last executing test programs: 3m38.964383765s ago: executing program 1 (id=673): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000cc0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file2\x00'}) 3m38.854009141s ago: executing program 1 (id=677): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/105, 0x69) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x5) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0xa481) 3m38.239044512s ago: executing program 1 (id=682): r0 = socket$tipc(0x1e, 0x5, 0x0) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) (async) r2 = syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440)=r1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r3, &(0x7f000000cb00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0x0, r4, {0x7, 0x21, 0x0, 0x945f4a821577fb5d}}, 0x50) chmod(&(0x7f0000000000)='./file0\x00', 0x5) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x7, {0x0, 0x0, 0x0, {0x5, 0xf400000000000000, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x80010000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='R%', 0x2}], 0x1, 0x0, 0x0, 0x4000800}, 0x800) 3m38.169839639s ago: executing program 1 (id=683): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r0, 0x100, 0x8, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x6b}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xd0}, 0x48804) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000000c0)='fd', 0x0, r4) (async) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000000)='fd', 0x0, r4) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r6 = dup3(r3, r2, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) (async) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async, rerun: 64) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r6}, @ptr={0x77682a85, 0x0, 0x0, 0x0, 0x1, 0x35}, @fda={0x66646185, 0x77682a85, 0x1, 0x1a}}, &(0x7f00000001c0)={0x48, 0x18, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1700000007000000020000000500000084200000", @ANYRES32=r6, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2105000000010000000200"/29], 0x50) (async, rerun: 64) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) 3m38.018540602s ago: executing program 1 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000020000030c0007800500150008000000050005000a000000097a3100000000050004000000000005000100070000001160aac8526173683a6e65742c6e657400000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)={0x42c, 0x3f3, 0x400, 0x70bd2d, 0x25dfdbfe, {0xf56cb2933f2f7549, 0x2, 0x9, [0xa79, 0x8, 0x9327, 0x0, 0x4, 0x0, 0x2, 0x3ff, 0x10001, 0x7, 0x6f11, 0x56cc, 0x4, 0x7, 0x100, 0x5, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x10001, 0x5, 0x44ef, 0x4, 0x800, 0x6, 0x3, 0x169, 0x1, 0x101, 0x2, 0xb, 0xd8b, 0x0, 0xee2d, 0x18000000, 0x7, 0x2, 0x80000001, 0xd, 0x800, 0xaa, 0x4, 0x9, 0x7f, 0x10001, 0x4, 0x5, 0xe, 0x0, 0x5, 0x5, 0xdd0, 0x3, 0x5b, 0x8, 0xff, 0x3ff, 0x2, 0xbbc, 0x2, 0x361c3949], [0x4b, 0x80, 0x7, 0x28, 0xb, 0x6, 0x8, 0x5403, 0x4, 0x3, 0x6, 0x2ff3, 0x5, 0x8, 0xfffffffd, 0x4, 0x5, 0x81, 0x1, 0xffffff00, 0x2, 0x3, 0x7, 0x5, 0x7fff, 0x6, 0x9, 0xfffeffff, 0x0, 0x6c2, 0x30000000, 0x7, 0x64, 0x868967a, 0x0, 0x7, 0x9, 0x7, 0xfffffff3, 0x2, 0xff, 0x3, 0x3ff, 0x3, 0xe, 0x1, 0x0, 0x8, 0x2cd, 0x6, 0x1, 0x2, 0x3, 0x8a9, 0x3, 0x2, 0x3, 0x9, 0x6, 0x40000200, 0xd998, 0x2, 0xd67c415d, 0xff], [0x6, 0x2, 0x2, 0x8, 0x2, 0xd77c, 0x75, 0x7, 0x2, 0xfffffff7, 0x6, 0xc29a, 0xd, 0x5, 0x3, 0xd65, 0x7, 0x8, 0x200, 0x4ea, 0x522, 0x7f, 0x7fffffff, 0x6, 0x7, 0xda5, 0x9, 0xfff, 0x3, 0xf, 0xffff491f, 0x3, 0x9, 0x2, 0x40, 0x4, 0x3, 0x1, 0x1ff, 0xaf9b, 0x5, 0x80, 0x7ff, 0xc44, 0x6, 0x8001, 0x2, 0x81, 0xf6f, 0x80000000, 0xcb, 0x4, 0xc2fe, 0x5f37, 0xba, 0x0, 0x81, 0x6f9, 0x9, 0x7, 0x3, 0x3, 0xf229, 0x401], [0xffffffff, 0xca, 0x4, 0x5, 0x4, 0x6, 0x4, 0xffff17d8, 0x3ff, 0x3, 0x80000000, 0xd, 0x9, 0x6, 0x2ac, 0xfd9, 0x8, 0x8, 0x4, 0x5, 0x100, 0x1, 0x9, 0x1000, 0x6, 0x7, 0x4, 0x55ae, 0x8, 0xfff, 0x9, 0x0, 0x2, 0x3, 0x2, 0x982b, 0xb, 0x6, 0x7, 0x2, 0x0, 0x5, 0x4, 0x5, 0xcc3, 0x7, 0x3, 0x20000, 0x9, 0x8, 0x3, 0x40, 0x2, 0xf88, 0x40, 0xf6c, 0x6, 0x1, 0x0, 0x43, 0x7, 0xffffff01, 0x9, 0xfffffff8], 0xb, ['GPL\x00', '\x00', '\x00', ']:^\x8a\x00']}, ["", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x4881}, 0x800) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004011, 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000780)={0xf97cff8c, 0x8, 'SE Linux', "5fd7ee203e958579239028377ca6db3022694996377b74b1578e0941832c6759baad73d1d05ae41168edec1c1957461ac5608879371cf45f02e6a18da5b5ca6073d30ac29296c12645b20d057db4d0e160c830600b979326fb0f20278f9d7d1db5bd7610b6d70a6c225e857d2fda902e34a630b73245a21b677b3cb1f794e08a580f93848430612ff8193e78"}, 0x9c) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000794de043071b7d6abe1cfefab411a800000000001e000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 3m37.806569999s ago: executing program 1 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2, 0x600aa}}, 0x20}}, 0x24008040) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x0) 3m21.548314045s ago: executing program 32 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2, 0x600aa}}, 0x20}}, 0x24008040) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x0) 3m12.909597918s ago: executing program 3 (id=886): mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'veth0_to_batadv\x00', 0x4}, 0x18) r0 = eventfd2(0x2800000, 0x80001) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = eventfd(0x2) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r4 = eventfd(0x7) r5 = socket$caif_stream(0x25, 0x1, 0x2) r6 = eventfd2(0x8, 0x80001) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0x4) r8 = eventfd2(0x20cf, 0x1) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x40001, 0xa0) r10 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) r11 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r11, 0x5380) r12 = accept$netrom(0xffffffffffffffff, &(0x7f00000017c0)={{0x3, @bcast}, [@netrom, @remote, @remote, @remote, @bcast, @bcast, @default, @bcast]}, &(0x7f0000001840)=0x48) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r13, 0xaf01, 0x0) r14 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r13, 0x4004af07, &(0x7f0000000240)=r14) ioctl$VHOST_SET_VRING_KICK(r13, 0x4008af20, &(0x7f0000000040)={0x1, r14}) r15 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000001980), 0x20100, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x200}}, './bus\x00'}) r17 = eventfd2(0x7c1, 0x0) io_submit(0x0, 0xa, &(0x7f0000001b80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f00000001c0)="754437d7d8c91cf4d6c5fd94421c5e0a1c7db989eaec22d43f1b846269b231bc5151487ba4b674a5b7d2f04fefae0e95945ee91df73689c5a5c58cbc0ed0464d6a3ee32dc289fda7368bbdb38696aff1025e986eb949119a09d40132ce3d4075d170251faa09247678854f82799500677d9256fa60a9383868afba1d03b26e6632d033a44f7e5ee243dcf86c9b8e2d", 0x8f, 0x10001, 0x0, 0x2, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x6, r1, &(0x7f0000000280)="4c387745ed15fc5974642fca555befd8285edaa921ef6940125fd93741831b5aa4e08d663aa85c9c741f4e2ecef25a81643dc8dd076c9472e346893a386ea933869eaa79b0d07441e8d3869be1f3fd72128a8405ce4a625b46c389bb76aa35ed45", 0x61, 0x3, 0x0, 0x2, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000340)="01153694e463ffaa38a364590b15d01d8f6761f48b5d13c0ce069d258aa652af2a661077cc0abfa7a88aef9bc1d72544e271cad7c3678ade711ac514fbd04919cf6661792f70d54c2af51f0f722bbc5874689a1d7a056a2d4b6ebb4827a5323a0d6597205fdd0d5a5958be15685faf401f43772f608153e8ab980e5e", 0x7c, 0x5, 0x0, 0x2, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, r5, &(0x7f0000000440)="769843b5eed94e6c98a2a754f8645dfd02f6452f8d5782075c3b0482578e4703e63aee76ef56dfb0b23d60a1bed458e57614900c917ed9d09f8f827a2a77", 0x3e, 0x6, 0x0, 0x2, r6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x5, r7, &(0x7f0000000500)="1438270d470289bd463e587cf2fa5a46de8df40bd4abc499581cb190978421f0f323f3dddafe7ef24ee22b5c9ca1c8261d02aca102cc35236ee0b9d5ed195b4a81b86c48dafd5749a9e8868837df02eacae79b7554de2ce20890908515a263a828b573015ed6cffa7b382748a98c28c5c711b2532b71800be356a172d1a0d0a646d7aaffcf360c9628e881e69f04ccceb18bae1089a304d5a7e0fdd272aa5454362660d1ee517cc0c319bc143bc3daaaa2a7c7c755b097b27c24d18b8e70b02fda49b4dc6e13fd124bb3e519bdb3992032548aaf", 0xd4, 0xa, 0x0, 0x2, r8}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0xff, r9, &(0x7f0000000680)="723744455ed4ae5c9df1095988c13dfe292bf1468468b271e6b68464a12c60e0f5f1747edf5f946c0a74e8c9e314e4bdfff133d8224a0f0446cd3bb27238bb690b532255a481e6eb7d788f16ed30cfab1c24715736bbd548813930accfcd31dcad575211ea9977d30ab3ac6ecb5fac4467f081a6974efeb30cedf503de700bf7ec8040ef5b9905fcc604e26811c76e3db61a5c2c514911544b6a8d2fefe49ffca4a4c39602210840643c5006577e4ac55997763898f6fe02d897cb98409eb10048f2b5addb500479e7d32a558e3f99e2c9490371a6b0f339ada9bbb09bb35efbcdcaf31d225e927806318685af9f3a7d54fce79810250c2e267bc0dd687ada57fbd2ff4295c86cec0b167f856fc99a4b91d307eec15d6141d8d068c548ee95f0ed82712a3e3c5de5393bcfb06b5b457a028606c98643cd6881429cf510e69ea1033d4ab0cb1ca455e2d4c147861efd54c12704b2ec29a2d6dfa06c6cf0ecafc2fafe4fcdf4d884fc6683e6d1ae9c03544a8e1027ff03f4c255c31ff448c8b6f5ed50760add7651e97df4886b57bd9dedff7c10c505fdfdad257c77e4c7e79768b9ee41a4d6de71d61c5d1ce05a6065abdffa463668a2f1ae863be74fd68e8be1ee41195cd79dc3cdb46346db21e4a286a829ef881f86a458af0e34fc44e0bc5aa5e30618ad698b9ddb547083054c4b1077f19b7eac920fc15250e562f3c29d4cc908e20156c3bf2d617a066fb51a56336a015957e2b1b33d211b7531c7cf8c8713fff76052b20724c299f42ccd630bada6aa0310e85e5c18562ddddd6c0fe0a2d2171c015eb69c5d2400a80aeb96c4bfd142991c47f729e5a72ab413586488708c066d63879a8540c8e9faf42d2eead8edeb45d436a64a6ab3eae887fe0f7cf946be0cf087946ffe363d8c03092d85b6e721289854ec7b97b6b9a7fba41226a84022d2b546ebe97a25b49265149693b38d2b46785fab27f3104c09ecae8c3c1302310c30cfe076fc6233aab2ae82d2f2d170e8b0abd650d0baaa67244c2cdb8f07e8194b2124826b5d917645c3b21d7275010f5761bfbed60769835f68a548efb53a889da0b5d273fda2573de13d88f6e43f417bf755c697c42c12460e671b9f2620ae34a7e62a9b114c70037061b156d116719d1146ebb4cd7e4a90e02b5fd87799c8256f7ad6634addb28c7ca68c349fbab02c276ae4c2d8e5dd1084c5edbf91d0842ee4b3e335fb26af24ddf3af1a4394f52ec1e8dc5e1030ae42e2c21fd75a5e168410948b84a5839b53e3438a7f7f4c88933354fdf141d2339de9a8cf89f431d1f4b5f8425e6c77012d1aa167e8cf44d4bedfe8c1c91b91208351c3588db2dcf83b50e3a88d77f71eb888b2e086a112590c34c4a2cbbf8227f37b6578c042477ac627fcbfcec44315bee2e919db0c18ae1e491fd2a7e7d5753e2d5a1ad761b6a6e536d396da332449dec0cd5027eafb70f040926359afe5f22dcb6c1e7738fd9b1818bb227bfb0b07332bb1eec4c915a8ceba4b3fd9a94648b4e32dbc5639d72f1e079ce3c7093d014fdc2c3bd6ca131874b77e3b29b4303fa54f19f3553d82bb06f0e697453cdf55932bdbf958c0ea2866e098f10550705777f3697bc2193af448e0c80d9ef7055d7ca6ee70c5825d6ffee26dade2b183600762c3e65c969b4ee649d0b122f1eadd1e34ad67a0cb8d4d19ebdedeea89208b5992a311f4ef3da85c59652989b215864eb13b9c4579f8b12fe29b4e5b775f7f1dc705ab2745ae03e0a0a4c3d9084c853120011b5fe26be0cfb3a29475886b3fb9d1089159fddfcef4093299f85b7a3a8ad4c10ea702a82e06915dc6a7273d10f86afde05258f72c40d0b78fc68c5998a0b09e5fefe720ae46ef698bdc25623053600641f5ade260caf33cb79c6a208c0b66019f3158492f91dec573eb308d9d69f4241bf01152b1b8298af139cc0b6d21e3d810d7947efdb35bb67e5c714e2663fa467a1f796f1fcf4d0a330351c174c8d9a4bf4cd98ad8068ecc7dda1d42953da705c7e75e4a83de78b9d1f7c0640fddaeeff8861747c875512e928a07cffa62e4216cf97150bc32cdcf14da113945684d41bd5589e46b694535c339ba61586811d013f6a4907cc1c36e1ff4df13b3626151842a74ce4237349e9505ac3bea6edaf08a0f91b36095c7f60101ed8999595b39f1619ed29eaeddcbfbb48a7cfd8b4e2d4fc084fbe37fea3aea3e9e45f599aa4b848265b103600573824e48b44c1305285fa13762e7d543af37501f3b21123d79e24e0e5b00a9e9c5e49e71e05eb96681d901e8fe2f6564749fa70f796c5d37454c06ec8243f24b8de4a01ebe39398d014f48d53097156e7d32796779825114e80a4335213dd91a8ce3dc49997558f596fbf92409a9dfa2729487171e927169e2dc92fa77bf3b5db4e38527ff0a5ff6a1443508d24db85be874cf695c63253ddd7a2ce499b79ccabed4644b69b038d1c804d6907d2c4c3252d4bb3e17ddff5781969554148e5f2f7051d177401a162647ae1bc6c2b48c07e6c087ef895a1e1c4290559ddecd4c74a6e08a2279e32bfc6d2ee19e472ef7130654aeca10cbafc7ea73c8b8352ac61a3895629d1d62bc9e5573ca306892a405c84c8b9bcee56d142187410c18319a78d725c0bb5ef4f31bced3df2ddc4f09dc82be4018ab6a337a7428dba91705c0c22b1bc7e42072d65b1797a4fd18c214a9da5370fab65fe9d7ecf137698377867ef95a57dc98cde25756deb72695ec3016d2294efdd5a5dc5a95c85442539a87a5165dc415b588879685d3ede5ab30e8c54eedaf909521ed370779d9b30585a86fda45e61d8fc05e6bb8fdf39b036804a7fec12625bf318add9115de616883bb19b02cf1fdd35484051e68f5dfd7f3071800681135871dc9051ecdc5628f3706bb9a70c856e9ec3e40883c02a559119a1b8880f1c367e1306db9c2b7c50ab0732dd73f0f0f2279dc7fdae1175834f7ee343a2c75755080c40e2380e798739fc6429bcdf8c7853dc05d9f3118f56daef9907ad8134955b8502d0c3072b2cb8b2dd4d83748bd1637b960c934add78d97effaad69b90cdaba1c22e099fc560079c7872c299c2446ca6511378e29995059ba36b6497993fdaa0a5c39a4ec13263fd6f6fa709a2e5b8f0b5d3396b15371b9fefb45bd6d3e8112bfcce28cc06f289d7b76a9ef0c6ecaceaeef874f4e094b1bf426a253ad5fa0e1d54676fc3215d9dd83918ada0bbf9b182721d88b39e70a48262dad3744108f45be67e1b0636c9f1350bbfc868f1140e6146b4a54d698b04893ef2f69da24ba0e291bbab5209b5cf6db58f0edcb5a749fb3f972905235f257e2c502927e26ec22d05d1570362ce794275f860ba4b59066a60bbc3e47a94dffa7ad0322bc8221a45902edf4cef7c2b9239f7104fa8c2d80b5bd5bedcfb9e0c39e342986015988c5fea3d392ede20254b128901006d76f96597195aaca64e9a57f90d4b7c46a0ab3de8699789b41cbebd2915b7605d888f1c6d92f19d1c962301b59b43b8946998e0980860f40c858327c29170ca28eb0586ed7638789d9323d4755ca1ae9c3cdb3a69be0beb9d280d29aed80fa2f452d82392b252e22c70109f355bad9d8e0647772bcea2ccd8d8191ee3d8b714cf99916dc443bcf960e9c88d89ea9ab1625322d1e1be42408dc1e58b86d3415876ae5187ae218ae512404619dda1a16128b8cff7c450e50f1bbb9ad7093f2f490517b7127efc60a500e1feead27c797412bd25a6cc4d982a1d6e053ba411dcb79a66e60e4e23eef9a28095cd4ab2062c7616d5dee6e7f13b3da6954f07573389524d36445d985ebeb22daf188ec550586575733a57cf17c433d04afe71a5dcc7f4aa7cb107eb7b26d08efc47b4c6a6fc05a91d81ed20aa2cb9d559004f390fdf8a07d52efd3b433e6ce5f482d2a93d1197c48cc7a4e715fde8a53fac4737e663f2f8d32c5dd2a0a580a2c3b085037fa8d2df037df73cf12414807d7ffeec65407336f70d5a5539b7f3e47808c33fbf8b0ce0c58e3bed0fb3fbeac17fe828eb51ae1f3e11da56b332d53f7127f5ac1e275274bba5ff1de4ac32a0288f228b425d6aea4b32055d04838fb04e0db1eca3705209739d809a02977ef216fa9a9ad57a88111e6c5b618b01a511e7343e9aaf8f033b4987b9f985f8bf71fe5b5c599ecbd3b01215760ffd249a6314c19f308f25f8246a4c25a49bb17d2b601500ef7f9bb16befd3f61bb3925913dab5deb3c1a4ea1ef01cdfe7286aa2fc11264ec5164fbeddb46957ac0d95bac60f3c42e79915680657cf6c266a216e8221170be3a99a88913a13e10f93bc4c730d28a982b43d14ae36cb95e55c54b23f5ffcc64c73cd3151eb6110f8ca1dca4782230b329509ba1c179f05cb49464d871c3aaa4409d8760267b2f46465ad471fcf36dc89d7779e794997dfe642406ae259100ff54f127a2aa84e5841f0012c534f5deac018c063b2616700a829dd6ba8cf21d669017319e37737e13d936381377fa0e5255c47cdbaf2f01aada208c38aad7e177ff3162d54b2f7a944dea849058bdbfcfdcac78493a7d6666b1f08e0353a2e00ce79944daf36e93896599ca37c0632918a639248d702ac219e35d0f06e5f7ec7ab6b6c0bd01d4e40cee0dafb38c96be844f18c6694bc9b5158e74b4c500506938670fb629e5aa557bae51c4f1d9abfec6c4c0f1ffbdb81e308c3c79c87717ece865aa8e7915f4ea7111c3cd3be8714b37d3879764ed3d891bb1583e31347d16c1b122f018f3b14da58f9b62c4209eed3d75591acf2da1c9a1a524e5276bc067ec2fdca7071a5a77a708bc2e33ea2ee237f9e11e18da89f7b5966049199d33e3a40109c075abfbbcc4a602dc1e3a1926185f40e53ef61a324e0f18f5e52b757c9d086fa670bcccd56ddd0874834a2931a2597559ae90ab2058df111486184ae574f4b35a1cfd5bd337afe9ec92e32fc0aa43ecb9db13cb7834b3dd88eba66a0dd7704fba367436e0dbc9feae2e7a28e19673a6e975557d737c6b7a05ce98415b58710c54c78aa22ab5e7d71ae5121a43722ac691fdcda8059f37c6237bf32ab9f5c07fd7affdfc1ada69b2cdb673d4022902b44b7d7ae2f35df8bbf38e4e4c5e9c9bcf7573ab83b74af50d049e25f9ab905307a25695ea74b347a68384d5915c28d71ee32d716cb1c3dd6aec15faf659922f00268b73d4b9cd6c53e02432b692a973ccf63dcfec9884567205c13ccee70df59caa82ef9b5771580ada4ee1e5be67b6e6a10cb9266078a9e48af1d9983e1a1482573b0a39ca3991e4b799144b28859381180333762f4059f2d6497bf6f7e600faee80336e6655d586a37985009550c2758af04f92df516becf0ffe5b5bd629ced2a696676e0bbfc553659055b9fe1c8d67c35a4cf11c166ef0a5d8b57103804e9568f45f109dba575da6e87f2262b0b6ea0846b61326b3801fde4df1c43602fe40c48d9bf15fd3779b8b2ae5f4fb9dfc3714c515fefe16ba76e7f240dd1aeb56238c13c609846bea9d204ef8e3113a009318800eb6522040c975d2fd35820e9c81da0e6909c3dff5632632ce6debf3cbe7a3b7f5e45ca90398fc8967dee66310b31e47a580749dc95a4393f538f982fe5b59e333c40e70cbbcffbeccf2233c0d0b6cfad83c7069d8e0bf6b240846ef6bc89729581e0d2f6c017a1c8f6822267b29af38d2b2bc6a1a20c737d5f9bf8f0c170997cf0320d58b1a4de93ac19f491a8b3810a82e0ef6a60d11c756252c6d2425de6353be3bec470d8", 0x1000, 0x1, 0x0, 0x2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x3, 0x4, r10, &(0x7f0000001700)="9d6a18c44ab450e495e548c1eca44eecf4b3afe91b817eba9bdffce6a732db90f6c260c938c7c9c5db5a5b707606c0806542ba0a2ac3646715801dd98ee51e33015bd93106ff3106", 0x48, 0x3, 0x0, 0x2, r11}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x8, 0x6, r12, &(0x7f0000001880)="5d0e29c1db90d5e935149b36d5980ec7ada03907b45b86bf59bd68a7814f0a8e1e026dda58feea45650354cd66431cd769544e5b7391817d3aa821943c4239e4cf646be6c0814170caf51c2ed6e71e130be8db67da373c661a1b45825b73e16c846d3d9ce4baa456026797f11afc4de3042979c27a74c6b4f5d419ae6b7775", 0x7f, 0x4, 0x0, 0x0, r14}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x2, 0x3ff, 0xffffffffffffffff, &(0x7f0000001940)="0611e60f36c3557f2fc8a9bb9b9da2c01a03", 0x12, 0x8, 0x0, 0x2, r15}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x8, 0x9, r16, &(0x7f0000001a40)="ccb4b2fafe961a4c2b5eda6a18c0dc82596ef2de5eec3c776b2bec35270c1dc12feea1c7250a6aaaa3aa31d78ea253d39ef8742650652245d58d07f231cd6b936c", 0x41, 0xe79, 0x0, 0x3, r17}]) r18 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) mmap(&(0x7f0000312000/0x2000)=nil, 0x2000, 0x17ffff7, 0x400b813, r18, 0x0) 3m12.859751635s ago: executing program 3 (id=887): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000000)="b8364b00000f23c80f21f835000020000f23f83e0f01cab9b5000040b80a3f24aeba000000000f300f20e035000001000f22e00f01cfc4c1e173da0066baf80cb8d4b5e08fef66bafc0cb8920c5effefc4e2b1bc548200b9800000c00f3235010000000f300f015feb", 0x69}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x5, "03bbfeb3fb52d288fb0f0000000000006c446593aea9a257d98e03ab46af00", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) 3m12.688858719s ago: executing program 3 (id=891): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000040)="eeb9ff4efd6ce05a6ccd7c", 0xfe85}, {&(0x7f00000001c0)="7a33e678762b32820b", 0x9}], 0x3, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x0, 0x117, 0x4, 0x9}, @iv={0x0, 0x117, 0x2, 0x0, "f0f60d0c8902cf02f6b345465a9f37b8b08a34e37624210d147505c64ef863f3e92bdce7c78a97d195340fc205cb4d52df937b35fc82582e5336d068b9a373697c4f24a8e4efa23f6a88875820a3a9e9119b89cddd18e0b8cf0728795a25524638976252bbfb956836c3426d96dba29885768fd964a8f46163b5157e1ba472de8f5c632bcab5165f3803b9b8d522f43b15267997bac0fd56c1da3e7240d9d8a134f61bd3c128ed73c73042cc4cd86fda92"}, @iv={0x0, 0x117, 0x2, 0x0, "4120670317223487130737cff4ca48e94911518a0a09220df4ffb94454290c0c1bd03a7bbaaa5e00f366488ae89f6a649e50ddf3c31a5d60392aba468d99f37c1810dd578a6b99b8dd7f925c5dddcfa62f6d"}], 0x18, 0x4012}], 0x1, 0x0) (async) recvmmsg$unix(r2, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x20, 0x0) (async) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1) 3m12.61810339s ago: executing program 3 (id=893): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001ba000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000240)="0f1c226766c7442400812000006766c74424020b0000006766c744240600000000670f011c24ba4200b0bbee0f01c266b94b0300000f322664660f38809d0600baf80c66b858f1648566efbafc0ced0f01c9360fc7a300000f1870ae", 0x5c}], 0x1, 0x1a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r4 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ff8000/0x1000)=nil) shmat(r4, &(0x7f0000ff9000/0x4000)=nil, 0x6000) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f00000002c0)) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20001) ioctl$BLKFRASET(r6, 0x1264, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000600)=""/202, 0xca}, {&(0x7f0000000700)=""/190, 0xbe}, {&(0x7f00000001c0)=""/3, 0x3}], 0x3, 0xceb, 0x2) r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffe, 0x80, 0x3231564e, 0x3, [0x2], [0x1, 0xffffffff, 0x4ec], [0x0, 0x0, 0x0, 0xfffffffc], [0xa1d6]}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', &(0x7f00000000c0), 0x810c5a, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESDEC=r7, @ANYBLOB=',\x00']) r8 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r9 = timerfd_create(0x7, 0x0) timerfd_settime(r9, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r9, 0x0, &(0x7f0000007000), 0x0) r10 = socket(0x22, 0x2, 0x3) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, 0x0, 0x0) pread64(r8, &(0x7f0000000400)=""/207, 0xcf, 0x4eb) 3m12.467318205s ago: executing program 3 (id=898): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100), 0x10) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) fstat(r1, &(0x7f0000000300)) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000000c0)={0x3, @sliced={0x6, [0x100, 0xcd4, 0xe1a, 0xd, 0x1, 0xc, 0x6, 0x9, 0x7, 0xff, 0xcf5, 0xffff, 0x8, 0x2, 0x7, 0xf, 0x5, 0x6, 0x6, 0xa, 0x7fff, 0x4, 0x9, 0x200, 0x8001, 0xe0, 0x0, 0x153, 0x3, 0x3f8, 0x7, 0x6, 0x1, 0xb, 0xfffa, 0x0, 0x386b, 0x9, 0x9, 0x8, 0xf48, 0xb1, 0x5, 0x6, 0x9ce9, 0xf8f9, 0xa, 0xd], 0xfffffffa}}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fcntl$lock(r4, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) (async) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x0, 0x3}) (async, rerun: 32) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) (rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}]}, 0x38}}, 0x0) 3m11.497901351s ago: executing program 3 (id=909): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x8045) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) (async) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x4000}, {r0, 0x2070}, {r0, 0x8000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x218aa9b0]}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) r1 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000001d000/0x2000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="1695367704d10dd832678e4e2d01860484a69eaac410e2d6cf3b3d3925f9a3cb602592377170dffdc4de86f163e390e21d07459b0f058cfc248c4bcbe896f3c68006f3c2cbe07c55b87170871c1d364d740faeb750c8c8acb76aca18bc0c018ed341b55b0ef80cefe95b85756aac978a0e0b5ce59cae6657643e7ada0c1336bab310888351664553c2faa6dd39054e19e23cc7c4b4d33546407f880194aa0761f2a9360c4ba26de342328b92db81ae84fc9c1e9eefb4b7ec3f58a6d5d23b907327b14480a37f3c84305729a91c28807f8809b997235bfa2d4b6f45ee9568bb4a416df34f4140c5e272bfc068ea61a48b365490ccb02772a906dad457f5d2dd1a57cc1209e8897c8115049d7e4e3c756a7f5ad0c004ef66c8bf91f600910e73b4aa5f516bab5cd62ad93642960ab32b7fdaeacb1a9587a389a529c231f8a47a65fb6d27ba6a0eeb46660cd75dbf47df89e9f578eafa6992a12d9d7de56d69fd0e30b15caabd13c28d63921597466292f8c4e87f23d53d52e6e8f1c9295af0743c8c671a49273074ba44dbce9e9b1136a93dbc19d2b8e60cda5f50eba2d814822a68a0fd4ff5e6a25dd5346f96b26b5e1563ebb97829a76fd8c2aa467499fdced91b05b193b68316494f11f5ce97ed8e13d474b03c6f6eda4eff54b0ec362fda53003e6e2a3868a5d57e2426aed5adccdac8e162c6cc20361dd4709889b79b2810ba42f531fdd3746562a00da65b4211fb7d8f482a3610748d3b80d2942d8432471f98c6e9036cb57f3913b31dd8baddd6d85b44e8463b838fcfb6979628c5fa3dbd30688e10b9ede257ebc7b96d4092f38d11b9e6a4d10490a9df1387b3743cf51e206c7dbc0741c408bbebaae7f36d81b5ce5b21bb9fe992c8a0cb3a91ea2df21e571ff094b53b17c46fe22c0cead29144d203294eb42c984790a6b6348ed8b7b0317ee5b2353cc54bcfd808bf0f61f73917584e17bd9259c8a04d2ba3b4f931571947c77035975933471fb1203088dce478eb4e411ddb7b88caeb02e1cda741245df701a2b5c29c48a631eaf18549bd90c70222fd6dafe5550726bb58dd0fbf84ffeeae683a0379505f03740a652025add8e0e4e6b5bfb4bd0876dfe1ecb639acc110eba97294a4e4642aefbcad04ba50d830e945fd9900ee7e02488694041f43cbaa86280c1df64e8f1f81f7cd5130914efd19b58262f3bd2c43bd8b4a5beac09f1ba27020521994465e62c329debb50efe0716d22cf0056febc7cb95aa818e10639077e91cac3c80b37d6eebc6907dde971b578383ee04086a0dad18750ceff6b8d6d373afa93a51fee65fe1318c1ac291b784e45d66962c8b54571bc1e92a996c11561d94af6ecdd37948d35adbd1ad63c1c05c31c7f4afd707aa1956d1444fec1137fb6d81f56566887131777e5fe3e2fafe8af8f21ed34480afe74afb25d8d16f8089fcb851ac49dd826b7f273aa3d771856d712c62397d49c72d93e3c2a5e6b9767fcff0fc5b3d70dcd70ff8bad5dfd7f5a84c194f99450601f970104f9be026852ead21824152dd8f6536fcd01a69177a65f2af266e619d61d20de0c738680fbec29e7c594cad29f009d46d87908c951b2e4ad8d9a67db8be6f570fe5416d9e4dd22a108140a1c95369731807325ee7f4201209a795fa1609ce8fa27384677816f651a96cc08400e1b647bdddfb851313e3ccaa472b9a6a1da3a0936e119a6d7808f09de244d739c39df3ed36004b77cb54b6b1396b718c87fba28cb1439c7d1d140dae1ee2c2a7d647427b1e7472710c7ac4f1fb0fc0c9d15ecce28167d23e2e42474dbf1c63c0819606be9c9b6dc2eb59bf9932568ef408c20e9498cf105e84eee30460d4348f4cdfab623b416adadb4427887d9b1b6b8db75b224e8a55fa0351d21093b2b7e42e6685491cbfce100d602d0281f4bd086b50612f3ccf055fab1aad97a52695a233c3d458be4536b66b0acdda5ce0aaab48bb7d7f39a8af473c4478991f1c4569839eab0c1d684001ee1772290871653a2293bb7754c1eac178c60f86e2a98e1992dee198c76365f2d04d159d7c210c6cc58764e3b7dfb5bc15190555febd01c69cab8f55926c28a13fa4f9060dde1ca2df7e1f71fd99a0c350d7f0e341ece8e0685e9c205b486ef400910211b688f07fb05b542261c74b45f4ac23ff53e9e620ab12dad7b5131f67128bb8ed6a4a70caec437f2157f8bcb3d080091e5715dfc7d7539dd0320c90d0aab6a6d7a447ebeea893a0efa2176292c648c62cedd4138c9d0535ab0621855484fc43e0e3e84357db6951bb21fe2f4e99fa188ebecbc23f73ea879bd304408acd1c470fd112606ccfd7b7970e950ebd363afbba359a51877248a42845097094ff785dc82264225752f3aefa980d9ed5309b48f47a5b5ef49f69808b91bde955277b6525f55436ffeba0bfa8c13f6314c57ec97eea295afc66a9f4ec844474c0da6ff1ef0c6c65c035f3bb74a70ffa668359b58a46af97600c428626b45c81a4e372e198894c02e2bee8010fb4c2c075ea623a6ee24a99e225f809322df6ea6f39b1566b1aee5403d45ba648f94f70976013199b3241744458d030a5319360780897413289d89267c389e04f23de79adf4b864c5ca76efc225eb1ecf6424887f0d8b3ac13cbe9df4eb69f7b702e85fb396dc4a030d57a8c4edd227ee568fb11a9859935ad53dcfdb01727f106af352c569a020b7e405a1ad4c6b39e2e8796fe9f16db3794550f5ef3ecd6af2b2ab0383e6c198f17ada5840bde84ccbaa661d9c456d9ddaf92763ba450098cd5a971d847fd5030a4c9b066ab3b0096dfdf7e5ce2f8349165f94c493b7e4192e85239bb11552f910fb41c5e96ee10fc8dce711e88e0572ce0bbbd9c9f3b7c9dae89f1dfa6af309c4321755a5b19070c8731ac590c30fffb69feeb75f699aebb101d3a30f784f1745182cb4f0bf63a148b521f0a03c691927694ee453b278523e3ed256c150098a932f62c90ac65faa4b9782c27a3ef6ca2b5ecae6a01d8a1d7096bf6a7d1b317a9eab22ef4907c631bcca224f723f5fb9a44d7e1295186cf37fd71343919aa167fa70a505a73e9f52a11cfbd40d8c1087d4ffdfe45a40ed5aebfa4b0c3622c78a914d68dd92f46478711437ff88803ab28cd9ce2223aa0fa37eb9d9a4a7866dec4ca6bb66e794ccac6bd19b11daa0b6d4d42cbcf7d6426b5718030ca51bf92b3d8ea0b11c46ec5c0c6e3805c88b39731b2b751d9928ed1ddba7c66bcc5273d709fd295aa0792384435b98c1f44575c028ff2869074156713931f7e62f8b0f8c7ee9dfeaeb2e096e77600586a47d6f6a2e13a17dfceae46ad84858bf8873f9f1e35fc700aef0a648af168ab0774a3441a203ef325577f2c76f5f0e5808acdc7965bc65e8ad1ca816bc3b67711ea42e619c957d0f26b394be1f3b0c4ac9af8558eaebf5c1c27b6549022513479b4c28dbe3f1c3131cc9211eee768f96a9c8b5e0e6425bef921a355faccf0072ba19b16d88b75feb5dc8fcfc1b7b5973eb9654ca3dcfd482831ff5d1fe09fe7ae43cf129c8c17a6686685a13ed076f34608b7ac16eb8e9de6a44418c4e3f8162e6a679bc9482df96a04b14575ebf093b99bf5cc26495f5dd6e571129d9760de3f801b001a1f3248d14f579bc519de2b656641a88da758a2ed3baf15fdf2739ddb44f0e5892de7ea48e9302129d0c939137b9d0687b296577675bcbf433a53f6a9816797cbfef1ba0caa2b8602387b5a8bae24d3e15d42b34d81708738fd269c3e8cbacdc3ff5ab1d4816a783d7be0f0a8086e345a6b4c231ffd61745f6c45cfceaf6089e70542aea1574e3c78740f77a08eb55b37f03549c1dd318cb5a76094210e8cf800c350d328fbf9442d0437e7affd54b3bfc33da3f24558f3ea8e59da8e61ae60e7e7b4de7179b8cf941d51d420c8eee69143966800dc4f7bcb50a033331fcac02a65e88de28ab219c68388a9da9196e044dd1ebbd3994bf8cc862f6f8b419fa1f4f4e5427f10866b498935fa28b8e6f9c5e48be8b74b9c2262823390480f71aff6cf72281f526265877d223eef9ad7a4be7438f9afb6aff0e80c5125c2c612ceb83f0470ea04479979c0a10fbbd0bed7379e949cc19fe36fbcbcc59a9fe30a2662d3e4d22862e8841b587b8995ef8482bc60fe0863b41752ef3dd44a387eff101595822bf1ce440ff9e5f73e560e4f7fbfe4754d9dabbcd92de02017eb43d3cf7c75e45ba04009a582a68ce11eefd52253c721daa5f37c6408e37b48d1f2e36d7c1793300f2c9039e69a52057486b63c0fa644d00528ce48f2e551ca88e356ac25ae74c73492ed3e6233490acfbe7ed8244f23e2af86e0ade6b78bb34a75a86f6cbadbd39762680cb0821d6d28f18d427df13d0e747f6da54be970e43ef8ca8285dc8bf44e3cecdbf2d8757a9800bb889b846d58cc636a2648809451a95736a0ecec6ea3fe61fb24dcd8a00ac0b8933918189cda555b17e431d99ee190d6d0d9f769e665ec193ba8889ae72a01e18b98cebb75d20ed778e5778ef657ce85d40eafa44b46f293d64023b877e8c5d58587c3abecf9a1ad8d874a4cdba0bfbea61b7eb19e81f7c932be12a83bacc51017b42dbe2931dc11c742a5a942cb6ed9bd9922ad78f55b0f6cbae0e8d4235140263ed8c83ab22e71a0f0a62b6920b5d5109e415254e527546546bd025cf1583e3e8d9d5bf735a4651fa2e5c3c86a185bb77e9b75224cdda8cb0eb21d9e3bb19e286832aa5dce19f055539a0a5caccfd752742a31d0af882c4f02c29cbd90ac2cdf5cc61c448cd09eb7b82b930ca99962c0e5ed84124fe37f7d30aad0296ee340377a7e0aa7413c495ac8ab0b482c4c5f59872efd5a1ceadbc7606e67d3c79a77d095bd82519db0893b9d2bbc2b2f3a7391826840e49424703c006399cde5f2a52a9383e89dfbfca284be4d75dd3aafd8a43dc6c71bd7fde9460647eb5c97707e96ddb9124d6020da38ee7ad743db8fd0377a8711905194c496e39a2132d7bbf35b79f920b6dcaa73625bf8b5320da250513cd45bf42c8072809ad59d69c02f0554cf82b79ff291e42d9227de1948352b0dba0281b69876ae0ca24972a5e75aee7e0a46bd4fc83f5a0dd3f22d666f2d950ca580c6da6dfaaa293beded10d1328613611b6e01d5d8567541e81466467302d8050a3ae4791fbddc1aec749edb68173be5341166c1d5c42d63e7368473e48bafa43459de3fa3a5550a4ac979711dd9a2d6796b0bcf9b5881124ade4b12bf64fa55724976a0da9d642e76a036c430fdfb2c06d599b0f78e978580f8eb763d2846177ff18b9b5cf8c76197ed809ef24212bc5563a1713214ce78e0e6cced6e41578d46a07839795c83c189610244bc1b680535fce39f290da90d719078015d90020b1d4567a97081b48514709df8e327d814e8c15496d90efacae6b13e297ed520d280203896bbc3a23f3b638adf594de03a782bb292a93ef0b14b8b3e13c01787a0b7bfb3abd8ab15eebbc651b7b054d3e56ebb7808de9b9bd067560ec6a6432455b37054292a3d9d32434506bf84b2907560017089de3f60c2deb4dfb7371f96d65a575d446aa1d2df81867135120df4e24e9227f72ff9f8f015a7754948704ecd084a1a93fbeb5a44af086ef73e9fc1c072b7d5473e92558fc2824acf27f1dbe9b019247d3074bf4256a966ceb674a2c4222632c8e4b6c0736de019ccfe4cca40b9b07f8c4df9753cdfb4ad66643ed71510983e29c2b5f9ae7db4913cb74d9dd0461a900810650d0da73f766aa6882385f3bb40644bf43f01faf2aa4cd187659edb0498527f201442b64349afa814b3dae5ce815971f3b11d177e3e1aaf90c7674c097d475640218ad27e63f9071c9081c06d9b5d1f3a070da3eed4f4080190a74063e7f97b5f35706dd1173dcbfa13a70d5362e50d57d0c5105c8d3beb926d93f61699e737ebe1a935839c3aa5b629dc93aa209d9e7774c40de7f59fca1eb274a8280022a15934e5dd2579a8cf5cd16a3b0a1ff3ea712c4258164fe2fa17a4cbfa5630f4041bad4204605eb2e762d610fa17dafa415ed8a678da1d4b5a6618d71d0066d66e3ac10b3ce65137a5a02344abc57f1be4ce0cbf1a2ac66dcb5e94495e863819c627e4704fb479c232b27aa4a5dfca8896a7eb8e0592b6b392ec9fa2767f569d5c1356d7ef7a909d8ee344ba017c75ca664d98f5288230b7f1ffa2fa7a5d07fab5f4b53b7f19c3fb361795fd632fa8a654004d931b4b7fc0890927aec727160cded3c01b7e40e6b81ce015796895f9c007762a1c22acfb9513eccd93c845e91ea8b0960b299b3ce788cbcce5bea9a94325289d2c3573975c512d56e19c4655f849b3652f8b5f9fa6f49e03202f2031debe3c299c3ceceb1febf4b285da9033493088a36f885ed6d3958b8d05cc6be00f3465de8bf6e41796d17e393067585b459b143d592cea102f584e48676a45f896cf662bd6b3b2309aa7f46d2b8ec6597a063f12bcc88922050c8c1e070134ce77ab1cb7a7f29983a0b30d9b2abeca5cfbfc55e941376c616c2834b1c1c9a9473b531c86c3b708478ee95923fe6a8108c2c4dc8a78a9d5e995f6c815b292b986cab0afa233ef10567a49d4e8dc17f438b90b620df4d291b52549ac8e1b69078b62011ed4bb0e288db740817ff07d01e779e11cb8e0606b5ca3aac6c7b262499f5a115acdad8a67b6eb77503318ef3bf0008347b270aa986d9e79e2af174f38a4743250c1091e6053a7a785464483161aad3ef3ad976e5329b71afe9bbfd93d7541a1014db4cc159ac266021e841c665217fa150e130f921ebd4cfb5accdb87f5f9bc0fd94b402289db4d0ac3f0906a689aef044c09fc2c5a00f7795ea935aeb943eb32826bd2176c1d1cb058195e3229d293595ebc07514c6b038a1d964199c59e59d4fc621c54b7bbd3410ccec22f7fb6751527c2aa0940ed2f0c9dcfc4e99ced91d09ba4a37042b5f48b127439cad24df2951ff1e769d3892dc4788dbbe27cce60f7f0138789444712e84e059ac0a4e87557f6c3369fc61b9a843c816df3cb4ec77a11e16390234da24dc0420f6a44554fc7954cc74d63ec030d4d964898e14500d0dacdbb2959f7a8a191773f66448348f36c3f4904187088bcfeafda7dd721236810d04469e93ca4e7926305c25b1ef1380d775008fd238e33e8dd2dc5a9783f97414487a7ef70eba3dcf71331803fad223f65aadfc87d79512bf311c14926d619a089f5e84c46f4a9ff393969f8eacc8fa20acaa9eb01a8aab625853e415d3871e555a11ee71ee93cba85ee9cde60b3962e294c2c840f0a1ba87714bac54f1ca0ebda74daa3e8e19d382b951d64a22da48c632ec5754f42129214a807427e69a93c128b6b0a8697c9ee375818dd79244a38287fe8f66c7cc3aa18aee2fbf804fc1aadcc7d2daf75be82a60276b6902a51f2bbb64c261915b80053fb9635f405f1fa855d1ec8adc0ebe9648b8151eda70ec5ad5f704fa2a337bcfb7ecbc845a11cae7a68d6bc58f107ac7bb0c2f6b83edc48703ba00c94036b9af4ada51d6d78bfe697df06f47573c14cd7191ec52dc0f208ecdcf54669529bba2c2fb7a6b38f6f2b5ec5fe876f03c096ae092b6f881a84b00edd1e9f67449069d876afaa99eb1a446f20656b5104c72ed28bd8553c724785f4e8bfdc33194409960de4969b708ce26e4cd608d21ace0c38e27d54b55369a9e807cfda9a6240466dd94f6150d4b0105f7b9ae392009b2cf146d1dad5d7c8664463d7d60d11b45f30d01db7364e21ac557d37a4c9ad88926c472e98710d2cbfc4b70d6a5dbb128d46909e634761c6f6952bf9021aa5282c391dcee3278a25e3e2ee31a7f6713979a546084fb2e598214c36a3b7618bf23c57bb23b33e9c98dfe5192ef257dc2d891a6f7c11be334fbdab015eedafe1c4aea95ff1fa6d340d0cade542f3f782c1589470fa64c6fd9ac0c31536ecee0ae312f992733beea6fcaf7562dd6e0f2c016f712ce14d93f02a54f577c75b444fd7f46e9bd2cd9cd1f89195781d88f984eca45c97355095d3b48b0d9bd730c7d6f63b1dc78d2344bdb0f18c4e1554822345c11efa2ba32bcef4f29ed05315cf44617a80d7d1392de077bbda08669c8c3cb6c0b12f872f1247bc1d07634bf5bf4acc3a4ecdae7e6acd7c4af9820147afe55500a7270d7eb511f907339e5af54cfaf33e2364f54091ebee2a245ba048452d383cd441604c4dd1c6376e4df8b83ebf6070d2be248174fc1dc0a1352c103325360aeb3ab71cb73bb646ac6247dd68155fd48b90250c3b0f250a74f827780367e117a94094e5005e2f926accaef0b3e36c25e315c1e80cd4c3481f3465d99025c7de91c45bb8dd0a5577174c1f366017d87d2033239a8b6f399a9095845b5fafe9cca113b93f455bb790709b6c93fcbbd0c4bd7b5d621088dca06802e241836291226ad56d40b3b4e90eb68bd5845742baf4cb4a69b4bdb07f02d0bd6fbb5a5fad3af030816b254725e6db4073b7a0536b884c8985c3a159cdb105c73f7e0e03546248336449eff6afeb96cf8ad3617df18ee2247bc2d11ebbe10e0379f5578c41611872c5461541fb4da5be3f3348e0592982a61c352315370a9b452306c9f31f9040ef755ad096a8733dd9daf6bdbcb7a3521ad2282ae4fa7bfdb9cda5997ba3a6652af46c6d0205bb356dfb411e2b931b357723bb70254211819b74a461ed5c126cec6573cda4f6107fc3ebc76483621e9ab5789a5575ea3a91463f76138ea0f3ec9c44e1cddb2de59bef83333d235e922b920e267453676575b38e6415bd136534b8df2360ab489fb69eefd04b66758ab5dd105be7b0635f7194f9e4b158b22b21ac97fda4e804747a9718b40a32531cd5c3fd1d3c1dd8ba5ef9c86d3c8df8c71f81da1a9756e5db4dddf70755053f7129d656a8069fe83c39ab240cf7a73f0f880ec7a791c5115ab262184839b906c238eaabf2268dfcd6560c5bcb70fea00b580ad52e7de0333e6de63ae351952e6e5dee6edf284de0a2f53e2089db13bd5eca5f98883a24eb2e1a58ae199f8db9c60a5b6b85585b2d2a17d6b5406e5668685d95c4718c375db05f7953b363c25d2ed0906eda70eb659845acd31fec9b8e4d5951d12fd50bbb969dd824a78c72622c8311a980f0f2e6a1ddc368879a1f3a07d3c0780e85a4e5d13223a3424782e3f77bf6a1ebf823f468d41b777ff61345064f1096ed653c277bab90ca5afc8ad6d25f4447236cdd82950afff27763f3fef5308f034379f4ad4955cb8cc5280d51b5427de4eba374f64dde2f1e7a6ae628aa4696160a5cf0ae9fc70e307b4eb19c0a5af2c2855710c8e117211d73a7e7f3f7f2ba55d03a4b73d816c9c3fc1edb86ec95ddcd77884a913805ad6549e7a5f776a1c2385dd6d83877727f128207cda29f83462269a7f606fa31934d06a6e0efd238d0a180c754a9d2e85609fd20c880ea0e79cbe887c442f9f682801da783529e1e45eb3e70195fa2711fa291dca43ee0672b7afc14cf87b9506a7ebe223019c856777e1783f6ae1b0ed90486b32e3b6f7ff77be834c7b6676da6c8052fa49450e3e16a6f90ee33742bbfe3dc025832e0bbc7abeb625077b8c1ea07dee89c7dc26fa42514ff9ac21e848e32309bc2862a873fb57796e05923fce42fa2833c73866e22a04497ec13acebcdff6ae1df71dd8756f1febac04f2034c1f3e1d401ddbdb7f2ef676d5c85437830d527a5fb04c9bbf0d892ee1306d2d2df37008916a3a66e70f865cd6d25de16fdb4bb4f2616204cf86a3ffdbf147223968c092a46dc2aae4aedb32fb850b85d4adb87bfada328bce4c2c70ec42affde442179fcc1d3d9f5e4a848c8ba03b0df3065d1b2d5f1b08d8c25148c51bb54e191a87ea59903084000b4b520fffda111fe831d4bdcf62423c1fcd673b020c5f2c41973dd1b9698054368081f917715e1c1592bc78dd265e051bcda5bf5877821fedfcf7790a58b328cf780f71ee71491e59194504bc800d319251607e53ba0e1ed15cd4fd5c959eaff4d3a1c7cb28c479f2776256633ef7c0f0e98688b54e8c8634cf57e27e5c1ee1e43573ae23bfbb1ff1bef6cabd33c02ff165c44f0f190426ba8391ba4f03458be3351869c5c5c9d5fa5600edbcce523525b9cd9c3bb040e34771ea277d05cb76302c72fac5edc815412dbbbc651371d70d044c4f89a68da7abd836fb3a495e212b5fd13819c41c9a240405582ae69b7c35b30935af3085d457a4d76a94c9272c5eafcecc4c92dd4f314b04b4739864e626a5bab27fa2f345f052afe3bae2ff4c442c42a1c83091bfcc23a3b5e06a511d02cefcd618a6d9761de00af192cf1aacc902cf3ba98f898c48fbc74b6710db7ac890b4f7ed7377e0fa3b4c46a131e775130a80db5014a79e674c8fc8b45495066e88201d2e320320fa4561abab617d0e67e9e879b0080a8ab404f4eb007a088990aa6a7b29afce5b8dd038ce96d43e1271315f6070e761e759c44fba1ce78730e35ca31e0bf5840cc01289c81613a07c497f288ed70a6d10d9f58fe135558b2a862bd877fcc939d7536e7dc988409290cd73da04a3b1399b0a2637f737d5f86bba4a31019546e2000a3ca57f8291cd9af28299eb93909061200c9738cca998add04e7bb0137ecc460fc3ef72872e7d13c159914fcdf577910e6c5d7a1636b13b78c5088551c614e3c75befb0f37fb89b918f4aad0126a9efd3390d6a0cab97ed0e01c7eae0e798a4142345578beb10d6b61a90b4d1fe836022def90bb8e37e07428a4592e7bf30e935951e492234a8db96f081379e7c4e18c3b6ce4ed1f97698dc1da940f14217e877bb8e0f33b392d801a01c48ec62ce2774d2e4e55e9415c063e1bfa31a8f0633443ec19c5fab977c1485147e46c06f86742278fd071de4a165dff7eddd5390a1e031d80e3d44477f6009c9fc27a7d92b865a292b0d586083f681c2d92da7e7f42eabd076fa7d61eba0c2b406c75f1cec561b1a523dd4c6f344b02ed59bd473d7d30a24144e981fc8da434931adeb841d63bb705485f8f58a180da91af64bad1379356787b37467dc9b4a0d12496e5048e7ccb40a978eebee5eaac4e9dd96faf194aa93a22333d7f68cccde147dce26c9ff18d7c8ffe0d1377c70dd1057d54473b2c2b2b3eea82fb223952c0dc3796efd0cd94afea38341ab9a83c6a9ee77f26bf8dea8510dfc964f9b9b4942c08ade50e43f06e5101f2e6b68b6a7f9cc5443c862b1198627461938daf4bd1fc7b21d6d7fd3f775f0e4a1f60434a242b049f159dbe5de145e741c5c9b4e59a7f5d7de54a6d51cd87845dde819ca74e3abf60356fbcf18bfff3b6ae1c545e243c08f9f41b86e55ed6e71be453843e0bffc5b6bdcfeefd33075ee5110627d4f05e008e54ddd62fb6979d9c2a5e4a2cb45fad7b2d77bd17508952889b30df2124cdc2fe6a749a12c9f6dbbd01226cc4ba2693b7e6a858d3c36ac6519ee70e896588a6df81b0e3be3604bbbe1a845088cf1834a04368dde8b6ee76d0492911dc09b05cf6642e0003cd8faafd398872c1a8dc3e85d3658ec8", 0x2000, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) 2m56.520700679s ago: executing program 33 (id=909): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x8045) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) (async) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x4000}, {r0, 0x2070}, {r0, 0x8000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x218aa9b0]}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) r1 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000001d000/0x2000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) 2m52.129688609s ago: executing program 5 (id=1012): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(r0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x14, 0x1, 0x0, "ff3a55f32ec78900d10052d000200000f3018e54fa19000000ffc800001c00"}) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x800000000000, 0x125080) close_range(r0, r1, 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000100)="81", 0x1}], 0x1, 0x8, 0x2) 2m51.909535127s ago: executing program 5 (id=1013): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x2, 0x0, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d8c795dd0ab0a9c457007d002ae359e2b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107c35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5982dbe74341fa418cfee6039c15eda91b1ecf8887e008b15c4c7505c31efe20a7b838369c2857906c492432ba88cd2591215c875a7c854aa65bcc2e04eabc2ef716297c6d5c1357ed811a106739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0deb8de9aeac59bf750ce0", 0x146}, {&(0x7f0000000fc0)="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", 0x46e}], 0x2}, 0x8400) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r2, &(0x7f0000000180)=""/174, 0xae) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="130000001900010000000000000000001c"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4c800) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r3) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) socket$kcm(0x2, 0x3, 0x2) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) getsockopt$rose(r1, 0x104, 0x2, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) (async) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="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", 0x146}, {&(0x7f0000000fc0)="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", 0x46e}], 0x2}, 0x8400) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) read$msr(r2, &(0x7f0000000180)=""/174, 0xae) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="130000001900010000000000000000001c"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4c800) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r3) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) (async) 2m51.909259205s ago: executing program 5 (id=1014): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x5, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m51.808560155s ago: executing program 5 (id=1017): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58001300060a0b040000000000000000020000002c000480280001800e000100636f6e6e6c696d697400000014000280080001010000000008000240000000010900010073797a30000000000900020073797a320000000014000000110001000000000000558dd8fc760620bbcd0000000000000a"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 2m51.802697656s ago: executing program 5 (id=1019): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x26) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 2m51.728057518s ago: executing program 5 (id=1022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000270e00"/20, @ANYRES32=0x0, @ANYBLOB="2a130200b7580000140012800b00010067656e65766500000400028008002000070cf0ce"], 0x3c}}, 0x4c051) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x1000000, &(0x7f0000000280)="c594fc84"}) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) 2m36.735905772s ago: executing program 34 (id=1022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000270e00"/20, @ANYRES32=0x0, @ANYBLOB="2a130200b7580000140012800b00010067656e65766500000400028008002000070cf0ce"], 0x3c}}, 0x4c051) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x1000000, &(0x7f0000000280)="c594fc84"}) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) 2m29.347656963s ago: executing program 4 (id=1280): clock_settime(0x5, &(0x7f0000000040)) r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) (async) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/236, 0xec}], 0x1, 0x8, 0x1ff) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x800455d1, 0xfffffffffffffffd) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 2m29.28931727s ago: executing program 4 (id=1282): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2e, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000110) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000000c0)={0x60, 0x2, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000413000/0x1000)=nil, 0x5, &(0x7f0000000040)=[{0xc00000000000, 0x7, 0x9}, {0x599, 0x5, 0xff}, {0x400, 0x9, 0x2c8c}], 0x3, 0xc8, 0x5, 0x5, 0x0, 0x3}) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2m29.20863953s ago: executing program 4 (id=1285): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newlinkprop={0x3c, 0x6c, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x2, 0x8}, [@IFLA_MASTER={0x8}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7fffffff}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4020880}, 0x20040001) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) 2m29.207879207s ago: executing program 4 (id=1287): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x3]}, &(0x7f0000000100)=0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x2, 0x6, 0x33424752, 0x3, 0x0, [{0x1, 0x5}, {0x3}, {0x80, 0x4000005}, {0xa, 0x4}, {0xc2, 0xabc9}, {0x386f4af5, 0x5}, {0xe, 0xfff}, {0x0, 0x3}], 0x1, 0x3, 0x0, 0x37dce441ff8db334, 0x2}}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x3004002, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x2b034a0f}}]}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x158, 0x10, 0x1, 0x100000, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, {}, {}, 0xffffffff, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd2a, 0x400000}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x158}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000480)={0x0, @remote, @broadcast}, &(0x7f00000004c0)=0xc) read$FUSE(r3, &(0x7f0000000940)={0x2020}, 0x2020) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)=@getsadinfo={0x1a8, 0x23, 0x200, 0x70bd2a, 0x25dfdbfd, 0x0, [@encap={0x1c, 0x4, {0x1, 0x4e20, 0x4e22, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @algo_crypt={0x10f, 0x2, {{'xts-aes-neonbs\x00'}, 0x638, "54dc64f7a77e5c5a72268f31db775508394a7257f0ec54485902093fe8c755d0226fc898319c40c1ccc5c060519d1ad2fb565caefc5e18579f246de1064baae41bb4b28bbd1c4acaf8a3278fe99506f3a30728c88772d62f5e24bfced2e7e4009d43359a6f082aa282a5d377bd5dfda88ab778f9d7b99edd65f6eaf112e8c1ce06e9dee9308c93aa782b983dcc7fb7240f9f390cfdf19c738b769aca51db69411b239b0b7fe6a70ab64ec4d7b16ea38866f23632116ba061d6429ba724fb12db0fac356b874778"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}, @srcaddr={0x14, 0xd, @in=@broadcast}, @address_filter={0x28, 0x1a, {@in6=@empty, @in6=@empty, 0xa, 0x1, 0x7}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1000}, @offload={0xc, 0x1c, {r6, 0x2}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x801}, 0x2000004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x12, 0x1, 0xa7c7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x3]}, &(0x7f0000000100)=0x6) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x2, 0x6, 0x33424752, 0x3, 0x0, [{0x1, 0x5}, {0x3}, {0x80, 0x4000005}, {0xa, 0x4}, {0xc2, 0xabc9}, {0x386f4af5, 0x5}, {0xe, 0xfff}, {0x0, 0x3}], 0x1, 0x3, 0x0, 0x37dce441ff8db334, 0x2}}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r3, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x3004002, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x2b034a0f}}]}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x158, 0x10, 0x1, 0x100000, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, {}, {}, 0xffffffff, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd2a, 0x400000}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x158}}, 0x0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000480)={0x0, @remote, @broadcast}, &(0x7f00000004c0)=0xc) (async) read$FUSE(r3, &(0x7f0000000940)={0x2020}, 0x2020) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)=@getsadinfo={0x1a8, 0x23, 0x200, 0x70bd2a, 0x25dfdbfd, 0x0, [@encap={0x1c, 0x4, {0x1, 0x4e20, 0x4e22, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @algo_crypt={0x10f, 0x2, {{'xts-aes-neonbs\x00'}, 0x638, "54dc64f7a77e5c5a72268f31db775508394a7257f0ec54485902093fe8c755d0226fc898319c40c1ccc5c060519d1ad2fb565caefc5e18579f246de1064baae41bb4b28bbd1c4acaf8a3278fe99506f3a30728c88772d62f5e24bfced2e7e4009d43359a6f082aa282a5d377bd5dfda88ab778f9d7b99edd65f6eaf112e8c1ce06e9dee9308c93aa782b983dcc7fb7240f9f390cfdf19c738b769aca51db69411b239b0b7fe6a70ab64ec4d7b16ea38866f23632116ba061d6429ba724fb12db0fac356b874778"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}, @srcaddr={0x14, 0xd, @in=@broadcast}, @address_filter={0x28, 0x1a, {@in6=@empty, @in6=@empty, 0xa, 0x1, 0x7}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1000}, @offload={0xc, 0x1c, {r6, 0x2}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x801}, 0x2000004) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x12, 0x1, 0xa7c7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) 2m29.139572529s ago: executing program 4 (id=1290): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chroot(&(0x7f0000000000)='./bus\x00') (async) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m29.046254165s ago: executing program 4 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x44, r4, 0x511, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x44}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r6, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22180, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002740)={'geneve0\x00'}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000140)) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r9, 0x8048ae66, &(0x7f0000000080)={[{0xb, 0x7, 0x0, 0x1c, 0x5, 0x3, 0x4d, 0x2, 0xf9, 0x3, 0x80, 0x9, 0x8000000000000000}, {0x6, 0x80, 0x4, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0xf9, 0x0, 0x7d}, {0xe2a5, 0xd, 0x1, 0x9, 0x2, 0xe, 0xd, 0x6, 0xff, 0x6, 0x56, 0x7}]}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000180)={r7, 0x1f, 0x4, 0x0, 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, r0, 0x4}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r11 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r12, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xd0, 0x0, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4840}, 0x40040) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xffffff95}) 2m13.888959962s ago: executing program 35 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x44, r4, 0x511, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x44}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r6, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22180, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002740)={'geneve0\x00'}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000140)) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r9, 0x8048ae66, &(0x7f0000000080)={[{0xb, 0x7, 0x0, 0x1c, 0x5, 0x3, 0x4d, 0x2, 0xf9, 0x3, 0x80, 0x9, 0x8000000000000000}, {0x6, 0x80, 0x4, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0xf9, 0x0, 0x7d}, {0xe2a5, 0xd, 0x1, 0x9, 0x2, 0xe, 0xd, 0x6, 0xff, 0x6, 0x56, 0x7}]}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000180)={r7, 0x1f, 0x4, 0x0, 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, r0, 0x4}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r11 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r12, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xd0, 0x0, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4840}, 0x40040) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xffffff95}) 2m6.118910908s ago: executing program 7 (id=1590): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x103100, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0x16) 2m5.978382562s ago: executing program 7 (id=1593): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000700)="04d31fcd275bfc58188e699fa7c9", 0x0, 0x375, 0x0, 0x3a, 0x0, &(0x7f0000000540)="9a4f1f796ecac0afa6efee7073e66f741b673e78b684388008a1374fed03c7508a50a9e6796dfd73facfb013a6322467a4a0011fc387ea6be1e1", 0x0}, 0x50) (async) r1 = socket$inet(0xa, 0x800, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x450, 0x98, 0x98, 0x0, 0x98, 0x0, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@remote, @empty, 0x0, 0x0, 'vcan0\x00', 'veth1_to_team\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "d1a1"}}, @common=@addrtype={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_macvtap\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 2m5.917739275s ago: executing program 7 (id=1595): r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r1 = socket(0x2, 0x3, 0xff) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'veth0_to_batadv\x00', {0x2, 0x4e23, @multicast2}}) r2 = shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r2) 2m5.868808163s ago: executing program 7 (id=1597): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x68, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4d25fe40, @link='broadcast-link\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4080000}, 0x40000) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x40000) 2m5.865191472s ago: executing program 7 (id=1598): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x4) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x0, @mcast2, 0x35e1}, @in={0x2, 0x4e24, @local}], 0x2c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000001640)=[@free_buffer], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r7}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) (async) fstat(r9, &(0x7f0000000300)) (async) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010023bd7000fbdbdfa500000000", @ANYRES32=r8, @ANYBLOB="184e06004822000024001280110001006272696467655f736c617665000000000c00058005001c000400"], 0x44}, 0x1, 0x0, 0x0, 0x4044040}, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) socket$packet(0x11, 0x3, 0x300) 2m5.797949364s ago: executing program 7 (id=1600): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xe0140, 0x68) (async) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) getdents(r0, &(0x7f0000000000)=""/26, 0x1a) (async) r1 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000000)="42d738edebb9165dc100", 0xa, 0xfffffffffffffffe) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x15, 0x0, &(0x7f0000000100)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 64) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}]}, 0x24}}, 0x0) (async) keyctl$read(0xb, r1, 0x0, 0x0) 1m50.767928667s ago: executing program 36 (id=1600): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xe0140, 0x68) (async) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) getdents(r0, &(0x7f0000000000)=""/26, 0x1a) (async) r1 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000000)="42d738edebb9165dc100", 0xa, 0xfffffffffffffffe) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x15, 0x0, &(0x7f0000000100)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 64) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}]}, 0x24}}, 0x0) (async) keyctl$read(0xb, r1, 0x0, 0x0) 28.388244587s ago: executing program 6 (id=2306): r0 = socket$kcm(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500e30000", @ANYRES32=r2, @ANYBLOB="8014000004210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 15.372911701s ago: executing program 6 (id=2319): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f00000008c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x10000000000000e4, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x40000002, 0x4000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 15.177857867s ago: executing program 6 (id=2324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f0000000140)=[{r2, 0x19f23}], 0x1, 0x2000000) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000acd000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000007300000000000000c744240005000000c7442402d1259bb7c7442406000000000f01145f"], 0x73}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000400)={{0x100000, 0xeeef0000, 0xc, 0xd, 0x85, 0x1, 0x81, 0xb, 0x0, 0x0, 0x7, 0xe0}, {0x4, 0xd000, 0xc, 0x9, 0x6, 0x6, 0x7, 0x7, 0x5f, 0x6, 0x9, 0xa}, {0xf000, 0xeeef0000, 0xc, 0x80, 0xc, 0xc0, 0x2, 0xc, 0x0, 0x96, 0x5, 0x8}, {0x8080000, 0x10000, 0x8, 0xb, 0x3, 0x7, 0x9, 0xfc, 0x21, 0x2, 0x76, 0x1}, {0x1, 0xeeef0000, 0x9, 0x2, 0x8f, 0x2, 0xb, 0xff, 0x7, 0xf9, 0x31, 0xf9}, {0x2000, 0x80a0000, 0xc, 0x90, 0x8, 0x5c, 0x0, 0x10, 0x6, 0x2, 0xff, 0x8}, {0x10000, 0x4, 0xe, 0x8, 0x5, 0xe3, 0x1, 0xa2, 0x6b, 0x4, 0x4, 0x8}, {0x1000, 0xeeee8000, 0xb, 0xa8, 0xd, 0x7f, 0xd, 0x2, 0x1, 0x7c, 0xb, 0x7}, {0x2000, 0x7}, {0xeeee0000, 0x3c}, 0xd0028, 0x0, 0xffff1000, 0x0, 0x5, 0x0, 0x0, [0xda6, 0x4, 0x3, 0x4]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="000000000a00020000000000000000000800090002"], 0x30}}, 0x0) 14.677446358s ago: executing program 6 (id=2333): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200), 0xd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002536702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="00ffffffffffffffff0000080000a99f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 14.676630665s ago: executing program 6 (id=2335): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) open(&(0x7f00000000c0)='./file0\x00', 0x109000, 0x1) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x0, 0x7}, {0x9}}, [@qdisc_kind_options=@q_multiq={{0xffffffffffffffd9}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 14.476517995s ago: executing program 6 (id=2341): setresgid(0xee00, 0xee01, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @loopback}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r4, &(0x7f0000000400)=""/207, 0xcf, 0x4eb) setresgid(0xee00, 0xee01, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @loopback}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async) pread64(r4, &(0x7f0000000400)=""/207, 0xcf, 0x4eb) (async) 2.247592068s ago: executing program 0 (id=2454): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') write$nbd(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000500)="c99bfaafd0", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x8}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000300)={0x70, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x46, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2}}, 0x600, 0x8ae, {0x0, 0x6, @default_ibss_ssid}, @val, @val={0x2d, 0x1a, {0x2000, 0x3, 0x5, 0x0, {0x5, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x3, 0x9}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x70}, 0x1, 0x0, 0x0, 0x20040080}, 0x4) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x3) r11 = socket(0x10, 0x803, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001400a59500000000000000000a000000", @ANYRES32=r13, @ANYBLOB="140002007f020000000000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x31, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0xa, 0x0, 0x1, 0x3, 0x80000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000180)='syzkaller\x00', 0x1712, 0xa, &(0x7f00000001c0)=""/10, 0x41100, 0x32, '\x00', r13, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x7, 0x1}, 0x10, r14, 0xffffffffffffffff, 0xa, &(0x7f00000002c0)=[r1], &(0x7f0000000300)=[{0x1, 0x4, 0xe, 0x5}, {0x4, 0x3, 0x7, 0x2}, {0x1, 0x2, 0x3, 0x4}, {0x4, 0x5, 0x9, 0x1}, {0x3, 0x5, 0x9, 0x6}, {0x5, 0x3, 0x8}, {0x2, 0x5, 0xf, 0x4}, {0x4, 0x5, 0xe, 0xc}, {0x0, 0x4, 0x10, 0xb}, {0x4, 0x1, 0xc, 0x4}], 0x10, 0xffff}, 0x94) 1.367600736s ago: executing program 0 (id=2459): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00J'], 0x48) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000), 0x30000, 0x1400}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8954, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=ANY=[], 0x5c}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c00000053568de9a0c5ab6d00000000020000000900010073797a30000000000900020073797a320000000014000000a3b54a0a2d22a55b2d1100f4ffffff00"], 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000000000000210900010073797a30000000000900020073797a3200000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.228153479s ago: executing program 8 (id=2460): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="f3a7b8e4000f00d0baf80c66b8a0cc888466efbafc0c66edf30fa7e036dba900580f01c466b80500000066b9008800000f01d90f221f837fd60bb816008ed8", 0x3f}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xc7, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 947.916968ms ago: executing program 8 (id=2461): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x1, 0x9, {}, {0x4, 0x2, 0x7, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "10db3fa0"}, 0x5}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, &(0x7f0000000180)) (async) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000011424203"], 0x0) (async) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) 947.1796ms ago: executing program 8 (id=2462): r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r0, 0x1, 0x2d, 0x0, &(0x7f00000009c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="badef23dc6da3aa0b6a98863ab589b48db566c835f7d23afdfc7e6c1153f65e51d33e4c0a977f48ed7b7c3e601e85b11f205f34c59f9e06af3c707702445b5b278548c9ed0da30a68d410d5909699d8886fb9ca9e73885e2ae13d7645591f204d6c1c8df84975090f329fba713ba38bfd40cdbc0e6c3ae1fadb8c3a641ed4ef432fb68c1aed35861f3ef04ceea1b03deba9ab54c97dd6a2eff04191f751b39f29bc258ce87c7b585af307b82a43e479585860d473bcd10e7378bbf17bb3921e6", 0xc0}, {&(0x7f0000000140)="07d114c29947c7fc3fab274aac7923938096491e6432a2e782b7589f07557b5c151b999f4cb5ea594d222a49d088bb9f5cf3cec7cfb73460c913c1d8a34cc59b834ad1eb18f3cf3e0635caa0a23f55941b64af153d857b52f561866215d06b0285c5ba80ebcdc3343a009e16d4a01d7fb2287905", 0x74}, {&(0x7f0000001240)="c25f13a3924e6406828bbc39ff11fe83927f96f924bee1e9f63713b3825eb2893be5dc105cb456cb3e663ce5b3dc621b04759f0f55731918ffe6fa0e4f356f5ea35a5d20f5fd6bd5a806b3bc6b98f49ada703f93670338d91c5d076ddfacf4d1de971fc4664cad79b1605bb42904d517902e28fa4ab4a71a7db0e492169fe33bdb647eafb81fd6fe2a1609fe14362fe14c31508d17", 0x95}, {&(0x7f0000001300)="b64e3a5f82be5af262145cebed99c4f18d8396b71626780528b45b7d2f562eea366eb8a3e5667bea54f06c24a4c98cdd30d8ba93ee6c2fa9448c37017c54dd4d975d220caf538bc222029e037021a79e34b3ac6365c4c6ac1a30771b4190f006095ec943948f4b466fe8a5c720ad38495d64a5364321fc93b1a7fe37fd3480734e06c77bc785ab7f7e7fa810b9", 0x8d}, {&(0x7f00000013c0)="26bd114d5338073bede63e7758380ac34f9ee4609492a449dd19b404f573a7fdd8a85eef9d27ec3244a442b931e8035e21020094275f60fb0afeb5f546e058c477ed3838136dee022ae801bc4ded4749229999e097d818ac7be5bf1bfe217570f9014734220ac8dee3ee1fb66e8d2bb1be10dab81dc2eef3878d1f9f814af73f4f642192c075ae5fc04c2f60caa833793e246001e5162a92249ed09570cb1986b8be356d289496f66df92eb3b92a5099246ba6ca7b25f7efc0ffc658e82f5451556971e4a6f61b8701ce29e9b0ea443b1fcafdcb", 0xd4}], 0x5) r2 = socket(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) setgroups(0x0, 0x0) unshare(0x20020000) syz_io_uring_setup(0x6d9d, &(0x7f0000000200)={0x0, 0x942e, 0x2}, 0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r5) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x9}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, 0x1a, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) preadv(r1, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000014c0)={r4, r4}) 876.157511ms ago: executing program 0 (id=2463): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x4048010) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000001c0)={0x75, "d3e96f57555f5f18513ebfdd1ef90f8dfc772693e9f8e46909c8d4b62787cc4fdf615ffde1bba22c3ae4859df02af000cec5ebdef01a5c9a4dc200aeed53ee16bac1ae9108a64270077c0382f493b40ba4f79292e5adbcc6479bba03355c4e857b929c0d156014681e69e8bc73e5c283e4bc747951571ed819967907d6376af3"}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x1802, 0x0, 0x0, 0x5, 0xfffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x40) (async, rerun: 32) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="80fd02000040", 0x42}], 0x1, 0x0, 0xc87) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x2000005, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x38, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x280, 0x280, 0x368, 0xd0, 0x1b0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x36}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) (async) getsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1, 0x1}, 0x8) 875.260218ms ago: executing program 8 (id=2464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000700)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ff0000f77fff00"}) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socket$kcm(0x29, 0x5, 0x0) read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r1, 0x0) read$rfkill(r4, &(0x7f0000000600), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd1be0ffff00fe3321632f77fbac14140be000031762079f4b200287e5feca6aab845013f2325f1a393b050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 287.320688ms ago: executing program 2 (id=2469): munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000500)={0x9, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_LINKMODE={0x5, 0x11, 0x4}, @IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x80000001}, @IFLA_IFALIASn={0x4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa3de}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000844}, 0x0) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa441, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001440)={'ip6erspan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x9) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0) write$binfmt_aout(r4, 0x0, 0xc8) shmat(r3, &(0x7f0000ffb000/0x3000)=nil, 0x2000) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) 286.206018ms ago: executing program 0 (id=2470): execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={[&(0x7f0000000040)='\x00', &(0x7f0000000080)='})]+.\',][\x00']}, &(0x7f00000002c0)={[&(0x7f0000000100)='\x00', &(0x7f0000000140)=']\x00', &(0x7f0000000180)=',-[^\xb5#%\xa7$\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='/#]@-/!)\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)=',)),{^-,\x00']}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) chroot(&(0x7f0000002380)='./file0\x00') write$FUSE_INIT(r0, &(0x7f00000023c0)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x2b, 0x8ac, 0x400, 0x9, 0x8, 0x6, 0x81, 0x0, 0x0, 0x10, 0x6}}, 0x50) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000002440), 0x800c0, 0x0) recvfrom$unix(r2, &(0x7f0000002480)=""/4096, 0x1000, 0xc2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000003480)={{0x1, 0x1, 0x18, r2, {0x1ff}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f00000034c0)={{0x9, 0x9}, 'port0\x00', 0x0, 0x400, 0x3, 0x7, 0x7fff, 0x1, 0xc75, 0x0, 0x3, 0x85}) r4 = openat(r3, &(0x7f0000003580)='./file0\x00', 0x2000, 0x24) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000035c0), 0x200040) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000003600)={{0x8, 0x80}, 'port0\x00', 0x0, 0x21, 0xfffff94a, 0x3, 0xffffffff, 0x7, 0xf, 0x0, 0x6, 0xd5}) ioctl$NBD_DO_IT(r3, 0xab03) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000036c0), &(0x7f0000003700)=0x4) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000003740)) pivot_root(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)='./file0\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000038c0), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f00000039c0)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003980)={&(0x7f0000003900)={0x74, r6, 0x100, 0x4b4, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffff}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x33a90d108f37217b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x74}, 0x1, 0x0, 0x0, 0x804}, 0x4000010) r7 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r7, &(0x7f0000003a00)=""/153, 0x99, 0x2000, &(0x7f0000003ac0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x1}}, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000003b40)={0x7, 0x7fff, 0xfffffffa}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000003bc0), &(0x7f0000003c00)=0x4) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003c80), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x30, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x400c0d0) write$sndseq(r5, &(0x7f0000003d80)=[{0x63, 0x2, 0x6, 0x0, @time={0x7, 0x800}, {0xa, 0x3}, {0xc7, 0x10}, @note={0xa7, 0xf7, 0x1}}, {0x6, 0x90, 0x4, 0xb, @time={0x0, 0x5}, {0xe, 0x4}, {0x7, 0x4b}, @note={0x7, 0x7, 0x0, 0x6, 0x1}}, {0x2, 0x2, 0xd, 0x1, @tick=0x9271, {0x89, 0x4}, {0x2}, @time=@time={0x1}}, {0x7, 0x4, 0x11, 0x4, @tick=0x3, {0x5, 0x3d}, {0x2, 0x7}, @connect={{0x1, 0xe}, {0x3}}}, {0x1, 0xa, 0x7, 0x80, @tick=0x7, {0x4, 0x2}, {0x0, 0xb}, @result={0x5, 0x7f}}, {0x81, 0x0, 0x1, 0x0, @time={0x5, 0xdfa}, {0x7f, 0xfb}, {0x7, 0x1}, @result={0x0, 0xffffffe3}}], 0xa8) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000003e80), r2) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000003f80)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003f40)={&(0x7f0000003ec0)={0x68, r9, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x8c084}, 0x80c4) ioctl$FBIOGET_VSCREENINFO(r4, 0x4600, &(0x7f0000003fc0)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000040c0)=0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000004080)=@sg0, r10, &(0x7f0000004100)) 197.826296ms ago: executing program 0 (id=2471): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000840) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 64) syz_emit_ethernet(0x13f9, &(0x7f00000008c0)={@random="e90c610faca2", @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, 'w]\f', 0x13c3, 0x2f, 0xff, @local, @private1={0xfc, 0x1, '\x00', 0x1}, {[@srh={0x4, 0x2, 0x4, 0x1, 0x4, 0x30, 0xfd39, [@private2]}, @srh={0x2b, 0x6, 0x4, 0x3, 0x7, 0x0, 0x6, [@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x73, 0xa, 0x4, 0x5, 0xe, 0x60, 0x909, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x31}, @private2, @empty, @mcast1]}, @routing={0x3a, 0x2, 0x1, 0x6, 0x0, [@private1]}, @hopopts={0x1, 0x11, '\x00', [@jumbo={0xc2, 0x4, 0x101}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0xc, @ipv4={'\x00', '\xff\xff', @multicast1}}, @pad1, @generic={0x5b, 0x25, "9f650de43afd82abad7c0cccf987962e004f666e5c609b9f7ef375ac28684e9373388314d9"}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x38, {0x1, 0xc, 0xc8, 0x3, [0x8000000000000000, 0x0, 0x100000000, 0x10001, 0x2, 0xfffffffffffffff9]}}, @enc_lim={0x4, 0x1, 0x4}]}, @hopopts={0x87, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}, @dstopts={0x32, 0x2, '\x00', [@ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0xb0be}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x8, 0x0, 0x81, 0x1, 0x0, 0x6, 0x64}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x5a, 0x3, [], "92f0a6da7f9d293b9a80eae6fde72612d97cf34e05c1457701de2b177663032615eaf771e15f98eb40e02eb1d003d7063a2ce7b72b9c6861f1aa001478e8a4ecc77204a2823c90a1adb6f718580b172809a677f4b0e739178fec"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x8000], "d0f2b9ab7bd37194b3c3511b5f99bb9dadad648e030c020079cdf7b2cc48a7578745b7518084b8c00f4f743f4a83d5c57167dae467973f17fa99bf415251ca8cd4e04102305544dd1eb93c94efc545bcf94a9639d871a5f7a17448b526228b4966cb83bc2bf333a1a811c84ba49781c6ea9c38d62d5d6680cfd2fb7a00f62884452b63f2ef20b069aa508faa0acfb468138f1663cc48b6bf1206786fd4d79842f993d01ba0beaadce2168139fb13224fe54e1a4fea2e3f4bd4a5c8b9714f"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x7, 0x1, 0x164], "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"}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x2, 0x1, 0x1, 0x0, 0x7, 0x6}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x1b, 0x1, 0x0, 0x3, 0x6, 0x6}, 0x2, {0x789c, 0x7f, 0x2, 0x7, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "73f32e116117d018c5a3ebbff0dcfaf5a911b045d08c03b7076c46d4ad5d5859bbde32c3646f71bfb31b3346fae049b9a7296d4bc2c02c813b53e822c6c6c739d49ed8009087f16fe03e96f51816125d1a09da53347fc532fec3e518f38425b32fb51d058e974da0299040d52f7049550376050945ed045970d829bd4b05cf028d6403e40e4308d10522a09d8bd3a524b7bb2ed0bc0f66478533ef0c00e450aeeb0ffa8105a21293b7ae349b1592ced68470a13d752a107ce5ef3298fabfc2fb0ff88ac5833db595ef500cae7c46edad4ffc1a33a6f8d5"}}}}}}}, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x7d, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x18) (async) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @multicast, 'ip6gretap0\x00'}}, 0x1e) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x28, r7, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@empty, @local, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8864, 0x6, 0x0, 0x1}}, {@llc={0x8864, {@llc={0xf4, 0x80, "1a"}}}}}, 0x0) 197.225904ms ago: executing program 0 (id=2472): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f00000005c0)="46b83076ca", 0x5, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0}, 0x14) (async) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'veth0_to_hsr\x00'}, {0x20, '%'}, {0x20, 'veth0_to_hsr\x00'}], 0xa, "95b694cf1a6a74525f070f1889f761d38eb69e737c10cf753a72f4acc356d8f8d60449e00a7096fa0950604a931a1f15e17eacb2c90a38c9d33de39b"}, 0x65) (async) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004dc0)=[{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000b80)="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", 0x466}], 0x1, 0x0, 0x0, 0x8c0}], 0x1, 0x20040040) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) 127.478377ms ago: executing program 2 (id=2473): r0 = io_uring_setup(0x6023, &(0x7f0000000280)={0x0, 0x2800008, 0x40, 0x1, 0x14a}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=""/20, 0x14}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000880)=""/142, 0x8e}], 0x1}, 0x6}], 0x2, 0x28101, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast2, 0x1}}, 0x9, 0x100}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={r6, 0xb50, 0x20}, &(0x7f0000000180)=0xc) 66.904576ms ago: executing program 2 (id=2474): ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x0, 0xe8a, 0x9}) socket(0x29, 0x4, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000) 66.283893ms ago: executing program 2 (id=2475): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x127880) mlockall(0x6) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r0, 0x0) 66.081392ms ago: executing program 2 (id=2476): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x3}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x0, 0xb0, {0xe000, {0x209, 0xff00, 0x800, 0x3}}}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000052000600050001000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x448c0}, 0x20008000) 6.384007ms ago: executing program 8 (id=2477): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"91693d280cf61d042a94ee0c4b96beaab564368374574f3d5f170807b2819831", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000000c0)={r2, 0x0, 0x1000000}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000013c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000000140)={0x1228, 0x12, 0x10, 0x70bd2a, 0x25dfdbfe, {0x38, 0x4a, 0x4, 0x8d, {0x4e23, 0x4e20, [0x600, 0xb1c3, 0x5, 0xb], [0x9, 0x6, 0x4, 0x5], 0x0, [0x5, 0xb35]}, 0x1, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "6afeef1bc013640593950467417b1bcd003c22c5104b1065396575f806df89849ae12f62f975b1c6dd2962c926d7e276054647bfffc8768da4a6be639c9f7ecc9efdce7f01b95720c5f0bbd721eaeeeb43a92ce4a04ba48405b7f495b4aab2cd0df12d20edab6e452197057292119686df2bd7b4ba49d32979a1f0bc455bb23e11fa4a6b835133374e499220db7c7bc46c3668d55474e039719a8300797b4ad8b53eb7a61cc54d40343b4cedfd1906473fe1639ed0d0bdabad1495568a67a291329356917c362be95225ace9be925c8f87549c51b14f19"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "a6cdc51cee742284b6d21766246344033ada9aa4e6539d033760fe7b718ebc5df730c9b686e0f2c8da6e31929fe754146842c997c84da2093a58a1d2178c43018c0e5c45931209c6c41d9d154eec4892f1e8a2085b02b4fa10ff10ca53b9318a02f451b13941ebd830af8b5c1ef7b9638ec46bd83e397f2652cbe370e8430543f6f3cb5afab46117c1dc147345a98c45dae3584bb7045a500cc1d1e76bf608b46759a74aaf2fe863acd8d694"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "fd65642eead41134df79abe191017bfb639ee58adc7d664297d8c82109dda1a3686a2799708f89b81d6478c58f1904b317bff9915b11dd6eba3932a5a0ce071aefb563b1eb6d"}]}, 0x1228}, 0x1, 0x0, 0x0, 0x20000014}, 0x880) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) writev(r2, &(0x7f0000001700)=[{&(0x7f0000001400)="bbfa495102fd9bb0c30206e2f988dd80ca72c612551d9dd22436dd9ad75ed3b607e2a2c873dd390a034a764dee52bf1b9b2b84bc5e4df35c613ef02613c809ed226c49e349e5652f6ac859f9938a585f78755084815ec3f3087dbfc5ad27271579e93daf6cce5f7d3a7b19fdcf01d39efb49351de097de5fee926e2fb1d93a7d7c53223839ad4fe5fa33e330a42b32f9d03482037bf0663f0ccbca2b2721eb474fcd5dd6b4906eb0599747871cfecfdab56aea57a1af8a934296ae4ca4e506e85c2aeeeafc81462be9ffcf353da1f0a1d34b", 0xd2}, {&(0x7f0000001500)="348104452b1177ddb5ea28f25cbf33cde29e693c57821c7074aa63737a76ecf3be30389b08113c00fefcb930f1173c4c2aa7dbb31c7501ce8246f0f868e408e45f8c22056053b73213a9dc4b1c6273b923e3bac198586250aa763ada6b27a5034e78def056e879844f513b8c29e8e2b38f16aae24130b90181fa9c8c0ac15e4b8baffdf8b76a6233eb2c2a7605b951108fbb09861a86868acac53c646631d0a0547167d93c2f140ecf129ef2b47b", 0xae}, {&(0x7f00000015c0)="e88f98307e475f6165979c730c86c6fe19282334b30982700fa3e2133ac5f96ebbc139c12ce1ed03365f8cf85aa3b097e8ba685df19794ddd0b646ac729fbffb57d542727f11f87dbb9aa7f8c41d6d437fab8f18eaa3477280694cb4dc46edaa981fead0078ede1f4dc3f114669cd4714a0890d6c812a529920fdb380a8ff1a6d6ef322c6322196fb936ecd592e543661a5c3f6408e2ba210cff158d9a9dc47b6e505e29c92868e96b829c056efa396c218396c0437fcc7fe1a4c3ca45df8efd081e505c8528ca916badfc3e0e71f85dafdc8d67", 0xd4}, {&(0x7f00000016c0)="9f54b697d65bc45be63c72fffe9963eb106cf69d3d17", 0x16}], 0x4) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000001740), 0x1014c0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001780)={0x10003, 0x1, 0x8000000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), r4) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000001a00)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001840)={0x174, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "8526c64a9b9f137a5a9ba03962f90369a90b5d8f4c1e7bdf3f23e80941d253b5"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x1) connect$inet6(r2, &(0x7f0000001a40)={0xa, 0x4e22, 0x10, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}, 0x1c) r6 = fcntl$getown(r2, 0x9) prlimit64(r6, 0xb, 0x0, &(0x7f0000001a80)) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000001ac0)={0x6, 0x4}) splice(r1, &(0x7f0000001b00)=0xaf, r2, &(0x7f0000001b40)=0x2, 0x0, 0x5) r7 = syz_open_dev$rtc(&(0x7f0000001b80), 0x8, 0x111200) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001bc0)={r7, 0x8, 0xe, 0x8}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001c40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r9, 0xc008ae88, &(0x7f0000001c80)={0x3, 0x0, [{}, {}, {}]}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f0000001d00)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)}) madvise(&(0x7f0000d86000/0x3000)=nil, 0x3000, 0xd) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000001d40)={0x7, 0x0, 0x5, 0x8, 0x0}, &(0x7f0000001d80)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001dc0)={r10, 0x81d}, &(0x7f0000001e00)=0x8) syz_emit_vhci(&(0x7f0000001e40)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x4a}, @l2cap_cid_signaling={{0x46}, [@l2cap_create_chan_req={{0xc, 0xf0, 0x5}, {0x4, 0xa, 0x3}}, @l2cap_create_chan_rsp={{0xd, 0x5, 0x8}, {0x9, 0x7, 0x2400}}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x5e}}, @l2cap_info_rsp={{0xb, 0x4, 0x27}, {0x9, 0x9, "891471be6994c1a730d94e4fa433aa3c0ccfad17f30804a4de98371196199cfe956f4e"}}]}}, 0x4f) syz_emit_vhci(&(0x7f0000001ec0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x6, 0x4}, {0x1, 0x5df}}}}, 0x11) 221.644µs ago: executing program 2 (id=2478): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, 0x14, 0x1, 0x820000, 0xfffffffc, {0x22, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf1fb0e1"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f00000001c0)={0x28, 0x0, r3, 0x0, 0x0}) 0s ago: executing program 8 (id=2479): socket$unix(0x1, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x75507}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x2c}}, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4000011, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') r9 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r12) sendmsg$IEEE802154_ADD_IFACE(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r11, &(0x7f0000000000), 0xfffffecc) splice(r10, 0x0, r14, 0x0, 0xbfd1, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r8, &(0x7f0000000940)=[{&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000840)=""/156, 0x9c}], 0x4, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r15 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r15, 0x114, 0x3f, &(0x7f00000008c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): text=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 258.863862][ T53] usb 7-1: USB disconnect, device number 35 [ 258.878780][ T40] audit: type=1400 audit(1752382921.281:23209): avc: denied { append } for pid=12890 comm="syz.2.1836" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.897398][ T40] audit: type=1400 audit(1752382921.291:23210): avc: denied { write } for pid=12890 comm="syz.2.1836" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.901060][T12891] __nla_validate_parse: 3 callbacks suppressed [ 258.901069][T12891] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1836'. [ 258.951465][ T6031] usb 5-1: USB disconnect, device number 27 [ 259.007455][ T40] audit: type=1400 audit(1752382921.401:23211): avc: denied { create } for pid=12894 comm="syz.2.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 259.014636][ T40] audit: type=1400 audit(1752382921.411:23212): avc: denied { ioctl } for pid=12894 comm="syz.2.1837" path="socket:[54320]" dev="sockfs" ino=54320 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 259.152264][ T40] audit: type=1400 audit(1752382921.551:23213): avc: denied { create } for pid=12885 comm="syz.0.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 259.158193][ T40] audit: type=1400 audit(1752382921.551:23214): avc: denied { getopt } for pid=12885 comm="syz.0.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 259.165515][ T40] audit: type=1400 audit(1752382921.551:23215): avc: denied { create } for pid=12885 comm="syz.0.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 259.198999][ T40] audit: type=1400 audit(1752382921.601:23216): avc: denied { unmount } for pid=12457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 259.317857][T12907] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 259.336060][T12907] IPVS: Unknown mcast interface: nicvf0 [ 259.339358][T12907] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1842'. [ 259.385232][T12910] input: syz1 as /devices/virtual/input/input30 [ 259.437180][ T6031] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 259.588530][ T6031] usb 5-1: Using ep0 maxpacket: 8 [ 259.592177][ T6031] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 259.594652][ T6031] usb 5-1: config 0 has no interface number 0 [ 259.596732][ T6031] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.603000][ T6031] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 259.605945][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.615186][T12914] syzkaller0: entered promiscuous mode [ 259.617029][T12914] syzkaller0: entered allmulticast mode [ 259.619740][ T6031] usb 5-1: config 0 descriptor?? [ 259.623133][ T6039] usb 11-1: USB disconnect, device number 6 [ 259.634951][ T6031] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 260.149889][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1849'. [ 260.351594][T12931] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 260.354715][T12931] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 261.305699][ T837] usb 5-1: USB disconnect, device number 28 [ 261.455739][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'. [ 272.345545][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 272.345560][ T40] audit: type=1400 audit(1752382934.741:23272): avc: denied { create } for pid=12948 comm="syz.0.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 272.350853][T12951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1855'. [ 272.356025][ T40] audit: type=1400 audit(1752382934.751:23273): avc: denied { write } for pid=12948 comm="syz.0.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 272.366238][ T40] audit: type=1400 audit(1752382934.751:23274): avc: denied { getopt } for pid=12948 comm="syz.0.1854" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.368816][T12950] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 272.372521][T12951] tun0: tun_chr_ioctl cmd 1074025676 [ 272.372539][T12951] tun0: owner set to 0 [ 272.387162][ T40] audit: type=1400 audit(1752382934.751:23275): avc: denied { ioctl } for pid=12948 comm="syz.0.1854" path="socket:[54372]" dev="sockfs" ino=54372 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.397391][ T40] audit: type=1400 audit(1752382934.761:23276): avc: denied { create } for pid=12949 comm="syz.2.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.405926][ T40] audit: type=1400 audit(1752382934.761:23277): avc: denied { ioctl } for pid=12949 comm="syz.2.1855" path="socket:[53741]" dev="sockfs" ino=53741 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.417071][ T40] audit: type=1400 audit(1752382934.761:23278): avc: denied { write } for pid=12949 comm="syz.2.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.426606][ T40] audit: type=1400 audit(1752382934.761:23279): avc: denied { read } for pid=12949 comm="syz.2.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.436140][ T40] audit: type=1400 audit(1752382934.771:23280): avc: denied { prog_load } for pid=12944 comm="syz.6.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 272.442406][ T40] audit: type=1400 audit(1752382934.771:23281): avc: denied { bpf } for pid=12944 comm="syz.6.1853" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 272.498358][T12967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.613723][T12978] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1862'. [ 272.657977][T12986] xt_cgroup: invalid path, errno=-2 [ 272.659604][T12980] lo: entered promiscuous mode [ 272.750342][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 272.753810][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 272.848232][T13005] tipc: Started in network mode [ 272.849869][T13005] tipc: Node identity 5abda08e3ee1, cluster identity 4711 [ 272.852486][T13005] tipc: Enabled bearer , priority 0 [ 273.112257][ T7111] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 273.190833][T13041] ALSA: mixer_oss: invalid OSS volume '' [ 273.223686][T13042] netlink: 'syz.0.1874': attribute type 8 has an invalid length. [ 273.226117][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 273.251134][T13042] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.268718][ T7111] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.273302][ T7111] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 273.274739][T13042] bridge0: entered allmulticast mode [ 273.279496][ T7111] usb 11-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.284260][ T7111] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 273.289097][ T7111] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 273.293379][ T7111] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 273.296473][ T7111] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.304200][T13005] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 273.310580][ T7111] hub 11-1:1.0: bad descriptor, ignoring hub [ 273.314868][ T7111] hub 11-1:1.0: probe with driver hub failed with error -5 [ 273.322189][ T7111] cdc_wdm 11-1:1.0: skipping garbage [ 273.325068][ T7111] cdc_wdm 11-1:1.0: skipping garbage [ 273.334892][ T7111] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 273.336897][ T7111] cdc_wdm 11-1:1.0: Unknown control protocol [ 273.400987][ T1142] tipc: Resetting bearer [ 273.561452][ T6039] usb 11-1: USB disconnect, device number 7 [ 273.563132][T13005] cdc_wdm 11-1:1.0: Error autopm - -16 [ 273.628903][T13058] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 273.631101][T13058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 273.633717][T13058] vhci_hcd vhci_hcd.0: Device attached [ 273.688719][T13059] vhci_hcd: cannot find a urb of seqnum 6 max seqnum 0 [ 273.691263][ T1142] vhci_hcd: stop threads [ 273.692701][ T1142] vhci_hcd: release socket [ 273.694479][ T1142] vhci_hcd: disconnect device [ 273.838037][T13070] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 273.840682][T13070] overlayfs: failed to set xattr on upper [ 273.842466][T13070] overlayfs: ...falling back to redirect_dir=nofollow. [ 273.844585][T13070] overlayfs: ...falling back to index=off. [ 273.846437][T13070] overlayfs: ...falling back to uuid=null. [ 273.855431][T13070] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 273.859995][T13070] netlink: 200296 bytes leftover after parsing attributes in process `syz.8.1884'. [ 273.956552][T13077] xfrm1: entered allmulticast mode [ 273.967549][ T53] tipc: Node number set to 1683792014 [ 274.017186][ T838] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 274.017858][ T6039] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 274.089743][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1887'. [ 274.092468][T13080] netlink: 244 bytes leftover after parsing attributes in process `syz.8.1887'. [ 274.147271][ T838] usb 5-1: device descriptor read/64, error -71 [ 274.171956][ T6039] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.173536][T13086] ata1.00: invalid multi_count 128 ignored [ 274.175116][ T6039] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.181258][ T6039] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.185672][ T6039] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 274.189711][ T6039] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.194095][T13005] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 274.201392][ T6039] hub 11-1:1.0: bad descriptor, ignoring hub [ 274.203475][ T6039] hub 11-1:1.0: probe with driver hub failed with error -5 [ 274.205959][ T6039] cdc_wdm 11-1:1.0: skipping garbage [ 274.213773][ T6039] cdc_wdm 11-1:1.0: skipping garbage [ 274.216033][ T6039] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 274.217980][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'. [ 274.398658][T13005] loop2: detected capacity change from 0 to 2 [ 274.401687][T13005] Dev loop2: unable to read RDB block 2 [ 274.403478][T13005] loop2: unable to read partition table [ 274.405416][T13005] loop2: partition table beyond EOD, truncated [ 274.407200][ T838] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 274.410650][T13005] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 274.423189][ T5360] Dev loop2: unable to read RDB block 2 [ 274.424983][ T5360] loop2: unable to read partition table [ 274.426828][ T5360] loop2: partition table beyond EOD, truncated [ 274.430375][T13100] tipc: Resetting bearer [ 274.537574][ T838] usb 5-1: device descriptor read/64, error -71 [ 274.540871][ T53] usb 11-1: USB disconnect, device number 8 [ 274.597753][ T837] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 274.647560][ T838] usb usb5-port1: attempt power cycle [ 274.747417][ T837] usb 13-1: Using ep0 maxpacket: 8 [ 274.750631][ T837] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.753706][ T837] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.756879][ T837] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.761125][ T837] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.766366][ T837] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.770368][ T837] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.978381][ T837] usb 13-1: GET_CAPABILITIES returned 0 [ 274.980280][ T837] usbtmc 13-1:16.0: can't read capabilities [ 274.997203][ T838] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 275.018673][ T838] usb 5-1: device descriptor read/8, error -71 [ 275.187869][ T34] usb 13-1: USB disconnect, device number 2 [ 275.268402][ T838] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 275.297905][ T838] usb 5-1: device descriptor read/8, error -71 [ 275.417907][ T838] usb usb5-port1: unable to enumerate USB device [ 276.573381][T13128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1900'. [ 286.863426][T13100] tipc: Disabling bearer [ 286.908731][ T40] kauditd_printk_skb: 156 callbacks suppressed [ 286.908741][ T40] audit: type=1400 audit(1752382949.311:23438): avc: denied { ioctl } for pid=13130 comm="syz.2.1901" path="socket:[54745]" dev="sockfs" ino=54745 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 286.918646][ T40] audit: type=1400 audit(1752382949.311:23439): avc: denied { create } for pid=13133 comm="syz.8.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 286.940291][T13131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1901'. [ 286.943627][ T40] audit: type=1400 audit(1752382949.341:23440): avc: denied { write } for pid=13130 comm="syz.2.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 286.962998][ T40] audit: type=1400 audit(1752382949.361:23441): avc: denied { create } for pid=13144 comm="syz.6.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.963226][T13146] [U] zÍ»´iœùÊý®Ò[27| [ 286.969428][ T40] audit: type=1400 audit(1752382949.361:23442): avc: denied { create } for pid=13144 comm="syz.6.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 286.972211][T13146] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 286.978482][ T40] audit: type=1400 audit(1752382949.361:23443): avc: denied { setopt } for pid=13144 comm="syz.6.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 286.983860][T13146] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 286.989967][ T40] audit: type=1400 audit(1752382949.361:23444): avc: denied { bind } for pid=13144 comm="syz.6.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.995502][T13146] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 287.013326][ T40] audit: type=1400 audit(1752382949.361:23446): avc: denied { open } for pid=13144 comm="syz.6.1905" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 287.020132][T13146] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 287.026625][ T40] audit: type=1400 audit(1752382949.361:23447): avc: denied { ioctl } for pid=13144 comm="syz.6.1905" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 287.029454][T13146] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 287.029468][T13146] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 287.029504][T13146] [U] ‰ϼcEv‹û @ý [ 287.043345][T13146] [U] aÆ„% [ 287.045733][T13146] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 287.051409][T13148] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 287.052133][T13146] [U] éf1Ïp±3 [ 287.056189][T13146] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 287.058055][T13146] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 287.075840][T13146] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡n [ 287.131360][T13154] ALSA: seq fatal error: cannot create timer (-19) [ 287.161004][T13161] xt_CT: No such helper "pptp" [ 287.411102][T13200] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 287.556904][T13210] overlayfs: conflicting lowerdir path [ 287.592605][T13216] binder: 13215:13216 ioctl 542e 200000000000 returned -22 [ 287.636552][T13222] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20002 [ 287.637192][ T838] usb 11-1: new full-speed USB device number 9 using dummy_hcd [ 287.645199][T13223] gtp0: entered promiscuous mode [ 287.671476][T13225] netlink: 'syz.0.1929': attribute type 12 has an invalid length. [ 287.767376][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'. [ 287.820817][ T838] usb 11-1: not running at top speed; connect to a high speed hub [ 287.828032][ T838] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 287.832423][ T838] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 287.839511][ T838] usb 11-1: New USB device found, idVendor=04da, idProduct=1044, bcdDevice= 0.40 [ 287.843498][ T838] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.849271][ T838] usb 11-1: Product: Შ஢䔅⠺í‰â°´êºç‹€ë¢’僘僭᪱⦅㢒ꉞ剷í¼â¦¨å²ç¯¨ê±‰â²¤æ‰”䇫騳ݬ婽왻莆 æ”㦢ꔄ喼åœâ •颫䫊ﵗh矃녩凑ï»× ã™£í嵬꿸루굈휟îœê©æ¤ã®›é‘»îƒ¨æ…Šï•Žï“»èŸäœ²ã‘ᢡ᢮î»ê›ç±´éž¡å„°é‹¢å°–頉ꢳា鞪鸜᧣ [ 287.859616][ T838] usb 11-1: Manufacturer: à Š [ 287.861176][ T838] usb 11-1: SerialNumber: 콖릀㠯ç¯éœ‚⻾짃켧셨痜樘螢勤뷇鲘땤嶟엊塉퀵谢中쒗ç¾ê«Œé腡魟螒Ḙॢì˜ï¬†âµ¿äžâŸ—뉲噆íã¨êšè¢ì–“䓮귗ꖤ [ 287.868809][T13193] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 287.892236][T13243] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1934'. [ 288.073575][T13260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.076963][T13260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.083028][T13193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.085843][T13193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.119696][ T838] usbhid 11-1:1.0: can't add hid device: -71 [ 288.122355][ T838] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 288.132612][ T838] usb 11-1: USB disconnect, device number 9 [ 288.230994][T13275] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 288.234585][T13275] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 288.349321][T13286] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1945'. [ 288.359806][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1945'. [ 288.365677][T13286] macsec0: entered promiscuous mode [ 288.781704][T13306] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1951'. [ 289.007485][ T6031] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 289.177818][ T6031] usb 5-1: Using ep0 maxpacket: 32 [ 289.181521][ T6031] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 289.184993][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.196086][ T6031] usb 5-1: config 0 descriptor?? [ 289.209195][ T6031] as10x_usb: device has been detected [ 289.211425][ T6031] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 289.244055][ T6031] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 289.264060][ T6031] as10x_usb: error during firmware upload part1 [ 289.266262][ T6031] Registered device nBox DVB-T Dongle [ 289.407312][ T7111] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 289.408661][ T6031] usb 5-1: USB disconnect, device number 33 [ 289.428312][ T6031] Unregistered device nBox DVB-T Dongle [ 289.430328][ T6031] as10x_usb: device has been disconnected [ 289.558889][ T7111] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 289.562538][ T7111] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.573063][ T7111] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 289.576746][ T7111] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.582382][ T7111] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.589358][ T7111] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 289.593018][ T7111] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 289.594702][T13364] syz.6.1969: attempt to access beyond end of device [ 289.594702][T13364] loop6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 289.596221][ T7111] usb 13-1: Product: syz [ 289.596238][ T7111] usb 13-1: Manufacturer: syz [ 289.600680][T13364] gfs2: error -5 reading superblock [ 289.606794][ T7111] cdc_wdm 13-1:1.0: skipping garbage [ 289.609665][ T7111] cdc_wdm 13-1:1.0: skipping garbage [ 289.612465][ T7111] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 289.614301][ T7111] cdc_wdm 13-1:1.0: Unknown control protocol [ 289.807907][T13329] cdc_wdm 13-1:1.0: Error submitting int urb - -90 [ 289.811454][ T6018] usb 13-1: USB disconnect, device number 3 [ 290.221178][T13386] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1973'. [ 290.461997][T13399] kvm: pic: non byte write [ 290.474525][T13409] syz.2.1982: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 290.479318][T13409] CPU: 3 UID: 0 PID: 13409 Comm: syz.2.1982 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 290.479345][T13409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.479352][T13409] Call Trace: [ 290.479372][T13409] [ 290.479378][T13409] dump_stack_lvl+0x16c/0x1f0 [ 290.479409][T13409] warn_alloc+0x248/0x3a0 [ 290.479427][T13409] ? __pfx_warn_alloc+0x10/0x10 [ 290.479440][T13409] ? __pfx_stack_trace_save+0x10/0x10 [ 290.479457][T13409] ? stack_depot_save_flags+0x28/0xa40 [ 290.479480][T13409] ? kasan_save_stack+0x42/0x60 [ 290.479493][T13409] ? kasan_save_stack+0x33/0x60 [ 290.479506][T13409] ? kasan_save_track+0x14/0x30 [ 290.479519][T13409] ? xskq_create+0x52/0x1d0 [ 290.479531][T13409] ? xsk_setsockopt+0x640/0x840 [ 290.479543][T13409] ? do_sock_setsockopt+0x221/0x470 [ 290.479562][T13409] ? xskq_create+0xfb/0x1d0 [ 290.479576][T13409] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 290.479593][T13409] ? xskq_create+0xfb/0x1d0 [ 290.479609][T13409] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 290.479626][T13409] ? xskq_create+0xfb/0x1d0 [ 290.479639][T13409] vmalloc_user_noprof+0x9e/0xe0 [ 290.479650][T13409] ? xskq_create+0xfb/0x1d0 [ 290.479663][T13409] xskq_create+0xfb/0x1d0 [ 290.479678][T13409] xsk_setsockopt+0x640/0x840 [ 290.479691][T13409] ? __pfx_xsk_setsockopt+0x10/0x10 [ 290.479702][T13409] ? __lock_acquire+0x622/0x1c90 [ 290.479716][T13409] ? selinux_socket_setsockopt+0x6a/0x80 [ 290.479731][T13409] ? __pfx_xsk_setsockopt+0x10/0x10 [ 290.479743][T13409] do_sock_setsockopt+0x221/0x470 [ 290.479760][T13409] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 290.479785][T13409] __sys_setsockopt+0x1a0/0x230 [ 290.479802][T13409] __x64_sys_setsockopt+0xbd/0x160 [ 290.479815][T13409] ? do_syscall_64+0x91/0x4c0 [ 290.479835][T13409] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.479850][T13409] do_syscall_64+0xcd/0x4c0 [ 290.479868][T13409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.479879][T13409] RIP: 0033:0x7f44aab8e929 [ 290.479889][T13409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.479899][T13409] RSP: 002b:00007f44ab9f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 290.479913][T13409] RAX: ffffffffffffffda RBX: 00007f44aadb5fa0 RCX: 00007f44aab8e929 [ 290.479920][T13409] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 290.479926][T13409] RBP: 00007f44aac10b39 R08: 0000000000000004 R09: 0000000000000000 [ 290.479933][T13409] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.479939][T13409] R13: 0000000000000000 R14: 00007f44aadb5fa0 R15: 00007ffe1c23bad8 [ 290.479954][T13409] [ 290.479972][T13409] Mem-Info: [ 290.566326][T13409] active_anon:8593 inactive_anon:98 isolated_anon:0 [ 290.566326][T13409] active_file:3066 inactive_file:53762 isolated_file:0 [ 290.566326][T13409] unevictable:1768 dirty:51 writeback:0 [ 290.566326][T13409] slab_reclaimable:10144 slab_unreclaimable:81093 [ 290.566326][T13409] mapped:24697 shmem:2431 pagetables:1391 [ 290.566326][T13409] sec_pagetables:307 bounce:0 [ 290.566326][T13409] kernel_misc_reclaimable:0 [ 290.566326][T13409] free:437391 free_pcp:14616 free_cma:0 [ 290.580220][T13409] Node 0 active_anon:34432kB inactive_anon:392kB active_file:8688kB inactive_file:214588kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98480kB dirty:204kB writeback:0kB shmem:6264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13648kB pagetables:5224kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB [ 290.592844][T13409] Node 1 active_anon:0kB inactive_anon:0kB active_file:3576kB inactive_file:460kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:308kB dirty:0kB writeback:0kB shmem:3460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 290.602597][T13409] Node 0 DMA free:6476kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:372kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:100kB free_cma:0kB [ 290.611978][T13409] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 290.614431][T13409] Node 0 DMA32 free:134048kB boost:51200kB min:78716kB low:85592kB high:92468kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34332kB inactive_anon:392kB active_file:8316kB inactive_file:214604kB unevictable:3536kB writepending:204kB present:2080628kB managed:1264184kB mlocked:0kB bounce:0kB free_pcp:46600kB local_pcp:4084kB free_cma:0kB [ 290.624479][T13409] lowmem_reserve[]: 0 0 0 0 0 [ 290.625988][T13409] Node 1 Normal free:1608984kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:3576kB inactive_file:460kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:11740kB local_pcp:8112kB free_cma:0kB [ 290.636019][T13409] lowmem_reserve[]: 0 0 0 0 0 [ 290.637720][T13409] Node 0 DMA: 2*4kB (UM) 8*8kB (UM) 8*16kB (UM) 10*32kB (UM) 9*64kB (UM) 2*128kB (UM) 4*256kB (UM) 0*512kB 2*1024kB (U) 1*2048kB (M) 0*4096kB = 6472kB [ 290.642595][T13409] Node 0 DMA32: 273*4kB (UM) 1104*8kB (UME) 157*16kB (UE) 795*32kB (UME) 225*64kB (UME) 108*128kB (UME) 70*256kB (UME) 23*512kB (UME) 14*1024kB (UME) 8*2048kB (UM) 2*4096kB (M) = 134708kB [ 290.648566][T13409] Node 1 Normal: 5*4kB (UME) 62*8kB (UME) 117*16kB (UME) 254*32kB (UME) 172*64kB (UME) 100*128kB (UME) 55*256kB (UM) 46*512kB (UME) 25*1024kB (UME) 14*2048kB (UM) 362*4096kB (UM) = 1608980kB [ 290.654621][T13409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.654628][T13412] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 290.657884][T13409] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 290.657896][T13409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.657905][T13409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 290.657915][T13409] 59303 total pagecache pages [ 290.657919][T13409] 0 pages in swap cache [ 290.657924][T13409] Free swap = 124996kB [ 290.657929][T13409] Total swap = 124996kB [ 290.657934][T13409] 1048443 pages RAM [ 290.657939][T13409] 0 pages HighMem/MovableOnly [ 290.657943][T13409] 283068 pages reserved [ 290.657947][T13409] 0 pages cma reserved [ 290.689133][T13412] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 290.708827][T13414] vlan0: entered promiscuous mode [ 290.710750][T13414] bridge0: entered promiscuous mode [ 291.415177][T13466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2000'. [ 291.551257][T13469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.607240][ T6032] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 291.671283][T13484] xt_l2tp: missing protocol rule (udp|l2tpip) [ 291.741446][T13484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2006'. [ 291.741759][T13496] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 291.762888][ T6032] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 291.766141][ T6032] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.771177][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.774765][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 291.778653][ T6032] usb 13-1: config 0 interface 0 has no altsetting 0 [ 291.781693][ T6032] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.784529][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.789932][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 291.793951][ T6032] usb 13-1: config 0 interface 0 has no altsetting 0 [ 291.798056][ T6032] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.801656][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.806026][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 291.810763][ T6032] usb 13-1: config 0 interface 0 has no altsetting 0 [ 291.814798][ T6032] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.818423][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.823370][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 291.827789][ T6032] usb 13-1: config 0 interface 0 has no altsetting 0 [ 291.833078][ T6032] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.836752][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.841541][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 291.845456][ T6032] usb 13-1: config 0 interface 0 has no altsetting 0 [ 291.849867][ T6032] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.852611][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.855966][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 291.859564][ T6032] usb 13-1: config 0 interface 0 has no altsetting 0 [ 291.862480][ T6032] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.865284][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.869116][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 291.872594][ T6032] usb 13-1: config 0 interface 0 has no altsetting 0 [ 291.876012][ T6032] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.879060][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.882519][ T6032] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 291.885576][ T6032] usb 13-1: config 0 interface 0 has no altsetting 0 [ 291.889667][ T6032] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 291.892647][ T6032] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 291.895291][ T6032] usb 13-1: Product: syz [ 291.896887][ T6032] usb 13-1: Manufacturer: syz [ 291.899007][ T6032] usb 13-1: SerialNumber: syz [ 291.905253][ T6032] usb 13-1: config 0 descriptor?? [ 291.912090][ T6032] yurex 13-1:0.0: Could not submitting URB [ 291.914012][ T6032] yurex 13-1:0.0: probe with driver yurex failed with error -5 [ 291.917216][ T40] kauditd_printk_skb: 389 callbacks suppressed [ 291.917230][ T40] audit: type=1400 audit(1752382954.374:23837): avc: denied { read } for pid=13500 comm="syz.2.2009" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 291.929346][ T40] audit: type=1400 audit(1752382954.384:23838): avc: denied { open } for pid=13500 comm="syz.2.2009" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 291.939947][ T40] audit: type=1400 audit(1752382954.384:23839): avc: denied { ioctl } for pid=13500 comm="syz.2.2009" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 291.946938][T13501] loop7: detected capacity change from 0 to 524255232 [ 291.947847][ T40] audit: type=1400 audit(1752382954.394:23840): avc: denied { read write } for pid=13500 comm="syz.2.2009" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 291.947872][ T40] audit: type=1400 audit(1752382954.394:23841): avc: denied { open } for pid=13500 comm="syz.2.2009" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 291.947894][ T40] audit: type=1400 audit(1752382954.394:23842): avc: denied { ioctl } for pid=13500 comm="syz.2.2009" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 291.947916][ T40] audit: type=1400 audit(1752382954.404:23843): avc: denied { mount } for pid=13500 comm="syz.2.2009" name="/" dev="rpc_pipefs" ino=56811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 291.947938][ T40] audit: type=1400 audit(1752382954.404:23844): avc: denied { mount } for pid=13500 comm="syz.2.2009" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 291.947958][ T40] audit: type=1400 audit(1752382954.404:23845): avc: denied { execute } for pid=13500 comm="syz.2.2009" path="/542/file0/bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 291.947979][ T40] audit: type=1400 audit(1752382954.404:23846): avc: denied { execmem } for pid=13500 comm="syz.2.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 292.211144][ T6018] usb 13-1: USB disconnect, device number 4 [ 292.239646][T13506] xt_hashlimit: size too large, truncated to 1048576 [ 292.650321][T13533] input: syz1 as /devices/virtual/input/input32 [ 292.744087][T13543] SELinux: unknown common r [ 292.745980][T13543] SELinux: failed to load policy [ 292.946620][T13547] lo speed is unknown, defaulting to 1000 [ 292.998541][T13557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13557 comm=syz.6.2024 [ 293.002413][T13557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=13557 comm=syz.6.2024 [ 293.006249][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2024'. [ 293.547034][T13537] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 293.549810][T13537] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 293.555520][T13537] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 293.558883][T13537] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 293.560874][T13537] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 293.564697][T13537] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 293.617972][T13567] fuse: Bad value for 'user_id' [ 293.620093][T13567] fuse: Bad value for 'user_id' [ 293.672390][T13572] xt_cluster: node mask cannot exceed total number of nodes [ 293.885560][T13577] netlink: 'syz.0.2032': attribute type 1 has an invalid length. [ 293.906115][T13577] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 293.940494][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.944012][T13577] veth13: entered promiscuous mode [ 293.945280][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.947169][T13577] bond8: (slave veth13): Enslaving as a backup interface with a down link [ 293.949199][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.957468][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.960036][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.039922][T13589] netlink: 'syz.0.2036': attribute type 10 has an invalid length. [ 294.053476][T13589] team0: Device hsr_slave_0 failed to register rx_handler [ 294.066869][T13582] lo speed is unknown, defaulting to 1000 [ 294.087851][ T24] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 294.097652][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 294.101204][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2037'. [ 294.106661][T13592] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 294.242830][T13582] chnl_net:caif_netlink_parms(): no params data found [ 294.247719][ T24] usb 11-1: Using ep0 maxpacket: 32 [ 294.264667][ T24] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 294.270530][ T24] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 294.273319][ T24] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 294.275776][ T24] usb 11-1: Product: syz [ 294.277054][ T24] usb 11-1: Manufacturer: syz [ 294.279442][ T24] usb 11-1: SerialNumber: syz [ 294.282488][ T24] usb 11-1: config 0 descriptor?? [ 294.284494][T13579] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 294.287944][ T24] hub 11-1:0.0: bad descriptor, ignoring hub [ 294.289774][ T24] hub 11-1:0.0: probe with driver hub failed with error -5 [ 294.314129][T13600] afs: Unknown parameter '' [ 294.317701][T13600] overlayfs: failed to resolve '/¸ô': -2 [ 294.365390][T13582] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.368366][T13582] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.371116][T13582] bridge_slave_0: entered allmulticast mode [ 294.374011][T13582] bridge_slave_0: entered promiscuous mode [ 294.378774][T13582] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.381073][T13582] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.387372][T13582] bridge_slave_1: entered allmulticast mode [ 294.390114][T13582] bridge_slave_1: entered promiscuous mode [ 294.440005][T13582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.444605][T13582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.515213][T13582] team0: Port device team_slave_0 added [ 294.520127][T13582] team0: Port device team_slave_1 added [ 294.566404][T13582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.568765][T13582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.578326][T13582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.583727][T13582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.586554][T13582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.595132][T13582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.646963][T13582] hsr_slave_0: entered promiscuous mode [ 294.649700][T13582] hsr_slave_1: entered promiscuous mode [ 294.652441][T13582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.655408][T13582] Cannot create hsr debugfs directory [ 294.682851][T13635] Cannot find add_set index 0 as target [ 294.686448][T13637] Cannot find add_set index 0 as target [ 294.787997][T13642] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2050'. [ 294.795299][T13582] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.799337][T13582] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.847209][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 294.849762][T13644] Invalid logical block size (2) [ 294.851593][T13644] 9pnet_fd: Insufficient options for proto=fd [ 294.854717][T13646] Invalid logical block size (2) [ 294.855202][T13644] 9pnet_fd: Insufficient options for proto=fd [ 294.869717][T13582] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.872750][T13582] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.915368][ T6032] usb 11-1: USB disconnect, device number 11 [ 294.954952][T13582] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.958961][T13582] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.027241][T13582] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.030612][T13582] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.048519][ T6032] usb 11-1: new full-speed USB device number 12 using dummy_hcd [ 295.065621][T13658] lo speed is unknown, defaulting to 1000 [ 295.193793][ T5956] Bluetooth: hci5: unexpected event for opcode 0x1407 [ 295.219282][ T6032] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 295.226167][ T6032] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 295.229961][ T6032] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 295.232549][ T6032] usb 11-1: Product: syz [ 295.233858][ T6032] usb 11-1: Manufacturer: syz [ 295.235358][ T6032] usb 11-1: SerialNumber: syz [ 295.249460][ T6032] usb 11-1: config 0 descriptor?? [ 295.253544][T13621] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 295.260392][ T6032] hub 11-1:0.0: bad descriptor, ignoring hub [ 295.262835][ T6032] hub 11-1:0.0: probe with driver hub failed with error -5 [ 295.324755][T13582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 295.330320][T13582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 295.334494][T13582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 295.340723][T13582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.438580][T13582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.451669][T13582] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.456473][ T7729] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.458739][ T7729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.466828][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.469066][ T7731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.599659][T13708] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 295.662868][T13715] overlay: Unknown parameter 'fsuuid' [ 295.668116][ T6031] usb 11-1: USB disconnect, device number 12 [ 295.672924][T13715] overlay: Unknown parameter 'smackfsroot' [ 295.680757][T13715] overlayfs: failed to resolve './file1': -2 [ 295.683332][T13582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.693572][T13715] program syz.8.2066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.714293][T13582] veth0_vlan: entered promiscuous mode [ 295.721216][T13582] veth1_vlan: entered promiscuous mode [ 295.736163][T13582] veth0_macvtap: entered promiscuous mode [ 295.740399][T13582] veth1_macvtap: entered promiscuous mode [ 295.748686][T13582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.755835][T13582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.767733][T13582] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.770419][T13582] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.773064][T13582] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.775690][T13582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.865336][T13729] ptm ptm35: ldisc open failed (-12), clearing slot 35 [ 295.865697][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.871185][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.889617][ T7729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.892130][ T7729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.046859][T13756] netlink: 'syz.2.2074': attribute type 1 has an invalid length. [ 296.051251][ T5956] Bluetooth: hci1: command tx timeout [ 296.062154][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2073'. [ 296.104699][T13763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13763 comm=syz.2.2074 [ 296.109358][T13763] netlink: 'syz.2.2074': attribute type 1 has an invalid length. [ 296.433759][T13779] 9pnet_fd: p9_fd_create_unix (13779): problem connecting socket: ./file0: -111 [ 296.507267][T13781] bpf: Bad value for 'uid' [ 296.510588][T13781] tmpfs: Unknown parameter ' VþÙ5`X~z&mäUØ•ÅV÷’Ù\׿µ±%¦îËEÏ;Dúa3¢Ôí_DÑs(@{÷¼' [ 296.695852][T13792] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2085'. [ 296.917441][T13804] binder: 13803:13804 ioctl 40046205 0 returned -22 [ 296.919871][T13804] binder: 13803:13804 ioctl c058565d 200000000240 returned -22 [ 296.927541][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 296.944577][ T40] kauditd_printk_skb: 365 callbacks suppressed [ 296.944593][ T40] audit: type=1400 audit(1752382959.404:24212): avc: denied { create } for pid=13805 comm="syz.8.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 296.954143][ T40] audit: type=1400 audit(1752382959.404:24213): avc: denied { write } for pid=13805 comm="syz.8.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 296.993762][ T40] audit: type=1400 audit(1752382959.454:24214): avc: denied { mount } for pid=13809 comm="syz.2.2093" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 296.997809][T13810] ip6gretap1: entered promiscuous mode [ 297.003042][T13810] ip6gretap1: entered allmulticast mode [ 297.010030][ T40] audit: type=1400 audit(1752382959.474:24215): avc: denied { shutdown } for pid=13811 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.015936][ T40] audit: type=1400 audit(1752382959.474:24216): avc: denied { getopt } for pid=13811 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.023033][ T40] audit: type=1400 audit(1752382959.474:24217): avc: denied { connect } for pid=13811 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.030683][ T40] audit: type=1400 audit(1752382959.474:24218): avc: denied { name_connect } for pid=13811 comm="syz.0.2095" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 297.039820][ T40] audit: type=1400 audit(1752382959.484:24219): avc: denied { read } for pid=13807 comm="syz.6.2094" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 297.047666][ T40] audit: type=1400 audit(1752382959.484:24220): avc: denied { unmount } for pid=13582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 297.053114][T13815] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2097'. [ 297.053731][ T40] audit: type=1400 audit(1752382959.484:24221): avc: denied { open } for pid=13807 comm="syz.6.2094" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 297.360030][T13850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2107'. [ 297.363160][T13850] netlink: 'syz.2.2107': attribute type 7 has an invalid length. [ 297.366251][T13850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2107'. [ 297.384132][T13850] ip6erspan0: entered promiscuous mode [ 297.532240][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 297.625194][T13884] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 297.885472][T13907] netlink: 'syz.0.2123': attribute type 1 has an invalid length. [ 298.093654][T13919] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 298.101869][T13919] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2127'. [ 298.128305][ T5956] Bluetooth: hci1: command tx timeout [ 298.132768][T13919] XFS (nullb0): Invalid superblock magic number [ 298.202432][T13941] netlink: 'syz.6.2131': attribute type 10 has an invalid length. [ 298.230952][T13941] veth0_vlan: left promiscuous mode [ 298.235485][T13941] veth0_vlan: entered promiscuous mode [ 298.240688][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.257051][T13941] netlink: 'syz.6.2131': attribute type 10 has an invalid length. [ 298.260471][T13941] veth0_vlan: left promiscuous mode [ 298.262640][T13941] veth0_vlan: entered promiscuous mode [ 298.266183][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.273789][T13941] netlink: 'syz.6.2131': attribute type 10 has an invalid length. [ 298.276719][T13941] veth0_vlan: left promiscuous mode [ 298.279012][T13941] veth0_vlan: entered promiscuous mode [ 298.281648][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.286561][T13941] netlink: 'syz.6.2131': attribute type 10 has an invalid length. [ 298.293566][T13941] veth0_vlan: left promiscuous mode [ 298.295621][T13941] veth0_vlan: entered promiscuous mode [ 298.298247][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.303144][T13941] veth0_vlan: left promiscuous mode [ 298.305129][T13941] veth0_vlan: entered promiscuous mode [ 298.308201][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.315547][T13941] veth0_vlan: left promiscuous mode [ 298.317801][T13941] veth0_vlan: entered promiscuous mode [ 298.322159][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.329090][T13941] veth0_vlan: left promiscuous mode [ 298.331188][T13941] veth0_vlan: entered promiscuous mode [ 298.333829][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.339526][T13941] veth0_vlan: left promiscuous mode [ 298.341556][T13941] veth0_vlan: entered promiscuous mode [ 298.344442][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.356104][T13941] veth0_vlan: left promiscuous mode [ 298.358335][T13941] veth0_vlan: entered promiscuous mode [ 298.360913][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.370082][T13941] veth0_vlan: left promiscuous mode [ 298.372094][T13941] veth0_vlan: entered promiscuous mode [ 298.374619][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.393356][T13943] sp0: Synchronizing with TNC [ 298.397319][T13941] veth0_vlan: left promiscuous mode [ 298.399382][T13941] veth0_vlan: entered promiscuous mode [ 298.401909][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.406979][T13941] veth0_vlan: left promiscuous mode [ 298.409578][T13941] veth0_vlan: entered promiscuous mode [ 298.412085][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.425630][T13941] veth0_vlan: left promiscuous mode [ 298.428272][T13941] veth0_vlan: entered promiscuous mode [ 298.430917][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.436496][T13941] veth0_vlan: left promiscuous mode [ 298.438621][T13941] veth0_vlan: entered promiscuous mode [ 298.441416][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.466587][T13941] veth0_vlan: left promiscuous mode [ 298.469500][T13941] veth0_vlan: entered promiscuous mode [ 298.472184][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.485458][T13941] veth0_vlan: left promiscuous mode [ 298.488810][T13941] veth0_vlan: entered promiscuous mode [ 298.492046][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.499222][T13941] veth0_vlan: left promiscuous mode [ 298.501494][T13941] veth0_vlan: entered promiscuous mode [ 298.504544][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.513040][T13941] veth0_vlan: left promiscuous mode [ 298.516093][T13941] veth0_vlan: entered promiscuous mode [ 298.519923][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.525920][T13941] veth0_vlan: left promiscuous mode [ 298.528343][T13941] veth0_vlan: entered promiscuous mode [ 298.531065][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.536212][T13941] veth0_vlan: left promiscuous mode [ 298.540880][T13941] veth0_vlan: entered promiscuous mode [ 298.543556][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.551112][T13941] veth0_vlan: left promiscuous mode [ 298.553358][T13941] veth0_vlan: entered promiscuous mode [ 298.556440][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.564935][T13941] veth0_vlan: left promiscuous mode [ 298.569344][T13941] veth0_vlan: entered promiscuous mode [ 298.572257][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.580812][T13941] veth0_vlan: left promiscuous mode [ 298.583317][T13941] veth0_vlan: entered promiscuous mode [ 298.585956][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.593448][T13941] veth0_vlan: left promiscuous mode [ 298.595720][T13941] veth0_vlan: entered promiscuous mode [ 298.600474][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.608537][T13941] veth0_vlan: left promiscuous mode [ 298.610893][T13941] veth0_vlan: entered promiscuous mode [ 298.614397][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.625001][T13941] veth0_vlan: left promiscuous mode [ 298.627484][T13941] veth0_vlan: entered promiscuous mode [ 298.631705][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.638524][T13941] veth0_vlan: left promiscuous mode [ 298.640824][T13941] veth0_vlan: entered promiscuous mode [ 298.644172][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.650993][T13941] veth0_vlan: left promiscuous mode [ 298.653197][T13941] veth0_vlan: entered promiscuous mode [ 298.658513][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.665497][T13941] veth0_vlan: left promiscuous mode [ 298.668595][T13941] veth0_vlan: entered promiscuous mode [ 298.671548][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.677705][T13941] veth0_vlan: left promiscuous mode [ 298.680025][T13941] veth0_vlan: entered promiscuous mode [ 298.682732][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.690448][T13941] veth0_vlan: left promiscuous mode [ 298.692981][T13941] veth0_vlan: entered promiscuous mode [ 298.695862][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.704741][T13941] veth0_vlan: left promiscuous mode [ 298.707794][T13941] veth0_vlan: entered promiscuous mode [ 298.710806][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.716201][T13941] veth0_vlan: left promiscuous mode [ 298.716241][T13954] sctp: [Deprecated]: syz.0.2136 (pid 13954) Use of int in max_burst socket option. [ 298.716241][T13954] Use struct sctp_assoc_value instead [ 298.718528][T13941] veth0_vlan: entered promiscuous mode [ 298.726756][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.733380][T13941] veth0_vlan: left promiscuous mode [ 298.735511][T13941] veth0_vlan: entered promiscuous mode [ 298.738168][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.748002][T13941] veth0_vlan: left promiscuous mode [ 298.750041][T13941] veth0_vlan: entered promiscuous mode [ 298.752630][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.760362][T13941] veth0_vlan: left promiscuous mode [ 298.762381][T13941] veth0_vlan: entered promiscuous mode [ 298.764965][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.770804][T13941] veth0_vlan: left promiscuous mode [ 298.772835][T13941] veth0_vlan: entered promiscuous mode [ 298.775445][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.781671][T13941] veth0_vlan: left promiscuous mode [ 298.783701][T13941] veth0_vlan: entered promiscuous mode [ 298.786208][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.792405][T13941] veth0_vlan: left promiscuous mode [ 298.794434][T13941] veth0_vlan: entered promiscuous mode [ 298.796971][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.802549][T13941] veth0_vlan: left promiscuous mode [ 298.804635][T13941] veth0_vlan: entered promiscuous mode [ 298.807241][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.812469][T13941] veth0_vlan: left promiscuous mode [ 298.814465][T13941] veth0_vlan: entered promiscuous mode [ 298.816942][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.823226][T13941] veth0_vlan: left promiscuous mode [ 298.825353][T13941] veth0_vlan: entered promiscuous mode [ 298.827988][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.832981][T13941] veth0_vlan: left promiscuous mode [ 298.834995][T13941] veth0_vlan: entered promiscuous mode [ 298.835412][T13969] binder_alloc: 13968: pid 13968 spamming oneway? 1 buffers allocated for a total size of 4096 [ 298.838373][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.845918][T13941] veth0_vlan: left promiscuous mode [ 298.848851][T13941] veth0_vlan: entered promiscuous mode [ 298.851392][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.856492][T13941] veth0_vlan: left promiscuous mode [ 298.859034][T13941] veth0_vlan: entered promiscuous mode [ 298.861656][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.867843][T13941] veth0_vlan: left promiscuous mode [ 298.869838][T13941] veth0_vlan: entered promiscuous mode [ 298.872397][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.877653][T13941] veth0_vlan: left promiscuous mode [ 298.879760][T13941] veth0_vlan: entered promiscuous mode [ 298.882297][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.887501][T13941] validate_nla: 43 callbacks suppressed [ 298.887509][T13941] netlink: 'syz.6.2131': attribute type 10 has an invalid length. [ 298.891983][T13941] veth0_vlan: left promiscuous mode [ 298.893988][T13941] veth0_vlan: entered promiscuous mode [ 298.896597][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.901598][T13941] netlink: 'syz.6.2131': attribute type 10 has an invalid length. [ 298.904153][T13941] veth0_vlan: left promiscuous mode [ 298.906201][T13941] veth0_vlan: entered promiscuous mode [ 298.909357][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.914388][T13941] netlink: 'syz.6.2131': attribute type 10 has an invalid length. [ 298.916843][T13941] veth0_vlan: left promiscuous mode [ 298.919050][T13941] veth0_vlan: entered promiscuous mode [ 298.921885][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.929133][T13941] netlink: 'syz.6.2131': attribute type 10 has an invalid length. [ 298.931619][T13941] veth0_vlan: left promiscuous mode [ 298.933596][T13941] veth0_vlan: entered promiscuous mode [ 298.936079][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.941820][T13941] netlink: 'syz.6.2131': attribute type 10 has an invalid length. [ 298.944325][T13941] veth0_vlan: left promiscuous mode [ 298.944579][T13981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.946323][T13941] veth0_vlan: entered promiscuous mode [ 298.951531][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.956292][T13941] netlink: 'syz.6.2131': attribute type 10 has an invalid length. [ 298.959815][T13941] veth0_vlan: left promiscuous mode [ 298.961790][T13941] veth0_vlan: entered promiscuous mode [ 298.964489][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.969616][T13941] netlink: 'syz.6.2131': attribute type 10 has an invalid length. [ 298.972713][T13941] veth0_vlan: left promiscuous mode [ 298.974670][T13941] veth0_vlan: entered promiscuous mode [ 298.980861][T13941] team0: Device veth0_vlan failed to register rx_handler [ 298.986432][T13941] netlink: 'syz.6.2131': attribute type 10 has an invalid length. [ 298.994019][T13941] veth0_vlan: left promiscuous mode [ 298.996079][T13941] veth0_vlan: entered promiscuous mode [ 298.999307][T13941] team0: Device veth0_vlan failed to register rx_handler [ 299.007231][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 299.008015][T13941] netlink: 'syz.6.2131': attribute type 10 has an invalid length. [ 299.010348][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2145'. [ 299.011976][T13941] veth0_vlan: left promiscuous mode [ 299.016686][T13941] veth0_vlan: entered promiscuous mode [ 299.019635][T13941] team0: Device veth0_vlan failed to register rx_handler [ 299.024619][T13941] netlink: 'syz.6.2131': attribute type 10 has an invalid length. [ 299.027399][T13941] veth0_vlan: left promiscuous mode [ 299.035689][T13941] veth0_vlan: entered promiscuous mode [ 299.040337][T13941] team0: Device veth0_vlan failed to register rx_handler [ 299.081595][T13991] tls_set_device_offload_rx: netdev not found [ 299.163789][T14000] input: syz1 as /devices/virtual/input/input33 [ 299.290783][T14004] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 299.295733][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2151'. [ 299.299916][T14004] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2151'. [ 299.511674][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2154'. [ 299.764247][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.770208][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.773396][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.776536][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.780997][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.889430][T14013] lo speed is unknown, defaulting to 1000 [ 300.072481][T14021] atomic_op ffff8880541a0198 conn xmit_atomic 0000000000000000 [ 300.084319][T14013] chnl_net:caif_netlink_parms(): no params data found [ 300.150441][T14035] SELinux: Context system_u:object_r:bsdpty_device_t:s0 is not valid (left unmapped). [ 300.207629][ T5952] Bluetooth: hci1: command tx timeout [ 300.214119][T14013] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.216333][T14013] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.219225][T14013] bridge_slave_0: entered allmulticast mode [ 300.221950][T14013] bridge_slave_0: entered promiscuous mode [ 300.225479][T14013] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.228066][T14013] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.230250][T14013] bridge_slave_1: entered allmulticast mode [ 300.232754][T14013] bridge_slave_1: entered promiscuous mode [ 300.275608][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2161'. [ 300.292146][T14013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.295710][T14048] Invalid source name [ 300.296896][T14048] UBIFS error (pid: 14048): cannot open "/dev/sg0", error -22 [ 300.299098][T14045] geneve2: entered promiscuous mode [ 300.302996][T14045] geneve2: entered allmulticast mode [ 300.308036][T14048] kAFS: No cell specified [ 300.351623][T14013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.401280][T14013] team0: Port device team_slave_0 added [ 300.404902][T14013] team0: Port device team_slave_1 added [ 300.421543][T14054] cgroup: Unknown subsys name 'cpuset' [ 300.441457][T14013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.441535][T14054] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2164'. [ 300.443567][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.455819][T14013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.460752][T14013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.462864][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.470622][T14013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.533425][T14013] hsr_slave_0: entered promiscuous mode [ 300.535962][T14013] hsr_slave_1: entered promiscuous mode [ 300.542105][T14013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.544412][T14013] Cannot create hsr debugfs directory [ 300.600458][T14056] bond0: entered promiscuous mode [ 300.602097][T14056] bond_slave_0: entered promiscuous mode [ 300.604053][T14056] bond_slave_1: entered promiscuous mode [ 300.607761][T14056] bond0: left promiscuous mode [ 300.609335][T14056] bond_slave_0: left promiscuous mode [ 300.611207][T14056] bond_slave_1: left promiscuous mode [ 300.658478][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2165'. [ 300.949896][T14013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.953296][T14013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.069340][T14013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.073086][T14013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.228419][T14013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.231609][T14013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.385159][T14013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.388492][T14013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.628326][T14013] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.632437][T14013] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.636129][T14013] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.641333][T14013] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.710147][T14013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.719759][T14013] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.725321][ T7728] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.727940][ T7728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.735913][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.738971][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.819969][ T5952] Bluetooth: hci3: command tx timeout [ 301.871689][T14013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.895765][T14013] veth0_vlan: entered promiscuous mode [ 301.900546][T14013] veth1_vlan: entered promiscuous mode [ 301.914408][T14013] veth0_macvtap: entered promiscuous mode [ 301.918254][T14013] veth1_macvtap: entered promiscuous mode [ 301.926379][T14013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.933437][T14013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.941698][T14013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.944599][T14013] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.956729][T14013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.958798][ T40] kauditd_printk_skb: 251 callbacks suppressed [ 301.958806][ T40] audit: type=1400 audit(1752382964.424:24473): avc: denied { unmount } for pid=13582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 301.959780][T14013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.003827][ T7728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.007045][ T7728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.029549][ T7728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.034061][ T7728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.040732][ T40] audit: type=1400 audit(1752382964.504:24474): avc: denied { mounton } for pid=14013 comm="syz-executor" path="/syzkaller.x5alVI/syz-tmp" dev="sda1" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 302.050609][ T40] audit: type=1400 audit(1752382964.504:24475): avc: denied { mount } for pid=14013 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 302.060167][ T40] audit: type=1400 audit(1752382964.504:24476): avc: denied { mounton } for pid=14013 comm="syz-executor" path="/syzkaller.x5alVI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 302.068195][ T40] audit: type=1400 audit(1752382964.504:24477): avc: denied { mount } for pid=14013 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 302.074911][ T40] audit: type=1400 audit(1752382964.504:24478): avc: denied { mounton } for pid=14013 comm="syz-executor" path="/syzkaller.x5alVI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 302.084809][ T40] audit: type=1400 audit(1752382964.504:24479): avc: denied { mounton } for pid=14013 comm="syz-executor" path="/syzkaller.x5alVI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=61829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 302.095651][ T40] audit: type=1400 audit(1752382964.504:24480): avc: denied { unmount } for pid=14013 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 302.102831][ T40] audit: type=1400 audit(1752382964.514:24481): avc: denied { mounton } for pid=14013 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 302.110551][ T40] audit: type=1400 audit(1752382964.514:24482): avc: denied { mount } for pid=14013 comm="syz-executor" name="/" dev="gadgetfs" ino=8338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 302.171708][T14111] fuse: Unknown parameter 'fý.çC h‹ƒþšD' [ 302.174771][T14113] syz.0.2177 (14113): attempted to duplicate a private mapping with mremap. This is not supported. [ 302.669850][T14139] openvswitch: netlink: IP tunnel dst address not specified [ 302.673408][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 302.860623][T14153] xt_hashlimit: size too large, truncated to 1048576 [ 303.109346][T14156] /dev/sr0: Can't open blockdev [ 303.368908][T14170] openvswitch: netlink: Tunnel attr 14 has unexpected len 2 expected 0 [ 303.660496][ T6039] usb 11-1: new low-speed USB device number 13 using dummy_hcd [ 303.809535][ T6039] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 303.813627][ T6039] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 303.816943][ T6039] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 303.822739][ T6039] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.825656][ T6039] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.828557][ T6039] usb 11-1: Product: 狀áḦ媨۪﹮ã Ï±æˆ’벙ﲟ䨢ㆪ⻬Nj⓿킥绻㿚优ⅸ꫔䌞빿ⷋ懶攓햜셫귅⋗ҽ駢騙ﭿ㭤২æé³¡í—疔ቴᄃ忹䊷玀✪憺檷뮹ë½äŒŸé¢‰æŠ¯ã’’럿巫祥䮯秵傟㰪éœë”¶êŠ§â»¶Ãï¥á޾é˜ãˆ¯êž‡ä­¬â¯â•©ä” á°¢î¤è·¤ã©‹é¦³é¨¤êŠ°é­«åŸ®æŠ€èŽ¯â®¹ê¬Šï„»é©·îµƒç—®å¥½î Œæœˆè¬Šç ¯áªŸÓ‚å¢‘á­¯ì…ëžì ™é¨ˆâ†Šìžžç˜¾â’¦âœ†ã€–黊鉣ࣜ [ 303.839874][ T6039] usb 11-1: Manufacturer: 迷ꚵ疭è†è—¼ç¥¢ç«Œæ‰–루ꖖ㿹贚苔ㄣ쳓囿눂麢ᴭפֿá±Â˜ä…é¾‰ï˜¦á— éœ‘ê‰æ¶¬ë—¦ëˆŸá“Ÿî¨Šâ®ƒä¯Ÿèƒ­å²²ç¬±à«“íˆì·£ê¥¹á™„⣜蠳ê–ꅢ筦ç¤ä™¶ê§™í‰‚皀ⵈ鷠逈á¶ä™ºà­¨ì™©ì¦ºä•‹á€Šë™ î¨“î«íŒ ì¡­ä©™ç“’᮱í¥ã»£â¹’捻á“ê¶ [ 303.847687][ T6039] usb 11-1: SerialNumber: 㸱臈蛖ꨳ믧쉰뜜悸㒀ê¼ë§£ç¬Œä½œâЉì§ê˜–쿶ꎗ߹屩ꤡ滹ꨓ屷팔ဇ鷥èŽï³šážºè–§ê…໔咄ä¦î¹°ì¿íˆ€î­‰ë¬ª [ 303.855556][T14174] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 303.888533][ T5952] Bluetooth: hci3: command tx timeout [ 303.937509][ T837] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 304.063975][ T6039] cdc_ncm 11-1:1.0: bind() failure [ 304.068582][ T6039] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 304.070734][ T6039] cdc_ncm 11-1:1.1: bind() failure [ 304.076934][ T6039] usb 11-1: USB disconnect, device number 13 [ 304.088455][ T837] usb 5-1: too many configurations: 18, using maximum allowed: 8 [ 304.108902][ T837] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 304.112023][ T837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.114493][ T837] usb 5-1: Product: syz [ 304.115815][ T837] usb 5-1: Manufacturer: syz [ 304.117690][ T837] usb 5-1: SerialNumber: syz [ 304.131647][ T837] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 304.143047][ T34] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 304.358965][ T837] usb 5-1: USB disconnect, device number 34 [ 304.537054][T14216] validate_nla: 5 callbacks suppressed [ 304.537065][T14216] netlink: 'syz.2.2209': attribute type 3 has an invalid length. [ 304.541466][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2209'. [ 304.677454][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2212'. [ 304.917225][ T6039] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 305.068326][ T6039] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 305.072536][ T6039] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.075960][ T6039] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 305.080365][ T6039] usb 11-1: config 0 interface 0 has no altsetting 0 [ 305.083681][ T6039] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.086518][ T6039] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 305.090099][ T6039] usb 11-1: config 0 interface 0 has no altsetting 0 [ 305.093030][ T6039] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.095796][ T6039] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 305.099679][ T6039] usb 11-1: config 0 interface 0 has no altsetting 0 [ 305.102627][ T6039] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.105470][ T6039] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 305.108950][ T6039] usb 11-1: config 0 interface 0 has no altsetting 0 [ 305.112823][ T6039] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.115685][ T6039] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 305.119244][ T6039] usb 11-1: config 0 interface 0 has no altsetting 0 [ 305.122265][ T6039] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.125132][ T6039] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 305.128746][ T6039] usb 11-1: config 0 interface 0 has no altsetting 0 [ 305.131690][ T6039] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.134643][ T6039] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 305.138114][ T6039] usb 11-1: config 0 interface 0 has no altsetting 0 [ 305.141064][ T6039] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.144030][ T6039] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 305.147476][ T6039] usb 11-1: config 0 interface 0 has no altsetting 0 [ 305.151194][ T6039] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 305.154530][ T6039] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 305.158268][ T6039] usb 11-1: Product: syz [ 305.159802][ T6039] usb 11-1: Manufacturer: syz [ 305.161628][ T6039] usb 11-1: SerialNumber: syz [ 305.165303][ T6039] usb 11-1: config 0 descriptor?? [ 305.168393][ T34] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 305.170710][ T6039] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 305.171218][ T34] ath9k_htc: Failed to initialize the device [ 305.181951][ T837] usb 5-1: ath9k_htc: USB layer deinitialized [ 305.371414][ T6039] usb 11-1: USB disconnect, device number 14 [ 305.377399][ T6039] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 305.823930][T14233] omfs: Invalid superblock (0) [ 305.853860][T14235] sctp: [Deprecated]: syz.2.2217 (pid 14235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.853860][T14235] Use struct sctp_sack_info instead [ 305.860643][T14236] sctp: [Deprecated]: syz.2.2217 (pid 14236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.860643][T14236] Use struct sctp_sack_info instead [ 305.967234][ T5952] Bluetooth: hci3: command tx timeout [ 306.965657][T14248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 306.968784][T14248] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 306.971871][T14248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 306.974421][T14248] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 306.977042][ T40] kauditd_printk_skb: 179 callbacks suppressed [ 306.977057][ T40] audit: type=1400 audit(1752382969.434:24662): avc: denied { allowed } for pid=14258 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 306.990600][ T40] audit: type=1400 audit(1752382969.454:24663): avc: denied { sqpoll } for pid=14258 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 306.991336][T14248] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 306.998592][ T40] audit: type=1400 audit(1752382969.454:24664): avc: denied { create } for pid=14258 comm="syz.0.2223" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 307.012284][T14248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.014752][T14248] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 307.034201][T14248] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 307.080475][ T40] audit: type=1400 audit(1752382969.544:24665): avc: denied { create } for pid=14269 comm="syz.6.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 307.087904][ T40] audit: type=1400 audit(1752382969.544:24666): avc: denied { bind } for pid=14269 comm="syz.6.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 307.094035][ T40] audit: type=1400 audit(1752382969.544:24667): avc: denied { node_bind } for pid=14269 comm="syz.6.2226" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 307.102000][ T40] audit: type=1400 audit(1752382969.554:24668): avc: denied { read write } for pid=14266 comm="syz.8.2225" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 307.109862][ T40] audit: type=1400 audit(1752382969.554:24669): avc: denied { open } for pid=14266 comm="syz.8.2225" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 307.110719][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2227'. [ 307.117374][ T40] audit: type=1400 audit(1752382969.564:24670): avc: denied { sys_module } for pid=14269 comm="syz.6.2226" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 307.120087][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2227'. [ 307.126552][ T40] audit: type=1400 audit(1752382969.574:24671): avc: denied { append } for pid=14268 comm="syz.0.2227" name="001" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 307.132129][T14271] netlink: 'syz.0.2227': attribute type 20 has an invalid length. [ 307.214439][T14293] netlink: 'syz.8.2232': attribute type 32 has an invalid length. [ 307.218956][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2232'. [ 307.222004][T14293] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 307.261472][T14301] sp0: Synchronizing with TNC [ 307.308177][T14307] netlink: 'syz.8.2236': attribute type 1 has an invalid length. [ 307.338605][T14307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.343480][T14307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14307 comm=syz.8.2236 [ 307.354175][T14307] bond2: (slave geneve2): making interface the new active one [ 307.359275][T14307] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 307.408690][T14316] syzkaller1: entered promiscuous mode [ 307.410639][T14316] syzkaller1: entered allmulticast mode [ 307.476654][T14323] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2240'. [ 307.700443][T14339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.755786][T14342] CUSE: info not properly terminated [ 307.911944][T14346] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 308.011861][T14346] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.174028][T14346] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.209683][ T5952] Bluetooth: hci2: command 0x0c1a tx timeout [ 308.328717][T14346] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.429950][T14346] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.652300][T14346] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.659536][T14346] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.662401][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2249'. [ 308.667797][T14346] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.707366][ T836] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 308.742896][T14346] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.837180][ T836] usb 11-1: device descriptor read/64, error -71 [ 309.017253][ T5956] Bluetooth: hci5: command 0x0c1a tx timeout [ 309.017796][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 309.077221][ T836] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 309.087399][ T5952] Bluetooth: hci3: command 0x0c1a tx timeout [ 309.217265][ T836] usb 11-1: device descriptor read/64, error -71 [ 309.330262][ T836] usb usb11-port1: attempt power cycle [ 309.667720][ T836] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 309.690011][ T836] usb 11-1: device descriptor read/8, error -71 [ 309.712337][ T5952] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 309.912382][T14384] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 309.947360][ T836] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 309.978213][ T836] usb 11-1: device descriptor read/8, error -71 [ 310.097579][ T836] usb usb11-port1: unable to enumerate USB device [ 310.919090][T14393] team0 (unregistering): Port device team_slave_0 removed [ 310.925221][T14393] team0 (unregistering): Port device team_slave_1 removed [ 311.087371][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 311.088555][ T5956] Bluetooth: hci5: command 0x0c1a tx timeout [ 311.177670][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 311.215369][T14415] overlayfs: workdir and upperdir must be separate subtrees [ 311.357201][ T53] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 311.368871][T14425] xt_hashlimit: max too large, truncated to 1048576 [ 311.371752][T14425] xt_bpf: check failed: parse error [ 311.480024][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2273'. [ 311.518133][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 311.522025][ T53] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 311.524565][ T53] usb 5-1: config 0 has no interface number 0 [ 311.526571][ T53] usb 5-1: config 0 interface 184 has no altsetting 0 [ 311.533322][ T53] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 311.536272][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.539546][ T53] usb 5-1: Product: syz [ 311.540944][ T53] usb 5-1: Manufacturer: syz [ 311.542473][ T53] usb 5-1: SerialNumber: syz [ 311.545897][ T53] usb 5-1: config 0 descriptor?? [ 311.550219][ T53] smsc75xx v1.0.0 [ 311.655937][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2276'. [ 311.837508][ T836] usb 11-1: new full-speed USB device number 19 using dummy_hcd [ 311.989933][ T836] usb 11-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 311.993175][ T836] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 311.998699][ T836] usb 11-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 312.001542][ T836] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.004064][ T836] usb 11-1: Product: syz [ 312.005398][ T836] usb 11-1: Manufacturer: syz [ 312.006883][ T836] usb 11-1: SerialNumber: syz [ 312.010764][ T836] usb 11-1: config 0 descriptor?? [ 312.152322][ T40] kauditd_printk_skb: 170 callbacks suppressed [ 312.152334][ T40] audit: type=1400 audit(1752382974.614:24842): avc: denied { mounton } for pid=14410 comm="syz.0.2267" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 312.163555][T14411] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 312.167949][ T40] audit: type=1400 audit(1752382974.634:24843): avc: denied { create } for pid=14410 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 312.170030][T14411] SELinux: policydb version 1402900228 does not match my version range 15-34 [ 312.173927][ T40] audit: type=1400 audit(1752382974.634:24844): avc: denied { load_policy } for pid=14410 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 312.176707][T14411] SELinux: failed to load policy [ 312.188750][ T40] audit: type=1400 audit(1752382974.654:24845): avc: denied { ioctl } for pid=14410 comm="syz.0.2267" path="socket:[63906]" dev="sockfs" ino=63906 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 312.198662][ T40] audit: type=1400 audit(1752382974.654:24846): avc: denied { bind } for pid=14410 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 312.218090][ T836] usb 11-1: USB disconnect, device number 19 [ 312.240338][ T40] audit: type=1400 audit(1752382974.704:24847): avc: denied { setopt } for pid=14410 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 312.291406][ T40] audit: type=1400 audit(1752382974.754:24848): avc: denied { getopt } for pid=14410 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 312.498703][ T7730] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 312.546313][ T40] audit: type=1400 audit(1752382975.004:24849): avc: denied { setopt } for pid=14410 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 312.831337][ T40] audit: type=1400 audit(1752382975.294:24850): avc: denied { create } for pid=14454 comm="syz.6.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 312.838696][ T40] audit: type=1400 audit(1752382975.294:24851): avc: denied { create } for pid=14454 comm="syz.6.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 312.896659][T14463] netlink: 'syz.6.2284': attribute type 1 has an invalid length. [ 312.900397][T14463] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2284'. [ 312.970203][T14465] 9pnet_virtio: no channels available for device syz [ 312.997958][T14465] netfs: Couldn't get user pages (rc=-14) [ 313.167274][ T5956] Bluetooth: hci5: command 0x0c1a tx timeout [ 313.167314][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 313.247890][ T5952] Bluetooth: hci3: command 0x0c1a tx timeout [ 314.550865][ T7730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.589372][ T7730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.628638][ T7730] bond0 (unregistering): Released all slaves [ 314.637801][ T7730] bond1 (unregistering): Released all slaves [ 314.648048][ T7730] bond2 (unregistering): Released all slaves [ 314.681622][T14482] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 315.478528][ T7730] bond3 (unregistering): Released all slaves [ 315.488775][ T7730] bond4 (unregistering): Released all slaves [ 315.526000][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 315.530210][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 315.533231][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 315.537448][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 315.541102][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 315.545072][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 315.548532][ T53] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 315.554381][ T53] usb 5-1: USB disconnect, device number 35 [ 315.583373][T14494] overlayfs: conflicting lowerdir path [ 315.591912][ T7730] tipc: Disabling bearer [ 315.594241][ T7730] tipc: Left network mode [ 315.617878][T14498] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 315.620593][T14446] lo speed is unknown, defaulting to 1000 [ 316.526622][ T7730] hsr_slave_0: left promiscuous mode [ 316.529202][ T7730] hsr_slave_1: left promiscuous mode [ 316.554053][ T7730] veth1_macvtap: left promiscuous mode [ 316.555983][ T7730] veth0_macvtap: left promiscuous mode [ 316.557914][ T7730] veth1_vlan: left promiscuous mode [ 316.559663][ T7730] veth0_vlan: left promiscuous mode [ 316.669818][ T7730] pim6reg (unregistering): left allmulticast mode [ 316.929553][ C2] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 316.929590][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.934116][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.040982][T14544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.046723][T14544] 9pnet_fd: p9_fd_create_tcp (14544): problem connecting socket to 127.0.0.1 [ 317.132108][T14547] netlink: 'syz.6.2306': attribute type 10 has an invalid length. [ 317.168722][ T40] kauditd_printk_skb: 107 callbacks suppressed [ 317.168733][ T40] audit: type=1326 audit(1752382979.685:24959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.2308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f518e929 code=0x50000 [ 317.186286][ T40] audit: type=1326 audit(1752382979.685:24960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.2308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f518e929 code=0x50000 [ 317.193452][ T40] audit: type=1326 audit(1752382979.685:24961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.2308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f518e929 code=0x50000 [ 317.200833][ T40] audit: type=1326 audit(1752382979.685:24962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.2308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f518e929 code=0x50000 [ 317.209467][ T40] audit: type=1326 audit(1752382979.685:24963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.2308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f518e929 code=0x50000 [ 317.218990][ T40] audit: type=1326 audit(1752382979.685:24964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.2308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f518e929 code=0x50000 [ 317.226115][ T40] audit: type=1326 audit(1752382979.685:24965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.2308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f518e929 code=0x50000 [ 317.233295][ T40] audit: type=1326 audit(1752382979.685:24966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.2308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f518e929 code=0x50000 [ 317.240961][ T40] audit: type=1326 audit(1752382979.685:24967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.2308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f518e929 code=0x50000 [ 317.248499][ T40] audit: type=1326 audit(1752382979.685:24968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.2308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f518e929 code=0x50000 [ 320.198485][T14573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=14573 comm=syz.2.2315 [ 320.324814][T14575] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 328.179208][ T7731] smc: removing ib device syz2 [ 329.758497][ T46] smc: removing ib device syz0 [ 329.844939][T14552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.847853][T14552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.852453][T14552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.854776][T14552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.998443][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2315'. [ 330.044301][ T40] kauditd_printk_skb: 34664 callbacks suppressed [ 330.044313][ T40] audit: type=1400 audit(1752382992.555:59633): avc: denied { read } for pid=14579 comm="syz.8.2316" dev="nsfs" ino=4026533664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 330.047049][T14580] Bluetooth: MGMT ver 1.23 [ 330.055891][ T40] audit: type=1400 audit(1752382992.555:59634): avc: denied { open } for pid=14579 comm="syz.8.2316" path="net:[4026533664]" dev="nsfs" ino=4026533664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 330.071093][ T40] audit: type=1400 audit(1752382992.555:59635): avc: denied { create } for pid=14579 comm="syz.8.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 330.081655][ T40] audit: type=1400 audit(1752382992.555:59636): avc: denied { bind } for pid=14579 comm="syz.8.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 330.088145][ T40] audit: type=1400 audit(1752382992.555:59637): avc: denied { write } for pid=14579 comm="syz.8.2316" path="socket:[61291]" dev="sockfs" ino=61291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 330.095576][ T40] audit: type=1400 audit(1752382992.575:59638): avc: denied { create } for pid=14579 comm="syz.8.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 330.102840][ T40] audit: type=1400 audit(1752382992.575:59639): avc: denied { ioctl } for pid=14579 comm="syz.8.2316" path="socket:[64191]" dev="sockfs" ino=64191 ioctlcmd=0x890d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 330.112920][ T40] audit: type=1400 audit(1752382992.595:59640): avc: denied { unmount } for pid=13582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 330.121003][ T40] audit: type=1400 audit(1752382992.605:59641): avc: denied { unmount } for pid=13582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 330.129656][ T40] audit: type=1400 audit(1752382992.625:59642): avc: denied { read } for pid=14581 comm="syz.8.2317" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 330.187535][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2322'. [ 330.195331][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2322'. [ 330.396465][T14602] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 330.417300][T14608] binder_alloc: 14605: pid 14605 spamming oneway? 1 buffers allocated for a total size of 4096 [ 330.611968][T14622] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 330.614031][T14622] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 330.779037][T14614] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 330.781997][T14614] 8021q: VLANs not supported on ip6tnl0 [ 330.798851][T14632] binder: BINDER_SET_CONTEXT_MGR already set [ 330.800775][T14632] binder: 14630:14632 ioctl 4018620d 2000000000c0 returned -16 [ 330.803851][T14632] binder: BINDER_SET_CONTEXT_MGR already set [ 330.805855][T14632] binder: 14630:14632 ioctl 4018620d 200000000040 returned -16 [ 330.967788][T14649] tipc: Started in network mode [ 330.969397][T14649] tipc: Node identity ac1414aa, cluster identity 4711 [ 330.974050][T14649] tipc: Enabled bearer , priority 10 [ 331.020609][T14658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14658 comm=syz.8.2340 [ 331.025099][T14658] netlink: 'syz.8.2340': attribute type 1 has an invalid length. [ 331.096267][ T7730] IPVS: stop unused estimator thread 0... [ 331.101983][T14659] bond3: (slave bridge1): making interface the new active one [ 331.104609][T14659] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 331.136339][T14578] udevd[14578]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 331.447682][T14679] netlink: 'syz.2.2346': attribute type 3 has an invalid length. [ 331.450273][T14679] netlink: 'syz.2.2346': attribute type 3 has an invalid length. [ 331.453151][T14679] netlink: 'syz.2.2346': attribute type 3 has an invalid length. [ 331.455558][T14679] netlink: 'syz.2.2346': attribute type 3 has an invalid length. [ 331.458033][T14679] netlink: 'syz.2.2346': attribute type 3 has an invalid length. [ 331.460710][T14679] netlink: 'syz.2.2346': attribute type 3 has an invalid length. [ 331.463932][T14679] netlink: 'syz.2.2346': attribute type 3 has an invalid length. [ 331.467169][T14679] netlink: 'syz.2.2346': attribute type 3 has an invalid length. [ 331.469811][T14679] netlink: 'syz.2.2346': attribute type 3 has an invalid length. [ 331.531910][T14682] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 331.538234][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 331.617183][ T6032] usb 13-1: new full-speed USB device number 5 using dummy_hcd [ 331.791069][ T6032] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 331.794508][ T6032] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 331.798706][ T6032] usb 13-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 331.803717][ T6032] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.806555][ T6032] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 331.809433][ T6032] usb 13-1: SerialNumber: syz [ 331.818443][T14677] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 331.822121][ T6032] cdc_ether 13-1:1.0: probe with driver cdc_ether failed with error -22 [ 331.969528][T14698] geneve2: entered promiscuous mode [ 331.977291][ T7111] tipc: Node number set to 2886997162 [ 332.006744][T14700] program syz.0.2352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.028069][T10714] usb 13-1: USB disconnect, device number 5 [ 332.063878][T14701] xt_hashlimit: size too large, truncated to 1048576 [ 332.361603][T14710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2355'. [ 332.600128][T14718] xt_HMARK: spi-set and port-set can't be combined [ 332.602568][T14718] xt_HMARK: spi-set and port-set can't be combined [ 332.948982][T14726] 9pnet_fd: Insufficient options for proto=fd [ 332.954070][T14726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2359'. [ 332.958762][T14726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2359'. [ 333.567386][ T5952] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 333.567471][ T5956] Bluetooth: hci0: command 0x1003 tx timeout [ 333.616084][T14751] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2368'. [ 333.627499][T14751] dvmrp1: entered allmulticast mode [ 334.271214][T14759] binder: 14758:14759 ioctl c0306201 200000000540 returned -14 [ 334.335897][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2374'. [ 334.582447][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2377'. [ 334.592793][T14769] erspan0: entered promiscuous mode [ 334.595179][T14769] macvtap1: entered promiscuous mode [ 334.597520][T14769] macvtap1: entered allmulticast mode [ 334.599644][T14769] erspan0: entered allmulticast mode [ 334.611450][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2377'. [ 334.655833][T14774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.658845][T14774] IPv6: NLM_F_CREATE should be set when creating new route [ 334.830577][T14793] deleting an unspecified loop device is not supported. [ 335.053701][ T40] kauditd_printk_skb: 161 callbacks suppressed [ 335.053713][ T40] audit: type=1400 audit(1752382997.565:59804): avc: denied { read write } for pid=14796 comm="syz.0.2388" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 335.062722][ T40] audit: type=1400 audit(1752382997.565:59805): avc: denied { open } for pid=14796 comm="syz.0.2388" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 335.071279][ T40] audit: type=1400 audit(1752382997.565:59806): avc: denied { ioctl } for pid=14796 comm="syz.0.2388" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 335.168751][ T836] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 335.210622][ T40] audit: type=1400 audit(1752382997.725:59807): avc: denied { create } for pid=14802 comm="syz.0.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 335.232566][ T40] audit: type=1400 audit(1752382997.745:59808): avc: denied { create } for pid=14805 comm="syz.0.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.240410][ T40] audit: type=1400 audit(1752382997.745:59809): avc: denied { setopt } for pid=14805 comm="syz.0.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.337379][ T836] usb 13-1: Using ep0 maxpacket: 8 [ 335.340593][ T836] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.344143][ T836] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 335.347029][ T836] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.352955][ T836] usb 13-1: config 0 descriptor?? [ 335.556566][ T836] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 335.577258][ T34] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 335.728860][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.732031][ T34] usb 5-1: config 0 has no interfaces? [ 335.733982][ T34] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 335.736751][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.740659][ T34] usb 5-1: config 0 descriptor?? [ 335.758019][ T40] audit: type=1400 audit(1752382998.265:59810): avc: denied { write } for pid=14794 comm="syz.8.2387" name="iowarrior0" dev="devtmpfs" ino=3580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 335.761431][T14795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.767741][T14795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.772347][T14795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.775054][T14795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.787957][ T53] usb 13-1: USB disconnect, device number 6 [ 335.830177][ T40] audit: type=1400 audit(1752382998.345:59811): avc: denied { map_create } for pid=14824 comm="syz.8.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 335.839853][ T40] audit: type=1400 audit(1752382998.355:59812): avc: denied { connect } for pid=14824 comm="syz.8.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.845694][ T40] audit: type=1400 audit(1752382998.355:59813): avc: denied { listen } for pid=14824 comm="syz.8.2396" lport=59026 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.946459][ T5956] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 335.963764][ T836] usb 5-1: USB disconnect, device number 36 [ 336.247384][T14826] netlink: 212892 bytes leftover after parsing attributes in process `syz.8.2396'. [ 336.468721][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2397'. [ 336.519148][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2397'. [ 336.573490][T14831] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2398'. [ 337.471589][T14852] hugetlbfs: syz.0.2403 (14852): Using mlock ulimits for SHM_HUGETLB is obsolete [ 337.747196][ T6032] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 337.812611][T14858] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 337.814686][T14858] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 337.817579][T14858] vhci_hcd vhci_hcd.0: Device attached [ 337.820426][T14859] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 337.823283][ T7729] vhci_hcd: stop threads [ 337.824633][ T7729] vhci_hcd: release socket [ 337.826058][ T7729] vhci_hcd: disconnect device [ 337.897180][ T6032] usb 5-1: Using ep0 maxpacket: 8 [ 337.900872][ T6032] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.905075][ T6032] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 337.908946][ T6032] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 337.912739][ T6032] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.917942][ T6032] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 337.921583][ T6032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.128564][ T6032] usb 5-1: GET_CAPABILITIES returned 0 [ 338.130320][ T6032] usbtmc 5-1:16.0: can't read capabilities [ 338.480439][ T6018] hid-generic 0000:0004:0009.0009: unknown main item tag 0x0 [ 338.482807][ T6018] hid-generic 0000:0004:0009.0009: unknown main item tag 0x0 [ 338.485224][ T6018] hid-generic 0000:0004:0009.0009: unknown main item tag 0x0 [ 338.497333][ T6018] hid-generic 0000:0004:0009.0009: hidraw1: HID v0.04 Device [syz0] on syz1 [ 339.156480][T14890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14890 comm=syz.8.2414 [ 339.163138][T14890] input: syz0 as /devices/virtual/input/input34 [ 339.849428][T14907] QAT: Stopping all acceleration devices. [ 339.953844][T14911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2421'. [ 339.978552][T14913] 9pnet: Unknown protocol version 9p20\++} [ 339.982977][T14913] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.523491][ T7111] usb 5-1: USB disconnect, device number 37 [ 340.600629][ T40] kauditd_printk_skb: 150 callbacks suppressed [ 340.600639][ T40] audit: type=1400 audit(1752383003.115:59964): avc: denied { read } for pid=14926 comm="syz.0.2426" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 340.611428][ T40] audit: type=1400 audit(1752383003.125:59965): avc: denied { open } for pid=14926 comm="syz.0.2426" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 340.622525][ T40] audit: type=1400 audit(1752383003.125:59966): avc: denied { create } for pid=14926 comm="syz.0.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 340.630047][ T40] audit: type=1400 audit(1752383003.125:59967): avc: denied { accept } for pid=14926 comm="syz.0.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 340.635887][ T40] audit: type=1400 audit(1752383003.125:59968): avc: denied { bind } for pid=14926 comm="syz.0.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 340.643433][ T40] audit: type=1400 audit(1752383003.125:59969): avc: denied { ioctl } for pid=14926 comm="syz.0.2426" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 340.652359][ T40] audit: type=1400 audit(1752383003.135:59970): avc: denied { create } for pid=14926 comm="syz.0.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 340.659415][ T40] audit: type=1400 audit(1752383003.135:59971): avc: denied { ioctl } for pid=14926 comm="syz.0.2426" path="socket:[65891]" dev="sockfs" ino=65891 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 340.667830][ T40] audit: type=1400 audit(1752383003.135:59972): avc: denied { create } for pid=14926 comm="syz.0.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 340.673797][ T40] audit: type=1400 audit(1752383003.135:59973): avc: denied { setattr } for pid=10651 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.052084][T14941] kvm: MWAIT instruction emulated as NOP! [ 342.275369][T14962] [U]  [ 342.338036][T14963] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2435'. [ 342.460573][T14972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.496239][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.500162][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.502520][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.504834][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.509435][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.511837][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.514139][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.516302][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.519190][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.522020][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.524309][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.527027][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.528165][T14978] IPVS: set_ctl: invalid protocol: 219 224.0.0.2:20001 [ 342.529591][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.533715][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.536013][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.538563][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.540867][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.543180][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.545569][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.555664][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.558263][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.561285][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.564008][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.566460][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.568998][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.571318][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.573615][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.575913][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.579224][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.581526][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.583746][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.585964][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.588365][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.590723][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.593040][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.595328][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.597895][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.600225][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.602613][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.604935][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.609909][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.611652][T14982] can0: slcan on ptm0. [ 342.612347][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.612361][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.612375][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.620930][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.623244][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.625537][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.628064][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.630362][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.632646][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.634950][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.637331][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.639668][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.641958][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.644258][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.646568][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.648941][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.651246][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.653542][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.655844][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.658529][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.660773][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.663011][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.665638][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.668060][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.670374][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.672708][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.675328][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.677721][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.680023][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.682328][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.684623][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.686932][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.689673][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.691985][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.694281][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.696596][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.699017][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.701316][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.703614][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.705899][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.708980][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.711261][ T53] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.721831][ T53] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 342.755805][T14983] fido_id[14983]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 342.783888][T14987] validate_nla: 46 callbacks suppressed [ 342.783898][T14987] netlink: 'syz.0.2445': attribute type 1 has an invalid length. [ 342.789036][T14987] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2445'. [ 342.791978][T14987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2445'. [ 342.847375][ T6018] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 342.999237][ T6018] usb 13-1: config 0 has no interfaces? [ 343.003255][ T6018] usb 13-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 343.006020][ T6018] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.009278][ T6018] usb 13-1: Product: syz [ 343.011184][ T6018] usb 13-1: Manufacturer: syz [ 343.012777][ T6018] usb 13-1: SerialNumber: syz [ 343.014009][T15002] program syz.2.2448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.046128][ T6018] usb 13-1: config 0 descriptor?? [ 343.289707][ T53] usb 13-1: USB disconnect, device number 7 [ 343.314941][T15011] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2455'. [ 343.330084][T15011] bond1: entered promiscuous mode [ 343.332784][T15011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.339498][T14980] can0 (unregistered): slcan off ptm0. [ 343.972198][T15018] netlink: 'syz.2.2456': attribute type 1 has an invalid length. [ 343.974611][T15018] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2456'. [ 343.978990][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2456'. [ 344.018422][T15020] loop6: detected capacity change from 0 to 524287999 [ 344.132746][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2459'. [ 344.606103][T15041] Cannot find map_set index 0 as target [ 344.764256][T10714] IPVS: starting estimator thread 0... [ 344.867225][T15053] IPVS: using max 42 ests per chain, 100800 per kthread [ 345.473720][ T5956] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 345.477064][ T5956] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 345.565378][T15098] [ 345.566478][T15098] ====================================================== [ 345.569391][T15098] WARNING: possible circular locking dependency detected [ 345.572287][T15098] 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 Not tainted [ 345.576422][T15098] ------------------------------------------------------ [ 345.579606][T15098] syz.8.2479/15098 is trying to acquire lock: [ 345.582163][T15098] ffff888045893c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 345.586033][T15098] [ 345.586033][T15098] but task is already holding lock: [ 345.589070][T15098] ffff888052fc0468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 345.592494][T15098] [ 345.592494][T15098] which lock already depends on the new lock. [ 345.592494][T15098] [ 345.596760][T15098] [ 345.596760][T15098] the existing dependency chain (in reverse order) is: [ 345.600466][T15098] [ 345.600466][T15098] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 345.603554][T15098] __mutex_lock+0x199/0xb90 [ 345.605692][T15098] pipe_lock+0x64/0x80 [ 345.607657][T15098] iter_file_splice_write+0x1ea/0x1150 [ 345.610138][T15098] do_splice+0x1475/0x1fc0 [ 345.612307][T15098] __do_splice+0x32a/0x360 [ 345.614355][T15098] __x64_sys_splice+0x187/0x250 [ 345.616325][T15098] do_syscall_64+0xcd/0x4c0 [ 345.617918][T15098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.619958][T15098] [ 345.619958][T15098] -> #2 (sb_writers#6){.+.+}-{0:0}: [ 345.622244][T15098] mnt_want_write+0x6f/0x450 [ 345.623721][T15098] ovl_lookup+0x1baa/0x21a0 [ 345.625301][T15098] lookup_open.isra.0+0x4d7/0x1580 [ 345.627055][T15098] path_openat+0x893/0x2cb0 [ 345.628684][T15098] do_filp_open+0x20b/0x470 [ 345.630593][T15098] do_sys_openat2+0x11b/0x1d0 [ 345.632746][T15098] __x64_sys_open+0x153/0x1e0 [ 345.634925][T15098] do_syscall_64+0xcd/0x4c0 [ 345.636786][T15098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.638875][T15098] [ 345.638875][T15098] -> #1 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}: [ 345.641509][T15098] down_read+0x9b/0x480 [ 345.643017][T15098] walk_component+0x345/0x5b0 [ 345.644637][T15098] path_lookupat+0x142/0x6d0 [ 345.646232][T15098] filename_lookup+0x224/0x5f0 [ 345.647895][T15098] kern_path+0x35/0x50 [ 345.649424][T15098] lookup_bdev+0xd8/0x280 [ 345.650962][T15098] resume_store+0x1d6/0x460 [ 345.652523][T15098] kobj_attr_store+0x55/0x80 [ 345.654116][T15098] sysfs_kf_write+0xf2/0x150 [ 345.655714][T15098] kernfs_fop_write_iter+0x351/0x510 [ 345.657537][T15098] vfs_write+0x6c7/0x1150 [ 345.659369][T15098] ksys_write+0x12a/0x250 [ 345.660746][T15098] do_syscall_64+0xcd/0x4c0 [ 345.662315][T15098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.664297][T15098] [ 345.664297][T15098] -> #0 (&of->mutex){+.+.}-{4:4}: [ 345.666534][T15098] __lock_acquire+0x126f/0x1c90 [ 345.668245][T15098] lock_acquire+0x179/0x350 [ 345.669946][T15098] __mutex_lock+0x199/0xb90 [ 345.671513][T15098] kernfs_fop_write_iter+0x28f/0x510 [ 345.673403][T15098] iter_file_splice_write+0x91c/0x1150 [ 345.675900][T15098] do_splice+0x1475/0x1fc0 [ 345.678005][T15098] __do_splice+0x32a/0x360 [ 345.680126][T15098] __x64_sys_splice+0x187/0x250 [ 345.682369][T15098] do_syscall_64+0xcd/0x4c0 [ 345.684476][T15098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.687113][T15098] [ 345.687113][T15098] other info that might help us debug this: [ 345.687113][T15098] [ 345.690828][T15098] Chain exists of: [ 345.690828][T15098] &of->mutex --> sb_writers#6 --> &pipe->mutex [ 345.690828][T15098] [ 345.694530][T15098] Possible unsafe locking scenario: [ 345.694530][T15098] [ 345.696890][T15098] CPU0 CPU1 [ 345.698626][T15098] ---- ---- [ 345.700316][T15098] lock(&pipe->mutex); [ 345.701620][T15098] lock(sb_writers#6); [ 345.703679][T15098] lock(&pipe->mutex); [ 345.705742][T15098] lock(&of->mutex); [ 345.707006][T15098] [ 345.707006][T15098] *** DEADLOCK *** [ 345.707006][T15098] [ 345.709546][T15098] 2 locks held by syz.8.2479/15098: [ 345.711166][T15098] #0: ffff88802b50a428 (sb_writers#8){.+.+}-{0:0}, at: __do_splice+0x32a/0x360 [ 345.711529][ T40] kauditd_printk_skb: 206 callbacks suppressed [ 345.711538][ T40] audit: type=1400 audit(1752383008.225:60180): avc: denied { ioctl } for pid=15089 comm="syz.8.2479" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 345.713933][T15098] #1: ffff888052fc0468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 345.713966][T15098] [ 345.713966][T15098] stack backtrace: [ 345.716029][ T40] audit: type=1400 audit(1752383008.225:60181): avc: denied { setopt } for pid=15089 comm="syz.8.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 345.724138][T15098] CPU: 3 UID: 0 PID: 15098 Comm: syz.8.2479 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 345.724155][T15098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 345.724163][T15098] Call Trace: [ 345.724168][T15098] [ 345.724173][T15098] dump_stack_lvl+0x116/0x1f0 [ 345.724191][T15098] print_circular_bug+0x275/0x350 [ 345.724211][T15098] check_noncircular+0x14c/0x170 [ 345.724231][T15098] __lock_acquire+0x126f/0x1c90 [ 345.724245][T15098] lock_acquire+0x179/0x350 [ 345.724254][T15098] ? kernfs_fop_write_iter+0x28f/0x510 [ 345.724267][T15098] ? __pfx___might_resched+0x10/0x10 [ 345.724284][T15098] __mutex_lock+0x199/0xb90 [ 345.724299][T15098] ? kernfs_fop_write_iter+0x28f/0x510 [ 345.724312][T15098] ? __asan_memcpy+0x3c/0x60 [ 345.724325][T15098] ? _copy_from_iter+0x15d/0x16f0 [ 345.724339][T15098] ? kernfs_fop_write_iter+0x28f/0x510 [ 345.724352][T15098] ? __pfx___mutex_lock+0x10/0x10 [ 345.724367][T15098] ? __pfx__copy_from_iter+0x10/0x10 [ 345.724382][T15098] ? rcu_is_watching+0x12/0xc0 [ 345.724395][T15098] ? trace_kmalloc+0x2b/0xd0 [ 345.724411][T15098] ? __kmalloc_noprof+0x242/0x510 [ 345.724426][T15098] ? kernfs_fop_write_iter+0x28f/0x510 [ 345.724438][T15098] kernfs_fop_write_iter+0x28f/0x510 [ 345.724450][T15098] iter_file_splice_write+0x91c/0x1150 [ 345.724469][T15098] ? __pfx_iter_file_splice_write+0x10/0x10 [ 345.724484][T15098] ? __page_table_check_ptes_set+0x1ae/0x420 [ 345.724504][T15098] ? __pfx_iter_file_splice_write+0x10/0x10 [ 345.724519][T15098] do_splice+0x1475/0x1fc0 [ 345.724533][T15098] ? __lock_acquire+0x622/0x1c90 [ 345.724544][T15098] ? __pfx_do_splice+0x10/0x10 [ 345.724557][T15098] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 345.724570][T15098] ? find_held_lock+0x2b/0x80 [ 345.724585][T15098] __do_splice+0x32a/0x360 [ 345.724598][T15098] ? __pfx___do_splice+0x10/0x10 [ 345.724614][T15098] __x64_sys_splice+0x187/0x250 [ 345.724629][T15098] do_syscall_64+0xcd/0x4c0 [ 345.724644][T15098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.724656][T15098] RIP: 0033:0x7fcbc7d8e929 [ 345.724665][T15098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.724675][T15098] RSP: 002b:00007fcbc8b99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 345.724686][T15098] RAX: ffffffffffffffda RBX: 00007fcbc7fb6080 RCX: 00007fcbc7d8e929 [ 345.724692][T15098] RDX: 000000000000000e RSI: 0000000000000000 RDI: 000000000000000c [ 345.724698][T15098] RBP: 00007fcbc7e10b39 R08: 000000000000bfd1 R09: 0000000000000000 [ 345.724705][T15098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.724712][T15098] R13: 0000000000000001 R14: 00007fcbc7fb6080 R15: 00007fffc3452db8 [ 345.724723][T15098] [ 345.822094][ T40] audit: type=1400 audit(1752383008.245:60182): avc: denied { read write } for pid=15101 comm="syz.2.2481" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 345.835386][ T40] audit: type=1400 audit(1752383008.245:60183): avc: denied { open } for pid=15101 comm="syz.2.2481" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 346.261738][ T40] audit: type=1400 audit(1752383008.775:60184): avc: denied { setattr } for pid=10651 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 VM DIAGNOSIS: 05:03:20 Registers: info registers vcpu 0 CPU#0 RAX=000000000021f294 RBX=0000000000000000 RCX=ffffffff8b885c99 RDX=ffffed100d486646 RSI=ffffffff8c158ee0 RDI=ffffffff81920e71 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a98650 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d6713000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcbc8b99d58 CR3=0000000036133000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000009b DR2=00040000ffffffff DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc3453140 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc7e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc7e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc7e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc7e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc7e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc7e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000009 RCX=ffffffffffff03fc RDX=0000000000000000 RSI=0000000000010000 RDI=000000000000b7bf RBP=0000000000001000 RSP=ffffc9000275f980 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000005 R12=0000000000000000 R13=0000000000000009 R14=0000000000000000 R15=0000000000000007 RIP=ffffffff8b880360 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007fa5953826c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6813000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000025548000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=ff MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 ffff FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=1ffff92000d85ee0 RDX=dffffc0000000000 RSI=0000000000000000 RDI=ffffffff8df40db0 RBP=ffffc90006c2f700 RSP=ffffc90006c2f648 R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90006c2f6b8 R11=0000000000038d3b R12=ffffc90006c2f708 R13=ffffc90006c2f6b8 R14=ffffc90006c2f6ed R15=ffff88802feaa440 RIP=ffffffff816ad84e RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055559526e500 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa595360f98 CR3=000000005394d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000400000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3297bdc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92ac611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92ac611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92ac611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92ac611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92ac611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92ac611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc90005727238 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000035 R14=ffffffff9b0c7260 R15=ffffffff855bce70 RIP=ffffffff855bceff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fcbc8b996c0 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcbc8b98f98 CR3=000000004d2b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000004b36 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc7e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc7e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc7e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc7e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc7e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc7e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc7f85488 00007fcbc7f85480 00007fcbc7f85478 00007fcbc7f85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc8aed100 00007fcbc7f85440 00007fcbc7f85458 00007fcbc7f854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbc7f85498 00007fcbc7f85490 00007fcbc7f85488 00007fcbc7f85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000