffffffffc, 0xffffffffffffffe5) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0xb, 0x0, 0x10003, 0x7, 0xff, 0x6, 0x5, 0x12, '\x00', 0x1}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0x1, 0x1, 0x5, 0x5, 0x9, 0x5, 0x1, 0x7, 0x2, 0x2, 0xe, 0xc17, 0x2, 0x7fffffffffffffff, 0x101], 0xeeef0000, 0x16cd04}) ioctl$KVM_RUN(r7, 0xae80, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x102, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x15) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) execveat$binfmt(r3, 0x0, &(0x7f00000010c0), &(0x7f0000001180)={[&(0x7f0000001100)='5\x00']}, 0x1000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x22052, r9, 0x2000) 450.467004ms ago: executing program 3 (id=56): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x8971, &(0x7f0000000440)={'sit0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x1f8, 0x308, 0x110, 0x308, 0x4, 0x0, {[{{@arp={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff, 0xb, 0xf, {@mac=@random="668947cf0109", {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xbc9ff2e4bf045cf5, 0xff, 0xff]}}, 0x4, 0xa, 0x720, 0x80dd, 0xd9, 0x7fff, 'geneve0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x0, 0x204}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @local, @empty, 0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0xfffffff7}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffffff, 0xd, 0x9, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0xcc8e7847c7acfa6e, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0xfff, 0x7, 0x4, 0x5, 0x5d, 0x6, 'ip6tnl0\x00', 'batadv0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x26020480) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x111000, 0x0) pidfd_send_signal(r5, 0x0, 0x0, 0x2) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4c24, @broadcast}, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x187, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2ff, 0x45, 0xd6}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x14, 0x12, 0x1, 0x70bd23, 0x0, "", [@nested={0x4, 0x1e}]}, 0x14}], 0x1}, 0x0) pwritev(r6, &(0x7f0000000580)=[{&(0x7f0000000180)="97957cc73d1abb140846934ee196b669b1679690842b5df1b5a2879e53cd1f22c39b7f6c0e5aeec797826691db978b5dfd01a7b079e0325f16323cf5966f33c3cf7869ffedc498ae64376446dc62c38bd30c059d7ed9789ddbe9efb7a4cabcadb26243ea20324351866912ad514046e597f0fc2226c803a31fa28d257ddffbce8df169c5c0d7f82db43418d1fc9126c172e15c0da769771d59e9198d56c87346a39ff98e3cf40be309b20b94acc47f0455829c30c42f7ec8afe81a5328d08c3c10d72c48f4d43ccd2584ba07274c7cea4eead8503a09e3683b2e162bfa9ef3ab9bbf6544", 0xe4}, {&(0x7f0000000280)="0a87e41f5f9dfe3520b5bf4708813b5eecdb6ca06149b84e45e4560cece03dd2c110e107c30f919230a8d0c381b1d1b81de77e7752b2e293c4c101696f6730a9b96fdb3791db167dd85bec766e4dc77388c220d1ee08f0b817ea5b267b967493824f3ce17a1dbf72d4a76f72062c893b2d9bd24169319e471b7ef219846d1d307e6b05cb91016a9f36f067344666d8c6386ff30387c3b8c41f7a3d631eb927992b7f5fdbac66cda1097ac5407718e2e4c60f50bab11c14bf5053f7", 0xbb}, {&(0x7f0000001180)="72aa51ce7dbe3fe3a8fad52328fa347488507a4822f0d4fccdcc9178a8bcb1dad38e8ed5670d0dc67a30a9e62b47b47945298497d299849964fb8c8046e13393e0cf2de073a5329358c99fad49d7a20b68bbc4d011e898c37bfacaccc439276393f16f8bcc2b9b39b2101e2b288ee0f0474577111836de538d4ef407fbb1ee2200b79c50ad6e64dee18e5abde1ed1c49ad6f8adc76707042e2b4432c5d385a56baba3b779e3513fda51f78d86741633a5aa079f081deb30ce0a409692337af21e89e44732f2023ffe707f88214829eb0cb0fe621f3a31f5e208c62d270d443a055a05dbad584de1f4f15c12122eeddffeb87b05dbb55711b99907181e3c52d3bb09048fe73979713e0a0925c59941ba7bb10863abd34630aa056ad3767131a66b7dad6e45ad0421543b3648175cae27ade76ad31628d8aedc149bd9b50f0088c7272ddb8afa49615c0256d6edd54899c0bfd2916f900fcfa079f6c3fa6d81496164bc577dba6945d437f504d69f4fd57e25ca058a520536bc5ef21f6577183b42d146bfbcc1f5e2acf789cdfdf4bebf80668f2cb66d96802d28d2a192325343d04b7f66ffcd60d6e780369037466b995b5a695a818ff7fcb4cea03cee55421a00d1bb15bf744ed459f104dd92da5e881d90585c2ea82d20593acc9faec84eacf59857ec158857f36dbf9e84f48df220a13dd627e8cc48dcfd766ff1d479e8451926dd7ec3f3572318d6e38e1f3eaf1b777de2c1b40ddc8355bfb1f8576de0239d83a7c8b064e36cda9d747156cad7af32cef4acae7e293fada622ea1e593830a1409f50d0c0ff3578ecac383dbc808ea7039812d7261c0abd41079640bab97fc475ccba6d438e4a4f5dcc39539db4d9de79194e767b0a26229d5f7f80a1acfd0e571310865b2e6ce9c6ed54c3d0ceac8ddb1ab3e9550b9c2255cf9e3c013dfcbc733486670986cc0cc723a74f0c5309df9c9880857949a886942d02d3c9bca4d86243162d3b33831db6a152c5dc54469e6842cc991d6987b939417498a1bc8e839755533304f60b494ed6aaae808cd983ee461f531c8c762ea1f264588a336dcc54f5500b49fc132ee4f3f675eabd9def20c5d58caf24253d697d75b18a30bd955bc515b3b63ddb03d537e3408158ecd48be5b6f2f26ad565a0ca9b7e9af4ecf9389aa1f4fc601e30f9b83518fc2936e92c466b1637d2a8de8004ca7480803b97bb937f5c40974a04c676dd3f92753530ccd9789db384385faa2142aa954410477be75eeb8a9c6e6168e576dc3ec95ad4793a29495f0a0a7185909263c46985c3bba6a5be22b6679e793cad7374aafeac9f14a41666c93736039b1e14d045c47e9be4063aeecf1de07b99039223af2acaa277cd682261ffd20fc606d9de079727d5180f9e8ef0167f43073f7947613ce502b40bc0c99523341bf078dd01c46d24f35535dcb3f373f6553229aab4238eb835af76d00336a0d1df11e24bb804be6f9a367559db738e263237104010125e5dfda7f3cdd0e69715c064e6ab8f2e5e852c77fb3f4ae5c8950425cf2970cba62acf60836e4dc95d8490fb9cbf0141426dc69b0a6e7d5afb8fb20e240923abf7b98a7d477d38d3fd09c6bece4b1fb602b8e89589dd81105ed5c41b780d823486df4c1885dd14ba3a048442f3c0146f7aab63da1aea388482f71dbdde4ee45300995bde8dcbca2d73a8961f7d683cf46f74795971e7a4b10895023ceebbc9aa143d87da6a714514e1bb4ffb19a54f10bd81edc2fe28968f5bb6cf6489e7987a9572329901549a2b127c4ed14340a7442db029992b155785a1ea57c33f75200b9409bd73eaaf266c8a18235815f36758fbf0fb4bdca2039654678331e7be900ea316b266cf92c3533cb767b6cfc20c9e95e5a350daf8b3ec2fd5ec6b03673868a23cdb4bcb17cbb1046a97788e495cde97fb101f7bcd6a50f832888771776c9f206323ac17b992929864fd37cfae49e131437e90210dab13d7c231a9ff5f940c9a9e9e9f888c4856860fa06f8a13026f2dbf79fe1d723d22eb33bcc96bffe94b5896f1def042cce16302fbe8325edf2ffacc3cdb3ade6314323a2f634f1fdd62353c5de1e7356bed00b2b644d7840fe9f19024e6c5e51da3764aa0b6c7487e99f526cc070c5d2290f0d15761d85e512e4e5118d847241af1b99ba8fc54c7eba5e0bcc4cdaf81de9ecba57575e80fcaf48a3ffdc3bed96e445cf5a126ea499282239e78c8b3ff140378543d9a1bb5c63726883eb1f55e82d9c27fce972017233983a8a9bf11a49dd7204bc65538053b958da59201288f0b4fa769acb113326ceb86cdaa86ff7f041b32c7546ad3398c2b0eca99a8f5e33d10b8da9c0d87dfc0983f3efb626e01e43229982718458e7de291c70699dec36200eb8a256f990aeea889fd2ffd5c5b4b8aa78c3f49886d413ba92f220c3d6dadc86115111fe165fac6d97539844863a2501e08e8fdae5ed5e01b1dc1e7cf6845cab2d4ce3e5269b886b93da8aab3daaf47b80a9d9476dbb7f9456900d6f144e1a5881e9f25b0ccb161b7aa2fa6a411419eaa5fab265481bc4b1a6a1646b55442e723ddd26431b1a9df32020a583503ee500f9cf0cadc295a5014015166e15a7e6fba47c8c781a4306ba9691130169f89a546015101d7d75b40e9bd41c4c4692a3fc1780f05da6810df9f4b297cb05efb9557cab1c2b47a9b58ec82197738f3155872b6093c2963383f41c121693bc93669d820816bcf847e668de28fc66b21ee141816033a8f8de7202f6d12d1b1aa84767b82f2a3a8f5d976a39a1c9bcac6ac33bd2013a0c0f50c619edccb49b5d000362d6e5cd0ce2b473c0a58155a81f3877a125fa2e84d426b607eb9ad4a6407cecbca5334585154c8e646332bb62ce0fd9a8b74d3f994602710903737f119be2644b883f6c1848fecbc2df4755a85172583c8c9b2fa3621e3e177685bfd7c213153a9ea12b9e8419bab6f56f8d04d42b764aaa043c8135ac35f86d0186dc413fb7f4111a9a115d2c28ebcc241686431813340fefda5c9c37d4c0dbe7af156a2f7f5e546fde705955c9b0f8d0ee8462e93489af8f1ac0c570ccef7554acd664cf69dbca04014f1ffaa6eb7807326c7ce9308e996b7b182f2cdf21f2791a16af8f90e5fee7b4b4fbb1374d5c17e3b50ccea2bd0183415e605d150344e210c1aced1df0b119ae6da5d100b3c3885c13ce2e0b900c97bd4b09eb3766b05ba736c7635a1124977f866cb34fd3785538c1dc618ba55ffc2cd53300d52e376308811686ba526babe5c56d59bd03fc233755ec7769769c9a3d8377f46c6215778cdce2767438ca1b761490c120eff39501b65b1ebf42868187513a0d854d917f1acbafc9a6f7f3844caa3cb4408b887b709a2a5c9839dd0376a6dd7348a28dc68f579a5c03b82fc155237860e87b613f53045999a1bd3b7ab3fa8bf748ead19e543ec347ea2d58bc3cdd566a710d058cc3c27e4bcb0d57567c1c9325b43d7c8c099b64163e91a3aa89f88ee43a7af50fc660a9538ca865ee445a3508ab2b00f3e3e9a4c5231f681daf890816ebdd24dc55a0f20174495045dc45a128c61dc6da1b18a734cb8e992354b592ef53168eacc15955a8a4db71583f7764dfb545a4a570536923c843d48936bc33ca6a0fcf001fb4ecd9c28d53a6b8f4163473abd0b0be9455f0da3f5b6aa72037ebb511e46b20ab145a189932f9a04b3a47c80b8ac83b423247db6576cc079d9ec871e8804de2e8db88725d44331e92adaebe44fe078d0c7d8ea820784a1cbea5a83627e9e36ee0caf39890545e64b841b7785f00211615186fd3405f6719371345ad3d595ea2296a3a929431953d72898b62df0e8c680501353fdd28f168da48bb10806292124cb4784b4d817e07262f63a51662a424319029b1e018445e9db0ffb8a3fbef7845d2d84ed3ae83dd74f9d5066032d1b2b9705cdc3f4d5294fb4048133e24f8469802d8c365fa153b83e17210468fa9c371e9e58ea2c2250c3a299b2d125d885b7c210ce1cac716e8971948ceaef1e0c2cca10ac973a602145ec617e737332dc48cc36181e6d618b5b00c6f51656d8ba1e80e6f6b3d30b27f0cfe8a1a4160c38918a4bdec3a61a3a23b9d74f6a84b89cef86f95dbde0929f98bec6ab2ba67365d7984e60445bbb6cd93b3110b4b9e76c051573e2b63abcb73f47962a76bf402d77234d7b15ac1e6b9544498933fbd732952f3103186187e407a27ca16eb5a7e269261996e1ce19e98454d915e9e47f1eaada8b7307a0fd7a2808618de0655b6a97eca32e6ed5bcb3eea94f9ea89414f2e3c8dbc06a78feb6034de6be20cecf59431053b693496ca6e2820f48590ca2e94aaae406a670f830eca681cec055556096dc4768ef39107804243d4c62d054071ff41452b49e8769ff0ae0526f38a4780b4ce16531ab88348b6878c34ae114f466bc18eef1a092bce489f5f85e0122fe5f690b34add956f2ae3ebb4cfbfe6d016f23c6d01c1c4975fd5060783c6a96b3dbbd231222f84c11e0fc06015826a25cbb3695e2560af62d6047e6823efb6bf21d4ac70d75e5c4c16ad3b426d323430450aba103c2827c983581cb680148ca05c04da656d75ba3611ed28e50e15f3e78aa3200abae766fd5c3dee83b84881b6d2b4a0414785d8738fe337fe78df286cccc2ed9e72455575025230423744e8e47998761f51383ccd5de9bf414bf09855fa956744199126fea4b7e33175e823dc7a4822fa8eece617a93d2d0d324faa7a879a977656a638efa43041fc78c21c7e8544d88f19d9cdc6ea99c6b46658c53d01f110aa56a16d4d7e88fe9bca59a757e7484485f3e92f45aeb0bab0a61589d6a0cfdc1e560d03a1aa537f18c62c47424d38ff1d37c8d8ad2f791ed4b675a66b37dfc59ca5c9329920e426a89749af2fb28e15ea44fc796513e274d0ce917b58a72f4318ad0811db5815375683cef5bd48eac8a74a9ecbc90420cc135fcc9d5b98cb9ab643769fb3c2fd57da9f754c50610f8a254f759e34910f4ff9cf57be410829f2cca4f3514b680845de6a6de1ffdf00999ff8342c0ec946eac381f5b812366ca8a8a66ab67c4784b4d52ca56fbfe75c2fd561fa30be44f24842cfbcda0d89230053749dc3889730560b14880654f852cd7d63b27177da39292c85ba124abb1301de36a8c52dfac905a8c0534e596f062d7adfec6bdc759f7d842b94873b029688aeec036d3d0f16cda7b6fc6b934465456b12e71483e3ed274646cc6db9418e7d2a67203e779edd7e45c841bc272005f618b65e4c7a4fa7705b56a898f59a741d05054e2747adb342f9b0e1c0604e38e38ef542783bbf44c907156a9f0bb08457c9690f362b9f0a2850da0837db166afdbde5c838bdc3825e6d5d0a9b1704ca6db085ffd875390f7873e88617df16b499ca2a013f68f9a44ab3109e9d270a9910d6c71ffdaf67e6fc6bd70e95141711d1151e60a1c7697069c3eb1f8dfa620766e9bdc8f78cfb3376018a5173acc1296448d94d10526cce2fcfea3cf5d216e6f03fc3b82774c90a7c61716e9e8be33232531673762217b90b509958a849eed64a460c05eb109359d0f26c4e7102842590179ad21a177b3c2400f66076f32ddbdb9b114bd6b9b425e99f08634bf2fe1a1d960434e629106491e59d8d7fbd1831b04cba24abcb034d423ab4fd007f3edff911ef3593d6f86763e90e3ab7612f2a57399bf8e4228f3e5d90345dacec44afa28f9141bc65a4bedfdfc581746fbadb06a287176158a1ea2bf5b70c39", 0x1000}, {&(0x7f0000000000)="b5b2acfe64eb58ade0460464debe0f5acc47d23bdc987d31fa", 0x19}, {&(0x7f0000000080)="5ce611d2415b", 0x6}, {&(0x7f00000000c0)}, {&(0x7f0000000340)="f95b3775692de0b1c8158cbd1363c5c14a09393770ee09ed2db55e5bfc889c4a2c455949927bd6b4f5093c2b99795bb2ad9a3d", 0x33}, {&(0x7f0000000380)="d2b085e874efc7f0bbb4cefe562980d5f88bdad9bdcdefbda7cb8f37f608178fa61dacab403cc33002dc9ba0af465cfa25847905b45d5ab148d2483888fcb46e45fa593e4e83c2b1f2de526f591bad0605fff8543fc961e0f3150c5239ece6eec345ab8f382600216a80d16ecf3b380316c68de6145c73a2edc50f19e57acdfbc675956a20b07cc810b684a35ca117ee7ac1d909afd0b85a422303a72182a89474b0f4bd01d392b0001145819e4f02d4c3c41eba00d446129f9aa69027c5c42cf6f3e8c18a4a779cdc4739103822120c6b689baa", 0xd4}, {&(0x7f0000000480)="890df984d4646f507f98dd6eadddc47ad7e6232fa713d44f74b9779db2b437d1359814bd15cb7029a92f707f200a7b93931da665bd38dbf3466de3874d08729f2ed7b71fa60ceb3e97e7c9a1f8395e94592d118e7a5783037a970c07697338c9be6378dd26f122f31d248acd5352c5b0c67f77a233747dcfca55353a1cf775f78bbb6f3fc3def8a7903838520fc7b5ec789afe66a5aae136d4c40e8cb8952336947a3b723ebc403dbd29a6de27b82e74efdf11c6057a5b6dfbd6a211a7b5", 0xbe}, {&(0x7f0000000540)="eefa568d06a89415089858de3d95fac9bed409a134a03fc1c625fdaee2ac9f95fe434cf97e9fcf40b3bdd50df094ab3e", 0x30}], 0xa, 0x101, 0x1) 395.119135ms ago: executing program 3 (id=58): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, 0xffffffffffffffff, 0x147a5000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x4, 0x3ff, 0x8]}, &(0x7f00000001c0)=0x44) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = dup3(r0, r2, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x1) madvise(&(0x7f0000232000/0x3000)=nil, 0x3000, 0x0) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x100000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 354.346285ms ago: executing program 3 (id=59): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40840) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"bf64aaa3d228889e734a21279699c083", 0x0, 0x0, {0x1, 0x400}, {0x81, 0x4bda}, 0xfff, [0x0, 0x0, 0xffffffff80000001, 0x2, 0x4, 0xd8, 0x8000000000000001, 0x2, 0x8000, 0x54fc9b97, 0x50c3, 0x73ef, 0x2899, 0x2, 0x5, 0x7]}) ppoll(&(0x7f0000000180)=[{r5, 0x1580}, {r6, 0xa228}, {r6, 0x13}, {r4, 0x1}, {r5, 0x4c0}, {r2, 0x8804}, {r5, 0xb18e}, {r6, 0x8}], 0x8, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)={[0xe5]}, 0x8) ppoll(&(0x7f0000000040), 0x22, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0xffffffffffffff4e) unshare(0x22020600) lseek(r4, 0x10001, 0x0) 218.492647ms ago: executing program 3 (id=60): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001300)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000001400)=0xe8) r1 = getegid() mount$fuse(0x0, &(0x7f0000001440)='./file0\x00', &(0x7f00000012c0), 0x200000, &(0x7f0000001540)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[], [{@audit}]}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r3) sendmsg(r4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=ANY=[], 0x4b0}, 0x1) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f00000015c0)="1e7f5c284e2d398ac352e915024f5bf30e1b95967514f4f26974ddc5ede85a81690bf494c4a7885c75943ea3aac91cfa064418a02cf2b1b2835d501c1bf1c13bd636222d3b55c0b8450dba3d07218c5043f713e472b3cb67a11c22d335658b2fe0e37f841575c6c91b15b9df0d640066bf875e34285be19af73393ae723e092cce42f76840452cd378549d08a57c0f812270f3c2689e826823dba8810c7c380de1301510adcc71900497c6794ef2645f60b3b5a1db573510b3c16e7978fe3db01bb6c11936ffaf1bccd7c28936a2449304393a32c8026979099e3a5d") r5 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f00003e4000/0x2000)=nil, 0x2000, 0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000040), 0x0, 0x2c00c0c4) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r5, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="fe8b43850be0dc5c146dc3d1cb102951e0f3b9813ee869460e18f530f68758863b51f2067e17e62cb5deebbce6155f85a6", 0x31}], 0x1, &(0x7f0000000100)=[@hopopts_2292={{0x70, 0x29, 0x36, {0x3ef55fb4b264e553, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @generic={0xe, 0x2f, "233f7293b00353521a10bef4f710682de20944749200e3911025d54dd5a7fc6d5dfcbc879926939ab4933e39d44f49"}, @ra={0x5, 0x2, 0x7}, @generic={0x10}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}]}}}], 0x70}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1, &(0x7f00000011c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff3}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x40}}], 0x2, 0x4) 128.592268ms ago: executing program 3 (id=61): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000), 0x120600e, &(0x7f0000000000)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 106.872919ms ago: executing program 1 (id=62): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x8044, &(0x7f00000003c0)={0x11, 0x86dd, r1, 0x1, 0x7, 0x6, @random="eb68e3f58965"}, 0x14) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.41827ms ago: executing program 3 (id=63): r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000200)={0x0, 0x6, 0xa, 0x9, 0x7, 0x57}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000100)) (async) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x41) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x41) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2, 0xd8, 0x1, 0x2, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0x0, 0x10, 0xa, 0x1, 0xd, 0x5}}) (async) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2, 0xd8, 0x1, 0x2, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0x0, 0x10, 0xa, 0x1, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x7, 0x400, 0x180, 0x7, 0x7, 0xf1, 0x0, 0x3e75, 0x7, 0x0, 0x9, 0x0, 0x0, 0x4, 0xbd9], 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x7}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80082103, 0x0) (async) ioctl$FS_IOC_GETVERSION(r5, 0x80082103, 0x0) r6 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x7, 0x0, 0x4}, 0x3, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x3c}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xdfffffff, 0x8, 0x4}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x7, 0x0, 0x4}, 0x3, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x3c}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xdfffffff, 0x8, 0x4}}, 0xe8) socket$inet6(0xa, 0xa, 0xe878) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) (async) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x3b) rmdir(&(0x7f0000000180)='./file1\x00') syz_io_uring_setup(0x79e1, &(0x7f0000000000)={0x0, 0xc5fc, 0x1, 0x1, 0xc3, 0x0, r1}, 0x0, 0x0) 6.02425ms ago: executing program 1 (id=64): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10200, 0x1) syz_clone(0x40000000, &(0x7f0000000240)="9ccc74833a97e22bb428b7e3d8251afce106b3e6585a7288585b170298db342993741bca92f68d3e5bb92bd884d36373af484077252b9140c4761536f11e7e58454383c5cf0a68d7664396755ac43236db403249df97ba47a37e89cfb50594f0593491198863fc6d35563936c81677e37cc00f25ff8f9f3e11e136258d0f854024f96116e348a7922dd41efac4cd4e0916742239b4ee", 0x96, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)="258c1658e29b6c6a694f682ee950ab9215a30ea73312b91e3c1d252e18f758d425277876bd893ba4e1c0268b1a92b542a52523dd00799d1f546191b7e4e9a2e6d8fd7ae786b1939c7c54b579968292ce8764cc34220a38b3f1353c3ed398e35c7cb3d7fff5645fb1d7cbf066e61ccdf124") syz_open_procfs$userns(r0, &(0x7f00000000c0)) setns(r1, 0x24020000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') syz_open_procfs(r0, &(0x7f00000001c0)='net/tcp6\x00') r2 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) sendfile(r2, r2, 0x0, 0x24002de8) umount2(&(0x7f0000000040)='.\x00', 0x2) mkdir(&(0x7f00000000c0)='./bus\x00', 0xcd) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 0s ago: executing program 0 (id=65): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x45808000) pipe(0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) write(r3, 0x0, 0x0) r4 = inotify_init1(0x0) read(r4, 0x0, 0x0) write$selinux_attr(r1, 0x0, 0x0) userfaultfd(0x80000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x17, &(0x7f0000000000)=0x5, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 21.468125][ T36] audit: type=1400 audit(1752385443.780:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.469605][ T281] cgroup: Unknown subsys name 'net' [ 21.490812][ T36] audit: type=1400 audit(1752385443.780:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.518190][ T36] audit: type=1400 audit(1752385443.810:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.518402][ T281] cgroup: Unknown subsys name 'devices' [ 21.724398][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.730067][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.866881][ T36] audit: type=1400 audit(1752385444.180:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.890084][ T36] audit: type=1400 audit(1752385444.180:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.915221][ T36] audit: type=1400 audit(1752385444.180:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.919939][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.947138][ T36] audit: type=1400 audit(1752385444.260:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.972915][ T36] audit: type=1400 audit(1752385444.260:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.004687][ T36] audit: type=1400 audit(1752385444.320:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.030328][ T36] audit: type=1400 audit(1752385444.320:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.030408][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.367916][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.375065][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.382238][ T289] bridge_slave_0: entered allmulticast mode [ 23.388535][ T289] bridge_slave_0: entered promiscuous mode [ 23.396773][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.403870][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.410964][ T289] bridge_slave_1: entered allmulticast mode [ 23.417408][ T289] bridge_slave_1: entered promiscuous mode [ 23.470344][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.477515][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.484734][ T290] bridge_slave_0: entered allmulticast mode [ 23.491030][ T290] bridge_slave_0: entered promiscuous mode [ 23.498671][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.505822][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.512970][ T290] bridge_slave_1: entered allmulticast mode [ 23.519338][ T290] bridge_slave_1: entered promiscuous mode [ 23.579354][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.586534][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.593732][ T291] bridge_slave_0: entered allmulticast mode [ 23.600015][ T291] bridge_slave_0: entered promiscuous mode [ 23.606524][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.613693][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.620780][ T291] bridge_slave_1: entered allmulticast mode [ 23.627222][ T291] bridge_slave_1: entered promiscuous mode [ 23.685770][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.692865][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.699956][ T288] bridge_slave_0: entered allmulticast mode [ 23.706384][ T288] bridge_slave_0: entered promiscuous mode [ 23.720133][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.727261][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.734463][ T288] bridge_slave_1: entered allmulticast mode [ 23.740751][ T288] bridge_slave_1: entered promiscuous mode [ 23.819726][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.826840][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.834184][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.841260][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.850621][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.857761][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.865074][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.872128][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.889181][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.896285][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.903610][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.910645][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.968460][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.976710][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.984541][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.991796][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.999808][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.007603][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.021373][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.028503][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.036849][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.043940][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.067206][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.074308][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.082042][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.089093][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.134011][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.141067][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.149734][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.156831][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.169304][ T289] veth0_vlan: entered promiscuous mode [ 24.177925][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.185010][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.199522][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.206633][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.230148][ T289] veth1_macvtap: entered promiscuous mode [ 24.244725][ T290] veth0_vlan: entered promiscuous mode [ 24.275912][ T290] veth1_macvtap: entered promiscuous mode [ 24.304341][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.306699][ T291] veth0_vlan: entered promiscuous mode [ 24.329436][ T288] veth0_vlan: entered promiscuous mode [ 24.364788][ T291] veth1_macvtap: entered promiscuous mode [ 24.374830][ T288] veth1_macvtap: entered promiscuous mode [ 24.468645][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.469353][ T321] 9pnet_fd: Insufficient options for proto=fd [ 24.539249][ T326] 9pnet_fd: p9_fd_create_unix (326): problem connecting socket: ./file0: -111 [ 24.574717][ T328] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.587922][ T328] ======================================================= [ 24.587922][ T328] WARNING: The mand mount option has been deprecated and [ 24.587922][ T328] and is ignored by this kernel. Remove the mand [ 24.587922][ T328] option from the mount to silence this warning. [ 24.587922][ T328] ======================================================= [ 24.595308][ T324] SELinux: policydb string S does not match my string SE Linux [ 24.631187][ T324] SELinux: failed to load policy [ 24.646911][ T324] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 24.669043][ T324] SELinux: failed to load policy [ 24.696043][ T340] overlayfs: failed to clone upperpath [ 24.858318][ T349] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 25.165410][ T362] usb usb1: usbfs: process 362 (syz.3.20) did not claim interface 0 before use [ 25.200601][ T369] overlayfs: failed to clone upperpath [ 25.431393][ T384] capability: warning: `syz.3.28' uses 32-bit capabilities (legacy support in use) [ 25.462431][ T384] tmpfs: Unknown parameter 'Æø'Èù½Õ0͉&V¬w“Ã8Ô~ë֮߳©ÏH ÷YcúÔTQŠš)ò\D }¨_:©àp5v6Ô‡thùÊ>§&4N`ÿojZH\Q˜¸G®ä ' [ 25.541618][ T373] Zero length message leads to an empty skb [ 25.929434][ T405] netlink: 3 bytes leftover after parsing attributes in process `syz.2.33'. [ 25.939958][ T402] overlayfs: upper fs does not support tmpfile. [ 25.955449][ T405] netlink: 3 bytes leftover after parsing attributes in process `syz.2.33'. [ 25.981156][ T405] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 26.150872][ T415] overlayfs: failed to resolve './bus': -2 [ 26.308821][ T423] capability: warning: `syz.2.38' uses deprecated v2 capabilities in a way that may be insecure [ 26.560851][ T438] overlayfs: failed to resolve './file1': -2 [ 26.623990][ T36] kauditd_printk_skb: 109 callbacks suppressed [ 26.624010][ T36] audit: type=1400 audit(1752385448.940:183): avc: denied { remove_name } for pid=439 comm="syz.0.46" name="work" dev="incremental-fs" ino=4814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.654395][ T440] overlayfs: upper fs does not support tmpfile. [ 26.662389][ T440] overlayfs: upper fs does not support tmpfile. [ 26.668945][ T36] audit: type=1400 audit(1752385448.970:184): avc: denied { rmdir } for pid=439 comm="syz.0.46" name="work" dev="incremental-fs" ino=4814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.875256][ T451] overlayfs: upper fs does not support tmpfile. [ 26.903994][ T451] overlayfs: upper fs does not support tmpfile. [ 27.017374][ T36] audit: type=1400 audit(1752385449.330:185): avc: denied { connect } for pid=461 comm="syz.2.55" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.056274][ T464] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.222892][ T36] audit: type=1400 audit(1752385449.540:186): avc: denied { create } for pid=467 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.280691][ T36] audit: type=1400 audit(1752385449.560:187): avc: denied { setopt } for pid=467 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.392970][ T36] audit: type=1400 audit(1752385449.710:188): avc: denied { read } for pid=471 comm="syz.3.59" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 27.448839][ T36] audit: type=1400 audit(1752385449.710:189): avc: denied { open } for pid=471 comm="syz.3.59" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 27.490051][ T36] audit: type=1400 audit(1752385449.800:190): avc: denied { write } for pid=473 comm="syz.3.60" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.600503][ T36] audit: type=1400 audit(1752385449.910:191): avc: denied { ioctl } for pid=478 comm="syz.1.62" path="socket:[4925]" dev="sockfs" ino=4925 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.711634][ T481] ------------[ cut here ]------------ [ 27.717205][ T481] WARNING: CPU: 1 PID: 481 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 27.725231][ T481] Modules linked in: [ 27.729180][ T481] CPU: 1 UID: 0 PID: 481 Comm: syz.1.64 Not tainted 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 27.742454][ T481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 27.752756][ T481] RIP: 0010:drop_nlink+0xce/0x110 [ 27.757940][ T481] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 27.777716][ T481] RSP: 0018:ffffc9000c4470d0 EFLAGS: 00010287 [ 27.783858][ T481] RAX: ffffffff81ed527e RBX: ffff88811da39d40 RCX: 0000000000080000 [ 27.791895][ T481] RDX: ffffc900019f2000 RSI: 000000000000137c RDI: 000000000000137d [ 27.799913][ T481] RBP: ffffc9000c4470f8 R08: 0000000000000003 R09: 0000000000000004 [ 27.808165][ T481] R10: dffffc0000000000 R11: fffff52001888e10 R12: dffffc0000000000 [ 27.816310][ T481] R13: 1ffff11023b473b1 R14: ffff88811da39d88 R15: 0000000000000000 [ 27.824348][ T481] FS: 00007f5cf57fc6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 27.833384][ T481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.840016][ T481] CR2: 0000200000001000 CR3: 0000000115e58000 CR4: 00000000003526b0 [ 27.848060][ T481] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.856099][ T481] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.864135][ T481] Call Trace: [ 27.867798][ T481] [ 27.870773][ T481] simple_rmdir+0x153/0x260 [ 27.875360][ T481] vfs_rmdir+0x3dd/0x560 [ 27.879656][ T481] dir_rmdir+0x236/0x320 [ 27.883981][ T481] ? __cfi_dir_rmdir+0x10/0x10 [ 27.888807][ T481] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 27.893946][ T481] vfs_rmdir+0x3dd/0x560 [ 27.898231][ T481] dir_rmdir+0x236/0x320 [ 27.902561][ T481] ? __cfi_dir_rmdir+0x10/0x10 [ 27.907377][ T481] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 27.912574][ T481] vfs_rmdir+0x3dd/0x560 [ 27.916860][ T481] ovl_workdir_cleanup+0x192/0x780 [ 27.922066][ T481] ? lookup_one_len+0x2f0/0x2f0 [ 27.926976][ T481] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 27.932694][ T481] ? lookup_one+0x197/0x2e0 [ 27.937361][ T481] ? __cfi_lookup_one+0x10/0x10 [ 27.942292][ T481] ? kasan_save_alloc_info+0x40/0x50 [ 27.947631][ T481] ovl_workdir_create+0x2af/0x750 [ 27.952729][ T481] ? __kasan_check_write+0x18/0x20 [ 27.957893][ T481] ? ovl_statfs+0x2d0/0x2d0 [ 27.962463][ T481] ? _raw_spin_lock+0x8c/0x120 [ 27.967307][ T481] ? _raw_spin_unlock+0x45/0x60 [ 27.972229][ T481] ? mnt_want_write+0x321/0x510 [ 27.975960][ T491] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 27.977115][ T481] ovl_get_workdir+0x328/0x1650 [ 27.996142][ T481] ? ovl_fill_super+0x36f0/0x36f0 [ 28.001221][ T481] ? __kasan_check_write+0x18/0x20 [ 28.006409][ T481] ? _raw_spin_lock+0x8c/0x120 [ 28.011217][ T481] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.016484][ T481] ? __kasan_check_write+0x18/0x20 [ 28.021649][ T481] ? _raw_spin_lock+0x8c/0x120 [ 28.026496][ T481] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.031737][ T481] ? __kasan_check_write+0x18/0x20 [ 28.036927][ T481] ? up_read+0x26/0x1d0 [ 28.041127][ T481] ? _raw_spin_unlock+0x45/0x60 [ 28.046052][ T481] ? ovl_inuse_trylock+0xbd/0x110 [ 28.051123][ T481] ovl_fill_super+0x133f/0x36f0 [ 28.056614][ T481] ? xas_nomem+0x71/0x2d0 [ 28.061007][ T481] ? ida_alloc_range+0xa12/0xa50 [ 28.066036][ T481] ? __cfi_ovl_fill_super+0x10/0x10 [ 28.071284][ T481] ? __kasan_check_write+0x18/0x20 [ 28.076533][ T481] ? mutex_unlock+0x8b/0x240 [ 28.081256][ T481] ? __cfi_mutex_unlock+0x10/0x10 [ 28.086395][ T481] ? __kasan_check_write+0x18/0x20 [ 28.091559][ T481] ? _raw_spin_lock+0x8c/0x120 [ 28.096421][ T481] ? sget_fc+0x9ce/0xad0 [ 28.100707][ T481] ? __cfi_set_anon_super_fc+0x10/0x10 [ 28.106249][ T481] get_tree_nodev+0xcb/0x170 [ 28.110890][ T481] ? __cfi_ovl_fill_super+0x10/0x10 [ 28.116177][ T481] ovl_get_tree+0x20/0x30 [ 28.120558][ T481] vfs_get_tree+0x9e/0x290 [ 28.125056][ T481] do_new_mount+0x251/0xb40 [ 28.129600][ T481] ? security_capable+0xcf/0xf0 [ 28.134894][ T481] path_mount+0x688/0x1050 [ 28.139378][ T481] ? putname+0x113/0x150 [ 28.143726][ T481] __se_sys_mount+0x2bd/0x480 [ 28.148470][ T481] ? __x64_sys_mount+0xf0/0xf0 [ 28.153343][ T481] ? __kasan_check_write+0x18/0x20 [ 28.158509][ T481] ? fpregs_restore_userregs+0x11d/0x260 [ 28.164215][ T481] __x64_sys_mount+0xc3/0xf0 [ 28.168857][ T481] x64_sys_call+0x2021/0x2ee0 [ 28.173709][ T481] do_syscall_64+0x58/0xf0 [ 28.178167][ T481] ? clear_bhb_loop+0x50/0xa0 [ 28.182940][ T481] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.188884][ T481] RIP: 0033:0x7f5cf498e929 [ 28.193431][ T481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 28.213464][ T481] RSP: 002b:00007f5cf57fc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 28.221960][ T481] RAX: ffffffffffffffda RBX: 00007f5cf4bb5fa0 RCX: 00007f5cf498e929 [ 28.229976][ T481] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 0000000000000000 [ 28.238020][ T481] RBP: 00007f5cf4a10b39 R08: 00002000000000c0 R09: 0000000000000000 [ 28.246043][ T481] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 28.254075][ T481] R13: 0000000000000000 R14: 00007f5cf4bb5fa0 R15: 00007ffc902aa0b8 [ 28.262119][ T481] [ 28.265183][ T481] ---[ end trace 0000000000000000 ]--- [ 28.271055][ T481] ------------[ cut here ]------------ [ 28.276619][ T481] WARNING: CPU: 1 PID: 481 at fs/dcache.c:774 dput+0x3cd/0x510 [ 28.284244][ T481] Modules linked in: [ 28.288177][ T481] CPU: 1 UID: 0 PID: 481 Comm: syz.1.64 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 28.302969][ T481] Tainted: [W]=WARN [ 28.306795][ T481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 28.316907][ T481] RIP: 0010:dput+0x3cd/0x510 [ 28.321549][ T481] Code: 55 99 ff 48 b8 00 00 00 00 00 fc ff df 48 8b 4d d0 0f b6 04 01 84 c0 0f 85 21 01 00 00 80 0b 40 e9 a8 fe ff ff e8 93 55 99 ff <0f> 0b e9 9c fe ff ff e8 87 55 99 ff 48 89 df e8 2f 01 00 00 84 c0 [ 28.341236][ T481] RSP: 0018:ffffc9000c4473b0 EFLAGS: 00010246 [ 28.347398][ T481] RAX: ffffffff81ec551d RBX: ffff8881106c9440 RCX: 0000000000080000 [ 28.355444][ T481] RDX: ffffc900019f2000 RSI: 000000000007ffff RDI: 0000000000080000 [ 28.363505][ T481] RBP: ffffc9000c4473e0 R08: 0000000000000003 R09: 0000000000000004 [ 28.371517][ T481] R10: dffffc0000000000 R11: fffff52001888e68 R12: 00000000ffffff80 [ 28.379832][ T481] R13: ffff8881106c94c4 R14: ffff8881106c94c0 R15: 1ffff110220d9298 [ 28.387883][ T481] FS: 00007f5cf57fc6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.396885][ T481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.403550][ T481] CR2: 0000200000001000 CR3: 0000000115e58000 CR4: 00000000003526b0 [ 28.411596][ T481] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.419683][ T481] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.427718][ T481] Call Trace: [ 28.431031][ T481] [ 28.434026][ T481] path_put+0x3d/0x70 [ 28.438053][ T481] dentry_release+0x53/0xb0 [ 28.442676][ T481] ? __cfi_dentry_release+0x10/0x10 [ 28.447920][ T481] __dentry_kill+0x22b/0x5f0 [ 28.452782][ T481] ? lock_for_kill+0xa7/0x230 [ 28.457505][ T481] dput+0x3f2/0x510 [ 28.461372][ T481] path_put+0x3d/0x70 [ 28.465438][ T481] dentry_release+0x53/0xb0 [ 28.469988][ T481] ? __cfi_dentry_release+0x10/0x10 [ 28.475262][ T481] __dentry_kill+0x22b/0x5f0 [ 28.479887][ T481] ? lock_for_kill+0xae/0x230 [ 28.484655][ T481] dput+0x3f2/0x510 [ 28.488758][ T481] ovl_workdir_create+0x2bf/0x750 [ 28.493861][ T481] ? __kasan_check_write+0x18/0x20 [ 28.499016][ T481] ? ovl_statfs+0x2d0/0x2d0 [ 28.503593][ T481] ? _raw_spin_lock+0x8c/0x120 [ 28.508442][ T481] ? _raw_spin_unlock+0x45/0x60 [ 28.513374][ T481] ? mnt_want_write+0x321/0x510 [ 28.518265][ T481] ovl_get_workdir+0x328/0x1650 [ 28.523191][ T481] ? ovl_fill_super+0x36f0/0x36f0 [ 28.528263][ T481] ? __kasan_check_write+0x18/0x20 [ 28.533717][ T481] ? _raw_spin_lock+0x8c/0x120 [ 28.538621][ T481] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.544360][ T481] ? __kasan_check_write+0x18/0x20 [ 28.549572][ T481] ? _raw_spin_lock+0x8c/0x120 [ 28.554422][ T481] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.559656][ T481] ? __kasan_check_write+0x18/0x20 [ 28.564851][ T481] ? up_read+0x26/0x1d0 [ 28.569042][ T481] ? _raw_spin_unlock+0x45/0x60 [ 28.573973][ T481] ? ovl_inuse_trylock+0xbd/0x110 [ 28.579038][ T481] ovl_fill_super+0x133f/0x36f0 [ 28.583967][ T481] ? xas_nomem+0x71/0x2d0 [ 28.588337][ T481] ? ida_alloc_range+0xa12/0xa50 [ 28.593387][ T481] ? __cfi_ovl_fill_super+0x10/0x10 [ 28.598637][ T481] ? __kasan_check_write+0x18/0x20 [ 28.603821][ T481] ? mutex_unlock+0x8b/0x240 [ 28.608459][ T481] ? __cfi_mutex_unlock+0x10/0x10 [ 28.613736][ T481] ? __kasan_check_write+0x18/0x20 [ 28.618951][ T481] ? _raw_spin_lock+0x8c/0x120 [ 28.623803][ T481] ? sget_fc+0x9ce/0xad0 [ 28.628074][ T481] ? __cfi_set_anon_super_fc+0x10/0x10 [ 28.633632][ T481] get_tree_nodev+0xcb/0x170 [ 28.638264][ T481] ? __cfi_ovl_fill_super+0x10/0x10 [ 28.643547][ T481] ovl_get_tree+0x20/0x30 [ 28.647932][ T481] vfs_get_tree+0x9e/0x290 [ 28.652425][ T481] do_new_mount+0x251/0xb40 [ 28.656976][ T481] ? security_capable+0xcf/0xf0 [ 28.661904][ T481] path_mount+0x688/0x1050 [ 28.666360][ T481] ? putname+0x113/0x150 [ 28.670649][ T481] __se_sys_mount+0x2bd/0x480 [ 28.675407][ T481] ? __x64_sys_mount+0xf0/0xf0 [ 28.680220][ T481] ? __kasan_check_write+0x18/0x20 [ 28.685414][ T481] ? fpregs_restore_userregs+0x11d/0x260 [ 28.691085][ T481] __x64_sys_mount+0xc3/0xf0 [ 28.696002][ T481] x64_sys_call+0x2021/0x2ee0 [ 28.700731][ T481] do_syscall_64+0x58/0xf0 [ 28.705227][ T481] ? clear_bhb_loop+0x50/0xa0 [ 28.709947][ T481] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.715914][ T481] RIP: 0033:0x7f5cf498e929 [ 28.720355][ T481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 28.740039][ T481] RSP: 002b:00007f5cf57fc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 28.748515][ T481] RAX: ffffffffffffffda RBX: 00007f5cf4bb5fa0 RCX: 00007f5cf498e929 [ 28.756574][ T481] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 0000000000000000 [ 28.764619][ T481] RBP: 00007f5cf4a10b39 R08: 00002000000000c0 R09: 0000000000000000 [ 28.772753][ T481] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 28.780764][ T481] R13: 0000000000000000 R14: 00007f5cf4bb5fa0 R15: 00007ffc902aa0b8 [ 28.788969][ T481] [ 28.792047][ T481] ---[ end trace 0000000000000000 ]--- [ 28.799033][ T481] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 28.827617][ T36] audit: type=1400 audit(1752385451.130:192): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.871405][ T481] overlayfs: maximum fs stacking depth exceeded [ 28.873626][ T491] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 28.893097][ T491] overlayfs: upper fs does not support tmpfile.