last executing test programs: 10m22.638118961s ago: executing program 32 (id=1624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x800038, 0x7, 0x3, 0x180, 0x6, 0x10, 0xf1, 0x100000001, 0x1, 0xca0, 0xffffffffffffffff, 0x2000000002c, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x8, 0xa7c, 0x68ff, 0x7, 0x100008000000009, 0x803, 0x3, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x9, 0x75, 0x6, 0x36, 0x0, 0x2, 0xb4}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x1, 0x1, 0xa4, 0x5, 0x5}, {0x8000000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe, 0x7}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x6, 0xa0, 0xb, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x89, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0xa1}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x39, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) 9m43.203159537s ago: executing program 33 (id=2329): io_uring_setup(0x30db, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3000, 0xfffffffe, 0xfffffffd}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6", 0x3) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018008000300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 7m20.103618537s ago: executing program 34 (id=4534): r0 = socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000180)="6e0c9b6b38", 0x5, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 4m39.553394502s ago: executing program 35 (id=7559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff22, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r6, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x10001, 0xb1c7}}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x5, &(0x7f0000000180)=[{0x10c, 0xf, 0xa2, 0x4}, {0x2, 0x0, 0x4, 0x7}, {0x8, 0xf3, 0x6, 0x8}, {0x4cd, 0x2, 0xf3, 0x8}, {0x1, 0x6, 0xc}]}) 4m27.282515172s ago: executing program 36 (id=7542): socket$alg(0x26, 0x5, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0xfdffa000) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 4m1.322035639s ago: executing program 37 (id=8061): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0xbb, 0x90010, 0x4, 0x8, 0x0, 0x0, 0x200000}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0xbb, 0x90010, 0x4, 0x8, 0x0, 0x0, 0x200000}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x2) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) openat$cgroup_ro(r3, &(0x7f0000001100)='pids.current\x00', 0x5000000, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0xe, 0x1}, 0x5, 0x0, &(0x7f0000000000)="cea92dc83ff5fe912c2b608dfbbe558d8305d3771e9483460349a770", 0x1c, 0x81, 0x10, 0x0, 0x5, 0x10, &(0x7f0000000040)="b83557ac205d83ea1db4f0e8f4b9cfa5b9891cc79659cf0231047f570194a21be8a76c76074218d2eb920d5f16c2062d069371ac59e4a57feabc9094e7bf4c42f3c982d5f8d91fa24625aca25476ad9b3eda14473ab761c136a0faa9d579aaba9b5c9aab6b66deca94c85af187e401b91a0334b9f50866d21886cc60146edb123906029e247961c543"}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r3], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$ax25_int(r1, 0x101, 0x145c4fb23569acb9, &(0x7f00000001c0), &(0x7f0000000100)=0x4) 3m44.679973145s ago: executing program 8 (id=8239): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xc}, 0xa) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str=':\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) process_vm_readv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) syz_emit_ethernet(0xd7, &(0x7f00000002c0)={@random="792c8d3407ae", @dev, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, "bb", "36adce", 0x888e, "ef2a849f876388b618a707001e5fdb123bc5254847be07e25f555ad5299da1f2a38af724a1b6d85c417f3ac0edcbf489237b020bccc6bbcd90acbe81b665660c89e2bffb0e0a0ee0bfa98bdf10eee4b578e1b0a0f2318fc1dc2943593fa1ed3bec9c299ab795d346d62e09ba03acd810647d357a32c3feee2dbf48b3887962153d3b61954aafdd6fab5c094f4134dced23e232aa31b67cd80e7ca7a400ba34d731735618e9a60753f573dec8ffe52123dc84b86428514fc6e30f6fa18d5106038e"}}}}}, 0x0) 3m43.782911242s ago: executing program 8 (id=8250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 3m43.503224561s ago: executing program 8 (id=8254): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x8c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m43.500353307s ago: executing program 8 (id=8256): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (fail_nth: 11) 3m43.387492165s ago: executing program 8 (id=8259): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000540)={0x81, 0x0, 0x1}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x10}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x2, 0x36, 0x4, 0x2, 0x87}, {0x4, 0xdddd0000, 0xe, 0x0, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x46, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0x40000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x40, 0xf6, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x6000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x9d, 0x81, 0x40, 0x70}, {0x8000000, 0x4000, 0x8, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100c00, [0x4800000000000000, 0x4, 0x7, 0x8]}) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000002ac0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f00000005c0)={0x24, @none={0x0, 0x2}}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@dev, @in6=@remote}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x2, r10, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) getsockname$packet(r8, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40880}, 0x405) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000300), 0x1108000, &(0x7f0000000600)=ANY=[@ANYBLOB='transbvirtio,uname=upperdir,dfltuid=', @ANYRESHEX=r5, @ANYBLOB=',fscache,fscache,subj_role=\',subj_role=^%^{,fsmagic=0x0000000000000005,context=staff_u,euid>', @ANYRESDEC=r7, @ANYBLOB="ac652c5c3b9a5cc5ccb29b852000"/24]) 3m43.1525374s ago: executing program 8 (id=8262): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000980)={0x118, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000980)={0x118, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000780)='rpcgss_import_ctx\x00', r1, 0x0, 0x4}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000780)='rpcgss_import_ctx\x00', r1, 0x0, 0x4}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) syz_create_resource$binfmt(&(0x7f0000000940)='./file0\x00') r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x220001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0xa, [@volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x89}, {0x0, 0xfffffffd}, {0x4, 0x7}, {0x10, 0x5}]}, @const={0xf, 0x0, 0x0, 0xa, 0x5}, @enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0x8}, {0x2, 0x29}, {0xd, 0x9}, {0x5, 0x8001}, {0x6, 0x12}, {0xa}, {0xf, 0x8}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x1}, @enum={0xe, 0x5, 0x0, 0x6, 0x4, [{0xf, 0x1}, {0x1}, {0x3, 0x7}, {0xd, 0x9}, {0xf, 0x8}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x30, 0x2e, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000680)=""/231, 0xf6, 0xe7, 0x1, 0x8, 0x10000, @value=r5}, 0x28) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0xa, [@volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x89}, {0x0, 0xfffffffd}, {0x4, 0x7}, {0x10, 0x5}]}, @const={0xf, 0x0, 0x0, 0xa, 0x5}, @enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0x8}, {0x2, 0x29}, {0xd, 0x9}, {0x5, 0x8001}, {0x6, 0x12}, {0xa}, {0xf, 0x8}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x1}, @enum={0xe, 0x5, 0x0, 0x6, 0x4, [{0xf, 0x1}, {0x1}, {0x3, 0x7}, {0xd, 0x9}, {0xf, 0x8}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x30, 0x2e, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000680)=""/231, 0xf6, 0xe7, 0x1, 0x8, 0x10000, @value=r5}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', r4, r6, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000)=0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='mark_victim\x00', r3}, 0x19) ioprio_set$pid(0x2, 0x0, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040), &(0x7f0000000280)) (async) r8 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x47f8, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12]) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12]) 3m41.843377136s ago: executing program 38 (id=8278): r0 = syz_open_dev$loop(&(0x7f00000002c0), 0xd, 0x62800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4040011}, 0xc000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x5, 0x7, 0x8}, 0xc) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000300)=0x6) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0x4004e502, &(0x7f00000000c0)=0x1c4) 3m28.168702059s ago: executing program 39 (id=8262): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000980)={0x118, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000980)={0x118, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000780)='rpcgss_import_ctx\x00', r1, 0x0, 0x4}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000780)='rpcgss_import_ctx\x00', r1, 0x0, 0x4}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) syz_create_resource$binfmt(&(0x7f0000000940)='./file0\x00') r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x220001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0xa, [@volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x89}, {0x0, 0xfffffffd}, {0x4, 0x7}, {0x10, 0x5}]}, @const={0xf, 0x0, 0x0, 0xa, 0x5}, @enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0x8}, {0x2, 0x29}, {0xd, 0x9}, {0x5, 0x8001}, {0x6, 0x12}, {0xa}, {0xf, 0x8}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x1}, @enum={0xe, 0x5, 0x0, 0x6, 0x4, [{0xf, 0x1}, {0x1}, {0x3, 0x7}, {0xd, 0x9}, {0xf, 0x8}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x30, 0x2e, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000680)=""/231, 0xf6, 0xe7, 0x1, 0x8, 0x10000, @value=r5}, 0x28) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0xa, [@volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x89}, {0x0, 0xfffffffd}, {0x4, 0x7}, {0x10, 0x5}]}, @const={0xf, 0x0, 0x0, 0xa, 0x5}, @enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0x8}, {0x2, 0x29}, {0xd, 0x9}, {0x5, 0x8001}, {0x6, 0x12}, {0xa}, {0xf, 0x8}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x1}, @enum={0xe, 0x5, 0x0, 0x6, 0x4, [{0xf, 0x1}, {0x1}, {0x3, 0x7}, {0xd, 0x9}, {0xf, 0x8}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x30, 0x2e, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000680)=""/231, 0xf6, 0xe7, 0x1, 0x8, 0x10000, @value=r5}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', r4, r6, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000)=0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='mark_victim\x00', r3}, 0x19) ioprio_set$pid(0x2, 0x0, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040), &(0x7f0000000280)) (async) r8 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x47f8, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12]) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12]) 3m10.171963613s ago: executing program 7 (id=8747): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuseblk(&(0x7f000000aa80), &(0x7f000000aac0)='./file0\x00', &(0x7f000000ab00), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1e67726f75705f69643d04fcaf8be286483c8c026cc16bd4ecb25bc1d94534371928d20a78db8f0eafb6d8029baac023bebd3b991e7c09c0b4e3564cb6325574b62bce5a777c6aa63d8b3ecdbfd12037ae3cca22076c233b9dfb1bfc8289de339302135b94e7bb802071f50a504bcd3e770327f2e8365270cc07317de13a698d6b17136e2ea4b614b54ee657321cd86c90c9b6aa46ee0f0f10123e940541e44d3b2408c4ea5bf8ad87774d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x120020, 0x0) 3m10.022608205s ago: executing program 7 (id=8749): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) ioctl(r1, 0x8b2a, &(0x7f0000000040)) r3 = dup(r0) mmap(&(0x7f0000b0c000/0x3000)=nil, 0x3000, 0x3000002, 0x50, r3, 0xdbc26000) 3m9.961708519s ago: executing program 7 (id=8751): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) close(0x3) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xd0, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x8001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x68}, {0x8, 0x15, 0x1a6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0xe7}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4008015}, 0x4) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r4, 0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) 3m9.666699969s ago: executing program 7 (id=8763): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c", 0xd4d}], 0x1, 0x0, 0x0, 0x905}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xcb0a) lseek(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r6 = socket(0x10, 0x3, 0x0) socket$kcm(0x29, 0xf, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0xe2, 0x81}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 3m9.612582613s ago: executing program 7 (id=8764): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000002540000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 3m9.175257131s ago: executing program 7 (id=8771): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c01000010001307000004000000000000000000000000000000ffff00000000fe8000000000000000000000000000aa00ffffffffffffff8000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000007fffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x13c}}, 0x0) 3m9.007343329s ago: executing program 40 (id=8771): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c01000010001307000004000000000000000000000000000000ffff00000000fe8000000000000000000000000000aa00ffffffffffffff8000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000007fffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x13c}}, 0x0) 2m43.221793189s ago: executing program 2 (id=9182): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {0x9, 0xb}, {0xa, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x83, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x1, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) sendmmsg$inet(r6, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="140000000000000000000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000700000094040000820d212aab96bad6cdf92da325000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a76000000090000000701862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000000000000100000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000010000000100000001000000000000001c000000000000000000000008000000", @ANYRES32=r11], 0x168}}], 0x1, 0x8000004) (async) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="09000000000000000040a6fba48703a30a38", @ANYRES32=r5, @ANYRESHEX=r3], 0x3c}}, 0x0) (async, rerun: 32) r12 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r13 = fsopen(&(0x7f0000000040)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r13, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) 2m43.111098567s ago: executing program 2 (id=9183): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') close(0x3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xd0, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x8001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x68}, {0x8, 0x15, 0x1a6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0xe7}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4008015}, 0x4) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1cb) close(0xffffffffffffffff) 2m42.852347986s ago: executing program 2 (id=9190): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000003000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 2m42.79180279s ago: executing program 2 (id=9192): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) chdir(&(0x7f0000004340)='./file0\x00') r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) write$FUSE_INIT(r0, &(0x7f00000066c0)={0x50, 0x0, r1, {0x7, 0x21}}, 0x50) read$FUSE(r0, &(0x7f0000006740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000063c0)={0x10, 0xffffffffffffffda, r3}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x13cf, &(0x7f0000000040)={0x0, 0x4ea1, 0xc000, 0x1, 0x28b}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='ufs\x00', 0x204001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="4d73d961090f7f89d3f8fbf8684d1f7c2b9d2c8e7a2f18713ce2be9c", 0x1c, 0x0) 2m42.652382902s ago: executing program 2 (id=9196): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x70}}, 0x8810) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x1, 0x0, ';\"'}]}}}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000000)=@ax25={{0x3, @null, 0x2}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x80, 0x0}, 0x40) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x66, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$EXT4_IOC_GETSTATE(r9, 0x40046629, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m42.459255934s ago: executing program 2 (id=9199): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') close(0x3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xd0, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x8001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x68}, {0x8, 0x15, 0x1a6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0xe7}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4008015}, 0x4) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1cb) close(0xffffffffffffffff) 2m42.343026774s ago: executing program 41 (id=9199): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') close(0x3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xd0, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x8001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x68}, {0x8, 0x15, 0x1a6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0xe7}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4008015}, 0x4) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1cb) close(0xffffffffffffffff) 1m50.131717285s ago: executing program 0 (id=9945): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x10, 0x1, 0x9, 0x7}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffe) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x100, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="28040000130001000000000000000000000000000000000000000000000000017f0000010000000000000000000000000000000000000000020020202b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x428}}, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2000) fsetxattr$system_posix_acl(r4, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 1m50.069617667s ago: executing program 0 (id=9947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x40, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5e2d6d5161ffdb78}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) r1 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000080)=0xd46b) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @empty, @remote}, 0xc) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x27, r4, 0x0, 0x7, 0x4, 0x78, "b04cb8516332732032c05df268ad2e43d8761c9726a891c5214f8f37642c507c9619c515dc482d48c286e512aee8cb1f03aba227cc9acc04fc0aa96b0562d3", 0x1f}, 0x60, &(0x7f00000001c0)=[{&(0x7f0000000440)="08b2ff69533009f581e3f2941851143f9390d3fc55ddc6a34f734de4e2b66c8870a5211d1a1aa940dd52072bd163d3df59a1bee6e05a2387cb5dbc3444fc1bb9e7b045a387f81a7509a0901328d600c3ddac95c21e17dc832d25868c8b0b0781a89d506161d8bacb32af45bdf0c5e4d77389", 0x72}, {&(0x7f0000000140)="adb7fdf8c0c2fcb8d82e819bdc870fa6927dc1b69e32ac54496e0a2dad3315ec8e6132de", 0x24}, {&(0x7f00000004c0)="ff0b3d8638baae744f14fdd64100a494c096697da35c20b5ffd563f20c5d7b87cb4632cbcef5a80285d1a379c3c1a2570549b9d552cd7c3cc39c5b92afcb8b5995c0a927fdf861d8557f8a261c736b6065448641f93f0e8fb35b361a0faa7d6478ede3de0ee4e6b52f660b46f87b91b6c74a6ab1ea020e0b11df8fdf6823f35a3d6ec8504beabdfe647e5b", 0x8b}], 0x3, &(0x7f0000000580)={0x78, 0x6, 0x7, "fadf61c0cf8b48e8a9fabcbed6f48b02763c6c8c8ce8c1935a80bc62e7db375f3cdd7a32005df7e6d9d535ff9c8710399261ad142a9913cf0fe725abede58bed956eeaf298a15ce5e237a8bfd479b16353e1a94fbf51cfe82323f5f1e2b4a8860b7a90700453"}, 0x78, 0x4000000}, 0x6062d557c5c30179) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, &(0x7f00000035c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000080000000a40ec82e62e89037982dbd0acb26af540aaf1194d9f2068fe9fdd1f24dc32e55872f7a998c26acc216d5825cfbf20dc9a65483b1de15dc9f8727cc3d34f6dcb96895823be6e8dd2251e1bba3e648284ef4a45bd78345245907421bce3994c99c4f58b565bad94da3db28c77739ff43b8c6c043ba382dd18c9be2551ca9f3ed521cb993e54b422309d41b869f34902f7148bd8bb96a2f7d84ced83e3548b7a899563b5a35c278d5a7a11ed0f96153b67b05ed976aa02ba888a37ca35671dbf181581a193ceb0e0da879a86e557ab66f6d444de413c9dbe1f95798722a6844e5bad4fb40eaeab18b4ba54a913724ab1839272a6f5312f59c34a19fd4a866aedcd21a3657150b6bb81ca225647cbc29b5e60aa76bce5e6f46544c07d95aa65c1e759513891009f79c28ca00"/325, @ANYRES32=0x0, @ANYBLOB="380904000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r9, 0x29, 0xcf, &(0x7f0000000600)=0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) 1m49.131753688s ago: executing program 0 (id=9961): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000180)={0x24, @short={0x2, 0x3}}, 0x14) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) bind$802154_raw(r0, &(0x7f0000000180)={0x24, @short={0x2, 0x3}}, 0x14) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') (async) 1m49.060139549s ago: executing program 0 (id=9964): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x49, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000001080)=0x8f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3f}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x49, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_TMR_START(r1, 0x5402) (async) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000001080)=0x8f) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3f}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) (async) 1m48.978579327s ago: executing program 0 (id=9967): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) epoll_create1(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) syz_open_dev$vim2m(&(0x7f00000000c0), 0x40025f5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a0a0102"], 0x14}}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @broadcast, @empty}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x11c, 0x24, 0xf0b, 0x70bdab, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1744}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x32, 0x1, {0xff, 0x7, 0x7ff, 0x7, 0x1, 0x7, 0x30, 0x4}}, {0xc, 0x2, [0x4, 0x5, 0x2, 0x6]}}, {{0x1c, 0x1, {0x1, 0x6, 0x3, 0xc9, 0x1, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x3, 0xb, 0x1d8, 0x2d4d, 0x2, 0x2902420e, 0x7, 0x2}}, {0x8, 0x2, [0x6, 0xed9]}}]}]}, 0x11c}}, 0x0) 1m48.911244473s ago: executing program 0 (id=9969): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) (async) listen(r1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="d29f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e004610a660010d619f74dd4c30e0", 0x95}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x2, 0x0) (async) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) (async, rerun: 64) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) (async, rerun: 64) sendmmsg$inet(r7, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r5, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x47, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x64}}, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="666d320df552d902147a8c2dcd643d", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grXd=', @ANYRESDEC=0x0, @ANYRES8=r0]) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000006ac0)='./file0\x00', 0x0, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r8 = socket$kcm(0x2c, 0x3, 0x0) close(r8) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="1d1b27bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xe8, r10, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xb0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3812110ee559824f2d2aa1f028887f390a7a7a80c76fa05c680158f33e989734"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000810) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) 1m33.820945692s ago: executing program 42 (id=9969): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) (async) listen(r1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="d29f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e004610a660010d619f74dd4c30e0", 0x95}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x2, 0x0) (async) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) (async, rerun: 64) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) (async, rerun: 64) sendmmsg$inet(r7, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r5, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x47, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x64}}, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="666d320df552d902147a8c2dcd643d", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grXd=', @ANYRESDEC=0x0, @ANYRES8=r0]) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000006ac0)='./file0\x00', 0x0, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r8 = socket$kcm(0x2c, 0x3, 0x0) close(r8) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="1d1b27bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xe8, r10, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xb0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3812110ee559824f2d2aa1f028887f390a7a7a80c76fa05c680158f33e989734"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000810) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) 1m18.041887279s ago: executing program 6 (id=10446): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x610800, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000140)=""/71) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESDEC=r1], 0x48) 1m17.981250527s ago: executing program 6 (id=10448): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xae, 0x7fc00100}]}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x684580, 0x0) ioctl$KVM_NMI(r4, 0xae9a) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000080)=0x130418, 0x4) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x40890) 1m17.09416104s ago: executing program 6 (id=10461): clock_gettime(0x0, &(0x7f0000000000)) r0 = mq_open(&(0x7f00000003c0)='\x00', 0x2, 0x0, &(0x7f0000000400)={0x917, 0x2ee, 0x8, 0x5}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000440)=""/97, 0x61, 0x80, &(0x7f0000000500)={r1, r2+60000000}) r3 = epoll_create1(0x0) epoll_pwait2(r3, &(0x7f0000000080)=[{}, {}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0x401]}, 0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) splice(r3, &(0x7f0000000140)=0x1000, r3, &(0x7f0000000180)=0x6, 0x7, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}}}, 0xd) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000200)={0x3, 0xb, 0x4, 0x1, 0xf30, 0x6, 0xaa9}, &(0x7f0000000240)={0x1000, 0x8858, 0x7f, 0x1, 0x9, 0x0, 0x5, 0x200}, &(0x7f0000000280)={0x8000000000000001, 0x7, 0x81, 0x0, 0xebc, 0x42a, 0x74, 0x1}, &(0x7f0000000300)={r5, r6+10000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x1]}, 0x8}) 1m17.079158556s ago: executing program 6 (id=10464): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r3, &(0x7f0000000240)='./file0\x00') r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2050}}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r9, 0x1, 0x0, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000040)={0x3, 0x0, [{0xa02, 0x0, 0x1}, {0x384, 0x0, 0x100000003}, {0xa9d, 0x0, 0x4}]}) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x12, 0x11, 0x67, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m16.068602436s ago: executing program 6 (id=10482): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000f40)={{0x80000000, 0x0, 0x0, [0x5, 0xfffffffc]}, {0x80000000, 0x0, 0x4, [0xffffffff, 0x3ff]}, 0x2, [0x1, 0x9]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x4080, 0x104, 0x37}, 0x18) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) execveat$binfmt(r1, r2, &(0x7f0000000480)={[&(0x7f00000002c0)='#! ', &(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='group_id', &(0x7f0000000380)='-$:*-\xb3]-\x00', &(0x7f00000003c0)='{])//\\$-\x00', &(0x7f0000000400)='*\x00', &(0x7f0000000440)='memory.events.local\x00']}, &(0x7f00000006c0)={[&(0x7f00000004c0)='rootmode', &(0x7f0000000500)='/\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='mounts\x00', &(0x7f00000005c0)='memory.events.local\x00', &(0x7f0000000600)='allow_other', &(0x7f0000000640)='user_id', &(0x7f0000000680)='/dev/fuse\x00']}, 0x1000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r4, &(0x7f0000001900)=""/4079, 0xfef, 0x66) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) sendmmsg(r5, &(0x7f000000bc80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002200)=@in={0x2, 0x4e22, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000002340)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x8040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 1m15.600986871s ago: executing program 6 (id=10492): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x88b81, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x21, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d80b54d, 0xc574450d1af7e9bc}, [@IFLA_PHYS_PORT_ID={0xfffffffffffffdca, 0x22, "f12848e43aa137528537a29e94a1961d91f9adb42c1e9d67ce699f4f281142ec"}, @IFLA_IFNAME={0x14, 0x3, 'wg1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4044) 1m15.5421426s ago: executing program 43 (id=10492): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x88b81, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x21, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d80b54d, 0xc574450d1af7e9bc}, [@IFLA_PHYS_PORT_ID={0xfffffffffffffdca, 0x22, "f12848e43aa137528537a29e94a1961d91f9adb42c1e9d67ce699f4f281142ec"}, @IFLA_IFNAME={0x14, 0x3, 'wg1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4044) 57.50949934s ago: executing program 5 (id=10711): syz_usb_connect(0x6, 0x1f2, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e0, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xb, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x40, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef87"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 56.971365563s ago: executing program 5 (id=10721): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='schedstat\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001300)=""/4112, 0x1010}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x100, '\x00', 0x0, r0, 0x5, 0x8000001, 0x1}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000034b8d0a97b4f22a90bd57945f0041a911da7f9ce2b803718d3e9c1ae925e28b6dc0780a5189b4fd3de00005c3d82799b6addc084bbb4b3f5e5a26bd46647ec467048f408cfe3779240fd31089ebca007d9"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x6, &(0x7f0000000080)={0x10, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 56.08092405s ago: executing program 5 (id=10736): socket$netlink(0x10, 0x3, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0xb4, &(0x7f0000000080)=ANY=[@ANYBLOB="5bb86bfbe4bbaaaaaaaaaa29080503032732697453e698e62a34bc00f12c556e67fb1cdeaa94391e0d372fc9c280cf3651ef8275c7aefd07da30ae420d371c6741fa2e6eb4097604ef4dcc4e9aa573b4e503e0cf7f5543361689ff2c3f46bf7496608057a5374711a50ad37aa3df04af508b5fe83a0938a75bdc922863a02a4b"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e24, @multicast1}, 0x2, 0x0, 0x4}}, 0x2e) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) socket(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0xd) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendfile(r6, r7, 0x0, 0x2000fb) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r9, r10, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) 55.009251741s ago: executing program 5 (id=10752): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5"], 0x7c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004340)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x38, 0x1, [@m_sample={0x34, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9030"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x4000800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x5}, 0x10}, 0x94) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 54.690107939s ago: executing program 5 (id=10757): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf9ffff07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x200, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x84, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) 54.201528792s ago: executing program 5 (id=10760): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c01000010001307000004000000000000000000000000000000ffff00000000fe8000000000000000000000000000aa00ffffffffffffff8000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x13c}}, 0x0) 54.098892729s ago: executing program 44 (id=10760): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c01000010001307000004000000000000000000000000000000ffff00000000fe8000000000000000000000000000aa00ffffffffffffff8000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x13c}}, 0x0) 10.529532024s ago: executing program 1 (id=11454): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@bridge_getvlan={0x20, 0x72, 0x301, 0x0, 0xa6ff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00}, 0x0) 10.528897248s ago: executing program 1 (id=11456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000022850000000e0000003f0001000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000100)='./file1\x00') syz_io_uring_submit(0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000002c0)="c4e21dbd78c7b9160900000f320fc7720766baf80cb8aa26ce81ef66bafc0cec66b82d008ee866bad104b06eeef77a000f01c47397c4e37568160d", 0x3b}], 0x1, 0x2, &(0x7f00000002c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000300)="0f0d09670f01c46f650f0137baf80c66b892c7f78866efbafc0cb000ee0f01c936f20f5f7006f20f0056ac66b8010000000f01d9670f659c4a7bdea0700000", 0x3f}], 0x1, 0xb, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.320266084s ago: executing program 1 (id=11459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xe, 0x0, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'wlan0\x00', @remote}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100) 10.180987074s ago: executing program 1 (id=11462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 10.179562384s ago: executing program 1 (id=11463): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x10001, 0x0) chdir(&(0x7f0000000300)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @mcast2, 0x7}, 0x1c) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x620, 0x5, @mcast2, 0x5}, 0x1c, 0x0}, 0x4004840) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r4, {0xe, 0x3}, {0x60}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x40004) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000040)) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r9, 0x40045402, &(0x7f0000000380)=0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x400, r1}, 0x38) 10.00010807s ago: executing program 1 (id=11467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028d80000bca30000000000003403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61144400000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="2e2e660f38823e0f4051800f01ee0f01c3650f01c22e0f7966000f7980e3902dd9b8000000000f23c80f21f8350c0020000f23f80f8800000000c4c1985534ac", 0x40}], 0x1, 0xb, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.050911543s ago: executing program 3 (id=11588): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r2, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$I2C_PEC(r0, 0x708, 0x10000) 3.050650167s ago: executing program 3 (id=11589): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000034b8d0a97b4f"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x6, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 2.74027301s ago: executing program 3 (id=11590): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x200, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x84, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) 2.568994552s ago: executing program 9 (id=11592): syz_clone(0x1e18ae000, 0x0, 0xfffffffffffffdbf, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) sendmmsg$sock(r1, &(0x7f0000004300)=[{{&(0x7f0000000000)=@ieee802154={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="bbc8757143506b9f34ee5a6a0d35758c229ea6038cb4957cf524dbbee0f802d5d8e0cd1b6fc4ec93ff9175ca6435", 0x2e}, {&(0x7f0000000200)="566f0ca8eb97b70f51b702cd59d441d52a724bf8c2eea5554335bf6fd337caa65e0e4a1ba19bc44e14e2c2921221165800eea715134de05a8006fa108cfd2bab97fb2028f4df2ebe1597e3aa", 0x4c}, {&(0x7f00000003c0)="5d706c4ae4455be93d860ef2bb97d5b81052a20ec9d4c77d7e9b7d19a36b1e758c386b78840f78ab13f60af453bc52366b7946e99f1ac050e58ab21cdbf5d6e012bd1160a3225951cf39554f50fb00da73ce0cd408836076404897888219725f62db6ad16056c972d9bc490efa5efbfd47bfaab4d7b1e2376b0c21201eb7a21004894d137911a9795e144102264de09604cfdde41ef45edeea80bbe36a47df6dff7bf97b21fa39e88a241d2f779106eb2bb3b9b937293027669419456f6d1bbd9090a3b336fcd2f35d17", 0xca}, {&(0x7f00000004c0)="5aca94105f6c1d9b69871fa9628d410033348584452e5a47b7fe058e4a2989900b3058fea3b6ca3090846c2c7b917cca5e0f1e16cc986ca8deaff4edba2533eac95d870e87c7c6a9f8769eec9bfa4776ec5fabb790d7a3e10aaf869990de76af4ccf8c3e8fe038233f92510ff5aafc64178b340d581f22092bd20f91e9efd4cdb948df8b64077c04d027e4b46defe0fc4b16db0330e767a8e6bb49edd4e7f9d4f7df7f7a67e1c33435bbd5e4c5599edf8f779f4d0b0fb555acdfeacbfd76810cb1031529950ff9984ef8cd3da70153e0fea0f54968430ed8454a81b59317fc3a9180dcba4c69daf02657cad2b1c0077bcd4120e5749419", 0xf7}, {&(0x7f00000002c0)="4d93baedbc1ac50b73fc05bbc8ee11fd8769227b80b6ac88855c86d1af6d0608bc0d04cd9b7675bf57232a49ba0fdd34f32a6a09098193e10839cbbf258e1c2483fda146f5b18ec25c7486d841583f95be46a5bdf28cbf0b32b180d2bf88979ecce1215a6a1aad", 0x67}], 0x5, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14}}], 0x48}}, {{&(0x7f00000006c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="c7ec7d2dcc14524a9c26278e35140c649309cb448ccc9c6d10ebd88a56b5815ff12f823bb75ea99ac4a7369bfe2cbc819665b78da040bab2b31a691c97dd612e62", 0x41}, {&(0x7f0000000340)="e17c759ceb889bde3bf38491cfc36d517dc0b81ac1d5383dfc3a4964aec3782cf3c650c3d8", 0x25}, {&(0x7f00000017c0)}, {&(0x7f0000001800)="d5df49dc02cc925bcf9e08938c8e0a049e1af855de222e8216d834f90693a226d076b3bb191b2eb6dfaf89d43884b1261b50da020228edb30db139fbc27edf83995fe819a0b42ab30e8fea2e58264aff8a70c4ade3dd98aed48f1686b16b6e1daf71296f6b004f5f117bac8b6cc78bf772a5e54724dd60d0cefad688a0", 0x7d}], 0x5, &(0x7f0000001900)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}, {{&(0x7f0000001940)=@caif=@dbg={0x25, 0xb3}, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000019c0)="cb5e6de8a5e3b15dbe60d27e00dd63a492af6744886d75e681f08c044ed1aa0702574be1194a256659fe61a1a62fe95c4b65a93e9e04bd842a52c5aadf7fda9e0d3d8742e3de1cca900f885a8738100ac8125df8a060b0e2eff4db918e78caa84b1d494d9294040eefcc855c221b10d3214f805dfb738141", 0x78}, {&(0x7f0000001a40)="73e6ea0d64a177ef584b0d87c32b4c833cc1f80ec92ea33d5ea636ecc48dedc834dca7c57acfd61440d90c076551d112b022e8ccd3f8323aeadbf6f43ef9583a98a4e9edc4954ee2ea46bc54e348e28e138b58a7438dcd5e91a7dbc572a5782731d714715e665e0b496ab1d6474bb36e9eab8c9535bcf0fa941997402f48a794e68e32fe8317b094e231b506f80a612ccae522ba231699322f79421664c93d27ec80337416b5c6e291d603516df4f1fcb56840e2063c663c61593cd0009fe085186c8b10ba10", 0xc6}, {&(0x7f0000001b40)="eaac2f0920814ef2e50aa3b062aaafe8ea801fe3b70d3c556eda82ad31f0a0920cacc444ebba38675d2be6da9323a8a00213f3", 0x33}, {&(0x7f0000001b80)="083dbacbb6d47b58ea7e8ab8f518a6f16167b4a19dc17f0b938735ad3ce945887265b93794fa51ca8179522bc7bc87fa3f46f594c2874f0713117a2270b529cafe057673aba44cd63203aa58cbd387d55a072a00b98ccc29db71f54b5a6fdb9ec1b1420d6f807886d3f133cdac3b266191", 0x71}, {&(0x7f0000001c00)="f320e83a968ffa90cd26224eb6978c5f9a476eb7b279739c31a0186248481141418e6d4509ba2c303f76bcb8440a6293f6493a9d4b9e9d96f1888e39a8283be045f0c24032a91ccd75f6523c15d916390fddddc40790f7ef6c40d1fed8f337d49ec741a7fc6839369238aedd4943de43836f0fd09355cb9cdede43898c3d32d17e145c983428008293463478bf86", 0x8e}], 0x5, &(0x7f0000001d40)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x4f7458e4}}], 0x48}}, {{&(0x7f0000001dc0)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'batadv_slave_1\x00'}}, 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=[@mark={{0x14, 0x1, 0x24, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xffffff46}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}], 0x78}}, {{&(0x7f0000001f00)=@rc={0x1f, @none, 0x6}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001f80)="a74e4941f2", 0x5}, {&(0x7f0000001fc0)="03bc82277e7c0e86bb5fdb82a951d69e23b5e57a271f913a28ef956eeb2608c2f6fd7b709b01f61ef834fed97f58329279a9a18e6f67da2af952faed32fe06d6dd50304f77811488594bcccf6309d78416982ef27a63089600b66a", 0x5b}], 0x2, &(0x7f0000002080)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000020c0)="c1dbc166ac6ecbcdd8592028381fb4e865e566253557b577d5892e1d3f2e9d99dba72e659867990941000c97e200a71b6b760c70a6e733da3e2a0b2b51ef8738312e27c71b0f6e4f6f3f5efdbb28192d79b67f3a7d5e38906f598135b2515da1b85f814b8a3ea155afef37f785352eda352350d42077724ead42cece9d48f971e9caeaf8a59acf314c3857b999766fd18aece2ecd85cc226de4bbee56c4441f709b5fde28ff9e4669644", 0xaa}, {&(0x7f0000002180)="66540f2ec494b93e4c2868a42e38a5efdc193467358b03adad57ca0a0ef6930cb61fe9f63a754c2bfd7f68acac4be63a3b6200535a24edec8bd300b8c1259bd2f0ef271afc0fddd38a4f0bea8a62bf279e2ff791f9ca0e2fcd26e6e45d842e2919380e6059672100f3dd837f51cdbc59d8371730aef7a866c3c5fb8190b65e5db5ea56dee609c25ce2a23754e09ea2886a8ee0c493b1ecb596aa740de847d8a14842c44d0b4561d6f8ed335600364e6afcfa18056dee54d8449f", 0xba}, {&(0x7f0000002240)="92b7c8eb003aebfc3ec5cefa4d72e804bbd3d56379b8667256225234d30b82d5425061e47c71317003f22b8ecdae360e238033e66a0de438598615d996e8bd67ce06228caeae934a9c8c2139f9ebb40ea90a4c875f22f128625efb9c58d82bc6083cb2a68c7cc135f54a3fbb51ef1fb0b475c46c38ce10175cfc93f8f04b9cda24778140e2b049954c5c52488e8f82e040a2a958ac4e029da560b371ad05f164b2825161c71e8d00e4f016f2c4236155f9862447126d0d3ad8c054936d86240ec0349784d18a111ee1f6ae3da0152bd0073772e50f3523", 0xd7}, {&(0x7f0000002340)="9ae1f93a65475b01ab1f6a444b44d05e2b61e4", 0x13}, {&(0x7f0000002380)="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", 0x1000}], 0x5, &(0x7f0000003400)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffa}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff00000000}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14}}], 0xc0}}, {{&(0x7f00000034c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x80, &(0x7f0000003880)=[{&(0x7f0000003540)="a0a467630704d756d206759d63c480f5c44ceb78db2ffaef31e62e02fb8f732408534b1b6f985857b236a532a682f30f5b99f681", 0x34}, {&(0x7f0000003580)="d423c5baab44c82d4cd2382d90ddcf6d5cdbd0d6402298e12d48394c18bedcf506d6ac15953fd3435f99d824bcd98691d483a6ce59c3650fd591be63acbd8881d5b1d4de91e6ad4df31c6cab5970602f24aae13444030ff00781183845641ffe72ce2b3d36c848e3b1512f300d4c02467f852db6829214cf17a35429070a11d53df8ee2e", 0x84}, {&(0x7f0000003640)="037fe2642cc4772fcf9e3a83bfb8db0e0b30457791f5908d24b52daed923dd0ab22f7912a2b166c5af18984cab9a5f150d8b06", 0x33}, {&(0x7f0000003680)="336542bd8cb98a9d4f7f1af61d2ef657a39b1db3c232b06cca08e501e86d019ab4a85b01db60c2109e45b3977b292e09174fd7b99de1f3037c0071996a6ae99a8d17cef67ead21c93ef6e710a4ee80a92f199a327bd94d27552f636cb93ee9382539a16477411df3befa886bfd50d4a2d71d4445c3acca788c089f133a741dadf14dae44c7d15757f4fd26a3982e", 0x8e}, {&(0x7f0000003740)="1c9888303e23390f13a33a3550a7bba9213f5270c7eae3cb7a307e78f729a19a48a554a62968cdd3a562048f52eb911f90195cc4b6d7053195dbf35c642295fbb3951df42a7478e764bf23da5549acadfd6321586d48c877ae5099bc3920a8f4fdac74474a4ff4b24d7934b1b6062458926b60a8d403bb1ef260fb5f71214e278043c790b0f407c1e3b94fc8b9776cc7b4beea4e85e663729cc24d421576626df49496389d5c6315bc1de15570", 0xad}, {&(0x7f0000003800)="e0fa32299a40a7ad1780c337b61fd35458ea410808b29640e0141f427b46da52f18cd8c3ce23ad98c864031121a1f03dfd90746aeddf81b83ef04cb7e9c8b0d2d20c752bf2aec508", 0x48}], 0x6, &(0x7f0000003900)=[@txtime={{0x18, 0x1, 0x3d, 0x6256}}, @timestamping={{0x14, 0x1, 0x25, 0xcf1a}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x60}}, {{&(0x7f0000003980)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7ffe}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003a00)="a878b7c50fe77d8f4f7b01bbbfa8a01604fbdcb40ec417b0649d03920f9b6b406b6cb2c010df1d7d8846f1d3bc5a263458dc8f85aeb90cdc210d038cb24cd767b6d2b2f47f84c7f3707b9f8481183c95ffca63e1c353279e12f18e5f5795d0ee0a045089792c5ffdbe3bb6beba3e3bc4629bb3f57dee9c9652f96d0d3ec1727ecc07c5d30a06ef91aac14411c1396dc7eb97f3f722fc35f7f9937ed4349fbdbaa387ff27455238961677fb92a6", 0xad}], 0x1, &(0x7f0000003b00)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}}, {{&(0x7f0000003b40)=@l2tp6={0xa, 0x0, 0x4, @mcast2, 0xbcfa3a33, 0x4}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003bc0)="a9571ff62ac67998971350201da41540240d9c3642f4c0f8b16fbc38dfad1d646d959b12409765a91ab45c9b05be2c7bf55c403ac6070318a6c98c67e604c1d51328cb334bb0402a3f70fa610012c5f52c6f5ae9049891e3049a53d7befcb506b985150dcb6ec96e8d2c374158da4c2f92d5ed707dc607e62ec9db9519cd6d4816a4085155bd9f9a8f1c4f", 0x8b}], 0x1, &(0x7f0000003cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}], 0x60}}, {{&(0x7f0000003d40)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0x80, &(0x7f0000004200)=[{&(0x7f0000003dc0)="e57cfe049c05f10c94067387e6fc9c4dfa1c7a8fa158a267829053921eb603f821766dd37c5ea627ef9a67e4cfa99febc5a5999d3459f3d4f0d8ad8977cb0b61e7", 0x41}, {&(0x7f0000003e40)="2d2f37093090133ae44d2cdc0c553bc1f9dbb44497c6a342463ccf4e322375768f57492cc032772309e03b2db5968ad13af6283bb848ab08fb69bb3b554cd8024ea0e6e23cc1f204f750", 0x4a}, {&(0x7f0000003ec0)="3c3ab911370106d6903b4adde891c50087a84ab7266f997359c2eca51320924ae75befed7153a4707d0f07cf3fe1f00cbbcc70586751d8dcfaec2b6e809ef3d9c312a81ce949d264b0f26cc19b76432b148a9347ddfe69b701d0c89718942778523bf2683c0c8722855dd6fbd777c29fb6ad070d0dbb371802ad1d2695c97cc06a44f27417a5768eac430987b1607e104d", 0x91}, {&(0x7f0000003f80)="92e601be1861429c22068c714dd66a91b81464e12ed62b466b5d9468b34130f02dc70112b14a2b567f91df6cee65bbf4ef7348ca6afedb257c4123fe098b33ba8c5a897937835ee5cd3cf793855b0c8c0652dcd2c148d1fa3b2e74ff9f0dfa7588019d76a6fd29d248dacff7aae57001b97514e0ba885fdb63c6b582723be444bb8e21fc0157b4e275fce1e61e2cbd8bdb330bd0b64d83e55783dcca2a9579535b06", 0xa2}, {&(0x7f0000004040)="1575b1e9f33d8b127af8ec4ec49113a201f04414492a5bc0c8d47e30111405af613396010b70a52b274f88744c5953bb9a62ac9bb3e8ff364ef1f821c22194edf327458803af04f891fa369fe2a9a896c9b403545fa511d937b13a8bbcaec8e369e2a316cdaff1f3308314793a4d6646440d24038a79aae62ccb84451e3e9b83d1d113835c5a36939f40e89b947dd7c8220e43dec0775c6bf202c1e6fc084f3ef2e5d7c2c93b4078992c8b5cf3dc1acdc9", 0xb1}, {&(0x7f0000004100)="c65d6d0158d86a322e42773aa6187b9a26f419993c4154695df175232f75f5deaac14521f5139f38c2a6a4f3f46dac083fd20bbe3335bff9ff26e79f449ef1b2c42e055b94bb14d408f33e47d957632084387355fbcf6f7c96bf3761b911de6d24498a6314c899d330005306a7f94014a4db669579da0c7f36e7a541f93f1c27c60cf74d76de75f80dc0b216a74075cc2efed05a263c634cc5329fa4f5c3672678106ad068e9618878bfa494c23835a24839692481549a835d205eba4f2b7d1a5af8c47b87786113e2f24f360fdb25b82b03cce6d8940790cc41c3f95acca88b45fc11e39bac4ea4", 0xe8}], 0x6, &(0x7f0000004280)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14}}], 0x48}}], 0xa, 0x4000800) 2.460618851s ago: executing program 3 (id=11593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300070300443c00030a010102000000000000000000000000ac1414aa00000000ac1414bb000000000000000000000000ac1414bb00"/130], 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605"], 0x58}}, 0x0) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x8002}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x202103) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f00000002c0)=0x3ff) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r4, &(0x7f0000000240)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, &(0x7f0000000840)="cb958cd3f54d34d2358d592d1fa34a388c863b77c4900f5b59f4b7851d01e22e8fde0b6fa7a4eda063a01a5209b91a7032e88f83a566957e07d0ec35eba2f6b96c4c8c34191f840b542c66ddf192cee2c6c8f3a3d14466222f23496ce1cce6aeecd10fc9310617b6a937e6e101", 0x6d, 0x40000100, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) io_uring_enter(r1, 0x13c2, 0x0, 0x0, 0x0, 0x0) 2.340846869s ago: executing program 3 (id=11594): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) (rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040), 0x800001, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) (async, rerun: 32) brk(0x200000ffc000) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x64, &(0x7f0000000100)=0x3d37, 0x4) (async) r2 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x101000) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000001c0)) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x80400, 0x0, 0x80}, &(0x7f00000001c0), &(0x7f0000000280)) (async) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) sendmmsg$inet6(r1, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x0) (async) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r3, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31253733", 0x3f, 0x2) (async) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0xa14767df0dcec01f, 0x0) recvmmsg(r1, &(0x7f0000007540)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x12003, 0x0) 1.910240914s ago: executing program 3 (id=11596): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000140)='.&.-!+}\x00', 0x8) (async) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000140)='.&.-!+}\x00', 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080), 0x4) 1.773802185s ago: executing program 45 (id=11596): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000140)='.&.-!+}\x00', 0x8) (async) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000140)='.&.-!+}\x00', 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080), 0x4) 1.71543064s ago: executing program 9 (id=11598): r0 = open(&(0x7f0000000040)='./bus\x00', 0x12d680, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) keyctl$join(0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b40)=0xe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) close(r3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x0) writev(r4, &(0x7f0000000600)=[{&(0x7f0000000380)="ba", 0x1}], 0x1) r8 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1000002, 0x80c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0xc0844123, &(0x7f0000000180)=0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r8, 0x4144, 0x0) syz_clone(0x84000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) finit_module(r0, 0x0, 0x1) 1.188344632s ago: executing program 9 (id=11603): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x200000, 0x0) open_by_handle_at(r0, &(0x7f0000000540)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x8, 0x8000, 0x80000000, 0x2237a78c, 0x544, 0x1}}, 0x2) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./file0\x00') ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x9826, 0xe09, {0xffffffffffffffff}, {0xee00}, 0x3, 0xf0}) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300), 0x21a0000, &(0x7f00000003c0)={[], [{@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@euid_eq={'euid', 0x3d, r1}}, {@measure}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x39, 0x35, 0x65, 0x39, 0x61, 0x36, 0x33], 0x2d, [0x32, 0x61, 0x37, 0x66], 0x2d, [0x37, 0x64, 0x64, 0x35], 0x2d, [0x31, 0x38, 0x32, 0x37], 0x2d, [0x65, 0xf3, 0x32, 0x66, 0x63, 0x30, 0x65, 0x37]}}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) flock(r2, 0x2) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x104005, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000480)=[{0x20, 0x9, 0x0, 0xfffff01c}, {0x6, 0xfc, 0x1, 0x8000}]}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000040)=ANY=[@ANYBLOB="0c7700000100000081"]) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000500), 0x80020, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.186603005s ago: executing program 9 (id=11604): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) r1 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x207}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5a, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) ioctl$CDROM_SEND_PACKET(r7, 0x5393, &(0x7f0000000180)={"3fdbd0fc80d18abba6b6d797", 0x0, 0x0, 0x6, &(0x7f0000000100)={0x46, 0x0, 0x40, 0x3, 0x0, 0x1, 0x0, "571b0318", 0x2c, "8d33a52a", 0xff, 0xa, 0x9, "d7c2c6", "c8ece458d7afc3623caf286a1fb57d1c222123372d2c1dee838e89344671a0fee5bb7962b62a3b23e1848b7d8aee"}, 0x2, 0x2, 0x1, 0x0}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bind$packet(r9, &(0x7f0000000200)={0x11, 0x7, r10, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a31000000000500010b18a2eec50f32fc80060004504e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) recvmmsg(r4, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/48, 0x30}], 0x1, &(0x7f00000008c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/99, 0x63}], 0x1}, 0xf5}], 0x2, 0x40000121, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000000)) 969.854695ms ago: executing program 4 (id=11605): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000001480)=0xffffffffffff7fff, 0x8) fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x10, 0x8000015, r2, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) connect$vsock_stream(r0, &(0x7f0000001bc0)={0x28, 0x0, 0x2711, @hyper}, 0x10) 969.487732ms ago: executing program 4 (id=11606): syz_usb_connect(0x6, 0x1f7, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e5, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x44, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x40, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef87"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 390.119363ms ago: executing program 4 (id=11607): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x0, "1f138a0200000095181800c705116070890000000000000400", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r3, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, r2, 0x0) poll(&(0x7f00000001c0)=[{r4}], 0x1, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x22682, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1}) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000480)=0x1) 338.327109ms ago: executing program 9 (id=11608): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 261.148175ms ago: executing program 9 (id=11609): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000025c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$inet(0x2, 0x4, 0x6) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b6"], 0x0) syz_clone(0x6000000, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000004c0), &(0x7f00000005c0)="61f37eec9e8b1468a46f71c0ffb05b8d29cd724be37d4b7f7be394ac24382be5b9d6d18b4247a3a1d868cf861ce47dfeb65dc95552e3cf") r3 = syz_clone3(&(0x7f0000000400)={0x10011800, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000480), {0x420002}, &(0x7f0000000240)=""/195, 0xc3, &(0x7f0000000340)=""/69, 0x0}, 0x89) fcntl$setown(0xffffffffffffffff, 0x8, r3) syz_usb_connect$cdc_ncm(0x5, 0x7d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001020000082505a1a440000102030109026b000201c6c0040904000001020d00000b240600016bdafbc08cc705240027000d240f01620000020c052415ff030905810308000008f30904010000020d00000904010102020d000009058202100001050209050302000205020200"/125], 0x0) syz_emit_vhci(&(0x7f0000002600)=ANY=[@ANYRESOCT=r2], 0xf8) mount$overlay(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080), 0x2050040, &(0x7f00000024c0)={[{@uuid_on}, {@xino_on}, {@verity_on}, {@nfs_export_off}, {@volatile}]}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002bbd7000fddbdf250900000008000300", @ANYRES32=0x0, @ANYBLOB="08006b00f0000000"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x8080) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = signalfd4(r0, &(0x7f00000003c0)={[0x3cd]}, 0x8, 0x80800) inotify_add_watch(r6, &(0x7f0000002440)='./bus\x00', 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000, 0x0, 0x0, 0x6], [0x0, 0x0, 0x5, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r10}) sendto(r4, &(0x7f0000000000)="14247f9dc49194fa5083093346234b49ff6c11a7338135ed69bca2", 0x1b, 0x8000, &(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x2, @private1, 0x2, 0x3}, 0x80) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r11, &(0x7f0000000400)={0x2020}, 0x2020) getdents64(r4, &(0x7f0000002640)=""/154, 0x105) 209.279847ms ago: executing program 4 (id=11610): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x208440) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x8}, 0x8) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000ead8ece34d4576b58bec0000000000000000000000000002000000000000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r4, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101002, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x0, 0x102, "4d2572ce1cedbf10981e10136800000000000000000000e10500", 0x4, 0x80000000, 0x0, 0x66, 0x2, 0x200000, 0x4, 0x4, [0x0, 0xfffffffd, 0x0, 0x1003]}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) accept$netrom(r7, &(0x7f00000003c0)={{0x3, @null}, [@rose, @bcast, @remote, @netrom, @remote, @rose, @remote, @netrom]}, &(0x7f0000000340)=0x48) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x0) listen(r7, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r10, 0x400454d0, 0xffffffffffffffff) 280.36µs ago: executing program 4 (id=11611): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x400) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) 0s ago: executing program 4 (id=11612): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x2, 0x0, 0x8) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@host, 0x2}, 0x1}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd6001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001800010002000000000000031d01020008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="1500040003000000000300004505a8b9e859abc00100000008000e00", @ANYRES32], 0x44}}, 0x0) kernel console output (not intermixed with test programs): pe=1400 audit(2000000507.259:57729): avc: denied { getopt } for pid=608 comm="syz.3.10609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 733.888224][ T616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.226057][ T632] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 734.228580][ T632] dvmrp1: persist disabled [ 734.231823][ T632] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 734.234797][ T632] dvmrp1: persist disabled [ 734.429894][ T644] input: syz0 as /devices/virtual/input/input492 [ 734.439116][ T643] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input493 [ 734.551849][ T657] openvswitch: netlink: Multiple metadata blocks provided [ 734.793275][ T686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10620'. [ 735.392993][ T40] audit: type=1400 audit(2000000508.789:57730): avc: denied { write } for pid=714 comm="syz.3.10628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 735.403782][ T717] openvswitch: netlink: Multiple metadata blocks provided [ 735.447359][ T723] comedi comedi0: comedi_config --init_data is deprecated [ 735.472024][ T723] binder: 722:723 ioctl ab05 0 returned -22 [ 735.503155][ T727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10631'. [ 735.559510][ T40] audit: type=1400 audit(2000000508.949:57731): avc: denied { create } for pid=730 comm="syz.1.10633" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 735.569680][ T735] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10634'. [ 735.571994][ T40] audit: type=1400 audit(2000000508.959:57732): avc: denied { unlink } for pid=730 comm="syz.1.10633" name="file0" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 736.000991][ T752] sg_write: process 259 (syz.5.10639) changed security contexts after opening file descriptor, this is not allowed. [ 736.033066][ T757] mkiss: ax0: crc mode is auto. [ 736.048869][ T40] audit: type=1400 audit(2000000509.439:57733): avc: denied { read } for pid=756 comm="syz.4.10640" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 736.102379][ T40] audit: type=1400 audit(2000000509.499:57734): avc: denied { ioctl } for pid=756 comm="syz.4.10640" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 736.143570][ T773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10642'. [ 736.184585][ T776] openvswitch: netlink: Multiple metadata blocks provided [ 736.366194][ T795] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10649'. [ 737.157405][ T840] input: syz0 as /devices/virtual/input/input494 [ 737.356078][ T851] openvswitch: netlink: Multiple metadata blocks provided [ 737.409049][ T857] misc userio: No port type given on /dev/userio [ 737.411942][ T857] misc userio: No port type given on /dev/userio [ 737.499590][ T869] netlink: 'syz.5.10664': attribute type 10 has an invalid length. [ 737.508038][ T869] team0: Device veth1_macvtap failed to register rx_handler [ 737.832090][ T879] kvm: pic: non byte read [ 737.835831][ T879] kvm: pic: level sensitive irq not supported [ 737.836202][ T879] kvm: pic: non byte read [ 737.844020][ T879] kvm: pic: level sensitive irq not supported [ 737.844365][ T879] kvm: pic: non byte read [ 737.855698][ T879] kvm: pic: level sensitive irq not supported [ 737.856145][ T879] kvm: pic: non byte read [ 737.865315][ T879] kvm: pic: level sensitive irq not supported [ 737.865649][ T879] kvm: pic: non byte read [ 737.871534][ T879] kvm: pic: level sensitive irq not supported [ 737.871955][ T879] kvm: pic: non byte read [ 737.880849][ T879] __nla_validate_parse: 2 callbacks suppressed [ 737.880868][ T879] netlink: 120 bytes leftover after parsing attributes in process `syz.4.10666'. [ 737.887497][ T879] netlink: 'syz.4.10666': attribute type 1 has an invalid length. [ 737.890591][ T879] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10666'. [ 738.264995][ T894] input: syz0 as /devices/virtual/input/input495 [ 738.583452][ T908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10670'. [ 738.634551][ T910] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10671'. [ 738.671499][ T912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33754 sclass=netlink_route_socket pid=912 comm=syz.1.10672 [ 738.675426][ T914] openvswitch: netlink: Multiple metadata blocks provided [ 738.810825][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.873421][ T931] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10677'. [ 738.877215][ T931] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10677'. [ 738.951497][ T936] input: syz0 as /devices/virtual/input/input496 [ 739.187565][ T963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10681'. [ 739.222322][ T966] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10682'. [ 739.295261][ T972] openvswitch: netlink: Multiple metadata blocks provided [ 739.468356][ T988] input: syz0 as /devices/virtual/input/input497 [ 739.574666][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 739.574686][ T40] audit: type=1400 audit(2000000512.969:57736): avc: denied { ioctl } for pid=1000 comm="syz.4.10689" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 739.681594][ T1009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10691'. [ 739.861986][ T1022] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10694'. [ 740.098932][ T1024] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 740.103880][ T1030] openvswitch: netlink: Multiple metadata blocks provided [ 740.126843][ T1033] input: syz0 as /devices/virtual/input/input498 [ 740.486949][ T1127] input: syz0 as /devices/virtual/input/input499 [ 740.717075][ T1153] openvswitch: netlink: Multiple metadata blocks provided [ 740.871960][ T40] audit: type=1400 audit(2000000514.269:57737): avc: denied { listen } for pid=1166 comm="syz.1.10717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 740.900522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 740.943159][ T1179] netlink: 'syz.4.10718': attribute type 29 has an invalid length. [ 740.946548][ T1179] netlink: 'syz.4.10718': attribute type 29 has an invalid length. [ 741.033254][ T1183] wlan0 speed is unknown, defaulting to 1000 [ 741.117533][ T1213] input: syz0 as /devices/virtual/input/input500 [ 741.231519][ T1230] syz.4.10726 (1230): /proc/1229/oom_adj is deprecated, please use /proc/1229/oom_score_adj instead. [ 741.266877][ T1230] netlink: 'syz.4.10726': attribute type 1 has an invalid length. [ 741.313229][ T1230] bond2: entered promiscuous mode [ 741.315702][ T1230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 741.365821][ T1273] openvswitch: netlink: Multiple metadata blocks provided [ 741.382247][ T1230] bond2: (slave bridge3): making interface the new active one [ 741.384741][ T1230] bridge3: entered promiscuous mode [ 741.387436][ T1230] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 741.646462][ T40] audit: type=1400 audit(2000000515.039:57738): avc: denied { accept } for pid=1296 comm="syz.1.10733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 742.110809][ T1315] input: syz0 as /devices/virtual/input/input501 [ 742.323468][ T1329] openvswitch: netlink: Multiple metadata blocks provided [ 742.495964][ T1337] geneve2: entered promiscuous mode [ 742.497942][ T1337] geneve2: entered allmulticast mode [ 742.504967][T15765] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.508606][T15765] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.513538][T15765] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.516772][T15765] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.648780][ T1345] netlink: 'syz.4.10743': attribute type 10 has an invalid length. [ 742.655370][ T1345] team0: Device ipvlan1 failed to register rx_handler [ 742.841130][ T1361] input: syz0 as /devices/virtual/input/input502 [ 742.968359][ T1370] __nla_validate_parse: 21 callbacks suppressed [ 742.968376][ T1370] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10749'. [ 743.039851][ T1377] openvswitch: netlink: Multiple metadata blocks provided [ 743.048720][ T1379] netlink: 'syz.5.10752': attribute type 7 has an invalid length. [ 743.051924][ T1379] netlink: 'syz.5.10752': attribute type 8 has an invalid length. [ 743.171692][ T1386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10753'. [ 743.191042][ T1386] 9p: Bad value for 'version' [ 743.194019][ T40] audit: type=1400 audit(2000000516.589:57739): avc: denied { lock } for pid=1385 comm="syz.3.10753" path="/199/file0/cpuset.memory_pressure_enabled" dev="9p" ino=73138543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 743.328025][ T1395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10754'. [ 743.526849][ T40] audit: type=1400 audit(2000000516.919:57740): avc: denied { getattr } for pid=1402 comm="syz.4.10758" name="/" dev="9p" ino=73138307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 743.542952][ T1403] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 743.576324][ T1407] netlink: 'syz.4.10758': attribute type 39 has an invalid length. [ 743.631018][ T1403] overlayfs: failed to clone lowerpath [ 744.002844][T15765] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.048317][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 744.054302][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 744.058805][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 744.064535][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 744.067484][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 744.076245][T15765] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.111484][ T1433] wlan0 speed is unknown, defaulting to 1000 [ 744.184534][T15765] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.253876][T15765] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.266679][ T1433] chnl_net:caif_netlink_parms(): no params data found [ 744.295858][ T1524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10764'. [ 744.356651][ T1433] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.360310][ T1433] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.364050][ T1433] bridge_slave_0: entered allmulticast mode [ 744.368421][ T1433] bridge_slave_0: entered promiscuous mode [ 744.373912][ T1433] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.377187][ T1433] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.380522][ T1433] bridge_slave_1: entered allmulticast mode [ 744.384557][ T1433] bridge_slave_1: entered promiscuous mode [ 744.414041][ T1433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.420506][ T1433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.509097][ T1433] team0: Port device team_slave_0 added [ 744.514673][ T1433] team0: Port device team_slave_1 added [ 744.606198][ T1433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.609175][ T1433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.620384][ T1433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.626430][T15765] bridge_slave_1: left allmulticast mode [ 744.630192][T15765] bridge_slave_1: left promiscuous mode [ 744.632362][T15765] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.642590][T15765] bridge_slave_0: left allmulticast mode [ 744.645197][T15765] bridge_slave_0: left promiscuous mode [ 744.648179][T15765] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.752089][ T1626] input: syz0 as /devices/virtual/input/input503 [ 744.954242][ T1641] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10771'. [ 745.234333][ T1655] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10773'. [ 745.276435][ T1659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10774'. [ 745.296724][T15765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.333883][T15765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.376129][T15765] bond0 (unregistering): Released all slaves [ 745.383375][T15765] bond1 (unregistering): Released all slaves [ 745.394656][ T1433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.398000][ T1433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.409455][ T1433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.475160][ T1433] hsr_slave_0: entered promiscuous mode [ 745.479146][ T1433] hsr_slave_1: entered promiscuous mode [ 745.483191][ T1433] debugfs: 'hsr0' already exists in 'hsr' [ 745.486040][ T1433] Cannot create hsr debugfs directory [ 745.966116][ T1780] input: syz0 as /devices/virtual/input/input504 [ 745.966174][ T1774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10778'. [ 745.966850][ T1776] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10778'. [ 746.003708][ T1789] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10780'. [ 746.043181][T15765] hsr_slave_0: left promiscuous mode [ 746.045778][T15765] hsr_slave_1: left promiscuous mode [ 746.048202][T15765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.050857][T15765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.053643][T15765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.056030][T15765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.075128][T15765] veth0_macvtap: left promiscuous mode [ 746.077084][T15765] veth1_vlan: left allmulticast mode [ 746.079322][T15765] veth1_vlan: left promiscuous mode [ 746.082661][T15765] veth0_vlan: left promiscuous mode [ 746.170664][T15765] pim6reg (unregistering): left allmulticast mode [ 746.187337][T23554] Bluetooth: hci1: command tx timeout [ 746.321857][T15765] macvlan0 (unregistering): left allmulticast mode [ 746.676040][T15765] team0 (unregistering): Port device team_slave_1 removed [ 746.718886][ T1814] block nbd4: shutting down sockets [ 746.723218][T15765] team0 (unregistering): Port device team_slave_0 removed [ 747.306235][ T1842] input: syz0 as /devices/virtual/input/input505 [ 747.576556][ T1867] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 747.634220][ T1873] input: syz0 as /devices/virtual/input/input506 [ 747.701188][ T1879] overlay: filesystem on ./bus is read-only [ 747.702504][ T40] audit: type=1400 audit(2000000521.089:57741): avc: denied { mounton } for pid=1878 comm="syz.3.10802" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 747.721137][ T1433] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 747.726033][ T1433] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 747.731103][ T1433] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 747.736123][ T1433] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 747.794315][ T40] audit: type=1400 audit(2000000521.189:57742): avc: denied { listen } for pid=1878 comm="syz.3.10802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 747.800072][ T1433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.806647][ T40] audit: type=1400 audit(2000000521.199:57743): avc: denied { accept } for pid=1878 comm="syz.3.10802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 747.813716][ T1896] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 747.832521][ T1433] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.839852][T15765] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.842408][T15765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.850907][T23293] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.853955][T23293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.250416][T23554] Bluetooth: hci1: command tx timeout [ 748.267730][ T1433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.293183][ T1923] binder: BINDER_SET_CONTEXT_MGR already set [ 748.295969][ T1923] binder: 1920:1923 ioctl 4018620d 2000000000c0 returned -16 [ 748.300676][ T40] audit: type=1400 audit(2000000521.699:57744): avc: denied { write } for pid=1920 comm="syz.1.10808" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 748.311872][ T1921] binder: BINDER_SET_CONTEXT_MGR already set [ 748.314835][ T1921] binder: 1920:1921 ioctl 4018620d 200000000040 returned -16 [ 748.375127][ T1931] input: syz0 as /devices/virtual/input/input507 [ 748.451874][ T1433] veth0_vlan: entered promiscuous mode [ 748.457772][ T1433] veth1_vlan: entered promiscuous mode [ 748.496622][ T1433] veth0_macvtap: entered promiscuous mode [ 748.496827][ T1946] __nla_validate_parse: 4 callbacks suppressed [ 748.496844][ T1946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10812'. [ 748.501632][ T1433] veth1_macvtap: entered promiscuous mode [ 748.509007][ T1433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.522356][ T1433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.527637][ T1948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10813'. [ 748.534081][ T8590] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.538665][ T8590] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.544422][ T8590] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.554260][ T8590] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.555506][ T1948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10813'. [ 748.629658][ T8590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.633461][ T8590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.659557][T15770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.665421][T15770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.732577][ T1979] openvswitch: netlink: Multiple metadata blocks provided [ 748.798001][ T40] audit: type=1400 audit(2000000522.189:57745): avc: denied { map } for pid=1983 comm="syz.4.10817" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 748.815383][ T1984] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 748.820437][ T1984] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10817'. [ 748.870745][ T1989] input: syz0 as /devices/virtual/input/input508 [ 749.036863][ T2008] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10822'. [ 749.191221][ T2012] erspan1: entered promiscuous mode [ 749.214820][ T2027] Bluetooth: MGMT ver 1.23 [ 749.355526][ T2033] openvswitch: netlink: Multiple metadata blocks provided [ 749.568598][ T2038] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 749.829699][ T2044] netlink: 'syz.1.10832': attribute type 4 has an invalid length. [ 749.871089][ T2046] netlink: 76 bytes leftover after parsing attributes in process `syz.9.10833'. [ 750.045089][ T2052] FAULT_INJECTION: forcing a failure. [ 750.045089][ T2052] name failslab, interval 1, probability 0, space 0, times 0 [ 750.049311][ T2052] CPU: 0 UID: 0 PID: 2052 Comm: syz.1.10835 Tainted: G L syzkaller #0 PREEMPT(full) [ 750.049330][ T2052] Tainted: [L]=SOFTLOCKUP [ 750.049335][ T2052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 750.049343][ T2052] Call Trace: [ 750.049354][ T2052] [ 750.049359][ T2052] dump_stack_lvl+0x16c/0x1f0 [ 750.049392][ T2052] should_fail_ex+0x512/0x640 [ 750.049415][ T2052] ? kmem_cache_alloc_noprof+0x62/0x770 [ 750.049429][ T2052] should_failslab+0xc2/0x120 [ 750.049444][ T2052] kmem_cache_alloc_noprof+0x83/0x770 [ 750.049455][ T2052] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 750.049474][ T2052] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 750.049496][ T2052] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 750.049514][ T2052] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 750.049536][ T2052] mmu_topup_memory_caches+0x25/0x170 [ 750.049552][ T2052] kvm_mmu_load+0xd6/0x2390 [ 750.049565][ T2052] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 750.049582][ T2052] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 750.049603][ T2052] ? __pfx_kvm_mmu_load+0x10/0x10 [ 750.049616][ T2052] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 750.049635][ T2052] ? kvm_check_and_inject_events+0x63d/0x1050 [ 750.049657][ T2052] vcpu_run+0x39d2/0x5a80 [ 750.049677][ T2052] ? __pfx_vcpu_run+0x10/0x10 [ 750.049696][ T2052] ? rcu_is_watching+0x12/0xc0 [ 750.049709][ T2052] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 750.049723][ T2052] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 750.049741][ T2052] kvm_vcpu_ioctl+0x76d/0x16d0 [ 750.049760][ T2052] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 750.049778][ T2052] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 750.049792][ T2052] ? do_vfs_ioctl+0x128/0x14f0 [ 750.049807][ T2052] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 750.049820][ T2052] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 750.049841][ T2052] ? hook_file_ioctl_common+0x144/0x410 [ 750.049864][ T2052] ? selinux_file_ioctl+0x180/0x270 [ 750.049878][ T2052] ? selinux_file_ioctl+0xb4/0x270 [ 750.049893][ T2052] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 750.049913][ T2052] __x64_sys_ioctl+0x18e/0x210 [ 750.049927][ T2052] do_syscall_64+0xcd/0xf80 [ 750.049944][ T2052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.049956][ T2052] RIP: 0033:0x7fbc5e98f7c9 [ 750.049966][ T2052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.049978][ T2052] RSP: 002b:00007fbc5f751038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.049989][ T2052] RAX: ffffffffffffffda RBX: 00007fbc5ebe5fa0 RCX: 00007fbc5e98f7c9 [ 750.049996][ T2052] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 750.050003][ T2052] RBP: 00007fbc5f751090 R08: 0000000000000000 R09: 0000000000000000 [ 750.050010][ T2052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 750.050016][ T2052] R13: 00007fbc5ebe6038 R14: 00007fbc5ebe5fa0 R15: 00007fff64068e08 [ 750.050031][ T2052] [ 750.169785][ T2064] input: syz0 as /devices/virtual/input/input509 [ 750.330803][T23554] Bluetooth: hci1: command tx timeout [ 750.379589][ T2080] openvswitch: netlink: Multiple metadata blocks provided [ 750.526120][ T2082] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10842'. [ 750.690452][ T2087] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10843'. [ 751.064480][ T2106] input: syz0 as /devices/virtual/input/input510 [ 751.136766][ T2120] openvswitch: netlink: Multiple metadata blocks provided [ 751.225650][ T40] audit: type=1400 audit(2000000524.619:57746): avc: denied { read } for pid=2116 comm="syz.1.10849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 751.338503][ T2133] netlink: 'syz.1.10849': attribute type 10 has an invalid length. [ 751.342332][ T2133] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10849'. [ 751.434110][ T2128] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 751.549820][ T2136] bond1 (unregistering): Released all slaves [ 751.694556][ T2209] netlink: 76 bytes leftover after parsing attributes in process `syz.9.10854'. [ 751.776183][ T2211] dummy0: entered allmulticast mode [ 751.783491][ T2210] dummy0: left allmulticast mode [ 751.783728][ T40] audit: type=1400 audit(2000000525.169:57747): avc: denied { connect } for pid=2210 comm="syz.9.10855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 752.240199][ T2232] input: syz0 as /devices/virtual/input/input511 [ 752.268257][ T2234] dvmrp0: left allmulticast mode [ 752.391357][ T2252] openvswitch: netlink: Message has 12 unknown bytes. [ 752.410474][T23554] Bluetooth: hci1: command tx timeout [ 752.438584][ T40] audit: type=1400 audit(2000000525.829:57748): avc: denied { map } for pid=2256 comm="syz.9.10865" path="socket:[210863]" dev="sockfs" ino=210863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 752.464189][ T40] audit: type=1800 audit(2000000525.859:57749): pid=2244 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.10861" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 752.530088][ T2262] netlink: get zone limit has 4 unknown bytes [ 752.590566][ T2262] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 752.826915][ T2287] FAULT_INJECTION: forcing a failure. [ 752.826915][ T2287] name failslab, interval 1, probability 0, space 0, times 0 [ 752.832945][ T2287] CPU: 2 UID: 0 PID: 2287 Comm: syz.4.10872 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.832966][ T2287] Tainted: [L]=SOFTLOCKUP [ 752.832970][ T2287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 752.832978][ T2287] Call Trace: [ 752.832982][ T2287] [ 752.832987][ T2287] dump_stack_lvl+0x16c/0x1f0 [ 752.833006][ T2287] should_fail_ex+0x512/0x640 [ 752.833024][ T2287] ? kmem_cache_alloc_noprof+0x62/0x770 [ 752.833038][ T2287] should_failslab+0xc2/0x120 [ 752.833054][ T2287] kmem_cache_alloc_noprof+0x83/0x770 [ 752.833065][ T2287] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 752.833084][ T2287] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 752.833105][ T2287] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 752.833123][ T2287] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 752.833145][ T2287] mmu_topup_memory_caches+0x25/0x170 [ 752.833161][ T2287] kvm_mmu_load+0xd6/0x2390 [ 752.833173][ T2287] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 752.833191][ T2287] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 752.833210][ T2287] ? __pfx_kvm_mmu_load+0x10/0x10 [ 752.833222][ T2287] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 752.833241][ T2287] ? kvm_check_and_inject_events+0x63d/0x1050 [ 752.833257][ T2287] vcpu_run+0x39d2/0x5a80 [ 752.833277][ T2287] ? __pfx_vcpu_run+0x10/0x10 [ 752.833296][ T2287] ? rcu_is_watching+0x12/0xc0 [ 752.833310][ T2287] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 752.833323][ T2287] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 752.833341][ T2287] kvm_vcpu_ioctl+0x76d/0x16d0 [ 752.833360][ T2287] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 752.833378][ T2287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 752.833392][ T2287] ? do_vfs_ioctl+0x128/0x14f0 [ 752.833406][ T2287] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 752.833418][ T2287] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 752.833439][ T2287] ? hook_file_ioctl_common+0x144/0x410 [ 752.833462][ T2287] ? selinux_file_ioctl+0x180/0x270 [ 752.833475][ T2287] ? selinux_file_ioctl+0xb4/0x270 [ 752.833491][ T2287] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 752.833508][ T2287] __x64_sys_ioctl+0x18e/0x210 [ 752.833522][ T2287] do_syscall_64+0xcd/0xf80 [ 752.833538][ T2287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.833549][ T2287] RIP: 0033:0x7f1ec978f7c9 [ 752.833559][ T2287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.833570][ T2287] RSP: 002b:00007f1eca662038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.833582][ T2287] RAX: ffffffffffffffda RBX: 00007f1ec99e6090 RCX: 00007f1ec978f7c9 [ 752.833589][ T2287] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 752.833596][ T2287] RBP: 00007f1eca662090 R08: 0000000000000000 R09: 0000000000000000 [ 752.833603][ T2287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 752.833609][ T2287] R13: 00007f1ec99e6128 R14: 00007f1ec99e6090 R15: 00007fffce0c8128 [ 752.833624][ T2287] [ 753.181327][ T2307] program syz.3.10881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 753.185392][ T2307] ata1.00: invalid service action 31 [ 753.192268][ T2307] Can't find a SQUASHFS superblock on nullb0 [ 753.348309][ T40] audit: type=1400 audit(2000000526.739:57750): avc: denied { ioctl } for pid=2321 comm="syz.4.10885" path="socket:[213579]" dev="sockfs" ino=213579 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 753.354977][ T2320] syzkaller0: entered promiscuous mode [ 753.361593][ T2320] syzkaller0: entered allmulticast mode [ 753.502853][ T2335] FAULT_INJECTION: forcing a failure. [ 753.502853][ T2335] name failslab, interval 1, probability 0, space 0, times 0 [ 753.508428][ T2335] CPU: 3 UID: 0 PID: 2335 Comm: syz.4.10887 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.508462][ T2335] Tainted: [L]=SOFTLOCKUP [ 753.508468][ T2335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 753.508482][ T2335] Call Trace: [ 753.508489][ T2335] [ 753.508498][ T2335] dump_stack_lvl+0x16c/0x1f0 [ 753.508528][ T2335] should_fail_ex+0x512/0x640 [ 753.508556][ T2335] ? kmem_cache_alloc_noprof+0x62/0x770 [ 753.508580][ T2335] should_failslab+0xc2/0x120 [ 753.508637][ T2335] kmem_cache_alloc_noprof+0x83/0x770 [ 753.508656][ T2335] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 753.508685][ T2335] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 753.508719][ T2335] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 753.508749][ T2335] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 753.508787][ T2335] mmu_topup_memory_caches+0x25/0x170 [ 753.508812][ T2335] kvm_mmu_load+0xd6/0x2390 [ 753.508834][ T2335] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 753.508862][ T2335] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 753.508902][ T2335] ? __pfx_kvm_mmu_load+0x10/0x10 [ 753.508923][ T2335] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 753.508954][ T2335] ? kvm_check_and_inject_events+0x63d/0x1050 [ 753.508984][ T2335] vcpu_run+0x39d2/0x5a80 [ 753.509021][ T2335] ? __pfx_vcpu_run+0x10/0x10 [ 753.509053][ T2335] ? rcu_is_watching+0x12/0xc0 [ 753.509076][ T2335] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 753.509099][ T2335] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 753.509131][ T2335] kvm_vcpu_ioctl+0x76d/0x16d0 [ 753.509162][ T2335] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 753.509191][ T2335] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 753.509216][ T2335] ? do_vfs_ioctl+0x128/0x14f0 [ 753.509239][ T2335] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 753.509262][ T2335] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 753.509298][ T2335] ? hook_file_ioctl_common+0x144/0x410 [ 753.509336][ T2335] ? selinux_file_ioctl+0x180/0x270 [ 753.509360][ T2335] ? selinux_file_ioctl+0xb4/0x270 [ 753.509387][ T2335] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 753.509417][ T2335] __x64_sys_ioctl+0x18e/0x210 [ 753.509442][ T2335] do_syscall_64+0xcd/0xf80 [ 753.509469][ T2335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.509490][ T2335] RIP: 0033:0x7f1ec978f7c9 [ 753.509508][ T2335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.509527][ T2335] RSP: 002b:00007f1eca662038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 753.509548][ T2335] RAX: ffffffffffffffda RBX: 00007f1ec99e6090 RCX: 00007f1ec978f7c9 [ 753.509566][ T2335] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 753.509577][ T2335] RBP: 00007f1eca662090 R08: 0000000000000000 R09: 0000000000000000 [ 753.509589][ T2335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 753.509600][ T2335] R13: 00007f1ec99e6128 R14: 00007f1ec99e6090 R15: 00007fffce0c8128 [ 753.509633][ T2335] [ 753.869090][ T2343] hfsplus: unable to find HFS+ superblock [ 753.871660][ T2343] hfsplus: unable to find HFS+ superblock [ 753.902423][ T2354] __nla_validate_parse: 4 callbacks suppressed [ 753.902438][ T2354] netlink: 76 bytes leftover after parsing attributes in process `syz.9.10892'. [ 753.937799][ T2357] netem: change failed [ 754.050189][ T40] audit: type=1326 audit(2000000527.439:57751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2364 comm="syz.4.10895" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ec978f7c9 code=0x0 [ 754.104038][ T40] audit: type=1400 audit(2000000527.499:57752): avc: denied { watch_mount } for pid=2342 comm="syz.3.10889" path="/233" dev="tmpfs" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 754.190451][T17730] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 754.285149][ T2374] input: syz0 as /devices/virtual/input/input513 [ 754.342276][T17730] usb 14-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 754.345451][T17730] usb 14-1: config 0 interface 0 has no altsetting 0 [ 754.349424][T17730] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 754.352978][T17730] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 754.355606][T17730] usb 14-1: Product: syz [ 754.357038][T17730] usb 14-1: Manufacturer: syz [ 754.358672][T17730] usb 14-1: SerialNumber: syz [ 754.362225][T17730] usb 14-1: config 0 descriptor?? [ 754.367243][T17730] usb 14-1: selecting invalid altsetting 0 [ 754.567176][T17730] usb 14-1: USB disconnect, device number 4 [ 754.587950][ T2408] FAULT_INJECTION: forcing a failure. [ 754.587950][ T2408] name failslab, interval 1, probability 0, space 0, times 0 [ 754.593169][ T2408] CPU: 1 UID: 0 PID: 2408 Comm: syz.1.10900 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.593219][ T2408] Tainted: [L]=SOFTLOCKUP [ 754.593225][ T2408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 754.593234][ T2408] Call Trace: [ 754.593239][ T2408] [ 754.593245][ T2408] dump_stack_lvl+0x16c/0x1f0 [ 754.593267][ T2408] should_fail_ex+0x512/0x640 [ 754.593286][ T2408] ? kmem_cache_alloc_noprof+0x62/0x770 [ 754.593301][ T2408] should_failslab+0xc2/0x120 [ 754.593318][ T2408] kmem_cache_alloc_noprof+0x83/0x770 [ 754.593329][ T2408] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 754.593350][ T2408] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 754.593371][ T2408] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 754.593389][ T2408] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 754.593412][ T2408] mmu_topup_memory_caches+0x25/0x170 [ 754.593429][ T2408] kvm_mmu_load+0xd6/0x2390 [ 754.593443][ T2408] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 754.593461][ T2408] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 754.593480][ T2408] ? __pfx_kvm_mmu_load+0x10/0x10 [ 754.593598][ T2408] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 754.593621][ T2408] ? kvm_check_and_inject_events+0x63d/0x1050 [ 754.593639][ T2408] vcpu_run+0x39d2/0x5a80 [ 754.593660][ T2408] ? __pfx_vcpu_run+0x10/0x10 [ 754.593679][ T2408] ? rcu_is_watching+0x12/0xc0 [ 754.593693][ T2408] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 754.593707][ T2408] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 754.593725][ T2408] kvm_vcpu_ioctl+0x76d/0x16d0 [ 754.593746][ T2408] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 754.593763][ T2408] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 754.593778][ T2408] ? do_vfs_ioctl+0x128/0x14f0 [ 754.593793][ T2408] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 754.593806][ T2408] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 754.593827][ T2408] ? hook_file_ioctl_common+0x144/0x410 [ 754.593862][ T2408] ? selinux_file_ioctl+0x180/0x270 [ 754.593880][ T2408] ? selinux_file_ioctl+0xb4/0x270 [ 754.593902][ T2408] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 754.593926][ T2408] __x64_sys_ioctl+0x18e/0x210 [ 754.593950][ T2408] do_syscall_64+0xcd/0xf80 [ 754.593974][ T2408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.593990][ T2408] RIP: 0033:0x7fbc5e98f7c9 [ 754.594006][ T2408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.594022][ T2408] RSP: 002b:00007fbc5cbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.594038][ T2408] RAX: ffffffffffffffda RBX: 00007fbc5ebe6090 RCX: 00007fbc5e98f7c9 [ 754.594049][ T2408] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 754.594061][ T2408] RBP: 00007fbc5cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 754.594071][ T2408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.594082][ T2408] R13: 00007fbc5ebe6128 R14: 00007fbc5ebe6090 R15: 00007fff64068e08 [ 754.594116][ T2408] [ 754.793875][ T2357] bridge1: entered promiscuous mode [ 754.797979][ T2357] bridge1: entered allmulticast mode [ 754.851443][ T2429] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10903'. [ 754.922609][ T2439] input: syz0 as /devices/virtual/input/input514 [ 755.022354][ T2453] netlink: get zone limit has 4 unknown bytes [ 755.035835][ T2437] SELinux: ebitmap: truncated map [ 755.045448][ T2437] SELinux: failed to load policy [ 755.062943][ T2431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10904'. [ 755.179333][ T2468] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10914'. [ 755.277741][ T2479] netlink: 'syz.1.10916': attribute type 11 has an invalid length. [ 755.345945][ T2482] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 755.347405][ T2490] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10918'. [ 755.355584][ T2491] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.358886][ T2491] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.391287][ T2494] team0: No ports can be present during mode change [ 755.401434][ T2494] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 755.420310][ T2496] input: syz0 as /devices/virtual/input/input515 [ 755.518657][ T2512] netlink: 76 bytes leftover after parsing attributes in process `syz.9.10924'. [ 755.580851][ T2518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10926'. [ 755.627783][ T2517] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10925'. [ 755.648905][ T2527] bond3: (slave ªªªªªª©*°;¾eÕܲ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 755.660980][ T2527] bond3: (slave ªªªªªª©*°;¾eÕܲ): speed changed to 0 on port 1 [ 755.664280][ T2527] bond3: (slave ªªªªªª©*°;¾eÕܲ): Enslaving as a backup interface with an up link [ 755.668091][ T2527] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 755.673546][ T2517] bridge_slave_1: left allmulticast mode [ 755.675388][ T2517] bridge_slave_1: left promiscuous mode [ 755.677546][ T2517] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.684151][ T2517] bridge_slave_0: left allmulticast mode [ 755.686369][ T2517] bridge_slave_0: left promiscuous mode [ 755.689754][ T2517] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.712037][ T2641] qnx6: unable to read the first superblock [ 755.714182][ T2641] qnx6: unable to read the first superblock [ 755.716873][ T2641] qnx6: unable to read the first superblock [ 755.750238][ T2644] netlink: 'syz.4.10929': attribute type 10 has an invalid length. [ 755.773751][ T2644] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 755.776840][ T2644] team0: Failed to send options change via netlink (err -105) [ 755.779290][ T2644] team0: Port device dummy0 added [ 755.788376][ T2644] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 755.792454][ T2644] exFAT-fs (nullb0): invalid boot record signature [ 755.794457][ T2644] exFAT-fs (nullb0): failed to read boot sector [ 755.796486][ T2644] exFAT-fs (nullb0): failed to recognize exfat type [ 755.915799][ T2659] binder: 2658:2659 ioctl c0306201 200000000540 returned -22 [ 755.951338][ T2661] netlink: 76 bytes leftover after parsing attributes in process `syz.9.10933'. [ 756.089670][ T2686] netlink: 'syz.4.10936': attribute type 1 has an invalid length. [ 756.107747][ T2689] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10937'. [ 756.218449][ T2691] tipc: Failed to remove unknown binding: 66,1,1/0:95717770/95717772 [ 756.223352][ T2691] tipc: Failed to remove unknown binding: 66,1,1/0:95717770/95717772 [ 756.258945][ T2701] No such timeout policy "syz1" [ 757.119963][ T2750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.592475][ T2774] overlay: Bad value for 'workdir' [ 757.595801][ T2774] loop9: detected capacity change from 0 to 7 [ 757.600050][ T2393] Dev loop9: unable to read RDB block 7 [ 757.603753][ T2393] loop9: AHDI p1 p2 [ 757.605228][ T2393] loop9: partition table partially beyond EOD, truncated [ 757.612455][ T2393] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 757.792666][ T2774] Dev loop9: unable to read RDB block 7 [ 757.794932][ T2774] loop9: AHDI p1 p2 [ 757.796329][ T2774] loop9: partition table partially beyond EOD, truncated [ 757.798822][ T2774] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 757.957229][ T2393] udevd[2393]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 758.129788][ T2841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.137090][ T2841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.241831][ T40] audit: type=1400 audit(2000000531.639:57753): avc: denied { read } for pid=2871 comm="syz.3.10969" name="file0" dev="tmpfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 758.261165][ T40] audit: type=1400 audit(2000000531.639:57754): avc: denied { open } for pid=2871 comm="syz.3.10969" path="/239/file0" dev="tmpfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 758.270230][ T40] audit: type=1400 audit(2000000531.639:57755): avc: denied { mounton } for pid=2871 comm="syz.3.10969" path="/239/file0" dev="tmpfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 758.294106][ T2884] input: syz0 as /devices/virtual/input/input516 [ 758.370192][ T2900] dlm: non-version read from control device 0 [ 758.445693][ T2910] SELinux: security policydb version 17 (MLS) not backwards compatible [ 758.449311][ T2910] SELinux: failed to load policy [ 758.872288][ T2948] input: syz0 as /devices/virtual/input/input517 [ 758.905920][ T2938] Malformed UNC in devname [ 758.905920][ T2938] [ 758.908426][ T2938] CIFS: VFS: Malformed UNC in devname [ 758.910820][ T40] audit: type=1400 audit(2000000532.309:57756): avc: denied { mounton } for pid=2937 comm="syz.9.10981" path="/52/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 758.911528][ T2938] 9pnet_fd: p9_fd_create_tcp (2938): problem connecting socket to 127.0.0.1 [ 758.976332][ T2967] netlink: 'syz.4.10986': attribute type 29 has an invalid length. [ 758.979726][ T2967] netlink: 'syz.4.10986': attribute type 29 has an invalid length. [ 759.001043][ T40] audit: type=1400 audit(2000000532.399:57757): avc: denied { validate_trans } for pid=2971 comm="syz.9.10985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 759.014583][ T2975] __nla_validate_parse: 3 callbacks suppressed [ 759.014604][ T2975] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10987'. [ 759.080546][ T2985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10990'. [ 759.284059][ T3046] mkiss: ax0: crc mode is auto. [ 759.437586][ T3062] input: syz0 as /devices/virtual/input/input518 [ 759.549640][ T3071] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10997'. [ 759.824352][ T3077] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10998'. [ 759.896681][ T2983] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 759.900375][ T40] audit: type=1400 audit(2000000533.289:57758): avc: denied { accept } for pid=3082 comm="syz.1.11000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 760.117202][ T3099] overlayfs: maximum fs stacking depth exceeded [ 760.165508][ T3101] input: syz0 as /devices/virtual/input/input519 [ 760.458339][ T3112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11007'. [ 760.684298][ T3124] FAULT_INJECTION: forcing a failure. [ 760.684298][ T3124] name failslab, interval 1, probability 0, space 0, times 0 [ 760.689062][ T3124] CPU: 0 UID: 0 PID: 3124 Comm: syz.4.11009 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.689083][ T3124] Tainted: [L]=SOFTLOCKUP [ 760.689088][ T3124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 760.689095][ T3124] Call Trace: [ 760.689101][ T3124] [ 760.689107][ T3124] dump_stack_lvl+0x16c/0x1f0 [ 760.689129][ T3124] should_fail_ex+0x512/0x640 [ 760.689148][ T3124] ? kmem_cache_alloc_noprof+0x62/0x770 [ 760.689162][ T3124] should_failslab+0xc2/0x120 [ 760.689178][ T3124] kmem_cache_alloc_noprof+0x83/0x770 [ 760.689190][ T3124] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 760.689209][ T3124] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 760.689230][ T3124] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 760.689248][ T3124] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 760.689270][ T3124] mmu_topup_memory_caches+0x25/0x170 [ 760.689286][ T3124] kvm_mmu_load+0xd6/0x2390 [ 760.689299][ T3124] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 760.689316][ T3124] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 760.689335][ T3124] ? __pfx_kvm_mmu_load+0x10/0x10 [ 760.689347][ T3124] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 760.689366][ T3124] ? kvm_check_and_inject_events+0x63d/0x1050 [ 760.689383][ T3124] vcpu_run+0x39d2/0x5a80 [ 760.689403][ T3124] ? __pfx_vcpu_run+0x10/0x10 [ 760.689421][ T3124] ? rcu_is_watching+0x12/0xc0 [ 760.689435][ T3124] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 760.689448][ T3124] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 760.689467][ T3124] kvm_vcpu_ioctl+0x76d/0x16d0 [ 760.689486][ T3124] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 760.689503][ T3124] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 760.689518][ T3124] ? do_vfs_ioctl+0x128/0x14f0 [ 760.689532][ T3124] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 760.689545][ T3124] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 760.689566][ T3124] ? hook_file_ioctl_common+0x144/0x410 [ 760.689588][ T3124] ? selinux_file_ioctl+0x180/0x270 [ 760.689602][ T3124] ? selinux_file_ioctl+0xb4/0x270 [ 760.689617][ T3124] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 760.689640][ T3124] __x64_sys_ioctl+0x18e/0x210 [ 760.689654][ T3124] do_syscall_64+0xcd/0xf80 [ 760.689670][ T3124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.689682][ T3124] RIP: 0033:0x7f1ec978f7c9 [ 760.689694][ T3124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.689704][ T3124] RSP: 002b:00007f1eca683038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.689716][ T3124] RAX: ffffffffffffffda RBX: 00007f1ec99e5fa0 RCX: 00007f1ec978f7c9 [ 760.689736][ T3124] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 760.689744][ T3124] RBP: 00007f1eca683090 R08: 0000000000000000 R09: 0000000000000000 [ 760.689751][ T3124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 760.689757][ T3124] R13: 00007f1ec99e6038 R14: 00007f1ec99e5fa0 R15: 00007fffce0c8128 [ 760.689773][ T3124] [ 760.786539][ T3245] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 760.950291][ T3245] usb 6-1: Using ep0 maxpacket: 32 [ 760.958105][ T3134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.963501][ T3134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.003236][ T3137] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11010'. [ 761.113495][ T3137] hsr_slave_1 (unregistering): left promiscuous mode [ 761.140504][T23554] Bluetooth: hci0: command 0x0401 tx timeout [ 761.358460][ T3245] usb 6-1: unable to get BOS descriptor or descriptor too short [ 761.365819][ T3245] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 761.368791][ T3245] usb 6-1: can't read configurations, error -71 [ 761.392092][ T3160] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 761.406285][ T3165] syz_tun: entered allmulticast mode [ 761.433276][ T3165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11014'. [ 761.436631][ T40] audit: type=1400 audit(2000000534.829:57759): avc: denied { getopt } for pid=3164 comm="syz.1.11014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 761.444447][ T3164] syz_tun: left allmulticast mode [ 761.464920][ T3162] overlay: Bad value for 'workdir' [ 761.476419][ T3162] loop9: detected capacity change from 0 to 7 [ 761.479845][ T3162] Dev loop9: unable to read RDB block 7 [ 761.483122][ T3162] loop9: AHDI p1 p2 [ 761.484517][ T3162] loop9: partition table partially beyond EOD, truncated [ 761.487443][ T3162] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 761.502596][ T3174] netlink: 'syz.1.11015': attribute type 2 has an invalid length. [ 761.506283][ T3174] netlink: 46 bytes leftover after parsing attributes in process `syz.1.11015'. [ 761.545724][ T3179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11016'. [ 761.638932][ T3191] 9pnet_fd: p9_fd_create_unix (3191): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 761.639591][ T3191] 9pnet_fd: p9_fd_create_unix (3191): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 761.750556][ T3200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3200 comm=syz.1.11024 [ 761.819150][ T40] audit: type=1326 audit(2000000535.209:57760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3197 comm="syz.4.11023" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec978f7c9 code=0x7fc00000 [ 762.038517][ T40] audit: type=1400 audit(2000000535.429:57761): avc: denied { bind } for pid=3206 comm="syz.3.11025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 762.201158][ T3221] overlay: Bad value for 'workdir' [ 762.205693][ T3221] loop9: detected capacity change from 0 to 7 [ 762.209000][ T5339] Dev loop9: unable to read RDB block 7 [ 762.212967][ T5339] loop9: AHDI p1 p2 [ 762.214778][ T5339] loop9: partition table partially beyond EOD, truncated [ 762.226889][ T5339] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 762.237967][ T3221] Dev loop9: unable to read RDB block 7 [ 762.240050][ T3221] loop9: AHDI p1 p2 [ 762.241736][ T3221] loop9: partition table partially beyond EOD, truncated [ 762.245036][ T3221] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 762.257338][ T5339] Dev loop9: unable to read RDB block 7 [ 762.260610][ T5339] loop9: AHDI p1 p2 [ 762.262532][ T5339] loop9: partition table partially beyond EOD, truncated [ 762.266460][ T5339] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 762.268269][ T3238] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11030'. [ 762.306091][ T5339] Dev loop9: unable to read RDB block 7 [ 762.308734][ T5339] loop9: AHDI p1 p2 [ 762.311239][ T5339] loop9: partition table partially beyond EOD, truncated [ 762.314670][ T5339] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 762.357532][ T2393] udevd[2393]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 762.376247][ T2393] udevd[2393]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 762.401890][ T2393] udevd[2393]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 762.422447][ T2393] udevd[2393]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 762.525781][ T3261] FAULT_INJECTION: forcing a failure. [ 762.525781][ T3261] name failslab, interval 1, probability 0, space 0, times 0 [ 762.540905][ T3261] CPU: 3 UID: 0 PID: 3261 Comm: syz.9.11033 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.540937][ T3261] Tainted: [L]=SOFTLOCKUP [ 762.540944][ T3261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 762.540956][ T3261] Call Trace: [ 762.540964][ T3261] [ 762.540973][ T3261] dump_stack_lvl+0x16c/0x1f0 [ 762.541003][ T3261] should_fail_ex+0x512/0x640 [ 762.541030][ T3261] ? kmem_cache_alloc_noprof+0x62/0x770 [ 762.541052][ T3261] should_failslab+0xc2/0x120 [ 762.541076][ T3261] kmem_cache_alloc_noprof+0x83/0x770 [ 762.541093][ T3261] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 762.541119][ T3261] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 762.541151][ T3261] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 762.541177][ T3261] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 762.541213][ T3261] mmu_topup_memory_caches+0x25/0x170 [ 762.541238][ T3261] kvm_mmu_load+0xd6/0x2390 [ 762.541260][ T3261] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 762.541292][ T3261] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 762.541322][ T3261] ? __pfx_kvm_mmu_load+0x10/0x10 [ 762.541342][ T3261] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 762.541372][ T3261] ? kvm_check_and_inject_events+0x63d/0x1050 [ 762.541399][ T3261] vcpu_run+0x39d2/0x5a80 [ 762.541438][ T3261] ? __pfx_vcpu_run+0x10/0x10 [ 762.541470][ T3261] ? rcu_is_watching+0x12/0xc0 [ 762.541492][ T3261] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 762.541513][ T3261] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 762.541542][ T3261] kvm_vcpu_ioctl+0x76d/0x16d0 [ 762.541579][ T3261] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 762.541607][ T3261] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 762.541631][ T3261] ? do_vfs_ioctl+0x128/0x14f0 [ 762.541653][ T3261] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 762.541674][ T3261] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 762.541710][ T3261] ? hook_file_ioctl_common+0x144/0x410 [ 762.541747][ T3261] ? selinux_file_ioctl+0x180/0x270 [ 762.541769][ T3261] ? selinux_file_ioctl+0xb4/0x270 [ 762.541794][ T3261] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 762.541865][ T3261] __x64_sys_ioctl+0x18e/0x210 [ 762.541898][ T3261] do_syscall_64+0xcd/0xf80 [ 762.541923][ T3261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.541941][ T3261] RIP: 0033:0x7fda9ed8f7c9 [ 762.541956][ T3261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.541974][ T3261] RSP: 002b:00007fda9fc18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.541993][ T3261] RAX: ffffffffffffffda RBX: 00007fda9efe6090 RCX: 00007fda9ed8f7c9 [ 762.542005][ T3261] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 762.542015][ T3261] RBP: 00007fda9fc18090 R08: 0000000000000000 R09: 0000000000000000 [ 762.542026][ T3261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 762.542037][ T3261] R13: 00007fda9efe6128 R14: 00007fda9efe6090 R15: 00007ffd61e622c8 [ 762.542064][ T3261] [ 762.543713][ T40] audit: type=1326 audit(2000000535.939:57762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3197 comm="syz.4.11023" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ec978f7c9 code=0x7fc00000 [ 762.686970][ T3254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 762.689278][ T3254] IPv6: NLM_F_CREATE should be set when creating new route [ 762.692474][ T3254] IPv6: NLM_F_CREATE should be set when creating new route [ 762.695823][ T3254] IPv6: NLM_F_CREATE should be set when creating new route [ 762.914482][ T3287] fuse: Unknown parameter 'H' [ 762.921071][ T40] audit: type=1400 audit(2000000536.309:57763): avc: denied { accept } for pid=3286 comm="syz.4.11039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 763.282006][ T40] audit: type=1400 audit(2000000536.669:57764): avc: denied { map } for pid=3299 comm="syz.4.11042" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 763.298153][ T40] audit: type=1400 audit(2000000536.689:57765): avc: denied { write } for pid=3296 comm="syz.1.11041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 764.890798][ T3319] input: syz0 as /devices/virtual/input/input521 [ 764.961500][ T3335] FAULT_INJECTION: forcing a failure. [ 764.961500][ T3335] name failslab, interval 1, probability 0, space 0, times 0 [ 764.966739][ T3335] CPU: 2 UID: 0 PID: 3335 Comm: syz.3.11048 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.966771][ T3335] Tainted: [L]=SOFTLOCKUP [ 764.966777][ T3335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 764.966789][ T3335] Call Trace: [ 764.966811][ T3335] [ 764.966819][ T3335] dump_stack_lvl+0x16c/0x1f0 [ 764.966870][ T3335] should_fail_ex+0x512/0x640 [ 764.966905][ T3335] ? kmem_cache_alloc_noprof+0x62/0x770 [ 764.966925][ T3335] should_failslab+0xc2/0x120 [ 764.966943][ T3335] kmem_cache_alloc_noprof+0x83/0x770 [ 764.966955][ T3335] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 764.966975][ T3335] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 764.966997][ T3335] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 764.967016][ T3335] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 764.967040][ T3335] mmu_topup_memory_caches+0x25/0x170 [ 764.967056][ T3335] kvm_mmu_load+0xd6/0x2390 [ 764.967070][ T3335] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 764.967088][ T3335] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 764.967108][ T3335] ? __pfx_kvm_mmu_load+0x10/0x10 [ 764.967120][ T3335] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 764.967140][ T3335] ? kvm_check_and_inject_events+0x63d/0x1050 [ 764.967158][ T3335] vcpu_run+0x39d2/0x5a80 [ 764.967179][ T3335] ? __pfx_vcpu_run+0x10/0x10 [ 764.967199][ T3335] ? rcu_is_watching+0x12/0xc0 [ 764.967214][ T3335] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 764.967228][ T3335] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 764.967247][ T3335] kvm_vcpu_ioctl+0x76d/0x16d0 [ 764.967267][ T3335] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 764.967286][ T3335] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 764.967301][ T3335] ? do_vfs_ioctl+0x128/0x14f0 [ 764.967316][ T3335] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 764.967330][ T3335] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 764.967352][ T3335] ? hook_file_ioctl_common+0x144/0x410 [ 764.967376][ T3335] ? selinux_file_ioctl+0x180/0x270 [ 764.967391][ T3335] ? selinux_file_ioctl+0xb4/0x270 [ 764.967407][ T3335] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 764.967426][ T3335] __x64_sys_ioctl+0x18e/0x210 [ 764.967441][ T3335] do_syscall_64+0xcd/0xf80 [ 764.967458][ T3335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.967471][ T3335] RIP: 0033:0x7f21f338f7c9 [ 764.967481][ T3335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.967493][ T3335] RSP: 002b:00007f21f42d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.967506][ T3335] RAX: ffffffffffffffda RBX: 00007f21f35e6090 RCX: 00007f21f338f7c9 [ 764.967513][ T3335] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 764.967521][ T3335] RBP: 00007f21f42d4090 R08: 0000000000000000 R09: 0000000000000000 [ 764.967532][ T3335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 764.967539][ T3335] R13: 00007f21f35e6128 R14: 00007f21f35e6090 R15: 00007ffd2c9007e8 [ 764.967555][ T3335] [ 765.130939][ T5944] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 765.149104][ T3342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3342 comm=syz.4.11050 [ 765.198507][ T3342] __nla_validate_parse: 1 callbacks suppressed [ 765.198524][ T3342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11050'. [ 765.225525][ T3342] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11050'. [ 765.281321][ T5944] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 765.291264][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.294218][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.297619][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 765.302638][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.303144][ T3349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11051'. [ 765.305409][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.305429][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 765.306222][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.319763][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.323536][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 765.326355][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.329203][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.334341][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 765.337125][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.339937][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.344305][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 765.347919][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.352067][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.356023][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 765.359700][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.363123][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.369033][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 765.371398][ T40] audit: type=1400 audit(2000000002.029:57766): avc: denied { create } for pid=3350 comm="syz.4.11052" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 765.389579][ T3351] (syz.4.11052,3351,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 765.401364][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.404980][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.408565][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 765.424060][ T5944] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 765.427374][ T5944] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 765.440601][ T5944] usb 6-1: Product: syz [ 765.442014][ T5944] usb 6-1: Manufacturer: syz [ 765.443799][ T5944] usb 6-1: SerialNumber: syz [ 765.451325][ T5944] usb 6-1: config 0 descriptor?? [ 765.464050][ T5944] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 765.627422][ T3368] netlink: 'syz.9.11054': attribute type 10 has an invalid length. [ 765.631627][ T3368] netlink: 40 bytes leftover after parsing attributes in process `syz.9.11054'. [ 765.661667][ T2310] usb 6-1: USB disconnect, device number 69 [ 765.666656][ T2310] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 765.680473][ T3368] team0: Port device geneve0 added [ 765.760025][ T3388] xt_cgroup: path and classid specified [ 765.768438][ T40] audit: type=1400 audit(2000000002.419:57767): avc: denied { create } for pid=3387 comm="syz.9.11056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 765.792345][ T3375] netlink: 'syz.3.11055': attribute type 3 has an invalid length. [ 765.804987][ T40] audit: type=1400 audit(2000000002.449:57768): avc: denied { setopt } for pid=3387 comm="syz.9.11056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 766.373855][ T3425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11065'. [ 766.377763][ T3428] input: syz0 as /devices/virtual/input/input522 [ 766.389971][ T3429] netlink: 708 bytes leftover after parsing attributes in process `syz.4.11067'. [ 766.506085][ T3443] fuse: Bad value for 'user_id' [ 766.508434][ T3443] fuse: Bad value for 'user_id' [ 766.550350][ T3448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11072'. [ 766.555211][ T3449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11072'. [ 766.673228][ T3448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.748064][ T3466] Bluetooth: (null): Invalid header checksum [ 766.767680][ T1172] Bluetooth: (null): Invalid header checksum [ 766.815114][ T3448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.870594][T15769] Bluetooth: (null): Invalid header checksum [ 766.932985][ T3448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.980946][ T1207] Bluetooth: (null): Invalid header checksum [ 767.033287][ T3448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.258347][T15769] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.267624][T15769] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.277291][ T1207] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.289852][ T1207] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.320424][ T3497] input: syz0 as /devices/virtual/input/input523 [ 767.473914][ T3515] EXT4-fs (nbd3): unable to read superblock [ 767.499133][ T3517] pimreg3: entered allmulticast mode [ 767.501790][ T3515] 9p: Could not find request transport: xevport [ 767.550624][ T3524] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 767.599031][ T3526] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11091'. [ 767.911630][ T3532] input: syz0 as /devices/virtual/input/input524 [ 767.995067][ T3544] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 768.057151][ T3556] netlink: 'syz.4.11098': attribute type 1 has an invalid length. [ 768.067645][ T3559] tmpfs: Bad value for 'huge' [ 768.067779][ T3566] tmpfs: Bad value for 'huge' [ 768.125322][ T40] audit: type=1400 audit(2000000004.779:57769): avc: denied { ioctl } for pid=3568 comm="syz.1.11099" path="socket:[218545]" dev="sockfs" ino=218545 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 768.828944][ T3595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.834344][ T3595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.851739][ T3595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.855155][ T3595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.869203][ T3597] input: syz0 as /devices/virtual/input/input525 [ 768.921258][ T3602] xt_ecn: cannot match TCP bits for non-tcp packets [ 769.122143][ T3624] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 769.125015][ T3624] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 769.128597][ T3624] vhci_hcd vhci_hcd.0: Device attached [ 769.134872][ T3624] vhci_hcd vhci_hcd.0: port 0 already used [ 769.139128][ T3628] vhci_hcd: connection closed [ 769.139515][T15768] vhci_hcd vhci_hcd.1: stop threads [ 769.144580][T15768] vhci_hcd vhci_hcd.1: release socket [ 769.146916][T15768] vhci_hcd vhci_hcd.1: disconnect device [ 769.217269][ T40] audit: type=1400 audit(2000000005.869:57770): avc: denied { associate } for pid=3633 comm="syz.9.11115" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 769.653965][ T3661] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11120'. [ 770.145508][ T3681] netlink: 'syz.3.11125': attribute type 9 has an invalid length. [ 770.205444][ T3692] input: syz0 as /devices/virtual/input/input526 [ 770.404196][ T40] audit: type=1400 audit(2000000007.059:57771): avc: denied { bind } for pid=3710 comm="syz.3.11133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 770.478873][ T3712] geneve2: entered promiscuous mode [ 770.481429][ T3712] geneve2: entered allmulticast mode [ 770.641347][ T3721] IPv6: NLM_F_CREATE should be specified when creating new route [ 770.819402][ T3734] netlink: 'syz.9.11137': attribute type 9 has an invalid length. [ 770.825672][ T3734] __nla_validate_parse: 8 callbacks suppressed [ 770.825691][ T3734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11137'. [ 770.836316][ T3734] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11137'. [ 770.840703][ T3734] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11137'. [ 770.960097][ T3750] syzkaller0: entered promiscuous mode [ 770.962986][ T3750] syzkaller0: entered allmulticast mode [ 771.264227][ T3799] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11150'. [ 771.411542][ T3817] input: syz0 as /devices/virtual/input/input527 [ 771.547008][ T3836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11158'. [ 771.589905][ T3840] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11159'. [ 771.856525][ T3862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11164'. [ 772.003218][ T3880] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3394018074 (6788036148 ns) > initial count (6222627426 ns). Using initial count to start timer. [ 772.035614][ T40] audit: type=1400 audit(2000000008.679:57772): avc: denied { map } for pid=3881 comm="syz.1.11169" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 772.202271][ T3893] CIFS mount error: No usable UNC path provided in device string! [ 772.202271][ T3893] [ 772.206670][ T3893] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 772.406760][ T3912] netlink: 76 bytes leftover after parsing attributes in process `syz.9.11177'. [ 772.469103][ T40] audit: type=1400 audit(2000000009.119:57773): avc: denied { connect } for pid=3916 comm="syz.4.11179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 772.495809][ T3919] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11180'. [ 772.663423][ T3926] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 772.665581][ T3926] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 772.670359][ T3926] vhci_hcd vhci_hcd.0: Device attached [ 772.686664][ T3926] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11182'. [ 772.690502][ T3930] vhci_hcd: connection closed [ 772.693653][T15765] vhci_hcd vhci_hcd.9: stop threads [ 772.700237][T15765] vhci_hcd vhci_hcd.9: release socket [ 772.702968][T15765] vhci_hcd vhci_hcd.9: disconnect device [ 772.999121][ T3939] binder: BINDER_SET_CONTEXT_MGR already set [ 773.001303][ T3939] binder: 3938:3939 ioctl 4018620d 200000000100 returned -16 [ 773.163682][ T3947] input: syz0 as /devices/virtual/input/input528 [ 773.558943][ T3981] input: syz0 as /devices/virtual/input/input529 [ 773.724523][ T3995] input: syz0 as /devices/virtual/input/input530 [ 774.511042][ T40] audit: type=1400 audit(2000000011.169:57774): avc: denied { bind } for pid=4003 comm="syz.9.11208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 774.702083][ T4023] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 774.705847][ T4023] openvswitch: netlink: Flow actions attr not present in new flow. [ 774.712838][ T40] audit: type=1326 audit(2000000011.369:57775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.11202" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc5e98f7c9 code=0x0 [ 775.427809][ T40] audit: type=1326 audit(2000000012.079:57776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.11202" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5e98f7c9 code=0x7fc00000 [ 775.592195][ T4072] overlayfs: failed to resolve './file1': -2 [ 775.750631][ T40] audit: type=1400 audit(2000000012.409:57777): avc: denied { create } for pid=4081 comm="syz.4.11222" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 775.795265][ T4089] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 775.837215][ T4094] __nla_validate_parse: 4 callbacks suppressed [ 775.837228][ T4094] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11227'. [ 775.899778][ T4104] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11229'. [ 776.188695][ T4136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.202578][ T40] audit: type=1400 audit(2000000012.859:57778): avc: denied { connect } for pid=4135 comm="syz.1.11234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 776.210607][ T40] audit: type=1400 audit(2000000012.859:57779): avc: denied { bind } for pid=4135 comm="syz.1.11234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 776.220457][ T3245] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 776.240669][T15765] Bluetooth: Error in BCSP hdr checksum [ 776.275897][ T4138] input: syz0 as /devices/virtual/input/input531 [ 776.326719][ T4144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11236'. [ 776.370820][ T3245] usb 14-1: Using ep0 maxpacket: 16 [ 776.376326][ T3245] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.379918][ T3245] usb 14-1: config 0 has no interfaces? [ 776.382569][ T3245] usb 14-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 776.385667][ T3245] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.394894][ T3245] usb 14-1: config 0 descriptor?? [ 776.478432][ T4160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11241'. [ 776.500649][T11535] Bluetooth: Error in BCSP hdr checksum [ 776.666255][ T5944] usb 14-1: USB disconnect, device number 5 [ 776.708899][ T4165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11242'. [ 776.958448][ T4185] netlink: 112 bytes leftover after parsing attributes in process `syz.4.11246'. [ 777.252775][ T40] audit: type=1400 audit(2000000013.909:57780): avc: denied { execmod } for pid=4190 comm="syz.1.11248" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=221419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 777.297870][ T4196] input: syz0 as /devices/virtual/input/input532 [ 777.440688][ T4217] program syz.3.11254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 777.491950][ T4223] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11257'. [ 777.533220][ T4225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11258'. [ 777.793938][ T4235] input: syz0 as /devices/virtual/input/input533 [ 777.874120][ T40] audit: type=1400 audit(2000000014.529:57781): avc: denied { getopt } for pid=4243 comm="syz.1.11263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 777.911370][ T4248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11264'. [ 777.963454][ T4252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11264'. [ 778.010261][T23554] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 778.012085][ T5950] Bluetooth: hci2: command 0x1003 tx timeout [ 778.113395][ T4270] FAULT_INJECTION: forcing a failure. [ 778.113395][ T4270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.118416][ T4270] CPU: 1 UID: 0 PID: 4270 Comm: syz.4.11269 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.118436][ T4270] Tainted: [L]=SOFTLOCKUP [ 778.118441][ T4270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 778.118448][ T4270] Call Trace: [ 778.118454][ T4270] [ 778.118460][ T4270] dump_stack_lvl+0x16c/0x1f0 [ 778.118480][ T4270] should_fail_ex+0x512/0x640 [ 778.118502][ T4270] _copy_from_iter+0x2a4/0x16c0 [ 778.118522][ T4270] ? __alloc_skb+0x220/0x410 [ 778.118540][ T4270] ? __alloc_skb+0x35d/0x410 [ 778.118558][ T4270] ? __pfx__copy_from_iter+0x10/0x10 [ 778.118576][ T4270] ? netlink_autobind.isra.0+0x158/0x370 [ 778.118597][ T4270] netlink_sendmsg+0x820/0xdd0 [ 778.118615][ T4270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.118635][ T4270] ____sys_sendmsg+0xa5d/0xc30 [ 778.118652][ T4270] ? copy_msghdr_from_user+0x10a/0x160 [ 778.118665][ T4270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.118687][ T4270] ___sys_sendmsg+0x134/0x1d0 [ 778.118701][ T4270] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.118730][ T4270] __sys_sendmsg+0x16d/0x220 [ 778.118743][ T4270] ? __pfx___sys_sendmsg+0x10/0x10 [ 778.118765][ T4270] do_syscall_64+0xcd/0xf80 [ 778.118782][ T4270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.118795][ T4270] RIP: 0033:0x7f1ec978f7c9 [ 778.118805][ T4270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.118818][ T4270] RSP: 002b:00007f1eca683038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.118830][ T4270] RAX: ffffffffffffffda RBX: 00007f1ec99e5fa0 RCX: 00007f1ec978f7c9 [ 778.118838][ T4270] RDX: 0000000000040890 RSI: 0000200000000040 RDI: 0000000000000003 [ 778.118845][ T4270] RBP: 00007f1eca683090 R08: 0000000000000000 R09: 0000000000000000 [ 778.118852][ T4270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.118860][ T4270] R13: 00007f1ec99e6038 R14: 00007f1ec99e5fa0 R15: 00007fffce0c8128 [ 778.118875][ T4270] [ 778.248942][ T4289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=4289 comm=syz.3.11274 [ 778.313340][ T40] audit: type=1400 audit(2000000014.959:57782): avc: denied { getopt } for pid=4288 comm="syz.3.11274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 778.672485][T15768] bond0 (unregistering): Released all slaves [ 778.679541][T15768] bond1 (unregistering): Released all slaves [ 778.687922][T15768] bond2 (unregistering): Released all slaves [ 778.699996][T15768] bond3 (unregistering): Released all slaves [ 778.724711][ T4309] bridge2: entered promiscuous mode [ 778.727134][ T4309] bridge2: entered allmulticast mode [ 778.755867][ T4321] FAULT_INJECTION: forcing a failure. [ 778.755867][ T4321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.761922][ T4321] CPU: 2 UID: 0 PID: 4321 Comm: syz.4.11281 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.761949][ T4321] Tainted: [L]=SOFTLOCKUP [ 778.761955][ T4321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 778.761965][ T4321] Call Trace: [ 778.761971][ T4321] [ 778.761977][ T4321] dump_stack_lvl+0x16c/0x1f0 [ 778.762001][ T4321] should_fail_ex+0x512/0x640 [ 778.762027][ T4321] _copy_from_iter+0x2a4/0x16c0 [ 778.762053][ T4321] ? __alloc_skb+0x220/0x410 [ 778.762075][ T4321] ? __alloc_skb+0x35d/0x410 [ 778.762096][ T4321] ? __pfx__copy_from_iter+0x10/0x10 [ 778.762118][ T4321] ? netlink_autobind.isra.0+0x158/0x370 [ 778.762144][ T4321] netlink_sendmsg+0x820/0xdd0 [ 778.762165][ T4321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.762190][ T4321] ____sys_sendmsg+0xa5d/0xc30 [ 778.762211][ T4321] ? copy_msghdr_from_user+0x10a/0x160 [ 778.762226][ T4321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.762254][ T4321] ___sys_sendmsg+0x134/0x1d0 [ 778.762271][ T4321] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.762310][ T4321] __sys_sendmsg+0x16d/0x220 [ 778.762325][ T4321] ? __pfx___sys_sendmsg+0x10/0x10 [ 778.762352][ T4321] do_syscall_64+0xcd/0xf80 [ 778.762373][ T4321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.762388][ T4321] RIP: 0033:0x7f1ec978f7c9 [ 778.762401][ T4321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.762416][ T4321] RSP: 002b:00007f1eca683038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.762431][ T4321] RAX: ffffffffffffffda RBX: 00007f1ec99e5fa0 RCX: 00007f1ec978f7c9 [ 778.762441][ T4321] RDX: 0000000000040890 RSI: 0000200000000040 RDI: 0000000000000003 [ 778.762451][ T4321] RBP: 00007f1eca683090 R08: 0000000000000000 R09: 0000000000000000 [ 778.762460][ T4321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.762468][ T4321] R13: 00007f1ec99e6038 R14: 00007f1ec99e5fa0 R15: 00007fffce0c8128 [ 778.762489][ T4321] [ 778.780569][ T4323] input: syz0 as /devices/virtual/input/input534 [ 778.829254][ T4331] afs: Unknown parameter 'au`ocell' [ 778.878419][T15768] tipc: Disabling bearer [ 778.883364][T15768] tipc: Left network mode [ 778.956650][T15768] IPVS: stopping master sync thread 8226 ... [ 779.042481][ T4351] FAULT_INJECTION: forcing a failure. [ 779.042481][ T4351] name failslab, interval 1, probability 0, space 0, times 0 [ 779.060359][ T4351] CPU: 1 UID: 0 PID: 4351 Comm: syz.9.11289 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.060414][ T4351] Tainted: [L]=SOFTLOCKUP [ 779.060422][ T4351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 779.060434][ T4351] Call Trace: [ 779.060448][ T4351] [ 779.060457][ T4351] dump_stack_lvl+0x16c/0x1f0 [ 779.060487][ T4351] should_fail_ex+0x512/0x640 [ 779.060515][ T4351] ? __kmalloc_cache_noprof+0x5f/0x800 [ 779.060553][ T4351] should_failslab+0xc2/0x120 [ 779.060579][ T4351] __kmalloc_cache_noprof+0x80/0x800 [ 779.060607][ T4351] ? rcu_is_watching+0x12/0xc0 [ 779.060625][ T4351] ? vhost_task_create+0xe5/0x370 [ 779.060652][ T4351] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 779.060687][ T4351] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 779.060715][ T4351] ? vhost_task_create+0xe5/0x370 [ 779.060738][ T4351] vhost_task_create+0xe5/0x370 [ 779.060762][ T4351] ? __pfx_vhost_task_create+0x10/0x10 [ 779.060796][ T4351] ? __pfx_vhost_task_fn+0x10/0x10 [ 779.060826][ T4351] ? __pfx___mutex_lock+0x10/0x10 [ 779.060859][ T4351] kvm_mmu_post_init_vm+0x1b7/0x380 [ 779.060884][ T4351] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 779.060909][ T4351] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 779.060943][ T4351] kvm_vcpu_ioctl+0x76d/0x16d0 [ 779.060975][ T4351] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 779.061005][ T4351] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 779.061029][ T4351] ? do_vfs_ioctl+0x128/0x14f0 [ 779.061053][ T4351] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 779.061075][ T4351] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 779.061111][ T4351] ? hook_file_ioctl_common+0x144/0x410 [ 779.061148][ T4351] ? selinux_file_ioctl+0x180/0x270 [ 779.061172][ T4351] ? selinux_file_ioctl+0xb4/0x270 [ 779.061198][ T4351] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 779.061227][ T4351] __x64_sys_ioctl+0x18e/0x210 [ 779.061251][ T4351] do_syscall_64+0xcd/0xf80 [ 779.061277][ T4351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.061296][ T4351] RIP: 0033:0x7fda9ed8f7c9 [ 779.061312][ T4351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.061334][ T4351] RSP: 002b:00007fda9fc18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.061352][ T4351] RAX: ffffffffffffffda RBX: 00007fda9efe6090 RCX: 00007fda9ed8f7c9 [ 779.061365][ T4351] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 779.061376][ T4351] RBP: 00007fda9fc18090 R08: 0000000000000000 R09: 0000000000000000 [ 779.061387][ T4351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.061398][ T4351] R13: 00007fda9efe6128 R14: 00007fda9efe6090 R15: 00007ffd61e622c8 [ 779.061425][ T4351] [ 779.262977][ T4366] hfs: can't find a HFS filesystem on dev sr0 [ 779.446389][ T4386] /dev/loop4: Can't open blockdev [ 779.555926][ T4392] wlan0 speed is unknown, defaulting to 1000 [ 779.572848][T15768] hsr_slave_0: left promiscuous mode [ 779.580494][T15768] hsr_slave_1: left promiscuous mode [ 779.608919][T15768] veth0_macvtap: left promiscuous mode [ 779.616465][T15768] veth1_vlan: left promiscuous mode [ 779.900262][T15768] team0 (unregistering): Port device vlan0 removed [ 780.434197][ T4422] FAULT_INJECTION: forcing a failure. [ 780.434197][ T4422] name failslab, interval 1, probability 0, space 0, times 0 [ 780.439392][ T4422] CPU: 1 UID: 0 PID: 4422 Comm: syz.3.11307 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.439412][ T4422] Tainted: [L]=SOFTLOCKUP [ 780.439416][ T4422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 780.439424][ T4422] Call Trace: [ 780.439428][ T4422] [ 780.439434][ T4422] dump_stack_lvl+0x16c/0x1f0 [ 780.439454][ T4422] should_fail_ex+0x512/0x640 [ 780.439473][ T4422] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 780.439487][ T4422] should_failslab+0xc2/0x120 [ 780.439503][ T4422] kmem_cache_alloc_node_noprof+0x86/0x800 [ 780.439515][ T4422] ? copy_process+0x4b5/0x7430 [ 780.439537][ T4422] ? copy_process+0x4b5/0x7430 [ 780.439553][ T4422] copy_process+0x4b5/0x7430 [ 780.439577][ T4422] ? __pfx_copy_process+0x10/0x10 [ 780.439597][ T4422] ? lockdep_init_map_type+0x5c/0x270 [ 780.439613][ T4422] ? lockdep_init_map_type+0x5c/0x270 [ 780.439627][ T4422] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 780.439647][ T4422] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 780.439664][ T4422] vhost_task_create+0x1d2/0x370 [ 780.439680][ T4422] ? __pfx_vhost_task_create+0x10/0x10 [ 780.439699][ T4422] ? __pfx_vhost_task_fn+0x10/0x10 [ 780.439721][ T4422] ? __pfx___mutex_lock+0x10/0x10 [ 780.439741][ T4422] kvm_mmu_post_init_vm+0x1b7/0x380 [ 780.439756][ T4422] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 780.439771][ T4422] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 780.439792][ T4422] kvm_vcpu_ioctl+0x76d/0x16d0 [ 780.439811][ T4422] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 780.439828][ T4422] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 780.439843][ T4422] ? do_vfs_ioctl+0x128/0x14f0 [ 780.439857][ T4422] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 780.439870][ T4422] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 780.439891][ T4422] ? hook_file_ioctl_common+0x144/0x410 [ 780.439913][ T4422] ? selinux_file_ioctl+0x180/0x270 [ 780.439927][ T4422] ? selinux_file_ioctl+0xb4/0x270 [ 780.439942][ T4422] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 780.439960][ T4422] __x64_sys_ioctl+0x18e/0x210 [ 780.439974][ T4422] do_syscall_64+0xcd/0xf80 [ 780.439990][ T4422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.440002][ T4422] RIP: 0033:0x7f21f338f7c9 [ 780.440011][ T4422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.440022][ T4422] RSP: 002b:00007f21f42d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.440033][ T4422] RAX: ffffffffffffffda RBX: 00007f21f35e6090 RCX: 00007f21f338f7c9 [ 780.440041][ T4422] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 780.440047][ T4422] RBP: 00007f21f42d4090 R08: 0000000000000000 R09: 0000000000000000 [ 780.440054][ T4422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.440060][ T4422] R13: 00007f21f35e6128 R14: 00007f21f35e6090 R15: 00007ffd2c9007e8 [ 780.440075][ T4422] [ 780.966809][ T4441] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 780.980583][ T4441] netlink: 'syz.3.11309': attribute type 1 has an invalid length. [ 781.012466][ T4441] bond1: entered promiscuous mode [ 781.014185][ T4441] bond1: entered allmulticast mode [ 781.016126][ T4441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 781.061705][ T4494] QAT: failed to copy from user cfg_data. [ 781.084386][ T4503] __nla_validate_parse: 10 callbacks suppressed [ 781.084407][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11309'. [ 781.097744][ T4441] erspan1: entered allmulticast mode [ 781.112023][ T4441] bond1: (slave erspan1): making interface the new active one [ 781.114741][ T4441] erspan1: entered promiscuous mode [ 781.120098][ T4441] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 781.137441][ T40] audit: type=1400 audit(2000000017.789:57783): avc: denied { connect } for pid=4512 comm="syz.4.11315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 781.324393][ T4525] input: syz0 as /devices/virtual/input/input535 [ 781.380981][ T4526] QAT: Stopping all acceleration devices. [ 781.426883][ T4503] bond1 (unregistering): (slave erspan1): Releasing active interface [ 781.429406][ T4503] erspan1: left promiscuous mode [ 781.464127][ T4503] bond1 (unregistering): Released all slaves [ 781.755492][ T4578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11321'. [ 781.759181][ T4578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11321'. [ 781.955813][T15768] IPVS: stop unused estimator thread 0... [ 781.968824][ T40] audit: type=1400 audit(2000000018.619:57784): avc: denied { execute } for pid=4587 comm="syz.1.11323" path="/dev/comedi1" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 782.022606][ T4593] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11324'. [ 782.027173][ T4593] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11324'. [ 782.082599][ T4597] FAULT_INJECTION: forcing a failure. [ 782.082599][ T4597] name failslab, interval 1, probability 0, space 0, times 0 [ 782.087395][ T4597] CPU: 3 UID: 0 PID: 4597 Comm: syz.1.11325 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.087415][ T4597] Tainted: [L]=SOFTLOCKUP [ 782.087419][ T4597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 782.087427][ T4597] Call Trace: [ 782.087432][ T4597] [ 782.087438][ T4597] dump_stack_lvl+0x16c/0x1f0 [ 782.087467][ T4597] should_fail_ex+0x512/0x640 [ 782.087485][ T4597] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 782.087499][ T4597] should_failslab+0xc2/0x120 [ 782.087515][ T4597] kmem_cache_alloc_node_noprof+0x86/0x800 [ 782.087527][ T4597] ? __alloc_skb+0x156/0x410 [ 782.087548][ T4597] ? __alloc_skb+0x156/0x410 [ 782.087564][ T4597] __alloc_skb+0x156/0x410 [ 782.087580][ T4597] ? __alloc_skb+0x35d/0x410 [ 782.087596][ T4597] ? __pfx___alloc_skb+0x10/0x10 [ 782.087612][ T4597] ? __pfx___might_resched+0x10/0x10 [ 782.087624][ T4597] ? rcu_is_watching+0x12/0xc0 [ 782.087639][ T4597] ? trace_contention_end+0xdd/0x110 [ 782.087656][ T4597] netlink_dump+0x19b/0xd30 [ 782.087670][ T4597] ? __netlink_dump_start+0x150/0x990 [ 782.087683][ T4597] ? __netlink_lookup+0x654/0x900 [ 782.087696][ T4597] ? __pfx_netlink_dump+0x10/0x10 [ 782.087711][ T4597] ? __pfx___mutex_lock+0x10/0x10 [ 782.087729][ T4597] ? __netlink_lookup+0x65e/0x900 [ 782.087751][ T4597] __netlink_dump_start+0x6d6/0x990 [ 782.087765][ T4597] ? __pfx_br_vlan_rtm_dump+0x10/0x10 [ 782.087779][ T4597] rtnetlink_rcv_msg+0xb3e/0xe90 [ 782.087792][ T4597] ? __pfx_br_vlan_rtm_dump+0x10/0x10 [ 782.087805][ T4597] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 782.087818][ T4597] ? __pfx_rtnl_dumpit+0x10/0x10 [ 782.087834][ T4597] ? __pfx_br_vlan_rtm_dump+0x10/0x10 [ 782.087848][ T4597] ? ref_tracker_free+0x37c/0x830 [ 782.087860][ T4597] netlink_rcv_skb+0x158/0x420 [ 782.087877][ T4597] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 782.087893][ T4597] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 782.087913][ T4597] ? netlink_deliver_tap+0x1ae/0xd30 [ 782.087929][ T4597] netlink_unicast+0x5aa/0x870 [ 782.087947][ T4597] ? __pfx_netlink_unicast+0x10/0x10 [ 782.087970][ T4597] netlink_sendmsg+0x8c8/0xdd0 [ 782.087987][ T4597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.088010][ T4597] ____sys_sendmsg+0xa5d/0xc30 [ 782.088027][ T4597] ? copy_msghdr_from_user+0x10a/0x160 [ 782.088040][ T4597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 782.088066][ T4597] ___sys_sendmsg+0x134/0x1d0 [ 782.088079][ T4597] ? __pfx____sys_sendmsg+0x10/0x10 [ 782.088112][ T4597] __sys_sendmsg+0x16d/0x220 [ 782.088125][ T4597] ? __pfx___sys_sendmsg+0x10/0x10 [ 782.088150][ T4597] do_syscall_64+0xcd/0xf80 [ 782.088168][ T4597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.088180][ T4597] RIP: 0033:0x7fbc5e98f7c9 [ 782.088191][ T4597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.088203][ T4597] RSP: 002b:00007fbc5f751038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.088216][ T4597] RAX: ffffffffffffffda RBX: 00007fbc5ebe5fa0 RCX: 00007fbc5e98f7c9 [ 782.088224][ T4597] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 782.088231][ T4597] RBP: 00007fbc5f751090 R08: 0000000000000000 R09: 0000000000000000 [ 782.088239][ T4597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.088246][ T4597] R13: 00007fbc5ebe6038 R14: 00007fbc5ebe5fa0 R15: 00007fff64068e08 [ 782.088263][ T4597] [ 782.237312][ T4601] netlink: 'syz.1.11327': attribute type 10 has an invalid length. [ 782.241482][ T4601] syz_tun: entered promiscuous mode [ 782.247932][ T4601] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 782.424242][ T40] audit: type=1326 audit(2000000019.079:57785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4610 comm="syz.9.11332" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda9ed8f7c9 code=0x0 [ 782.470892][ T4636] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 782.695355][ T4659] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 782.699898][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11344'. [ 782.742735][ T4668] FAULT_INJECTION: forcing a failure. [ 782.742735][ T4668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.748248][ T4668] CPU: 0 UID: 0 PID: 4668 Comm: syz.4.11345 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.748268][ T4668] Tainted: [L]=SOFTLOCKUP [ 782.748272][ T4668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 782.748279][ T4668] Call Trace: [ 782.748284][ T4668] [ 782.748289][ T4668] dump_stack_lvl+0x16c/0x1f0 [ 782.748310][ T4668] should_fail_ex+0x512/0x640 [ 782.748330][ T4668] _copy_from_user+0x2e/0xd0 [ 782.748379][ T4668] kstrtouint_from_user+0xd6/0x1d0 [ 782.748399][ T4668] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 782.748417][ T4668] ? __lock_acquire+0x436/0x2890 [ 782.748434][ T4668] ? lock_acquire+0x179/0x330 [ 782.748450][ T4668] proc_fail_nth_write+0x83/0x220 [ 782.748463][ T4668] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 782.748478][ T4668] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 782.748489][ T4668] vfs_write+0x2a0/0x11d0 [ 782.748505][ T4668] ? __pfx___mutex_lock+0x10/0x10 [ 782.748522][ T4668] ? __pfx_vfs_write+0x10/0x10 [ 782.748541][ T4668] ? __fget_files+0x20e/0x3c0 [ 782.748561][ T4668] ksys_write+0x12a/0x250 [ 782.748575][ T4668] ? __pfx_ksys_write+0x10/0x10 [ 782.748593][ T4668] do_syscall_64+0xcd/0xf80 [ 782.748609][ T4668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.748621][ T4668] RIP: 0033:0x7f1ec978e27f [ 782.748631][ T4668] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 782.748647][ T4668] RSP: 002b:00007f1eca683030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 782.748659][ T4668] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1ec978e27f [ 782.748666][ T4668] RDX: 0000000000000001 RSI: 00007f1eca6830a0 RDI: 0000000000000004 [ 782.748673][ T4668] RBP: 00007f1eca683090 R08: 0000000000000000 R09: 0000000000000000 [ 782.748679][ T4668] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 782.748686][ T4668] R13: 00007f1ec99e6038 R14: 00007f1ec99e5fa0 R15: 00007fffce0c8128 [ 782.748702][ T4668] [ 782.841765][ T4673] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11348'. [ 782.875360][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11350'. [ 782.880723][ T4680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11350'. [ 782.888628][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11350'. [ 782.892219][ T40] audit: type=1326 audit(2000000019.549:57786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.3.11350" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21f338f7c9 code=0x0 [ 783.041944][ T4698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4698 comm=syz.3.11354 [ 783.072714][ T4701] overlayfs: empty lowerdir [ 783.076624][ T4701] trusted_key: encrypted_key: insufficient parameters specified [ 783.084442][ T4701] netlink: 'syz.1.11356': attribute type 10 has an invalid length. [ 783.627513][ T4719] QAT: Device 127 not found [ 783.863018][ T40] audit: type=1400 audit(2000000020.519:57787): avc: denied { unmount } for pid=1433 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 783.877645][ T4739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 783.880999][ T4739] IPv6: NLM_F_CREATE should be set when creating new route [ 783.883988][ T4739] IPv6: NLM_F_CREATE should be set when creating new route [ 783.886905][ T4739] IPv6: NLM_F_CREATE should be set when creating new route [ 783.898076][T17730] libceph: connect (1)[b::]:6789 error -101 [ 783.904974][T17730] libceph: mon0 (1)[b::]:6789 connect error [ 783.989504][ T4754] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 784.188384][T17730] libceph: connect (1)[b::]:6789 error -101 [ 784.191693][T17730] libceph: mon0 (1)[b::]:6789 connect error [ 784.569217][ T4778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.601562][ T4778] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=114 sclass=netlink_tcpdiag_socket pid=4778 comm=syz.9.11382 [ 784.689948][ T4740] ceph: No mds server is up or the cluster is laggy [ 784.707665][ T3245] libceph: connect (1)[b::]:6789 error -101 [ 784.713179][ T3245] libceph: mon0 (1)[b::]:6789 connect error [ 784.896631][ T4810] netdevsim netdevsim1 ªªªªªª: renamed from netdevsim0 (while UP) [ 785.468304][ T4847] input: syz0 as /devices/virtual/input/input540 [ 785.909394][ T40] audit: type=1400 audit(2000000022.559:57788): avc: denied { read write } for pid=4874 comm="syz.9.11411" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 785.919193][ T40] audit: type=1400 audit(2000000022.559:57789): avc: denied { open } for pid=4874 comm="syz.9.11411" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 785.926332][ T4883] netlink: 'syz.4.11414': attribute type 1 has an invalid length. [ 785.966870][ T4883] bond4: entered promiscuous mode [ 785.968586][ T4883] bond4: entered allmulticast mode [ 785.971273][ T4883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 786.008117][ T4883] erspan1: entered allmulticast mode [ 786.013129][ T4883] bond4: (slave erspan1): making interface the new active one [ 786.015836][ T4883] erspan1: entered promiscuous mode [ 786.018399][ T4883] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 786.122662][ T4939] ceph: Path missing in source [ 786.265673][ T4883] bond4 (unregistering): (slave erspan1): Releasing active interface [ 786.268275][ T4883] erspan1: left promiscuous mode [ 786.291254][ T4946] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 786.304087][ T4946] VFS: Can't find a romfs filesystem on dev nullb0. [ 786.304087][ T4946] [ 786.306203][ T4883] bond4 (unregistering): Released all slaves [ 786.323050][ T4935] netlink: 'syz.1.11419': attribute type 2 has an invalid length. [ 786.324703][ T4946] netlink: 'syz.3.11422': attribute type 1 has an invalid length. [ 786.325717][ T4935] __nla_validate_parse: 16 callbacks suppressed [ 786.325728][ T4935] netlink: 46 bytes leftover after parsing attributes in process `syz.1.11419'. [ 786.328912][ T4946] netlink: 'syz.3.11422': attribute type 1 has an invalid length. [ 786.690966][ T5017] input: syz1 as /devices/virtual/input/input541 [ 786.720044][ T5020] FAULT_INJECTION: forcing a failure. [ 786.720044][ T5020] name failslab, interval 1, probability 0, space 0, times 0 [ 786.728695][ T5020] CPU: 2 UID: 0 PID: 5020 Comm: syz.9.11433 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.728726][ T5020] Tainted: [L]=SOFTLOCKUP [ 786.728732][ T5020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 786.728743][ T5020] Call Trace: [ 786.728750][ T5020] [ 786.728758][ T5020] dump_stack_lvl+0x16c/0x1f0 [ 786.728787][ T5020] should_fail_ex+0x512/0x640 [ 786.728832][ T5020] ? kmem_cache_alloc_noprof+0x62/0x770 [ 786.728854][ T5020] should_failslab+0xc2/0x120 [ 786.728878][ T5020] kmem_cache_alloc_noprof+0x83/0x770 [ 786.728897][ T5020] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 786.728927][ T5020] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 786.728962][ T5020] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 786.728991][ T5020] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 786.729029][ T5020] mmu_topup_memory_caches+0x25/0x170 [ 786.729054][ T5020] kvm_mmu_load+0xd6/0x2390 [ 786.729075][ T5020] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 786.729103][ T5020] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 786.729133][ T5020] ? __pfx_kvm_mmu_load+0x10/0x10 [ 786.729152][ T5020] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 786.729183][ T5020] ? kvm_check_and_inject_events+0x63d/0x1050 [ 786.729211][ T5020] vcpu_run+0x39d2/0x5a80 [ 786.729247][ T5020] ? __pfx_vcpu_run+0x10/0x10 [ 786.729279][ T5020] ? rcu_is_watching+0x12/0xc0 [ 786.729302][ T5020] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 786.729324][ T5020] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 786.729356][ T5020] kvm_vcpu_ioctl+0x76d/0x16d0 [ 786.729386][ T5020] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 786.729414][ T5020] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 786.729437][ T5020] ? do_vfs_ioctl+0x128/0x14f0 [ 786.729459][ T5020] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 786.729481][ T5020] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 786.729517][ T5020] ? hook_file_ioctl_common+0x144/0x410 [ 786.729553][ T5020] ? selinux_file_ioctl+0x180/0x270 [ 786.729577][ T5020] ? selinux_file_ioctl+0xb4/0x270 [ 786.729603][ T5020] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 786.729638][ T5020] __x64_sys_ioctl+0x18e/0x210 [ 786.729661][ T5020] do_syscall_64+0xcd/0xf80 [ 786.729688][ T5020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.729707][ T5020] RIP: 0033:0x7fda9ed8f7c9 [ 786.729723][ T5020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.729741][ T5020] RSP: 002b:00007fda9fc18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 786.729760][ T5020] RAX: ffffffffffffffda RBX: 00007fda9efe6090 RCX: 00007fda9ed8f7c9 [ 786.729772][ T5020] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 786.729784][ T5020] RBP: 00007fda9fc18090 R08: 0000000000000000 R09: 0000000000000000 [ 786.729795][ T5020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 786.729806][ T5020] R13: 00007fda9efe6128 R14: 00007fda9efe6090 R15: 00007ffd61e622c8 [ 786.729833][ T5020] [ 786.952017][ T5035] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11437'. [ 786.975951][ T5038] Failed to get privilege flags for destination (handle=0x0:0x0) [ 786.978950][ T5037] Failed to get privilege flags for destination (handle=0x0:0x0) [ 786.991862][ T40] audit: type=1400 audit(2000000023.649:57790): avc: denied { write } for pid=5030 comm="syz.3.11436" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 786.994485][ T5038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11438'. [ 786.999796][ T40] audit: type=1400 audit(2000000023.649:57791): avc: denied { open } for pid=5030 comm="syz.3.11436" path="/335/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 787.002036][ T5032] 0xffffffff00000000-0x000000020000 : "" [ 787.002062][ T5032] mtd: partition "" is out of reach -- disabled [ 787.014954][ T40] audit: type=1400 audit(2000000023.659:57792): avc: denied { ioctl } for pid=5030 comm="syz.3.11436" path="/335/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 787.049826][ T5032] ftl_cs: FTL header not found. [ 787.061298][ T5044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11436'. [ 787.217721][ T5063] loop2: detected capacity change from 0 to 7 [ 787.219877][ T5068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11445'. [ 787.225381][ T2393] Dev loop2: unable to read RDB block 7 [ 787.227361][ T2393] loop2: unable to read partition table [ 787.229805][ T2393] loop2: partition table beyond EOD, truncated [ 787.239005][ T5063] Dev loop2: unable to read RDB block 7 [ 787.241940][ T5063] loop2: unable to read partition table [ 787.243908][ T5063] loop2: partition table beyond EOD, truncated [ 787.244695][ T5073] syzkaller0: entered promiscuous mode [ 787.245977][ T5063] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 787.249173][ T5073] syzkaller0: entered allmulticast mode [ 787.406817][ T5089] syz_tun: entered allmulticast mode [ 787.859690][ T40] audit: type=1400 audit(2000000024.509:57793): avc: denied { write } for pid=5143 comm="syz.3.11461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 787.879306][ T5144] 9pnet_virtio: no channels available for device ./file0 [ 787.950955][ T5154] bond3: (slave ªªªªªª©*°;¾eÕܲ): Releasing backup interface [ 787.991060][ T5154] bond3: (slave ªªªªªª©*°;¾eÕܲ): last VLAN challenged slave left bond - VLAN blocking is removed [ 788.002094][ T5154] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 788.009956][ T5158] team0: No ports can be present during mode change [ 788.023464][ T5154] vlan0: entered promiscuous mode [ 788.112758][ T5168] netlink: 'syz.4.11469': attribute type 13 has an invalid length. [ 788.117116][ T5168] gretap0: refused to change device tx_queue_len [ 788.119955][ T5168] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 788.131748][ T5169] netlink: 'syz.4.11469': attribute type 13 has an invalid length. [ 788.134813][ T5169] gretap0: refused to change device tx_queue_len [ 788.137301][ T5169] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 788.179434][ T5173] netlink: 100 bytes leftover after parsing attributes in process `syz.3.11470'. [ 788.182960][ T5172] netlink: 100 bytes leftover after parsing attributes in process `syz.3.11470'. [ 788.213479][ T40] audit: type=1400 audit(2000000024.869:57794): avc: denied { setopt } for pid=5171 comm="syz.3.11470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 789.446594][ T5228] IPVS: set_ctl: invalid protocol: 44 172.20.20.10:20004 [ 789.463474][ T5230] input: syz0 as /devices/virtual/input/input542 [ 789.544498][ T5237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11486'. [ 789.590726][ T40] audit: type=1400 audit(2000000026.249:57795): avc: denied { watch watch_reads } for pid=5243 comm="syz.9.11488" path="pipe:[226488]" dev="pipefs" ino=226488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 789.622696][ T5246] netlink: 'syz.3.11489': attribute type 21 has an invalid length. [ 789.665586][ T5251] fuse: Unknown parameter 'fdÜKt' [ 789.669283][ T5252] random: crng reseeded on system resumption [ 789.678045][ T5252] Restarting kernel threads ... [ 789.680767][ T5252] Done restarting kernel threads. [ 789.683319][ T40] audit: type=1400 audit(2000000026.339:57796): avc: denied { audit_write } for pid=5250 comm="syz.3.11491" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 789.791161][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11495'. [ 790.006447][ T5270] bond1: option xmit_hash_policy: invalid value (6) [ 790.012247][ T5270] bond1 (unregistering): Released all slaves [ 790.045020][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11499'. [ 790.278768][ T5377] smc: net device bond0 applied user defined pnetid SYZ2 [ 790.323835][ T5377] smc: removing net device bond0 with user defined pnetid SYZ2 [ 790.332004][ T5377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.372706][ T5377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.435149][ T5377] bond0 (unregistering): (slave team0): Releasing backup interface [ 790.461530][ T5377] bond0 (unregistering): Released all slaves [ 790.814887][ T5403] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 791.183071][ T5414] input: syz0 as /devices/virtual/input/input543 [ 791.190385][ T5414] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 791.193995][ T5414] VFS: Can't find a romfs filesystem on dev nullb0. [ 791.193995][ T5414] [ 791.451132][ T5438] input: syz0 as /devices/virtual/input/input544 [ 791.572875][ T5451] __nla_validate_parse: 7 callbacks suppressed [ 791.572889][ T5451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11525'. [ 791.607474][ T5454] netlink: 76 bytes leftover after parsing attributes in process `syz.9.11526'. [ 791.815226][ T5468] ptrace attach of "/syz-executor exec"[25005] was attempted by ""[5468] [ 791.821115][ T40] audit: type=1400 audit(2000000028.479:57797): avc: denied { execheap } for pid=5467 comm="syz.4.11531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 791.870725][ T5477] input: syz0 as /devices/virtual/input/input545 [ 791.922125][ T5484] pimreg3: entered allmulticast mode [ 791.965204][ T5488] mac80211_hwsim hwsim66 wlan1: entered allmulticast mode [ 792.112105][ T5498] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11539'. [ 792.669124][ T5523] input: syz0 as /devices/virtual/input/input546 [ 792.826156][ T5545] 9pnet: Found fid 0 not clunked [ 793.211806][ T5559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11555'. [ 793.866055][ T5570] sctp: [Deprecated]: syz.9.11558 (pid 5570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 793.866055][ T5570] Use struct sctp_sack_info instead [ 794.121581][ T5580] tipc: Enabling of bearer rejected, failed to enable media [ 794.249629][ T5586] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11563'. [ 794.330513][ T40] audit: type=1400 audit(2000000030.989:57798): avc: denied { lock } for pid=5590 comm="syz.9.11565" path="socket:[226714]" dev="sockfs" ino=226714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 794.374740][ T5598] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11567'. [ 794.443531][ T40] audit: type=1400 audit(2000000031.099:57799): avc: denied { append } for pid=5604 comm="syz.3.11570" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 794.558765][ T5612] netlink: 76 bytes leftover after parsing attributes in process `syz.9.11573'. [ 794.645912][ T5618] input: syz0 as /devices/virtual/input/input547 [ 794.687069][ T5627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11578'. [ 794.748444][ T5632] netlink: 'syz.3.11580': attribute type 10 has an invalid length. [ 794.763299][ T5632] batman_adv: batadv0: Adding interface: team0 [ 794.766370][ T5632] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.778482][ T5632] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 794.818615][ T40] audit: type=1400 audit(2000000031.469:57800): avc: denied { create } for pid=5639 comm="syz.3.11582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 794.827701][ T40] audit: type=1400 audit(2000000031.489:57801): avc: denied { setopt } for pid=5639 comm="syz.3.11582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 794.841454][ T5640] fuse: Bad value for 'user_id' [ 794.843360][ T5640] fuse: Bad value for 'user_id' [ 794.846570][ T5640] fuse: Unknown parameter 'uid<00000000000000000000' [ 794.875657][ T5642] FAT-fs (nullb0): bogus number of reserved sectors [ 794.878064][ T5642] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 794.898962][ T5645] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11584'. [ 795.435166][ T5669] input: syz0 as /devices/virtual/input/input548 [ 795.496556][ T5677] wlan0 speed is unknown, defaulting to 1000 [ 795.586832][ T5706] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11593'. [ 795.761746][ T3713] bridge0: port 3(syz_tun) entered disabled state [ 795.783665][ T3713] syz_tun (unregistering): left allmulticast mode [ 795.786409][ T3713] syz_tun (unregistering): left promiscuous mode [ 795.789256][ T3713] bridge0: port 3(syz_tun) entered disabled state [ 796.395279][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 796.405451][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 796.409098][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 796.412581][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 796.415836][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 796.461079][ T5719] wlan0 speed is unknown, defaulting to 1000 [ 796.556894][ T5774] input: syz0 as /devices/virtual/input/input549 [ 796.623974][ T5719] chnl_net:caif_netlink_parms(): no params data found [ 796.725026][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.727302][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.729743][ T5719] bridge_slave_0: entered allmulticast mode [ 796.734759][ T5719] bridge_slave_0: entered promiscuous mode [ 796.738409][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.742122][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.744859][ T5719] bridge_slave_1: entered allmulticast mode [ 796.747639][ T5719] bridge_slave_1: entered promiscuous mode [ 796.770414][ T5719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.777835][ T5719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.813810][ T5719] team0: Port device team_slave_0 added [ 796.817593][ T5719] team0: Port device team_slave_1 added [ 796.838994][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.841797][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.851580][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.856057][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.857599][ T40] audit: type=1400 audit(2000000033.509:57802): avc: denied { lock } for pid=5903 comm="syz.9.11603" path="socket:[224220]" dev="sockfs" ino=224220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 796.858872][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.859734][ T5904] usb usb8: usbfs: process 5904 (syz.9.11603) did not claim interface 0 before use [ 796.884131][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.912282][ T5719] hsr_slave_0: entered promiscuous mode [ 796.914813][ T5719] hsr_slave_1: entered promiscuous mode [ 796.917816][ T5719] debugfs: 'hsr0' already exists in 'hsr' [ 796.919747][ T5719] Cannot create hsr debugfs directory [ 797.011028][ T5987] netlink: 56 bytes leftover after parsing attributes in process `syz.9.11604'. [ 797.060693][ T5719] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.158072][ T5719] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.231687][ T5719] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.330382][ T5719] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.555571][ T5719] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 797.562332][ T5719] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 797.566959][ T5719] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 797.571794][ T5719] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 797.625331][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.640569][ T5719] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.648999][T11538] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.651877][T11538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.662549][T23294] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.665767][T23294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.757446][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11608'. [ 797.839505][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.856137][ T6083] sctp: [Deprecated]: syz.4.11610 (pid 6083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 797.856137][ T6083] Use struct sctp_sack_info instead [ 797.874957][ T40] audit: type=1400 audit(2000000034.529:57803): avc: denied { relabelfrom } for pid=6082 comm="syz.4.11610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 797.886898][ T40] audit: type=1400 audit(2000000034.539:57804): avc: denied { relabelto } for pid=6082 comm="syz.4.11610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 798.031078][ T5719] veth0_vlan: entered promiscuous mode [ 798.037399][ T5719] veth1_vlan: entered promiscuous mode [ 798.064515][ T5719] veth0_macvtap: entered promiscuous mode [ 798.069029][ T5719] veth1_macvtap: entered promiscuous mode [ 798.078849][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.082361][ T8718] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 798.088166][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.095963][T15765] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.099838][T15765] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.109536][T15770] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.114286][T15770] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.170092][ T6108] Failed to get privilege flags for destination (handle=0x2:0x2) [ 798.197076][ T6103] syzkaller1: entered promiscuous mode [ 798.199820][ T6103] syzkaller1: entered allmulticast mode [ 798.207871][T15765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.210851][T15765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.220511][ T8718] usb 14-1: device descriptor read/64, error -71 [ 798.229124][T15770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.232430][T15770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.331411][ C0] ------------[ cut here ]------------ [ 798.334571][ C0] ODEBUG: free active (active state 0) object: ffff88803668d490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 798.338753][ T6124] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11613'. [ 798.339686][ C0] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#0: syz-executor/5719 [ 798.347301][ C0] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 798.349927][ C0] CPU: 0 UID: 0 PID: 5719 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 798.351447][ T40] audit: type=1400 audit(2000000035.009:57805): avc: denied { write } for pid=5918 comm="syz-executor" path="pipe:[4076]" dev="pipefs" ino=4076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 798.354778][ C0] Tainted: [L]=SOFTLOCKUP [ 798.354794][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 798.354809][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 798.370702][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d c2 44 dd 0b 41 56 48 8b 14 dd e0 c4 f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 7c f6 d3 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 798.378922][ C0] RSP: 0018:ffffc90000007a08 EFLAGS: 00010246 [ 798.381156][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 798.384125][ C0] RDX: ffffffff8bf2c420 RSI: ffffffff8bf2c000 RDI: ffffffff909237b0 [ 798.387353][ C0] RBP: 0000000000000001 R08: ffff88803668d490 R09: ffffffff8b906c80 [ 798.391008][ C0] R10: ffffffff9088b8d7 R11: ffff88805b96aff0 R12: ffffffff8bf2c000 [ 798.395059][ C0] R13: ffffffff8b906cc0 R14: ffffffff8a6385c0 R15: ffffc90000007b08 [ 798.398398][ C0] FS: 0000555558308500(0000) GS:ffff8880d68f5000(0000) knlGS:0000000000000000 [ 798.402114][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 798.404966][ C0] CR2: 00007fc639c16ad0 CR3: 000000001310e000 CR4: 0000000000352ef0 [ 798.408222][ C0] Call Trace: [ 798.409598][ C0] [ 798.410891][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 798.413305][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 798.415549][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 798.417582][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 798.419899][ C0] ? mark_held_locks+0x49/0x80 [ 798.422050][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 798.424292][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 798.426579][ C0] kfree+0x2d1/0x6e0 [ 798.428540][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 798.430661][ C0] ? rose_timer_expiry+0x53f/0x630 [ 798.432655][ C0] ? rose_timer_expiry+0x53f/0x630 [ 798.434648][ C0] rose_timer_expiry+0x53f/0x630 [ 798.436758][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 798.439011][ C0] call_timer_fn+0x19a/0x5a0 [ 798.441203][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 798.443268][ C0] ? mark_held_locks+0x49/0x80 [ 798.445066][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 798.446934][ C0] __run_timers+0x74a/0xae0 [ 798.448571][ C0] ? __pfx___run_timers+0x10/0x10 [ 798.450452][ C0] run_timer_base+0x114/0x190 [ 798.451993][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 798.454072][ C0] run_timer_softirq+0x1a/0x40 [ 798.456357][ C0] handle_softirqs+0x219/0x950 [ 798.458443][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 798.460714][ C0] __irq_exit_rcu+0x109/0x170 [ 798.462701][ C0] irq_exit_rcu+0x9/0x30 [ 798.464190][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 798.465998][ C0] [ 798.466940][ C0] [ 798.467871][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 798.469795][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x70 [ 798.472558][ C0] Code: a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 6c 16 00 00 85 c0 74 2b 8b 82 48 16 00 00 <83> f8 02 75 20 48 8b 8a 50 16 00 00 8b 92 4c 16 00 00 48 8b 01 48 [ 798.480240][ C0] RSP: 0018:ffffc90003d87660 EFLAGS: 00000246 [ 798.482414][ C0] RAX: 0000000000000000 RBX: 800000013a2ff007 RCX: ffffffff820e5f9b [ 798.485666][ C0] RDX: ffff88805b96a4c0 RSI: ffffffff820e5fb2 RDI: 0000000000000007 [ 798.488691][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 798.491397][ C0] R10: 0000000000000000 R11: ffff88805b96aff0 R12: 0000000000000028 [ 798.494112][ C0] R13: 0000000000000000 R14: ffffea0004e8bfc0 R15: ffffea0004e8bfc0 [ 798.496692][ C0] ? copy_page_range+0x20fb/0x6780 [ 798.498351][ C0] ? copy_page_range+0x2112/0x6780 [ 798.499975][ C0] copy_page_range+0x2112/0x6780 [ 798.500644][T23554] Bluetooth: hci2: command tx timeout [ 798.501660][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 798.506436][ C0] ? __pfx___might_resched+0x10/0x10 [ 798.508178][ C0] ? __pfx_mas_store+0x10/0x10 [ 798.509751][ C0] ? dup_mmap+0xba4/0x20e0 [ 798.511339][ C0] ? down_write+0x14d/0x200 [ 798.512910][ C0] ? up_write+0x282/0x4e0 [ 798.514423][ C0] dup_mmap+0xbea/0x20e0 [ 798.515971][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 798.517606][ C0] copy_process+0x3b9f/0x7430 [ 798.519477][ C0] ? __pfx_copy_process+0x10/0x10 [ 798.521687][ C0] ? do_fault+0x6bc/0x1ad0 [ 798.523224][ C0] kernel_clone+0xfc/0x910 [ 798.524668][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 798.526277][ C0] __do_sys_clone+0xce/0x120 [ 798.527755][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 798.529390][ C0] ? do_user_addr_fault+0x843/0x1370 [ 798.531183][ C0] do_syscall_64+0xcd/0xf80 [ 798.532699][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.535067][ C0] RIP: 0033:0x7fc638d85f13 [ 798.537247][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 798.544628][ C0] RSP: 002b:00007ffe7dd8fff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 798.547530][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc638d85f13 [ 798.550249][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 798.552729][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 798.555197][ C0] R10: 00005555583087d0 R11: 0000000000000246 R12: 0000000000000000 [ 798.557721][ C0] R13: 00007fc638fb4280 R14: 0000000000000003 R15: 00007ffe7dd90190 [ 798.560347][ C0] [ 798.561416][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 798.564008][ C0] CPU: 0 UID: 0 PID: 5719 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 798.568099][ C0] Tainted: [L]=SOFTLOCKUP [ 798.569422][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 798.572840][ C0] Call Trace: [ 798.574093][ C0] [ 798.575094][ C0] dump_stack_lvl+0x3d/0x1f0 [ 798.576565][ C0] vpanic+0x640/0x6f0 [ 798.577798][ C0] ? debug_print_object+0x18e/0x2a0 [ 798.579381][ C0] panic+0xca/0xd0 [ 798.580583][ C0] ? __pfx_panic+0x10/0x10 [ 798.581984][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 798.583683][ C0] check_panic_on_warn+0xab/0xb0 [ 798.585263][ C0] __warn+0x108/0x3c0 [ 798.586558][ C0] __report_bug+0x2a0/0x520 [ 798.587979][ C0] ? debug_print_object+0x18e/0x2a0 [ 798.589730][ C0] ? __pfx___report_bug+0x10/0x10 [ 798.591347][ C0] ? mark_held_locks+0x49/0x80 [ 798.592967][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 798.595009][ C0] report_bug_entry+0xe1/0x290 [ 798.596774][ C0] ? debug_print_object+0x19b/0x2a0 [ 798.598409][ C0] handle_bug+0x18a/0x260 [ 798.599786][ C0] exc_invalid_op+0x17/0x50 [ 798.601224][ C0] asm_exc_invalid_op+0x1a/0x20 [ 798.602794][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 798.604704][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d c2 44 dd 0b 41 56 48 8b 14 dd e0 c4 f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 7c f6 d3 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 798.611289][ C0] RSP: 0018:ffffc90000007a08 EFLAGS: 00010246 [ 798.613168][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 798.615722][ C0] RDX: ffffffff8bf2c420 RSI: ffffffff8bf2c000 RDI: ffffffff909237b0 [ 798.618175][ C0] RBP: 0000000000000001 R08: ffff88803668d490 R09: ffffffff8b906c80 [ 798.620794][ C0] R10: ffffffff9088b8d7 R11: ffff88805b96aff0 R12: ffffffff8bf2c000 [ 798.623832][ C0] R13: ffffffff8b906cc0 R14: ffffffff8a6385c0 R15: ffffc90000007b08 [ 798.626842][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 798.628597][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 798.630319][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 798.632225][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 798.633993][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 798.635882][ C0] ? mark_held_locks+0x49/0x80 [ 798.637428][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 798.639071][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 798.640718][ C0] kfree+0x2d1/0x6e0 [ 798.642047][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 798.644009][ C0] ? rose_timer_expiry+0x53f/0x630 [ 798.646015][ C0] ? rose_timer_expiry+0x53f/0x630 [ 798.647785][ C0] rose_timer_expiry+0x53f/0x630 [ 798.649443][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 798.651464][ C0] call_timer_fn+0x19a/0x5a0 [ 798.652938][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 798.654606][ C0] ? mark_held_locks+0x49/0x80 [ 798.656225][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 798.657896][ C0] __run_timers+0x74a/0xae0 [ 798.659350][ C0] ? __pfx___run_timers+0x10/0x10 [ 798.661039][ C0] run_timer_base+0x114/0x190 [ 798.662627][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 798.664698][ C0] run_timer_softirq+0x1a/0x40 [ 798.666657][ C0] handle_softirqs+0x219/0x950 [ 798.668608][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 798.670309][ C0] __irq_exit_rcu+0x109/0x170 [ 798.671808][ C0] irq_exit_rcu+0x9/0x30 [ 798.673181][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 798.675088][ C0] [ 798.676294][ C0] [ 798.677624][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 798.680144][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x70 [ 798.682711][ C0] Code: a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 6c 16 00 00 85 c0 74 2b 8b 82 48 16 00 00 <83> f8 02 75 20 48 8b 8a 50 16 00 00 8b 92 4c 16 00 00 48 8b 01 48 [ 798.691537][ C0] RSP: 0018:ffffc90003d87660 EFLAGS: 00000246 [ 798.694188][ C0] RAX: 0000000000000000 RBX: 800000013a2ff007 RCX: ffffffff820e5f9b [ 798.697851][ C0] RDX: ffff88805b96a4c0 RSI: ffffffff820e5fb2 RDI: 0000000000000007 [ 798.701198][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 798.704616][ C0] R10: 0000000000000000 R11: ffff88805b96aff0 R12: 0000000000000028 [ 798.707850][ C0] R13: 0000000000000000 R14: ffffea0004e8bfc0 R15: ffffea0004e8bfc0 [ 798.711392][ C0] ? copy_page_range+0x20fb/0x6780 [ 798.713728][ C0] ? copy_page_range+0x2112/0x6780 [ 798.716344][ C0] copy_page_range+0x2112/0x6780 [ 798.718605][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 798.720302][ C0] ? __pfx___might_resched+0x10/0x10 [ 798.721970][ C0] ? __pfx_mas_store+0x10/0x10 [ 798.723692][ C0] ? dup_mmap+0xba4/0x20e0 [ 798.725387][ C0] ? down_write+0x14d/0x200 [ 798.727158][ C0] ? up_write+0x282/0x4e0 [ 798.728668][ C0] dup_mmap+0xbea/0x20e0 [ 798.730187][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 798.731847][ C0] copy_process+0x3b9f/0x7430 [ 798.733447][ C0] ? __pfx_copy_process+0x10/0x10 [ 798.735491][ C0] ? do_fault+0x6bc/0x1ad0 [ 798.737027][ C0] kernel_clone+0xfc/0x910 [ 798.739073][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 798.741123][ C0] __do_sys_clone+0xce/0x120 [ 798.743243][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 798.745286][ C0] ? do_user_addr_fault+0x843/0x1370 [ 798.746982][ C0] do_syscall_64+0xcd/0xf80 [ 798.748394][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.750252][ C0] RIP: 0033:0x7fc638d85f13 [ 798.751885][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 798.760090][ C0] RSP: 002b:00007ffe7dd8fff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 798.763880][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc638d85f13 [ 798.767084][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 798.770214][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 798.773467][ C0] R10: 00005555583087d0 R11: 0000000000000246 R12: 0000000000000000 [ 798.776774][ C0] R13: 00007fc638fb4280 R14: 0000000000000003 R15: 00007ffe7dd90190 [ 798.780088][ C0] [ 798.782570][ C0] Kernel Offset: disabled [ 798.784620][ C0] Rebooting in 86400 seconds..