last executing test programs: 3m40.394940331s ago: executing program 0 (id=511): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01144e", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}}}}}}}, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8400, 0x4) (async, rerun: 32) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (rerun: 32) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r2 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m40.330522332s ago: executing program 0 (id=512): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000002f6c9ded0250791c70eb2303000000000000009a2d68d345ce6be07ee08b4d8d6211d875959032af5c472cdd97be72f7fb28982bde76ea1db05742478b22e06bbd9082b353bfa3c90625796e0409936094a0cf899e5894abdb0243849bbc077ac7befaf2fbc89a38f1983323c43e0eaf23b280a26525176ab8f37b999afea9f20c02de7bdd4b6ce5c9616764ceb6dec7d8013ffefea8", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030000000000080006000001000005000d000000000008000600090000000800050004000000"], 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) (async, rerun: 32) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0) (async, rerun: 32) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) (rerun: 32) landlock_restrict_self(r2, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x2) (async, rerun: 64) landlock_restrict_self(r1, 0x0) (async, rerun: 64) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000180)) (async) landlock_restrict_self(r3, 0x0) (async, rerun: 32) landlock_restrict_self(r3, 0x0) (async, rerun: 32) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) landlock_restrict_self(r1, 0x2) landlock_restrict_self(r1, 0x0) (async, rerun: 32) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bond_slave_0\x00', 0x100}) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) 3m40.330198838s ago: executing program 0 (id=513): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x4a8041, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd0200241000fddbdf2506000000000000000200000008", @ANYRES32=r4, @ANYBLOB="080006000a0101020400050008000800ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x80000e, 0x20010, r0, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x80000e, 0x20010, r0, 0x0) 3m40.254361904s ago: executing program 0 (id=515): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x52) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@empty}}, &(0x7f0000000500)=0xe8) r1 = syz_io_uring_setup(0x80000830, &(0x7f0000000680)={0x0, 0x1000cd1d, 0x10101}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000000c0)={0x3, r1, 0x3a, {0x5, 0x3}, 0x7}, 0x1) r2 = getegid() mount$bpf(0x0, &(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f00000001c0), 0x900010, &(0x7f0000000580)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r0, @ANYBLOB="2c6769df7ba088b934aecc5f1fd367b6b4dad64acd5dc0c2804fbfd386f68a", @ANYRESHEX=r2, @ANYBLOB=',mask=^MAY_READ,\x00']) mount(0x0, &(0x7f0000000380)='./file0/../file0/../file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000700)="66b82b010f00d0b8006000000f23d00f21f8660f38828a94ea29940f23f866baf80cb8d6925882ef66bafc0c66b8008066ef0fc719f3a5b9800000c00f3235004000000f3066b8f4000f00d8260f794366f30fc7b0ca7300000f01c2", 0x5c}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000002100), 0x404000, &(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESOCT=r5, @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x5, 0x81, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x100, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000440)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) 3m39.815834449s ago: executing program 0 (id=516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r2 = syz_open_procfs$pagemap(r1, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x51, 0xa}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x69, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x5b, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0xe7}, {"bd58c9fce4ece5c3109bc7f674c5f55baa908602c7e8a61369bbfbf355b9a1e3327d3b4c563b12591ad7d9b49f4ac336e9bc0a"}}}}}}, 0x0) 3m39.503514653s ago: executing program 0 (id=518): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xe1}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x1, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x3}, 0x28) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m39.457339704s ago: executing program 32 (id=518): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xe1}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x1, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x3}, 0x28) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m37.313756634s ago: executing program 1 (id=1467): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x4) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000440)='./file0\x00') r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xfffffffffffffffc) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0), 0x800, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) chdir(&(0x7f0000000040)='./file0\x00') r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) futimesat(r2, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)={{}, {0x0, 0x2710}}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000000)) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000700)={[&(0x7f0000000200)='9p\x00', &(0x7f00000002c0)='syz\x00', &(0x7f0000000300)='(/\xd2]^-\xa0\x00', &(0x7f0000000640)='$%-$-\x00', &(0x7f0000000680)='\x01', &(0x7f00000006c0)='&(\x00']}, &(0x7f00000007c0)={[&(0x7f0000000740)='syz\x00', &(0x7f0000000500)='-@!d\x00']}, 0x100) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m37.185795079s ago: executing program 1 (id=1468): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x90) r3 = openat(r2, &(0x7f0000000080)='.\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000000a"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6000, 0x122) 2m37.13209707s ago: executing program 1 (id=1470): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) syz_open_dev$I2C(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) lsetxattr$security_selinux(0x0, &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) syz_emit_ethernet(0x56, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "05048a", 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "100000430000"}]}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000680)="c3", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000008}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$inet6(0xa, 0x2, 0x3a) 2m37.131638464s ago: executing program 1 (id=1471): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x486, 0x0, 0x8001}]}) (async) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x40, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0) (async) mount$bind(0x0, &(0x7f0000001740)='./file0\x00', 0x0, 0x80000, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r5) (async) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r6 = dup(r5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) (async) write$binfmt_script(r6, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x415) write$binfmt_script(r6, &(0x7f0000000180)={'#! ', './file0/../file0', [{0x20, '%%#*)!!&^(@/&>%['}, {0x20, '^,^'}], 0xa, "299d5517ccc57d4366942db00243e89335276b8d0ac285aa29e0a14697a45b4448a1e9f5d7fe9c348ecea78bc3a209b16e6c9665813cbfe96de45d723a2b13eb4852d36aed264c3af8c18a9f69da8452e1579d4556d9"}, 0x7f) 2m37.046970127s ago: executing program 1 (id=1472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a00030724bd7002f8dbdf250d"], 0x14}}, 0x4008800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', r1, 0x29, 0xf3, 0x0, 0x5, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7800, 0x10, 0x11e0, 0x4}}) socket$inet(0x2, 0x4, 0x3cd) 2m36.373583127s ago: executing program 1 (id=1476): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x92481) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) close(r0) 2m36.318708517s ago: executing program 33 (id=1476): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x92481) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) close(r0) 45.353252533s ago: executing program 2 (id=2664): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000400006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05012dbd70000a0000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0500340000000000040008010400cc1004001501060066"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x448000, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x2f}, @l2cap_cid_signaling={{0x2b}, [@l2cap_create_chan_req={{0xc, 0x7f, 0x5}, {0x80, 0x2, 0x2}}, @l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0xdb4a, 0xc23, 0x8000, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0x4, 0x4}, {0x1, 0xff81}}, @l2cap_info_req={{0xa, 0x8, 0x2}, {0xfffe}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x2, 0xe}}]}}, 0x34) r4 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r9 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x7fa, 0x13500, 0x0, 0x163}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x21, &(0x7f0000000440), 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r10, &(0x7f00000004c0)=""/57, 0x39) setsockopt$inet_opts(r10, 0x0, 0xd, &(0x7f0000000180), 0x0) 45.213129887s ago: executing program 2 (id=2665): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d036ae269b8, 0x8031, 0xffffffffffffffff, 0xa05fa000) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async) r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000040)={{0x0, @name="1ecad0916d5042e65dff07dc28893bde55a6313d1f0322407a2342e98dfa6499"}, 0x8, 0x9, 0x7}) (async) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000040)={{0x0, @name="1ecad0916d5042e65dff07dc28893bde55a6313d1f0322407a2342e98dfa6499"}, 0x8, 0x9, 0x7}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002800), 0x60c00, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f00000028c0)={0x10, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 45.212743576s ago: executing program 2 (id=2666): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @value64=0x100}}) close(0x3) 45.150244981s ago: executing program 2 (id=2667): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000000001fcdbdf250a805f00000000031a000300050016003200000014000200fc0200000000000000000021000000011400010020010000000000000000000000000001d11e95d7d2955da546d3f087d972a32bf48509a2f890ac98b5a80666e4a55789d7fed2dd374d0d0e289cbbd160d75b7abb43f6f3c59e6914e5726eed2310a040d89ba77f0912e1a99774564365eec7d5cb"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000280)="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", 0xe00) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c2c000280140003002001000000000000000000000000000114000200fc0200"/53], 0x5c}}, 0x0) syz_emit_vhci(0x0, 0x61) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8, 0x40000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000200)={0x6, "09ab072c724f3a61090f6bf2f12fe777230ef7b76060e30a96604b134b5c1e2907102a56bb5ab069055a9db15df8cd9944a7dad5713ef714d3176cd933865fad", {0x800, 0x7ff}}) 45.064844671s ago: executing program 2 (id=2668): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28488, 0x8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r5}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c880}, 0x4054) 44.937416165s ago: executing program 2 (id=2670): shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/204) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000000)={0x1, 0x1000}) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, r3, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/204) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000000)={0x1, 0x1000}) (async) dup(r0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, r3, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x28}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) (async) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) 43.462507457s ago: executing program 4 (id=2688): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000100), 0x4) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0x1, 0x0, r1}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000240)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r4, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) r5 = getpgid(0x0) sendmsg$nl_generic(r2, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x3f0, 0x1a, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@typed={0x4, 0x16}, @typed={0x8, 0x6e, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x91, 0x0, 0x0, @pid=r5}, @generic="d56ab04ed139bc7f0eaf78e1bedec2b34316207f560c6889d2b7f9285b30b6a6022b5cb55efb88b75e0220660f698605ae1eb6464f552358c9d9ef6432fe44169d23", @generic="56a16d3ab862eb3a7c74d6dfb35d69d2f299f1511a15803fb7c0b7f42c69c8bd9227732763ec849deaab4b", @nested={0x199, 0xdb, 0x0, 0x1, [@generic="bcf98b11b0dc5c8b3f407d96c2a3c8fb3c11da6f9da7cea971188593d039fe97ab54ba117a0efa56f3370cb092a4e98ff5bf3ba19b111a45c11add77c611f8a145971dc12cf54f26fed207fe03bf4e47be24db60f255262fd66d75460887c602ee95a89f86f6297be5d86732f9dc", @nested={0x4, 0x10a}, @generic="fcdd8c811b42f4167bf9b23b3fcf81589b749d5a65e0f9c920021b2bd5b4b530d5a92948a1663d9ee71019ceb32433ca263c7e405fa4a6666f2f99615088ae20b71ddf6e09bba5ec593abea1adf3a0ed1041570f396fdfa775ca12d029202d3ef18db11a5353115ff55c95aa3a822088b11f3b380280785976f017899634a5635d644312361caf0337978eaa2c5a625974e659b4fa1f0dd1555b7eedc0c9b487d74a", @nested={0x4, 0xca}, @generic="6224228557479e651e65e3a59ea43671f3b0568f7e966e9076bb738fc5f8c27a1ba166e1aea81655e765f2adc947e6fe307b4a5c5680", @nested={0x4, 0x98}, @generic="df36baee264fb1794fa0478cf4dc5011516da44e4a80c0aec5581ae959b63081fae626182a98884418b4c953b282dc03a80e4bf9c0a3fbde41e9b72863420954b26423"]}, @generic="676eb3dc42082616bd04", @typed={0xc, 0x1e, 0x0, 0x0, @u64=0x3}, @generic="5796b90b295135f30466422c30102f68da14f35a08e38264e032c550e1107c270c55b81e2d736e12f59f5fd6faf06e1081e944780e0426265c8f0b36007481db0cb06ce88c176fd5183029ba3992aaffe8bf248976609dd2bafec4b5e0f1cee76f24cb64357aa8b90f5955c6642d69d151c04a022d2925f676448f16e74d5fe8872a36a4df27da618ee361992c2402d1a0830099478462dd7647d26803cd43442493fdb6b91d459d575f5a4860a8bca763e48d5d04b9a810d5b7401069386342ca95ca56274b3477d6b4", @generic="2db77179cfe899540b72c7ea49c155d2f5528dbae6740649c68c722a70521edb16fdacfdeb27792ca0c254bfa18effe09d5bc4d5ffc9bcc7eec8ed23dc16b2c0105cf745d80a088a28d35c9efc812682a203ffd38e5dca158f07e8d89bf1f25f8573e126a570438ceaaff96c8d25ccf4271ff1309f52c0cbca0503701ffdf0b1c8e87c42e886ff32eb7683d20f4cf308b5688f42da8b3d1e2ce2fbfcc79fbb121c6750975b4c17b889a2fa4001df0800a120f07a685387f23fee65319ffc51ea1a86eaf3294d3d614afa2226680f792f41185fd423f8aa9eebb3a73b"]}, 0x3f0}, 0x1, 0x0, 0x0, 0x800}, 0xc048000) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000000)={0x2e, &(0x7f0000000140)=[{0x29, '\x00', @data=0x2, 0x8}]}) 43.376655452s ago: executing program 4 (id=2691): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3, 0xfffffffc}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="a3", 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x88081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x2) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x275c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc, 0xa}, {0xf, 0x9}, {0xffff, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x2730, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0x3}}, @TCA_FW_ACT={0x2710, 0x4, [@m_skbmod={0x10c, 0xd, 0x0, 0x0, {{0xb}, {0xd0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x30000, 0x2, 0x0, 0x5, 0x81}, 0x5}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x7, 0x7, 0x10, 0xffffffff}, 0xd}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x7, 0x8, 0x10001, 0x7}, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x50}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3c5, 0xe7, 0x1, 0x8, 0xec9}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}]}, {0x11, 0x6, "a78c068fd57cedcc5187ab52cd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x150, 0x17, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8e, 0x5, 0x99d8, 0x26}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x2, 0x7, 0x6}, @empty, @empty, 0xffffffff}}]}, {0xd5, 0x6, "cae45da43c484b2ef6463c842b97cc2029cd587f0407115a1933efe723d125041a76437b7a4180cd71108e4784a2c3a7bcc21c9d1b4d638a0e846e08581c0337d3ff0a516365bc9d3aba097e1f178e185f3c1050f00d5807f4dbd7192b663f0c07b3e18b942b26c50707bea25ef8f78aee9bd56a35dd5b8639c0f6b3823e708913b95be8d54c9be8df16595f7fa6f892a6dc88ae852a6b2ee423700a3318b65583bdfc49154c0e951cba46acc4f4a4d7de7c4e023dc5c714acafd8aa1af90873116a5fbf49cf123a793f8951a3f0e10cf9"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x198, 0x1, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x583a33de, 0x4, 0x5, 0x5a, 0x80000001}}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x7, 0x1, 0x7, 0x800}, {0x2d18, 0x1, 0x7}, {0xe78, 0xfd, 0x90, 0x90}, {0x0, 0x40, 0x9, 0x3}, {0x5, 0x4, 0x2, 0x7f}, {0x0, 0x6, 0xf7, 0x4}, {0x10, 0x0, 0x4, 0xffff8000}, {0x3, 0x6, 0x30, 0x6}, {0x3, 0x7, 0x1, 0x5}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x4, 0x62, 0x3, 0x68acbe84}]}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x0, 0x9, 0x4, 0xfffff1e1}, {0x3ff, 0x1, 0x4, 0x23f}, {0x3, 0x3, 0x4, 0x1}, {0x4, 0x2, 0x3, 0x7}, {0x1, 0x3, 0x2, 0x453}, {0x9, 0x7, 0x8}, {0xff, 0x7, 0xa, 0x6}, {0x200, 0x3, 0x3, 0x4}, {0x4, 0x80, 0xac, 0xffffffff}]}]}, {0xa6, 0x6, "5a4defbb921b34c7599b7f76e8af23b1f4089ffaef9475ae59dee3548c0f7a8720847ffa4d5eb77bce088b0499fd73ec207b78829c1e5235c9b853cb38747fa7de8e0379b75eb85dc0dfdcad187a5a74b076f7c73700dd3a5de890f7b9cab317649ad3797cb085d743e71b0fd9d93fa8a84e2a9ce86c034dcb21ff88b8afcdf02fe5df9e753ec41101c3665db2803c251fc8bd581cd6cd3cdeb8930d2dd71252e53c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0xf4, 0xe, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x2, 0x4, 0x7, 0xc7}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0xd8, 0x6, 0x4, 0x8}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x8, 0x3, 0x4}, 0x19}}]}, {0x72, 0x6, "bc0374a14bf175bfd3102b37a12894bfe3e2e9a7586c05970978af906cf503292cfed34865dab8912b91d817b7ef9f891af6dfdd1e16e99ea289b1ed1134f36b6039738b4a4bdeeba548af2fb3f8667856afa1b0e914cc0b76590802edf74a23edd4f6830660234704b25b816ed7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_skbedit={0x1074, 0xa, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x1}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0xe, 0x3, 0x0, 0x2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x6}}]}, {0xfff, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x1114, 0xb, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x0, 0x0, 0xffff}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x10000000, 0xd, 0x80000001}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x7, 0xd7, 0x7}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x2, 0x10000000, 0x3ff, 0x7}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x1000000c, 0x0, 0x6a3a7eae}, 0x51}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x4, 0x5, 0x5, 0xc0000000}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x3, 0x8}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x20000000, 0x0, 0x80000000}, 0xf275}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x9c, 0x12, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x75d5, 0x20000000, 0x14000000, 0xa}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xca6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x2}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3}}]}, {0x37, 0x6, "2ab6a38d42c2e17c2590027a3018587e45fbee785286b761e8373ae1d06096b0f8fd8589d8616314390d247737bc6a5e09bbcc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg0\x00'}]}}]}, 0x275c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000000)={0x27, &(0x7f00000000c0)=[{0x16, '\x00', @data=0x7f, 0x9a4}, {0x41, '\x00', @st={0x4, [{0xa5519cd5d03e482b, @uvalue=0x8}, {0x0, @svalue=0x7}, {0x0, @uvalue=0x2}, {0x3, @svalue=0x9}]}, 0x7}]}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r10 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r10, 0x40046109, &(0x7f0000000140)) 43.259723525s ago: executing program 4 (id=2692): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000940104a6000000000000000000ff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c00028008000200ea000000"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfcc00000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) socket(0x8, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_MCE_KILL(0x41, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="7b87f20f", @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x5, &(0x7f00000003c0)=[{0x8, 0xba, 0x7}, {0x3, 0x7f, 0x7, 0xfffffffb}, {0x2, 0x2, 0x1, 0x6}, {0x100, 0x1, 0x8, 0x93a5}, {0x8, 0xf3, 0x3, 0x7f}]}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 43.034988746s ago: executing program 4 (id=2693): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1}, 0x38) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000880)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRES64=0x0], &(0x7f0000000580)='GPL\x00', 0x7, 0x38, &(0x7f0000000700)=""/56, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x3, 0x6, 0x533f0aaa}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000680)=[r1, r1, r1, 0xffffffffffffffff, r1], &(0x7f0000000540)=[{0x0, 0x1, 0x7, 0x2}, {0x2, 0x4, 0x7, 0x6}], 0x10, 0x7f}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000bc0), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan3\x00', 0x0}) r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r8, &(0x7f0000000200)=[{&(0x7f00000002c0)='-1', 0x2}], 0x1, 0x4, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x64, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x28040040) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x284420, 0x14) unlink(&(0x7f0000000180)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r9 = socket$packet(0x11, 0x2, 0x300) r10 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r10, 0xc0505510, &(0x7f0000000000)={0x7, 0x400000000000305, 0x0, 0x0, &(0x7f0000000480)}) umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x9) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') read$FUSE(r2, &(0x7f00000044c0)={0x2020}, 0xfffffffffffffeb1) syz_clone(0x144000, &(0x7f0000000340)="02179c2f63861137c8134d85bc5b5269e799dcbd3c60ae945c4a9384ab9bec425e3e30361d45570f1177d48932bc27d66d8042895a6f01af660384b6a5f6dcbd1fff58d6226105a11dccc7e9971b05a5fd8eed70bb75fed7ce5319cd1234ab022f673d858ac864e2bbd3393c2acbccc837c158d56ea0b765f4b5e9f906d4f78ce11a4b161de835c807005461edcd96b0b48fa6b10195ca0bc5db060234c61d7a42968b42340d9774843371409103dfce4e306d11db3d795049c376dc30d80fadf896c52627f26713f3a7eb71f3bc52d09c6b8220e132", 0xd6, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000500)="d806bdcb2984bbcee3eb4234f7e6066c6d0ed61b87262563c5d88f0486d6b09d564ee96581a7454ed978bcd91e17339e30dac3379b0d8cf641785feb8e46") ioctl$BTRFS_IOC_QGROUP_CREATE(r9, 0x4010942a, &(0x7f0000000040)={0x0, 0x100}) fstat(r11, &(0x7f0000000b00)) 42.095033073s ago: executing program 4 (id=2708): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002e00010026bdf000e2dbdf250400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x138, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6122}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf68}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x85) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x1) 41.100734703s ago: executing program 4 (id=2717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x5e, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x2}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[@ANYBLOB="7f454c460700010205000000000000000300060027ed0000fd00000000000000400000000000000008010000000000000d0000000a00380000000c00010069040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005395738c28efe4a517596e13459755f528437cd60334ba9913c941577e88e67f15632c6b62a4cedd443f29c5516942531fd9936e0841dd29ab2bb6dc2db0373fcf7670a022996a4668a746951515ad1368f42f4d54ce251de34df60986e91ec03bf591b287141a1c8f64c34f71976a6d2fea23dffe5b950d0cce7781bc754e10e54c71bf5b5b7e4d01a9b0e7eded947781f88f3fdebe66604aebb0f6a24e153d30b1288f94602c65901"], 0x240) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40) 41.072621226s ago: executing program 34 (id=2717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x5e, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x2}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x240) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40) 28.885011098s ago: executing program 35 (id=2670): shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/204) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000000)={0x1, 0x1000}) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, r3, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/204) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000000)={0x1, 0x1000}) (async) dup(r0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, r3, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x28}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) (async) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) 24.013815828s ago: executing program 5 (id=2931): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, 'veth0\x00'}}) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000080)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x0, 0x0) 24.009636703s ago: executing program 5 (id=2932): io_uring_setup(0x5d2d, &(0x7f00000002c0)={0x0, 0x43d3, 0x400, 0x2, 0x235}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xc8, 0x29, 0x4, {0x4, 0x15, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x6f, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x58, 0x29, 0x36, {0x5e, 0x7, '\x00', [@generic={0xff, 0xd, "50d650847249ad288702ebd0d6"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1a0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) r6 = syz_pidfd_open(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0xff02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 23.906176712s ago: executing program 5 (id=2933): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x2b2b, 0x400, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000000c0)}], &(0x7f00000005c0), 0x2}, 0x20) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES64=r0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x1861ea26f7a08e70, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x10}}, 0x50) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@rnullb, r3, &(0x7f0000000240)='./file0\x00') syz_fuse_handle_req(r1, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r5, &(0x7f0000000040)={0x11, 0x1, r6, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) dup2(r4, r1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@any, 0x2}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) close(0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f00000000c0)={0x10, 0x0, r2}, 0x10) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x2, 0x2) 23.757510465s ago: executing program 5 (id=2934): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (rerun: 32) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async, rerun: 64) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (rerun: 64) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000002c0)={0x1, 0x0, @pic={0x9, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x6, 0x5, 0x4, 0x3, 0x0, 0xe3, 0x7f, 0x4, 0x7f}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r1]) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)=ANY=[@ANYBLOB="6042a99d1ecaf0c92c00"]) 23.682647333s ago: executing program 5 (id=2935): r0 = syz_socket_connect_nvme_tcp() mmap(&(0x7f000038a000/0x1000)=nil, 0x1000, 0x8, 0xc3072, r0, 0x200000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_socket_connect_nvme_tcp() (async) mmap(&(0x7f000038a000/0x1000)=nil, 0x1000, 0x8, 0xc3072, r0, 0x200000) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 23.179998682s ago: executing program 5 (id=2940): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x4, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x10000004, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x11, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0xfffffffe, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x200, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0x200, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x10001, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x0, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x8002, 0x0, 0x200000000000000, 0x2) (async) mbind(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x8002, 0x0, 0x200000000000000, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x39b3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x220c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x3) (async) listen(r6, 0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) (async) listen(r11, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x83e0000000, 0xffffffffffffcd40, 0x800, 0x8, 0x6]}, &(0x7f0000000180)=0x78) 23.131833375s ago: executing program 36 (id=2940): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x4, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x10000004, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x11, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0xfffffffe, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x200, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0x200, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x10001, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x0, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x8002, 0x0, 0x200000000000000, 0x2) (async) mbind(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x8002, 0x0, 0x200000000000000, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x39b3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x220c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x3) (async) listen(r6, 0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) (async) listen(r11, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x83e0000000, 0xffffffffffffcd40, 0x800, 0x8, 0x6]}, &(0x7f0000000180)=0x78) 2.425874064s ago: executing program 8 (id=3156): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffc, 0x401) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000540)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r7}, 0x20) ioctl$FS_IOC_FSSETXATTR(r8, 0x40086602, &(0x7f0000000140)={0xffff0000, 0x7}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13c, 0x13c, 0x9, [@fwd={0xd}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xf, 0x1}, {0xd, 0x4}, {0x9, 0x4}, {0x1, 0x4}, {0x6}, {0x5, 0x3}, {0x0, 0x3}, {0x10, 0x5}]}, @var={0xa, 0x0, 0x0, 0xe, 0x1, 0x1}, @enum64={0xc, 0x5, 0x0, 0x13, 0x0, 0x0, [{0x4, 0x1, 0x80000000}, {0x8, 0xffff, 0xffffffff}, {0x3, 0x8, 0xe}, {0xf, 0x6, 0x6}, {0x2, 0x8, 0x3}]}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x10, 0x5}, {0x4, 0x4}, {0x6}, {0x7, 0x1}]}, @union={0xb, 0x6, 0x0, 0x5, 0x1, 0x9, [{0x2, 0x4, 0x9}, {0xf, 0x2, 0x1}, {0x9, 0x100005}, {0x3, 0x2, 0x6a9de63f}, {0x5, 0x0, 0x7}, {0x4, 0x2, 0x1}]}]}, {0x0, [0x0, 0x30, 0x0, 0x5f, 0x61, 0x30, 0xf2]}}, &(0x7f0000000b00)=""/79, 0x15d, 0x4f, 0x0, 0xffff8000, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0x20, &(0x7f0000000e00)={&(0x7f0000000c40)=""/180, 0xb4, 0x0, &(0x7f0000000d00)=""/243, 0xf3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xb, 0x2b, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x33}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x51e9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0xb6, &(0x7f0000000840)=""/182, 0x41000, 0x42, '\x00', r9, @fallback=0x1d, r10, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x0, 0x7, 0xffffff7f}, 0x10, r11, r0, 0x3, 0x0, &(0x7f0000000e80)=[{0x0, 0x1, 0x0, 0x4}, {0x4, 0x5, 0xa, 0x6}, {0x3, 0x1, 0x2, 0x7}], 0x10, 0x8}, 0x94) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000140)=0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) listen(r13, 0x3327) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001780)=""/4096, 0xec0}], 0x1}, 0x40000002) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r15, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000107010100000000000000000200000001000780080002400000000208000140000000030900010073797a300080000008000540000000020c0006400000000000000002"], 0x48}, 0x1, 0x0, 0x0, 0xa053}, 0x20020804) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r14, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r14, 0xfffff788) r16 = accept(r14, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r16, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x10, 0x10, 0x7, 0x11}, &(0x7f00000001c0)=0x18) 1.497929367s ago: executing program 8 (id=3162): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e61, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffc}, 0x1c) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x5, 0x80) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000180)=0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r7, @ANYBLOB="0000000023000400240012800b0001006272696467650000140002800800080088a8"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r8, 0x0) keyctl$describe(0x6, r8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r8], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r9, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0xfffffffffffffffd, 0x2001f, 0x6}}) 1.391441033s ago: executing program 8 (id=3163): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20000, 0x50, 0x1}, 0x18) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xffff, 0x4, 0x4e, 0x5, 0xf}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"a120e3ca9442d9516717a98683b0ef34", r1, 0x0, {0x0, 0x4}, {0x3, 0x5}, 0x6, [0x8, 0x31, 0x3, 0x6, 0x4, 0x6, 0x6, 0x5, 0x3ff, 0x2, 0x1, 0x6, 0x8, 0x6, 0x7, 0xfffffffffffffffb]}) (async, rerun: 32) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000003c0)={0x0, 0x9}) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004840}, 0x50) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x1, 0x1, 0xc, 0x8, 0x4}}) (async) ioctl$KDDELIO(r0, 0x4b35, 0x4) (async) write$P9_RLOPEN(r0, &(0x7f0000000540)={0x18, 0xd, 0x1, {{0x20, 0x4}, 0x1}}, 0x18) (async, rerun: 64) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f00000005c0)=@attr_other={0x0, 0x7, 0x8, &(0x7f0000000580)=0x4}) (async, rerun: 64) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000600)="12ef381d53507b38ace828886dd978cbf04e249b4f41d8ea7bb8c0c984f6fb66dfb45dcc9e82e45df9a145a70acb66fe348417e9f63bb4b2dae1e84f9384b620130107d19e0696ce5c70e93fad9f") (async) syz_io_uring_setup(0x768f, &(0x7f0000000680)={0x0, 0xb244, 0x400, 0x0, 0x30b}, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0, &(0x7f0000000780)) syz_io_uring_modify_offsets$generic(r3, 0x0, 0x30, 0x64) r5 = shmget(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) (async) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f00000007c0)={0x8, 0x7ff, 0x6, 0x3c4, 0x2}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000800)={0x0, 0x0, 0x6}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000880)={r6, @in={{0x2, 0x4e20, @remote}}, 0x9, 0x0, 0xa68, 0x6, 0x88, 0x8, 0xfa}, &(0x7f0000000940)=0x9c) (async) r7 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCGPKT(r7, 0x80045438, &(0x7f0000000980)) (async) ioctl$OCFS2_IOC_UNRESVSP(r7, 0x40305829, &(0x7f00000009c0)={0x0, 0x0, 0x6, 0x81, 0xfffffffd}) (async) r8 = syz_io_uring_complete(r3, r4) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r8, 0xc0205866, &(0x7f0000000cc0)={&(0x7f0000000a00), 0x0, &(0x7f0000000a40)=[{}, {}, {}], &(0x7f0000000c80)}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4058587a, &(0x7f0000000ec0)={{r8, &(0x7f0000000d00)='[\\}@^\x00', 0x40040, &(0x7f0000000d40)={@align=0x100000001, {0xcb, 0x8, 0xd5b, 0x7}}, 0xffffffff, &(0x7f0000000d80), &(0x7f0000000dc0)=0x6}, {[0x8, 0xfffffffb, 0x2, 0x5]}, 0x4, 0xb2, &(0x7f0000000e00)=""/178}) (async) semctl$GETZCNT(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000f40)=""/65) (async, rerun: 32) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000000fc0)={0x24000, 0xd800}) (async, rerun: 32) r9 = semget(0x0, 0x1, 0x4) semctl$GETPID(r9, 0x3, 0xb, &(0x7f0000001000)=""/118) (async) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000001080)=0x4) 1.327213134s ago: executing program 8 (id=3164): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @loopback, 0xd}, 0x1c) (async) recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10001, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000071, 0x0, 0x40040304}]}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = syz_open_procfs(0x0, 0x0) r6 = getpgrp(0x0) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x0, 0x1, 0x2, 0x1086, r6}) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r9, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) dup3(r9, r8, 0x80000) (async) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r10 = socket(0x2b, 0x80801, 0x8000) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4, 0x10000, @empty}, 0x1c) (async) ioctl$sock_inet_sctp_SIOCINQ(r10, 0x894b, &(0x7f0000000100)) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.209604252s ago: executing program 7 (id=3166): r0 = socket(0x2b, 0x1, 0x1) (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x2, 0x0, 0x3, {0xffff, 0x0, 0xf90, 0x5}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20) unshare(0x6a040000) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) 1.209054123s ago: executing program 8 (id=3167): r0 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x00\x00\x00\x80\x00\x00\x00\x00X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc9Z\x82@\xb1=\xc4\xb6=\xed\xec\x8d\xa2lI\xffK\xfd\xbc6\x90{s\xebr=/]d;\xc4VE\xdb\t\xc0\xe1\xcc\x0e\xf6+\x16\xc2\x17\xe0\f%n\xb3u\xa2~\x86,\xdek\x05\xda\xf5\xb6!\xfc\xdbl\x96\xedm\xd9nf\x00\x00\x00M\x1c\a\x81\x1d\xa24\x8e\xe8\xf3\x9e\\\x17*Ip\xbf1\xd4\x0f\xcc\x1e\x85A\x85\tH\xc2\xe6X\xc7\xc5\v\x1cZ56Buj\x81G\xca5\xed\xda\xd9{|\x18gY\x06\x9a\xa1\x04\xbd\x85\xbaq\xb1\xaduR\f\x01\xc65\xe7\x81K\xbf\xab\xc1hUd\xb7\x8b^\x06\xdbZ\xa4>\x1dg5\x1bFFs\x1c\xf5\a\xef\x97\xa5|\x01\x9e\x13\x1e\x8a\xecY!JW\xb3\x1a\xc4\x9d\xc1\xf5\xdcU3\xee\x8ddz\x00a\x95oKc\xd6\xf4/\x9a\x9c6c\x98\bxz\x04\xf7\xecj\x99\xc1=\x01Q\xb2\xdfR\xd5\x17\x9a=\xf3s\xbc\xac\"7\xb8Z\xa4\x04\xf9\xf8\x86\x8f\xb3\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\xa8\x9aJ\xc6\x03\xb4\x9b\x14\xb1+\xa1\x93\xeb/\xd3tq\x98\xd3L\x1a\xfc\xb14i_aFlb\xa3h0\xee.?\x90h\xc9\xc9m\xe1C\xe1\xa9\xf5\xf6\vf', 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x128}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r3, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001840)={0x10, 0x1000}, 0x10}], 0x1}, 0x10) r4 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000380), 0xa0000, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r6, 0x0, &(0x7f0000000080)) ppoll(&(0x7f00000003c0)=[{r5, 0x4}], 0x1, &(0x7f0000000440)={0x0, 0x989680}, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02864c3, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x3, 0x1, 0x2}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r7], 0x44}}, 0x40000) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) 1.206388875s ago: executing program 7 (id=3168): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000100)=0x160800000000) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) listen(r2, 0x4) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xfd1c, 0x4, 0x400, 0xed, 0x1}, 0x14) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x5, @loopback, 0x7}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="6f18c9ffd8d03fbe", 0xff88}], 0x1}}], 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x20, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x9e94d2d938402374}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmmsg$inet(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001240)="cc5fd2518c506ebf347763559129e729164723d0e47c59f1b71a169d2bf45153816f628ff44cbe57e3b69377793663b2d7f0c39319dd2d25cf661253e80493fe43d4bd2521579cc80e15640e30cfedcde5be166f87dd93bc68ac7b179df08a08b19ec17b48e6ffa0026287ca02aec3", 0x6f}], 0x1}}], 0x1, 0x2090) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x6, 0x0, 0xfffffff3, 0xb5, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r7, @in6={{0xa, 0x4e22, 0x5, @loopback, 0xc1b0}}, 0x1, 0x80}, 0x90) 586.992838ms ago: executing program 3 (id=3174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x1610, 0xffffffff, 0x1, 0xbffffffd, 0x2000003, 0xcc7, 0x9, 0x8, 0xa, 0x100, 0x2, 0x1, 0x8, 0x1100004, 0x7fffffff, 0x5, 0xfff7ffff, 0x1a449, 0x8, 0x2, 0x89, 0x1ffff, 0xf27, 0x8001, 0x8800b, 0x0, 0x4, 0x4, 0x400, 0xc672, 0xfffffff7]}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="03c90000e2fe84673eaeac712c18955f7ba451290d4d57d305e33a0dd1e84e3d0eeb8ef9957679ba839bdeef55a5a6d30a6e5e2ced51b0cf6c6b4e44788ec3647aefcbc95c0bad614fa3c7457e9dbfe0ec39008a72d18fcf053df2f2e69689cdea6c50353740d17604f4b70591bcf34e2800"/138], 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d03, 0xec000000, 0x7}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) close(r4) execve(&(0x7f0000000380)='./file1\x00', 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x6, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 443.519977ms ago: executing program 3 (id=3175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) modify_ldt$write(0x1, &(0x7f00000001c0)={0xfa, 0xffffffffdfffe7ff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r3) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x10a, {0x8000000, 0xeeee0000}}) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x22, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x90d9}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x7, &(0x7f0000000500)=""/7, 0x40f00, 0x14, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000540)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000005c0)=[{0x5, 0x1, 0x0, 0x7}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f21"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f00000000c0)={0x40, 0x800, 0x7, 0x4, 0x9, 0x81}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 441.526177ms ago: executing program 6 (id=3176): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x141002, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x2, 0x1ff, 0x2010, 0x2, 0x6, 0x1, 0x2, 0x7}}) (async) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x6880, 0x0) accept$unix(r2, 0xfffffffffffffffc, &(0x7f0000000100)) (async) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 352.595478ms ago: executing program 3 (id=3177): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000002c0)=[{&(0x7f0000002440)='-', 0x1}], 0x1, 0x1) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001600)=ANY=[], 0x218}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmmsg(r2, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) splice(r0, 0x0, r2, 0x0, 0xffff, 0xa) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 352.309575ms ago: executing program 6 (id=3178): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900"/20, @ANYRESOCT=r1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r3, 0x1}, 0x20) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) (async) syz_emit_ethernet(0x76, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffffffffffffff88a84b0081003c00884700000300000000006c6f2f2b00303a0020010000000000000000000000000001fc01000000000020000000000000000103019078fe00000066fe07ab00042e00ff020000000000000000000000000001fc0100"/118], 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, r2, 0x0) listen(r0, 0x5) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req={0x9, 0xfffffffd, 0x800, 0x5}, 0x10) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0) (async) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r9 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async) sendto$packet(r7, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0x44, 0x20000001, 0x0, 0x44) recvmsg(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r10, @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x48000) 301.293193ms ago: executing program 3 (id=3179): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) close(0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(r1, &(0x7f0000000340)='./file0\x00', 0xf3) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0xb8) r2 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2) 223.024255ms ago: executing program 8 (id=3180): modify_ldt$write2(0x11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x11, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x805, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8001, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffb, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x6, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000640)='./file0\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 221.935634ms ago: executing program 7 (id=3181): ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000000)={0x2, 0x270, "29439d8fc32ce616cbe2df1cef40227b7736cfca5e5d620bef1d49b4d27b84eb", 0x0, 0x5f, 0x9, 0x81, 0x812}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000080)={0x6, "f6f58796f28cc2dd3fae71a6653ea18e9fb55c06dd28f97f67370f1fa4b66d28fa2dc60ddf9de2bb37d1b304eabf5568a84249fd9fce4e3e6d93ee3bbf951077", {0xd6, 0xb}}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000140)) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0xa6a1, 0x2, 0x5d8a, 0x40, 0xa7}, &(0x7f00000002c0)=0x98) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r3, &(0x7f00000003c0)={0x1, 0x2, 0x4, 0x8, 0x3ff, 0x80000000, 0x8000000000000000, 0x680000, 0x7}) r4 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x200200, 0x41) chdir(&(0x7f0000000480)='./file0\x00') ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x5) r5 = syz_open_dev$video4linux(&(0x7f00000004c0), 0xa10, 0x4000c0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000500)={0xc, 0x101, 0x4, {0x2, 0x6, 0xe0000, 0x1}}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000540)={r2, 0x3}, &(0x7f0000000580)=0x8) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$OCFS2_IOC_GROUP_EXTEND(r7, 0x40046f01, &(0x7f0000000600)=0xc6) ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f00000006c0)={&(0x7f0000000640)=[{0x0, 0x0, 0x3ff, 0x3, 0x80, 0xc2d, 0xff, 0x6}, {0x3, 0x0, 0x7, 0xc1fb, 0x7, 0x1, 0x5, 0x100000000}], 0x2, 0x38, 0x1, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000700)={{@hyper, 0x8}, 0x2, 0x6, 0x64, 0x1e04}) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000740)={r6, 0x4}, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000780)={0x3, 'bridge0\x00', {0x8}, 0x4}) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000001800)={&(0x7f0000000800)=[0x9, 0xfffff9fa, 0x8, 0x3, 0x3, 0x5, 0x1, 0x4, 0x4, 0x2, 0xcbc, 0x81a, 0x4, 0x4, 0x6, 0x6, 0xd6f, 0xff, 0x2, 0x9c, 0x2, 0x0, 0x3, 0x4, 0x3, 0xf, 0x7, 0x8c, 0x6, 0xf025, 0x7a77, 0x0, 0x7, 0x4, 0x4, 0x5, 0xfffffffe, 0x1, 0x5, 0x3, 0x43d, 0x4, 0xffff9ddd, 0x4, 0x6ae, 0x1164f2db, 0xffff, 0x5c, 0x5, 0x1, 0x9, 0x4, 0x8, 0x7fff, 0x6, 0x4, 0xa, 0xc, 0x5, 0x6d89b8ea, 0x3, 0x8, 0xbf6e, 0x400, 0x0, 0x8, 0x80, 0xdb, 0x7, 0x5, 0x4, 0xfff, 0xd5, 0xd54c, 0x5, 0x0, 0xe, 0xa, 0x200, 0x0, 0x5, 0x0, 0x7f, 0x4, 0x1ff, 0x0, 0xbb5, 0x8, 0x8c, 0x8eb, 0x8, 0x8, 0x6, 0x9, 0x0, 0x4, 0xffff, 0x1a1b, 0x1, 0x7, 0x8, 0x5, 0x9, 0x8, 0x1000, 0x17, 0x7, 0x4, 0x3, 0x8, 0x4, 0xb969, 0x5, 0xec17, 0x7ff, 0x2, 0x7, 0x2, 0x5, 0x3, 0x7, 0x6, 0xfffffffd, 0x8, 0x2, 0x80, 0x0, 0x7, 0x6000, 0x6, 0x8, 0x86fb, 0x4, 0xcbd, 0x7, 0x5, 0x9, 0x17e4, 0x8dd3, 0x1fc7af51, 0x5, 0x1000, 0x3b8d, 0x2, 0x1, 0x8000, 0x3, 0x0, 0x4, 0x6, 0x8f8, 0x17, 0x4, 0x1000, 0x89ee, 0x8, 0x8, 0x2, 0xbd, 0x101, 0x7, 0x5, 0x80000001, 0x101, 0xb, 0x9, 0xfffffffb, 0x10, 0xfffffffb, 0x1218, 0x3, 0x4, 0x5, 0x8, 0x7, 0xfffffff2, 0x429a, 0xbbe, 0xb5, 0xc, 0xd838, 0x3, 0x9, 0x6, 0x8300, 0x6, 0x2, 0x1, 0xffffffff, 0x2, 0x7fffffff, 0x8, 0x97cb, 0x42, 0xdcb, 0x8, 0x90, 0x8000, 0xc5e, 0xd762, 0x7, 0x0, 0x0, 0x8, 0x1000, 0x6, 0xa, 0x6, 0x0, 0x5, 0x7, 0x3ff, 0x5, 0x8000, 0xe, 0x7fffffff, 0x0, 0x5, 0x1, 0x6, 0x1, 0x4, 0x7, 0x2, 0x1, 0x8, 0x1, 0x8001, 0x101, 0x5698a7f5, 0x3, 0x6, 0x48d47992, 0x0, 0x5, 0x5, 0x4, 0x2, 0x400, 0x7ff, 0x1, 0x1, 0x9, 0x800, 0x9, 0x3, 0xf, 0x5, 0x5, 0xffff, 0x9, 0x40, 0x0, 0x2, 0x7ff, 0x10000, 0xfff, 0x2, 0x9, 0x4, 0x5, 0x21f, 0x401, 0x8, 0x9, 0xb, 0x4, 0x8, 0x5e, 0x4, 0x6d6e, 0x3, 0x3, 0x7, 0x7, 0x780d, 0x4, 0x80, 0x0, 0x7, 0x4, 0x8, 0x9d6, 0xcd51, 0x6f, 0x16, 0x8000, 0x2, 0x7, 0xb94, 0x7, 0x7, 0x10, 0x8000, 0xd3, 0x1000, 0x7a5ddbd, 0x61, 0x9, 0x75, 0x0, 0x8, 0x7, 0x1, 0x2, 0x86, 0x81, 0x4, 0x100, 0x1, 0x2, 0x8, 0x5, 0x1, 0x1, 0x2, 0x8001, 0xffffffff, 0xfffffffe, 0x2, 0x1, 0x7, 0x74, 0x9, 0x1, 0xd8d, 0x1, 0x54b, 0x8, 0x5, 0x1ff, 0x8, 0x2, 0x7, 0x7, 0x7, 0x2, 0x1ff8000, 0xd, 0x6, 0x3ff, 0x81, 0x1ee5b2ff, 0x3, 0x0, 0x643, 0xf1, 0x3, 0x3, 0x9, 0x5, 0x7ff, 0x9, 0x3, 0x9, 0x5, 0x3, 0xff, 0x7, 0xc, 0x80000001, 0x8, 0x5, 0x5, 0x4, 0x1e50, 0x80000000, 0x9, 0x6, 0x4, 0x0, 0x0, 0x6, 0x7ff, 0x3b9, 0x6, 0xfe52, 0xffffffff, 0x4, 0xa, 0x4, 0xfffffffe, 0x100, 0x7, 0xc81, 0x0, 0x7, 0x2, 0x2, 0x5, 0x3, 0x3, 0x7, 0xa2, 0x6, 0x7, 0x5, 0x401, 0x6, 0x1, 0x7, 0x3, 0x4, 0x2, 0x7ff, 0x13d3, 0xe8, 0x9, 0x4c, 0x2, 0xfffffffd, 0xffffffff, 0x1, 0x7, 0x3, 0x7, 0x5, 0xfffffffa, 0x100, 0xffff, 0x471, 0x1, 0x0, 0x6, 0x4c03, 0xfffffff8, 0x9, 0x3, 0x9, 0x8, 0xfffffff8, 0x80000000, 0xa, 0x40, 0x7, 0x2c6, 0x8, 0x10001, 0x9, 0x54, 0x7, 0x4b, 0x8, 0xa3, 0x1, 0x5, 0x3, 0x8, 0x80000001, 0x0, 0x61c9, 0x9, 0xfffffcdb, 0x98, 0xff, 0x5, 0x7, 0x7, 0x2b, 0x7fff, 0x46, 0x7, 0xfe1b, 0x4, 0x3, 0x9, 0xc, 0x800, 0x2, 0x2, 0x4, 0x9, 0x80000000, 0x7fffffff, 0xca, 0xc03, 0x7, 0x3, 0xfffffffe, 0x9d1, 0x0, 0x7, 0x1, 0x8, 0x817, 0xae, 0x100, 0xcb, 0xd76, 0x5, 0x3, 0x2, 0x10, 0x5, 0x200, 0xfffffff7, 0xdf1, 0x6, 0x5, 0x200, 0x80000001, 0x0, 0x6, 0x401, 0x2, 0xd, 0x5, 0x7, 0x1, 0x2, 0x0, 0xc, 0x2f, 0x7f, 0x10, 0xd, 0x3, 0x5a1c, 0xffff, 0x27000000, 0x93, 0x0, 0xfffffffc, 0x5, 0x38e8000, 0xfffffff8, 0x7, 0xa, 0x200, 0x7, 0x7, 0x6, 0xfffffff7, 0x978, 0x5, 0xfffffffa, 0xa, 0x80000000, 0x7f, 0x5, 0x3, 0xfffffffb, 0x80000000, 0x1, 0x1, 0x5, 0x3ff, 0x0, 0x5, 0x4, 0x8634, 0x3ff, 0x1, 0x10, 0x0, 0xb, 0x3, 0x7fff, 0x7, 0x8, 0xffff9d67, 0xd3, 0x3, 0x1, 0x200, 0x6, 0x2d37, 0x9, 0x2, 0x100, 0x6, 0x6, 0x7ff, 0x8, 0x6, 0x10000, 0x10, 0xfffff622, 0x5a11, 0xf, 0xffffff50, 0x6, 0x9, 0x5, 0x53, 0x48000000, 0x3, 0xfffffe00, 0xe40, 0x7, 0x8001, 0x4, 0x7f, 0xbb, 0x9, 0x2, 0x8, 0x2, 0x7fffffff, 0x1, 0x3, 0x1, 0x2b9, 0x8, 0x8, 0xffffffff, 0x10000, 0x1, 0x7, 0x7c, 0x8, 0x2, 0x3, 0x2, 0x0, 0x2, 0x4, 0xe, 0xffffb908, 0x7, 0x10001, 0x40, 0x0, 0x5, 0x9c, 0x4, 0x9, 0x2, 0x0, 0x4, 0x2, 0x200, 0x1, 0x5, 0xe0000000, 0x8, 0x17, 0x6, 0x4, 0xa428, 0x5, 0x5, 0xa5d3, 0x7ff, 0x4, 0x8001, 0x0, 0x7, 0x5, 0xfffffffe, 0xc109, 0x0, 0x1, 0x7f, 0x3, 0x8001, 0x80000000, 0x9, 0x8f, 0x7, 0xb, 0xe, 0x9, 0x7fff, 0x7, 0xf, 0x7, 0x4, 0x8001, 0x0, 0xfffffffe, 0x5, 0x40, 0xfffffffc, 0x7, 0x791, 0x7, 0x58, 0x6, 0x6, 0x689e, 0x4, 0x401, 0x9, 0x8, 0x7, 0x2, 0x1, 0x4, 0x8, 0x8001, 0x75c, 0x9, 0xf3fe, 0x3, 0x81, 0x4578, 0x8000, 0x31dd, 0xfffeffff, 0x4, 0xff, 0x7, 0x4, 0x5, 0x8, 0xb, 0xfffffffe, 0xc9f, 0x2, 0x6, 0x1ff, 0x6, 0x4, 0xf, 0x6, 0x9, 0xffffffff, 0x0, 0x10000, 0x6870, 0x80000000, 0x2, 0x6ff, 0x40, 0xb, 0x5, 0x1, 0xe8c6, 0xfffffffb, 0x7, 0x0, 0xd, 0x400, 0x5, 0x80, 0x8, 0xff, 0x1d5, 0x7a5d, 0xfffffffe, 0x0, 0x1, 0x5, 0x4, 0x1f, 0x9, 0xf, 0xb, 0x5, 0x3, 0xaf, 0x5, 0x0, 0x9, 0x3ab3, 0x5, 0x1ff, 0x9, 0x6, 0x7, 0x7f, 0x1, 0x8, 0x91, 0x0, 0x3, 0x7, 0x6, 0x4, 0x2, 0x9, 0x2, 0xffffffff, 0x71c, 0x7, 0x1, 0x64, 0x6a0, 0x9, 0xe02a, 0xb, 0xfffffff8, 0x8, 0xe, 0x1, 0x2, 0x4, 0x5f3, 0xf5a, 0x249e, 0xfff, 0x9, 0x1, 0x1ff, 0x7, 0x1ff, 0x6, 0x7, 0xf, 0x503a76f5, 0xb, 0xfffffffc, 0x3, 0x8, 0x7, 0x5, 0x0, 0xb, 0x101, 0xfcb, 0x6, 0x6, 0x8, 0x80, 0xc47, 0x0, 0x8, 0x8, 0xb5, 0x4, 0xe, 0x9, 0x5, 0x5, 0x5, 0x7c2, 0x0, 0x4, 0x5, 0xf5, 0x40, 0x3, 0x6, 0xa08, 0x11, 0x8, 0x4fbcd895, 0x80, 0xc, 0x0, 0x9, 0x33, 0xffffffff, 0x5, 0x0, 0xc, 0x200, 0x9, 0x6542, 0x8001, 0x0, 0x30000, 0xe, 0x9, 0x0, 0xfff, 0xd, 0x6, 0x401, 0x7, 0x5, 0x6, 0x9, 0x4, 0x2, 0x80000000, 0x6, 0xfb1, 0x4, 0x80, 0xafe5, 0x7f, 0xffff, 0x4fa, 0xad26, 0xfffffffd, 0x3, 0xc7f, 0x5, 0xb, 0xfffffffb, 0xd3, 0x2bc, 0x20, 0x6, 0xc, 0x7, 0x0, 0x3ff, 0xc54, 0x3, 0x8, 0x2, 0x7f, 0x1, 0x47, 0x5, 0x15b2f155, 0x4, 0xffffff01, 0x1ff, 0x8, 0x9, 0xf9f0, 0x8001, 0xd, 0x0, 0x0, 0xec, 0x401, 0x7, 0x0, 0x3, 0x4, 0xad8, 0xf8, 0x8, 0x9, 0x1e1, 0x2, 0xed7, 0x6, 0xb3b1, 0x3, 0x5, 0x2, 0x100, 0xc9, 0xb, 0x9, 0x5, 0x2, 0x1ff, 0x2, 0x9, 0x800, 0x81, 0x6, 0x10000, 0x1, 0x400, 0x5, 0x101, 0x2, 0x4, 0x6, 0x6, 0x2e, 0x10001, 0x1, 0xb1ba, 0x5, 0xf, 0x6a48, 0x7fffffff, 0x8000, 0xfffff3f8, 0xd, 0x6, 0x8000, 0x6, 0x400, 0x4, 0x2, 0x5, 0x9, 0x9, 0xc9, 0x1, 0x4, 0x1, 0x1, 0x8, 0x4, 0x7, 0x3, 0x10000000, 0x2, 0x3, 0x95d7, 0x3, 0xffff, 0x7, 0x5, 0x878d, 0x2, 0x7, 0x9, 0x7ff, 0x1, 0x3c, 0x60, 0x31, 0x1af8, 0x6, 0xa85b, 0x940, 0x2, 0x7, 0x1, 0x7, 0x4, 0x2, 0xfffffff8, 0x101, 0x0, 0x9, 0xfff, 0x6, 0x7, 0x1000000, 0x0, 0x1ff, 0xfffffff9, 0x18d7, 0x3, 0x5, 0x9, 0x80000001, 0x400, 0x5, 0x8, 0xffffffff], 0x0, 0x400, 0xfffffff7}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000001880)={0x1, &(0x7f0000001840)=[{}]}) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0xff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000001900), &(0x7f0000001940)={'L+', 0xb79d}, 0x16, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f0000001980)={0x4, 0x0, 0x10000}) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f00000019c0)=0xffffffffffffffff) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r7, 0x6f2d, 0x5) 220.848038ms ago: executing program 6 (id=3182): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) (async) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) finit_module(r6, 0x0, 0x1) (async) listen(r4, 0x7) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="ee407a4a92afb8cf7eec5e390dd48788daf81afe3c049f57f942daed73b6e808ab395219f68ebc5a99e055963365d4c3fffc16773fcda86c52486a0ea5f8986f5933b46dae807defd820d2d2392ce440c761cabc0974fabdcc9669f4825516d2735fed24ea05a9", 0x67) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x4c880) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r4) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}]}, 0x2c}}, 0x0) 215.968488ms ago: executing program 7 (id=3183): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="140000000000000000000000010702000000000000000000"], 0x18}}], 0x1, 0xc0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000280)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x9e}}, {0x2, 0x4e24, @local}, 0x221, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd1, 0xbc, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020027bd7000fcdbdf251700000008000300", @ANYRES32=r3, @ANYBLOB="0c00990006000000660000000a000600ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a00060008021100000100000a000600ffffffffffff00000a000600080211001f16c4378ca9948600000000"], 0x70}}, 0x4000) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000900)='/dev/bsg/3:0:0:0\x00', 0x40, 0x0) ioctl$BSG_IO(r5, 0x2285, &(0x7f0000000b80)={0x51, 0x0, 0x0, 0x1, &(0x7f0000000940)="ef", 0x3, 0x0, 0x7, 0x392, 0x60, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setsig(0x4203, r7, 0x5, &(0x7f0000000140)={0x3, 0x4, 0xfffffff7}) ptrace$cont(0x18, r7, 0x80, 0x0) r8 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x90) r10 = openat(r9, &(0x7f00000002c0)='.\x00', 0x111200, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r10}, 0x8) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000480)={0x1, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3bffc, 0x182, 0x2, 0x20000014, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xffffffeffffffffd, 0xbdb], 0xdddd0000, 0x1c4217}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ptrace$getregset(0x4204, r7, 0x1, &(0x7f0000000640)={&(0x7f0000000540)=""/242, 0xf2}) 151.719967ms ago: executing program 3 (id=3184): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newsa={0x13c, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in=@private=0xa010100, @in6=@mcast1, 0x4, 0x0, 0x4e21, 0x1, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xee00}, {@in=@remote, 0x4d6, 0x32}, @in=@initdev={0xac, 0x1e, 0x8, 0x0}, {0x6, 0x0, 0x0, 0x100, 0xffffffff00000001, 0x0, 0x3f, 0x543}, {0x4, 0x7fffffbfffffffff, 0xffffffffffffffff, 0x1000}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'aegis128l-generic\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x890}, 0x2014) socket$kcm(0x29, 0x7, 0x0) 148.340417ms ago: executing program 6 (id=3185): mq_unlink(&(0x7f0000000000)='(\x00') mq_unlink(&(0x7f0000000040)='^]^)^-\x00') mq_unlink(&(0x7f0000000080)='\'$\x00') mq_unlink(&(0x7f00000000c0)='^]^)^-\x00') mq_unlink(&(0x7f0000000100)='(\x00') mq_unlink(&(0x7f0000000140)=':,\x00') mq_unlink(&(0x7f0000000180)=':,\x00') mq_unlink(&(0x7f00000001c0)='\'$\x00') mq_unlink(&(0x7f0000000200)=':,\x00') mq_unlink(&(0x7f0000000240)=':,\x00') mq_unlink(&(0x7f0000000280)='\'$\x00') mq_unlink(&(0x7f00000002c0)='(//\x00') mq_unlink(&(0x7f0000000300)='\'$\x00') mq_unlink(&(0x7f0000000340)='-$+\\-}$&\\#\'@($#-\x00') mq_unlink(&(0x7f0000000380)='(\x00') mq_unlink(&(0x7f00000003c0)='(\x00') mq_unlink(&(0x7f0000000400)='{\x00') mq_unlink(&(0x7f0000000440)='\'$\x00') mq_unlink(&(0x7f0000000480)='^]^)^-\x00') mq_unlink(&(0x7f00000004c0)='\x00') mq_unlink(&(0x7f0000000500)=':,\x00') mq_unlink(&(0x7f0000000540)='*&&}&\x00') mq_unlink(&(0x7f0000000580)='\x00') mq_unlink(&(0x7f00000005c0)='^]^)^-\x00') mq_unlink(&(0x7f0000000600)='\x00') mq_unlink(&(0x7f0000000640)='{\x00') mq_unlink(&(0x7f0000000680)='{\x00') mq_unlink(&(0x7f00000006c0)='^]^)^-\x00') mq_unlink(&(0x7f0000000700)='(//\x00') mq_unlink(&(0x7f0000000740)='(//\x00') 77.113505ms ago: executing program 3 (id=3186): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x269c0, 0x0) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x1c, r3, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='ip\x00\x03cr\x80e\x83', &(0x7f0000000240)='.\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000001c0)='m', 0xfffffdfc}]) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000100)='batadv\x00', &(0x7f0000000180)='./file0\x00', r5) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r8, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) openat(r6, &(0x7f0000000440)='./file0\x00', 0x404102, 0x80) 76.896213ms ago: executing program 6 (id=3187): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1001, @private2, 0x3}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x83, 0x8}, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='load ecryptfs trusted: 18446744073709551612:b'], 0x2d, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x5, 0x7fff}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) (async) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000840) 1.219247ms ago: executing program 7 (id=3188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r5, 0x50) syz_emit_ethernet(0x4f, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900198401fec00000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261bcce0"], 0x0) (async) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) (async) read$FUSE(r3, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000600)={0x10, 0xfffffff5, 0x3}, 0x10) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGICOUNT(r11, 0x5409, 0x0) (async) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000001680)=ANY=[@ANYRESDEC=r8, @ANYRES32=r0, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r10, @ANYBLOB="00000000c100"/28, @ANYRES32=r1, @ANYBLOB="000000000300"/28, @ANYBLOB="c50e5dd9ce1c969c87c2f51b781041439ae981f0f32736537fc9f89b8d8ce86a27c8cb59b9cdb011e8ba8252904072a0edddfcc77a76270478ec42578d9c23f67f945b09d5ac4e7bcaabecdcbdd45b6b139364cf9596ede92e853564e3ebd321f353edc93b13c6c85d528c4612439b3199feacffd0781258d48e88fb400a733d1bbe0d11b7a96e93bb20c040b6b1dffd153fb80a7f45bf440b169be9ea269f29ac9139789fc4a5837245", @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r2, @ANYRES32=r7]) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r12, 0x5000940e, &(0x7f0000000680)={{r14}, "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"}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000002c0)={'ipvlan1\x00', 0x0}) (async) r16 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x400400, 0x0) ioctl$RTC_EPOCH_SET(r16, 0x4008700e, 0x8000000000000000) (async) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r17, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="28e8010000000b00"], 0x28}, 0x1, 0x0, 0x0, 0x42880}, 0x0) (async) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0xc3b, 0x800000, 0x0, {0x0, 0x0, 0x0, r15, 0x0, 0x6300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008100}, 0x40080c0) 509.064µs ago: executing program 6 (id=3189): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1, 0x3, 0x8000) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x40103, 0x0) poll(&(0x7f0000000140)=[{r2, 0x10}], 0x1, 0x128) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f0000000080)) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f0000000040)) 0s ago: executing program 7 (id=3190): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x2f, &(0x7f0000000140)=[{0x31, '\x00', @data=0x5, 0xfffffff7}]}) setresuid(r0, r0, 0x0) setreuid(r0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x30, r4, 0x601, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}]}]}, 0x30}}, 0x40860) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x78, 0x2802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xf}) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000002, 0x12, r7, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000480)={0x0, &(0x7f0000000580)=[@wrmsr={0x65, 0x20, {0x40000090, 0x6}}], 0x20}) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0xfff, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r11, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$can_raw(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@canfd={{0x2, 0x0, 0x0, 0x1}, 0xa, 0x1, 0x0, 0x0, "24a8f40eb05c0f6ec6e45a613e23142c81946ded668bf1d2310b7eef9d1de76798d187fe57cc64bf63e25b4e0ad4ab51b6560b245afdca323159bb3df56f0081"}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): 1) entered disabled state [ 241.732948][T13300] ip6erspan0: left promiscuous mode [ 241.736851][T13300] bond2: left promiscuous mode [ 242.215620][T13309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.224037][T13309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.602454][T13303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.651813][ T40] audit: type=1400 audit(235.094:4720): avc: denied { accept } for pid=13317 comm="syz.3.2124" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.676344][T12372] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.691072][T12372] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.713914][T12372] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.754772][T13329] /dev/loop5: Can't lookup blockdev [ 242.755907][T13327] overlayfs: missing 'workdir' [ 242.759067][T13329] /dev/nbd5: Can't lookup blockdev [ 242.845925][ T40] audit: type=1400 audit(235.281:4721): avc: denied { ioctl } for pid=13334 comm="syz.3.2131" path="socket:[49331]" dev="sockfs" ino=49331 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 242.865524][ T40] audit: type=1400 audit(235.281:4722): avc: denied { getopt } for pid=13334 comm="syz.3.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 242.883295][T13341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2131'. [ 242.885423][T13343] fuse: Unknown parameter '18446744073709551615' [ 242.892892][T13341] bridge5: entered promiscuous mode [ 242.894856][T13341] bridge5: entered allmulticast mode [ 243.032538][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2134'. [ 243.503729][ T40] audit: type=1804 audit(235.899:4723): pid=13356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2135" name="file0" dev="tmpfs" ino=2898 res=1 errno=0 [ 243.600644][T13360] netlink: 'syz.3.2136': attribute type 5 has an invalid length. [ 243.710930][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 243.714079][T13364] netlink: 'syz.3.2138': attribute type 11 has an invalid length. [ 243.717540][T13364] netlink: 'syz.3.2138': attribute type 7 has an invalid length. [ 243.925874][T13381] loop6: detected capacity change from 0 to 8 [ 244.071141][ T58] IPVS: starting estimator thread 0... [ 244.075737][T13381] Dev loop6: unable to read RDB block 8 [ 244.078157][T13381] loop6: unable to read partition table [ 244.081677][T13381] loop6: partition table beyond EOD, truncated [ 244.086227][T13381] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 244.167144][T13387] IPVS: using max 29 ests per chain, 69600 per kthread [ 244.190665][T13392] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 244.640649][T13416] ipvlan2: entered allmulticast mode [ 244.642951][T13416] veth0_to_bridge: entered allmulticast mode [ 244.792384][T13433] program syz.2.2160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.816779][T13437] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 244.827678][T13437] netlink: 'syz.3.2161': attribute type 1 has an invalid length. [ 244.845744][T13437] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.864531][T13437] bond5: (slave gretap1): making interface the new active one [ 244.870818][T13437] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 244.875728][T13437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13437 comm=syz.3.2161 [ 244.973623][T13454] fuse: Bad value for 'fd' [ 245.205667][T13459] xt_hashlimit: size too large, truncated to 1048576 [ 245.412537][T13473] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 245.415791][T13473] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 245.428791][T13473] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 245.432254][T13473] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 245.435673][T13473] overlayfs: d_ino too big (74, ino=9223372036854776227, xinobits=3) [ 245.441453][T13473] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 245.444522][T13473] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 245.447718][T13473] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 245.451108][T13473] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 245.454044][T13473] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 245.457043][T13473] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3) [ 245.460205][T13473] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3) [ 245.482613][T13465] tipc: Cannot configure node identity twice [ 245.551380][T13478] IPv6: NLM_F_CREATE should be specified when creating new route [ 245.555589][T13478] lo speed is unknown, defaulting to 1000 [ 245.558102][T13478] lo speed is unknown, defaulting to 1000 [ 245.560240][T13478] lo speed is unknown, defaulting to 1000 [ 245.563102][T13478] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 245.568929][T13478] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 245.575564][T13478] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 245.583039][T13478] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 245.591746][T13483] bridge6: entered promiscuous mode [ 245.593581][T13483] bridge6: entered allmulticast mode [ 245.599069][T13478] lo speed is unknown, defaulting to 1000 [ 245.602244][T13478] lo speed is unknown, defaulting to 1000 [ 245.604823][T13478] lo speed is unknown, defaulting to 1000 [ 245.607412][T13478] lo speed is unknown, defaulting to 1000 [ 245.610860][T13478] lo speed is unknown, defaulting to 1000 [ 245.835849][T13509] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 245.851120][T12764] IPVS: starting estimator thread 0... [ 245.915466][T13518] 8021q: adding VLAN 0 to HW filter on device bond6 [ 245.923594][T13518] bond6: entered allmulticast mode [ 245.927376][T13521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13521 comm=syz.5.2190 [ 245.938196][T13518] bond6: (slave ip6gretap2): making interface the new active one [ 245.939177][ T40] audit: type=1400 audit(238.163:4724): avc: denied { getopt } for pid=13520 comm="syz.5.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 245.941326][T13518] ip6gretap2: entered allmulticast mode [ 245.951879][T13518] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 245.961090][T13512] IPVS: using max 47 ests per chain, 112800 per kthread [ 246.023995][ T40] audit: type=1400 audit(238.248:4725): avc: denied { bind } for pid=13529 comm="syz.5.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 246.086709][T13539] afs: Unknown parameter 'dynG' [ 246.179888][T13558] block nbd0: Unsupported socket: should be TCP or UNIX. [ 246.239405][ T5890] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 246.253616][T13563] binder: 13562:13563 ioctl c0306201 2000000000c0 returned -14 [ 246.260695][T13563] NILFS (nullb0): couldn't find nilfs on the device [ 246.262621][T13567] openvswitch: netlink: Multiple metadata blocks provided [ 246.266607][T13563] binder: 13562:13563 ioctl 89f3 200000000880 returned -22 [ 247.283491][ T40] audit: type=1400 audit(239.427:4726): avc: denied { map } for pid=13590 comm="syz.3.2214" path="socket:[50267]" dev="sockfs" ino=50267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 247.326453][T13595] IPv6: sit1: Disabled Multicast RS [ 247.328645][T13599] binder: 13597:13599 ioctl c0306201 200000000080 returned -14 [ 247.330609][T13595] sit1: entered allmulticast mode [ 247.334283][T13599] binder: 13597:13599 ioctl c0306201 2000000003c0 returned -14 [ 247.339118][ T40] audit: type=1400 audit(239.473:4727): avc: denied { transfer } for pid=13597 comm="syz.2.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 247.397002][T13610] validate_nla: 2 callbacks suppressed [ 247.397014][T13610] netlink: 'syz.4.2222': attribute type 1 has an invalid length. [ 247.430561][T13610] bond0: (slave geneve2): making interface the new active one [ 247.433546][T13610] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 247.436855][T12372] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 247.438446][T13607] __nla_validate_parse: 14 callbacks suppressed [ 247.438456][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 247.440595][T12372] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 247.442612][T13607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2220'. [ 247.448300][T12372] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 247.457439][T12372] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 247.473987][T13607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13607 comm=syz.2.2220 [ 247.569914][ T40] audit: type=1400 audit(239.698:4728): avc: denied { append } for pid=13631 comm="syz.4.2230" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 247.602707][ T5737] Bluetooth: hci2: unknown advertising packet type: 0x6b [ 247.602774][ T5737] Bluetooth: hci2: Dropping invalid advertising data [ 247.610817][ T5737] Bluetooth: hci2: Malformed LE Event: 0x02 [ 247.645421][T13636] overlayfs: upper fs does not support file handles, falling back to index=off. [ 247.870875][ T5737] Bluetooth: Frame is too long (len 12, expected len 4) [ 247.924475][T13661] fuse: Bad value for 'fd' [ 247.941009][T13663] batadv_slave_0: Caught tx_queue_len zero misconfig [ 248.275791][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2243'. [ 248.412559][T13682] IPVS: set_ctl: invalid protocol: 211 10.1.1.0:20000 [ 248.522911][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'. [ 248.577160][T13690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.580590][T13690] IPv6: NLM_F_CREATE should be set when creating new route [ 248.582952][T13690] IPv6: NLM_F_CREATE should be set when creating new route [ 248.585251][T13690] IPv6: NLM_F_CREATE should be set when creating new route [ 248.588236][T13690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.598105][T13692] xt_hashlimit: size too large, truncated to 1048576 [ 248.606884][T13690] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 248.611480][ T53] bond_slave_0: entered promiscuous mode [ 248.616628][ T53] bond_slave_1: entered promiscuous mode [ 248.756700][T13705] 9p: p9: multiple sources not supported [ 249.002187][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 249.005086][T13717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2255'. [ 249.008282][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2255'. [ 249.016792][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 249.020115][T13717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2255'. [ 249.023413][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2255'. [ 249.031092][T13717] overlayfs: failed to clone upperpath [ 249.088712][ T40] audit: type=1400 audit(241.120:4729): avc: denied { accept } for pid=13720 comm="syz.3.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 249.178290][T13731] netlink: 'syz.5.2261': attribute type 13 has an invalid length. [ 249.186421][T13731] gretap0: refused to change device tx_queue_len [ 249.189926][T13731] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 249.428326][ T40] audit: type=1400 audit(241.439:4730): avc: denied { read append open } for pid=13750 comm="syz.5.2268" path="/202/file0/cpuacct.usage_sys" dev="9p" ino=72876251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.440545][ T40] audit: type=1400 audit(241.448:4731): avc: denied { lock } for pid=13750 comm="syz.5.2268" path="/202/file0/cpuacct.usage_sys" dev="9p" ino=72876251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.540304][T13755] tmpfs: Bad value for 'mpol' [ 249.727510][T13764] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 249.731348][T13764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=13764 comm=syz.5.2273 [ 249.759101][T13764] bond4: Invalid ad_actor_system MAC address. [ 249.761241][T13764] bond4: option ad_actor_system: invalid value (27571) [ 249.764226][T13764] bond4 (unregistering): Released all slaves [ 249.786750][ T5751] Bluetooth: hci4: command 0x2016 tx timeout [ 249.929007][T13783] netlink: 'syz.5.2279': attribute type 30 has an invalid length. [ 249.929117][T13787] netlink: 'syz.5.2279': attribute type 30 has an invalid length. [ 249.961075][ T40] audit: type=1400 audit(241.935:4732): avc: denied { bind } for pid=13788 comm="syz.5.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.989779][T13786] openvswitch: netlink: IPv6 tunnel dst address is zero [ 250.001303][T13793] fuse: Bad value for 'fd' [ 250.515540][T13797] dlm: non-version read from control device 16 [ 250.519041][T13797] dlm: no local IP address has been set [ 250.527144][T13797] dlm: cannot start dlm midcomms -107 [ 250.943408][T13820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.023465][T13820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.289461][ T40] audit: type=1400 audit(243.179:4733): avc: denied { accept } for pid=13824 comm="syz.5.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 251.360185][T13836] netlink: 'syz.3.2295': attribute type 26 has an invalid length. [ 251.422097][ T40] audit: type=1326 audit(243.310:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13840 comm="syz.3.2297" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb61779cdd9 code=0x0 [ 251.836283][T13859] loop5: detected capacity change from 0 to 4095 [ 251.998772][ T5737] Bluetooth: hci4: command 0x2016 tx timeout [ 252.138627][T13866] bond3 (unregistering): Released all slaves [ 252.253694][T13870] tmpfs: Unknown parameter 'mpol9local' [ 252.928447][T13896] CIFS mount error: No usable UNC path provided in device string! [ 252.928447][T13896] [ 252.932673][T13896] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 253.023202][T13900] xfrm0 speed is unknown, defaulting to 1000 [ 253.029097][T13900] lo speed is unknown, defaulting to 1000 [ 253.033639][ T40] audit: type=1400 audit(244.807:4735): avc: denied { execute } for pid=13888 comm="syz.4.2312" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 253.151337][T13907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13907 comm=syz.3.2316 [ 253.159873][T13907] netlink: 'syz.3.2316': attribute type 1 has an invalid length. [ 253.162401][ T40] audit: type=1400 audit(244.929:4736): avc: denied { listen } for pid=13904 comm="syz.2.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 253.201756][T13910] __nla_validate_parse: 12 callbacks suppressed [ 253.201769][T13910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2317'. [ 253.312780][T13913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.319013][T13918] netlink: 'syz.5.2320': attribute type 21 has an invalid length. [ 253.333454][T13919] netlink: 'syz.5.2320': attribute type 21 has an invalid length. [ 253.406870][T13921] ufs: You didn't specify the type of your ufs filesystem [ 253.406870][T13921] [ 253.406870][T13921] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 253.406870][T13921] [ 253.406870][T13921] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 253.571261][T13935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2327'. [ 254.046745][T13983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2334'. [ 254.230859][T13999] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.2345'. [ 254.235100][T13999] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 254.340741][T14006] netlink: 'syz.4.2347': attribute type 1 has an invalid length. [ 254.343825][T14006] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2347'. [ 254.467329][T14013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2349'. [ 254.612398][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 254.645932][T14038] SET target dimension over the limit! [ 254.699249][T14041] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 254.705941][ T40] audit: type=1326 audit(246.380:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.2.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776e19cdd9 code=0x7fc00000 [ 254.713608][ T40] audit: type=1326 audit(246.380:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.2.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f776e19cdd9 code=0x7fc00000 [ 254.721291][ T40] audit: type=1326 audit(246.380:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.2.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776e19cdd9 code=0x7fc00000 [ 254.723821][T14041] netlink: 'syz.3.2356': attribute type 2 has an invalid length. [ 254.728487][ T40] audit: type=1326 audit(246.380:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.2.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776e19cdd9 code=0x7fc00000 [ 254.731019][T14041] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2356'. [ 254.733266][T14045] CIFS mount error: No usable UNC path provided in device string! [ 254.733266][T14045] [ 254.739680][ T40] audit: type=1326 audit(246.380:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.2.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776e19cdd9 code=0x7fc00000 [ 254.749130][T14045] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 254.753511][ T40] audit: type=1326 audit(246.380:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.2.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776e19cdd9 code=0x7fc00000 [ 254.760980][T14047] syz_tun: entered allmulticast mode [ 254.766327][ T40] audit: type=1326 audit(246.380:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.2.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776e19cdd9 code=0x7fc00000 [ 254.777320][ T40] audit: type=1326 audit(246.380:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.2.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776e19cdd9 code=0x7fc00000 [ 254.869940][T14063] netlink: 'syz.5.2365': attribute type 1 has an invalid length. [ 254.872479][T14063] netlink: 'syz.5.2365': attribute type 2 has an invalid length. [ 254.938214][T14063] /dev/sr0: Can't lookup blockdev [ 254.997378][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.005102][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.010314][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.022824][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.027019][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.140183][T14088] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2371'. [ 255.171435][T12404] syz_tun (unregistering): left allmulticast mode [ 255.212981][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2371'. [ 255.339218][T14104] IPVS: length: 120 != 24 [ 255.363954][T14106] /dev/sr0: Can't lookup blockdev [ 255.374105][T12367] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.426540][T14069] xfrm0 speed is unknown, defaulting to 1000 [ 255.430826][T14069] lo speed is unknown, defaulting to 1000 [ 255.441719][T14108] binder: 14107:14108 ioctl c0306201 200000000540 returned -22 [ 255.540437][T12367] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.616690][T12367] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.770007][T12367] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.805715][T14069] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.808716][T14069] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.811195][T14069] bridge_slave_0: entered allmulticast mode [ 255.814261][T14069] bridge_slave_0: entered promiscuous mode [ 255.817705][T14069] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.819999][T14069] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.822348][T14069] bridge_slave_1: entered allmulticast mode [ 255.828578][T14069] bridge_slave_1: entered promiscuous mode [ 255.880396][T14069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.886034][T14069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.901044][T14069] team0: Port device team_slave_0 added [ 255.904972][T14069] team0: Port device team_slave_1 added [ 255.940888][T14069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.945801][T14069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.963112][T14069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.969543][T14069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.972536][T14069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.984469][T14069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.086508][T14179] netlink: 'syz.5.2393': attribute type 1 has an invalid length. [ 256.089824][T14179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.111680][T14069] hsr_slave_0: entered promiscuous mode [ 256.117720][T14069] hsr_slave_1: entered promiscuous mode [ 256.120501][T14069] debugfs: 'hsr0' already exists in 'hsr' [ 256.121026][T14179] xt_ecn: cannot match TCP bits for non-tcp packets [ 256.122815][T14069] Cannot create hsr debugfs directory [ 256.260229][T14189] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 256.262435][T14189] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 256.269684][T14189] vhci_hcd vhci_hcd.0: Device attached [ 256.272775][T14189] 9p: Bad value for 'version' [ 256.278501][T14190] vhci_hcd: connection closed [ 256.278669][T12372] vhci_hcd vhci_hcd.4: stop threads [ 256.288192][T12372] vhci_hcd vhci_hcd.4: release socket [ 256.292345][T12372] vhci_hcd vhci_hcd.4: disconnect device [ 256.587364][T12367] bridge_slave_1: left allmulticast mode [ 256.589957][T12367] bridge_slave_1: left promiscuous mode [ 256.592583][T12367] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.599299][T12367] bridge_slave_0: left allmulticast mode [ 256.601813][T12367] bridge_slave_0: left promiscuous mode [ 256.604187][T12367] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.624842][T12367] pimreg3: left allmulticast mode [ 256.823040][T12367] bond6 (unregistering): (slave ip6gretap2): Releasing active interface [ 256.826611][T12367] ip6gretap2 (unregistering): left allmulticast mode [ 256.853457][T14205] netlink: 'syz.4.2399': attribute type 10 has an invalid length. [ 256.969347][T12367] bond5 (unregistering): (slave gretap1): Releasing active interface [ 257.184715][T12367] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 257.187343][T12367] bridge2 (unregistering): left promiscuous mode [ 257.189393][T12367] bridge2 (unregistering): left allmulticast mode [ 257.213500][ T5751] Bluetooth: hci1: command tx timeout [ 257.395242][ T918] SELinux: failure in sel_netif_sid_slow(), invalid network interface (122) [ 257.486780][T12367] bond1 (unregistering): Released all slaves [ 257.496072][T12367] bond2 (unregistering): (slave veth3): Releasing active interface [ 257.546042][T12367] bond2 (unregistering): Released all slaves [ 257.560192][T12367] bond3 (unregistering): Released all slaves [ 257.571258][T12367] bond0 (unregistering): Released all slaves [ 257.582146][T12367] bond4 (unregistering): Released all slaves [ 257.592738][T12367] bond5 (unregistering): Released all slaves [ 257.603606][T12367] bond6 (unregistering): Released all slaves [ 257.633570][ T5445] 8021q: adding VLAN 0 to HW filter on device eth10 [ 257.756778][T12367] tipc: Left network mode [ 257.901424][T12367] IPVS: stopping backup sync thread 9862 ... [ 258.395859][T14069] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 258.400367][T14069] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 258.403468][T14069] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 258.407733][T14069] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 258.410722][T14069] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 258.417470][T14069] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 258.420295][T14069] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 258.424732][T14069] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 258.497186][T12367] hsr_slave_0: left promiscuous mode [ 258.499540][T12367] hsr_slave_1: left promiscuous mode [ 258.501609][T12367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.504018][T12367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.507554][T12367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.510845][T12367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.518900][T12367] veth1_to_batadv: left allmulticast mode [ 258.521717][T12367] veth1_to_batadv: left promiscuous mode [ 258.832616][T14069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.847362][T14069] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.854077][T14255] __nla_validate_parse: 4 callbacks suppressed [ 258.854093][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2404'. [ 258.862817][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.865171][T12369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.881834][T12364] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.884925][T12364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.957184][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2406'. [ 259.042984][T14272] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2408'. [ 259.092628][T14277] hpfs: Bad magic ... probably not HPFS [ 259.099578][T14275] /dev/sg0: Can't lookup blockdev [ 259.147154][T14287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'. [ 259.150603][T14287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'. [ 259.215781][T14288] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2411'. [ 259.233547][T14069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.256610][T14310] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2411'. [ 259.274849][T14069] veth0_vlan: entered promiscuous mode [ 259.284855][T14069] veth1_vlan: entered promiscuous mode [ 259.305755][T14069] veth0_macvtap: entered promiscuous mode [ 259.317366][T14069] veth1_macvtap: entered promiscuous mode [ 259.326063][T12367] IPVS: stop unused estimator thread 0... [ 259.334893][T14069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.346728][T14069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.357755][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.362785][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.373612][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.386316][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.436323][ T5751] Bluetooth: hci1: command tx timeout [ 259.471890][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 259.471903][ T40] audit: type=1400 audit(250.825:4809): avc: denied { unmount } for pid=7607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 259.495901][T12367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.499309][T12367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.527953][T12367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.530586][T12367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.079502][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2416'. [ 260.103066][T14327] bond4: entered promiscuous mode [ 260.104954][T14327] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.111753][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2416'. [ 260.118477][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2416'. [ 260.133164][T14327] bond4: (slave sit2): refused to change device type [ 260.146372][ T40] audit: type=1400 audit(251.470:4810): avc: denied { map } for pid=14332 comm="syz.2.2418" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 260.487633][T14368] bond3: option downdelay: invalid value (18446744073709551615) [ 260.490408][T14368] bond3: option downdelay: allowed values 0 - 2147483647 [ 260.493517][T14368] bond3 (unregistering): Released all slaves [ 260.594369][T14360] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 260.687813][T14379] netlink: 'syz.4.2431': attribute type 39 has an invalid length. [ 260.742707][ T40] audit: type=1400 audit(252.032:4811): avc: denied { getopt } for pid=14376 comm="syz.4.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 260.812469][T14383] hugetlbfs: Bad value '$' for mount option 'size' [ 260.812469][T14383] [ 261.108243][ T40] audit: type=1400 audit(252.369:4812): avc: denied { remount } for pid=14413 comm="syz.4.2444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 261.123349][ T40] audit: type=1400 audit(252.369:4813): avc: denied { ioctl } for pid=14408 comm="syz.2.2442" path="socket:[52651]" dev="sockfs" ino=52651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 261.244033][T14432] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 261.285533][T14441] ip6tnl0: Caught tx_queue_len zero misconfig [ 261.344251][T14443] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 261.347377][T14443] fuse: Bad value for 'fd' [ 261.419261][ T40] audit: type=1400 audit(252.659:4814): avc: denied { getattr } for pid=14452 comm="syz.4.2456" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=50999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 261.563458][ T40] audit: type=1400 audit(252.799:4815): avc: denied { create } for pid=14454 comm="syz.4.2457" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 261.659156][ T5751] Bluetooth: hci1: command tx timeout [ 261.693664][T14461] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 261.698174][T14461] block device autoloading is deprecated and will be removed. [ 261.784813][ T40] audit: type=1400 audit(252.996:4816): avc: denied { listen } for pid=14464 comm="syz.2.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 262.057447][ T60] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 262.081039][T14487] fuse: Bad value for 'user_id' [ 262.083016][T14487] fuse: Bad value for 'user_id' [ 262.144192][T14495] CIFS mount error: No usable UNC path provided in device string! [ 262.144192][T14495] [ 262.148554][T14495] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 262.156853][T14495] fuse: Unknown parameter '00000000000000000000003' [ 262.263304][T14448] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 262.388308][T14506] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 262.396517][ T40] audit: type=1400 audit(253.567:4817): avc: denied { read } for pid=14518 comm="syz.5.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 262.586245][T14551] IPVS: set_ctl: invalid protocol: 41 172.20.20.61:20001 [ 262.599238][ T5833] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 262.761441][ T5833] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 262.765204][ T5833] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 262.768956][ T5833] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 262.773887][ T5833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 262.778009][ T5833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 262.785547][ T5833] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 262.790049][ T5833] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 262.795202][ T5833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.801248][ T5833] usb 9-1: config 0 descriptor?? [ 262.806681][T14511] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 263.028811][ T5833] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 263.242445][ T40] audit: type=1400 audit(254.371:4818): avc: denied { read write } for pid=14493 comm="syz.4.2470" name="lp0" dev="devtmpfs" ino=3220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 263.247940][ C0] usblp0: nonzero read bulk status received: -71 [ 263.254470][ T9] usb 9-1: USB disconnect, device number 27 [ 263.882238][ T5751] Bluetooth: hci1: command tx timeout [ 265.374499][T14501] usblp0: removed [ 265.401061][T14605] random: crng reseeded on system resumption [ 265.647752][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 265.647765][ T40] audit: type=1400 audit(256.617:4820): avc: denied { write } for pid=14621 comm="syz.4.2503" name="/" dev="9p" ino=72876093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.163578][T14635] program syz.4.2504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.231468][T14638] __nla_validate_parse: 10 callbacks suppressed [ 266.231487][T14638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2509'. [ 266.271709][T14643] netlink: 512 bytes leftover after parsing attributes in process `syz.5.2511'. [ 266.594872][T14663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=126 sclass=netlink_route_socket pid=14663 comm=syz.2.2516 [ 266.667978][ T6178] IPVS: starting estimator thread 0... [ 266.688032][ T40] audit: type=1326 audit(257.590:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.4.2517" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c7699cdd9 code=0x0 [ 266.756071][T14666] IPVS: using max 48 ests per chain, 115200 per kthread [ 266.806248][T14673] comedi comedi3: comedi_config --init_data is deprecated [ 266.977644][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2519'. [ 266.981819][T14673] fuse: Unknown parameter '0x00000000000000070x0000000000000008' [ 267.318512][T14697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14697 comm=syz.5.2525 [ 267.544456][T14708] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=14708 comm=syz.5.2529 [ 267.650893][T14717] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 267.653715][T14618] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 267.684978][T14712] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 268.341158][T14732] tipc: Cannot configure node identity twice [ 268.649758][T14736] fuse: Bad value for 'fd' [ 268.653297][T14736] overlay: ./bus is not a directory [ 268.711120][ T40] audit: type=1326 audit(259.481:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14739 comm="syz.5.2539" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21a799cdd9 code=0x0 [ 268.889101][T14746] netlink: 'syz.3.2541': attribute type 39 has an invalid length. [ 269.233934][ T40] audit: type=1400 audit(259.967:4823): avc: denied { read } for pid=14760 comm="syz.4.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 269.240296][ T40] audit: type=1400 audit(259.977:4824): avc: denied { ioctl } for pid=14760 comm="syz.4.2545" path="socket:[54125]" dev="sockfs" ino=54125 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 269.240637][T14763] gtp0: entered allmulticast mode [ 269.251396][T14763] team0: Device gtp0 is of different type [ 269.409000][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2546'. [ 269.695240][ T5833] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 269.855028][ T5833] usb 9-1: Using ep0 maxpacket: 32 [ 269.858998][ T5833] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.863226][ T5833] usb 9-1: config 0 has no interfaces? [ 269.872650][ T5833] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 269.877079][ T5833] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.880375][ T5833] usb 9-1: Product: syz [ 269.882012][ T5833] usb 9-1: Manufacturer: syz [ 269.883911][ T5833] usb 9-1: SerialNumber: syz [ 269.887729][ T5833] usb 9-1: config 0 descriptor?? [ 269.952966][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.110911][ T941] usb 9-1: USB disconnect, device number 28 [ 271.056270][ T941] lo speed is unknown, defaulting to 1000 [ 271.322188][T14818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2563'. [ 271.325724][T14818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2563'. [ 271.515384][T14823] program syz.4.2565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.528111][T14825] program syz.4.2565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.639021][ T40] audit: type=1400 audit(262.213:4825): avc: denied { remount } for pid=14827 comm="syz.4.2566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 271.647704][T14828] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 271.931904][T14841] fuse: Bad value for 'fd' [ 271.937334][T14841] fuse: Unknown parameter 'dXr0xffffffffffffffff' [ 271.955094][ T40] audit: type=1400 audit(262.513:4826): avc: denied { setattr } for pid=14842 comm="syz.2.2571" name="SCTPv6" dev="sockfs" ino=55420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 272.005775][T14850] netlink: 'syz.2.2573': attribute type 2 has an invalid length. [ 272.008293][T14850] netlink: 'syz.2.2573': attribute type 2 has an invalid length. [ 272.170651][T14869] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2578'. [ 272.173885][T14869] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2578'. [ 272.177419][T14869] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2578'. [ 272.294574][ T40] audit: type=1400 audit(262.840:4827): avc: denied { mounton } for pid=14874 comm="syz.2.2580" path="/proc/484/task/485/net/stat" dev="proc" ino=4026533319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 272.757144][T14885] netlink: 'syz.4.2584': attribute type 30 has an invalid length. [ 272.813211][T14887] netlink: 'syz.4.2584': attribute type 11 has an invalid length. [ 273.156285][T14901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2590'. [ 273.234458][T14907] netlink: 'syz.5.2591': attribute type 13 has an invalid length. [ 273.446981][T14929] sock: sock_timestamping_bind_phc: sock not bind to device [ 273.484976][T14929] netlink: 'syz.5.2597': attribute type 5 has an invalid length. [ 273.548873][T14939] fuse: Unknown parameter 'grout_0-$hI8mdnUk8q[ 摍' [ 273.552808][T14938] fuse: Unknown parameter 'grout_0-$hI8mdnUk8q[ 摍' [ 273.828016][T14956] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 273.957756][T14962] random: crng reseeded on system resumption [ 274.126059][T14967] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2610'. [ 274.459716][T14990] netlink: 'syz.2.2618': attribute type 1 has an invalid length. [ 274.464334][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2618'. [ 274.605440][T15001] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2620'. [ 274.875098][T15006] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2623'. [ 274.885034][T15006] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 274.938273][T15010] hpfs: Bad magic ... probably not HPFS [ 274.946944][T15010] hpfs: Bad magic ... probably not HPFS [ 274.949302][T15010] GUP no longer grows the stack in syz.2.2624 (15010): 200000004000-20000000a000 (200000002000) [ 274.954429][T15010] CPU: 3 UID: 0 PID: 15010 Comm: syz.2.2624 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.954473][T15010] Tainted: [L]=SOFTLOCKUP [ 274.954479][T15010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 274.954489][T15010] Call Trace: [ 274.954494][T15010] [ 274.954501][T15010] dump_stack_lvl+0x100/0x190 [ 274.954544][T15010] gup_vma_lookup.cold+0x83/0x96 [ 274.954572][T15010] __get_user_pages+0x241/0x32a0 [ 274.954600][T15010] ? find_held_lock+0x2b/0x80 [ 274.954621][T15010] ? mtree_load+0x311/0xa90 [ 274.954657][T15010] ? __pfx___get_user_pages+0x10/0x10 [ 274.954684][T15010] get_user_pages_remote+0x3d2/0xb10 [ 274.954707][T15010] ? mas_root_expand+0x670/0x750 [ 274.954731][T15010] ? __pfx_get_user_pages_remote+0x10/0x10 [ 274.954754][T15010] ? __access_remote_vm+0x755/0x890 [ 274.954773][T15010] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 274.954801][T15010] __access_remote_vm+0x3bb/0x890 [ 274.954825][T15010] ? do_raw_spin_lock+0x128/0x260 [ 274.954852][T15010] ? __pfx___access_remote_vm+0x10/0x10 [ 274.954867][T15010] ? proc_pid_cmdline_read+0x31b/0x8c0 [ 274.954894][T15010] proc_pid_cmdline_read+0x4f2/0x8c0 [ 274.954931][T15010] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 274.954955][T15010] ? rw_verify_area+0xce/0x6d0 [ 274.954988][T15010] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 274.955008][T15010] vfs_readv+0x5d8/0x8d0 [ 274.955033][T15010] ? __pfx_vfs_readv+0x10/0x10 [ 274.955050][T15010] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 274.955094][T15010] ? __fget_files+0x21f/0x3d0 [ 274.955125][T15010] ? do_preadv+0x1ac/0x270 [ 274.955140][T15010] do_preadv+0x1ac/0x270 [ 274.955158][T15010] ? __pfx_do_preadv+0x10/0x10 [ 274.955178][T15010] ? rcu_is_watching+0x12/0xc0 [ 274.955209][T15010] do_syscall_64+0x10b/0xf80 [ 274.955229][T15010] ? clear_bhb_loop+0x40/0x90 [ 274.955253][T15010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.955272][T15010] RIP: 0033:0x7f776e19cdd9 [ 274.955288][T15010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.955306][T15010] RSP: 002b:00007f776f11c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 274.955325][T15010] RAX: ffffffffffffffda RBX: 00007f776e415fa0 RCX: 00007f776e19cdd9 [ 274.955338][T15010] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 274.955350][T15010] RBP: 00007f776e232d69 R08: 00000000fffffff9 R09: 0000000000000000 [ 274.955363][T15010] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 274.955374][T15010] R13: 00007f776e416038 R14: 00007f776e415fa0 R15: 00007fffc1918208 [ 274.955400][T15010] [ 275.145065][T15019] bridge_slave_1: Caught tx_queue_len zero misconfig [ 275.274070][ T40] audit: type=1400 audit(265.629:4828): avc: denied { accept } for pid=15024 comm="syz.5.2631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.278694][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2631'. [ 275.433257][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 275.480883][T15035] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2634'. [ 275.589041][T15032] bond7: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 275.709546][T15046] netlink: 'syz.3.2637': attribute type 1 has an invalid length. [ 275.901027][T15053] sit0: entered promiscuous mode [ 275.902755][T15053] netlink: 'syz.4.2640': attribute type 1 has an invalid length. [ 275.907398][T15053] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=57 sclass=netlink_tcpdiag_socket pid=15053 comm=syz.4.2640 [ 276.021377][T15058] IPv4: Oversized IP packet from 127.202.26.0 [ 276.281716][T15064] CIFS mount error: No usable UNC path provided in device string! [ 276.281716][T15064] [ 276.285097][T15064] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 276.336009][ T40] audit: type=1326 audit(266.621:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.2.2645" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f776e19cdd9 code=0x0 [ 276.425006][ T40] audit: type=1400 audit(266.696:4830): avc: denied { bind } for pid=15067 comm="syz.2.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 276.663950][T15080] veth0_to_team (unregistering): left promiscuous mode [ 276.672035][T15080] team0: Port device team_slave_0 removed [ 276.816255][ T40] audit: type=1400 audit(267.070:4831): avc: denied { mounton } for pid=15090 comm="syz.5.2654" path="/bus" dev="hugetlbfs" ino=55911 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 276.820670][T15091] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 276.826142][T15091] overlayfs: failed to set xattr on upper [ 276.827885][T15091] overlayfs: ...falling back to redirect_dir=nofollow. [ 276.832127][T15091] overlayfs: ...falling back to index=off. [ 276.835432][T15091] overlayfs: ...falling back to uuid=null. [ 276.837303][T15091] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 276.839966][T15091] overlayfs: maximum fs stacking depth exceeded [ 276.843985][T15091] netlink: Conntrack attr has 4 unknown bytes [ 277.462060][T15121] veth0_to_bond: default FDB implementation only supports local addresses [ 277.467426][ T5751] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 277.476123][ T5751] Bluetooth: Wrong link type (-22) [ 277.479461][ T5751] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 277.482218][ T5751] Bluetooth: Wrong link type (-22) [ 277.484443][ T5751] Bluetooth: hci4: link tx timeout [ 277.487612][ T5751] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 277.707118][T15130] __nla_validate_parse: 9 callbacks suppressed [ 277.707138][T15130] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2667'. [ 278.285690][T15158] fuse: Bad value for 'fd' [ 278.286820][ T5833] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 278.291038][ T40] audit: type=1400 audit(268.446:4832): avc: denied { bind } for pid=15157 comm="syz.5.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 278.468016][ T5833] usb 9-1: Using ep0 maxpacket: 32 [ 278.472479][ T5833] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 278.475470][ T5833] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.477949][ T5833] usb 9-1: Product: syz [ 278.479768][ T5833] usb 9-1: Manufacturer: syz [ 278.481354][ T5833] usb 9-1: SerialNumber: syz [ 278.484085][ T5833] usb 9-1: config 0 descriptor?? [ 278.490965][ T5833] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 278.493472][ T5833] dvb-usb: bulk message failed: -22 (4/0) [ 278.495448][ T5833] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 278.498582][ T5833] dvb-usb: bulk message failed: -22 (5/0) [ 278.499420][T15163] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2677'. [ 278.503392][T15163] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2677'. [ 278.505431][ T5833] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 278.516677][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.519896][ T5833] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 278.522403][ T5833] usb 9-1: media controller created [ 278.529468][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.540907][ T5833] usb 9-1: selecting invalid altsetting 3 [ 278.543118][ T5833] ttusb2: set interface to alts=3 failed [ 278.570989][ T5833] DVB: Unable to find symbol tda10086_attach() [ 278.573277][ T5833] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 278.577213][ T5833] dvb-usb: bulk message failed: -22 (4/0) [ 278.579181][ T5833] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 278.582530][ T5833] dvb-usb: bulk message failed: -22 (5/0) [ 278.584291][ T5833] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 278.587490][ T5833] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 278.711857][T15148] ttusb2: i2c wr len=58 too high [ 278.718002][ T9] usb 9-1: USB disconnect, device number 29 [ 278.747436][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 278.772339][T15174] 9p: Bad value for 'rfdno' [ 278.774806][ T40] audit: type=1400 audit(268.895:4833): avc: denied { connect } for pid=15173 comm="syz.5.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 278.868550][T15179] xt_TPROXY: Can be used only with -p tcp or -p udp [ 278.943303][T15181] x_tables: ip_tables: osf match: only valid for protocol 6 [ 279.203725][T15192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2684'. [ 279.243009][T15192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15192 comm=syz.3.2684 [ 279.357861][T15198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 279.415629][T15204] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 279.419768][T15200] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 279.697061][ T62] Bluetooth: hci4: command 0x2016 tx timeout [ 279.797250][T15215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2693'. [ 279.842085][ T40] audit: type=1400 audit(269.896:4834): avc: denied { write } for pid=15218 comm="syz.4.2693" path="/421/file0/core" dev="9p" ino=72876365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 280.029793][T15232] can: request_module (can-proto-4) failed. [ 280.403332][T15253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2705'. [ 280.448407][T15255] netlink: 'syz.3.2706': attribute type 1 has an invalid length. [ 280.468501][T15255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.475655][T15255] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 280.481658][T15255] bond1: entered allmulticast mode [ 280.500106][T15255] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 281.493583][T15279] xt_bpf: check failed: parse error [ 281.574523][T15281] batadv_slave_0: Caught tx_queue_len zero misconfig [ 281.678915][ T5751] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 281.685282][T15290] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15290 comm=syz.5.2716 [ 281.742825][T12366] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 281.876165][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.891611][T12366] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 281.892553][ T5737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.902621][ T5737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.915140][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.918272][ T5737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.985743][T12366] team0: Port device netdevsim1 removed [ 281.990409][T12366] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 282.046910][ T40] audit: type=1400 audit(271.955:4835): avc: denied { connect } for pid=15319 comm="syz.5.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 282.053849][T15320] cgroup: Unknown subsys name 'cpuset' [ 282.056918][T15320] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 282.108527][T12366] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 282.206223][T15299] xfrm0 speed is unknown, defaulting to 1000 [ 282.210133][T15299] lo speed is unknown, defaulting to 1000 [ 282.404384][T12366] bridge_slave_1: left allmulticast mode [ 282.406799][T12366] bridge_slave_1: left promiscuous mode [ 282.409345][T12366] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.552075][T12366] batman_adv: batadv0: Removing interface: gretap1 [ 282.569033][T12366] bond0 (unregistering): (slave geneve2): Releasing active interface [ 282.620034][T12366] team0: Port device geneve1 removed [ 282.755923][T12366] bond1 (unregistering): Released all slaves [ 282.769739][T12366] bond2 (unregistering): Released all slaves [ 282.774800][T14303] wlan1: Trigger new scan to find an IBSS to join [ 282.781099][T12366] bond0 (unregistering): Released all slaves [ 282.841603][T15299] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.844751][T15299] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.849369][T15299] bridge_slave_0: entered allmulticast mode [ 282.852385][T15299] bridge_slave_0: entered promiscuous mode [ 282.855689][T15299] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.857990][T15299] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.860407][T15299] bridge_slave_1: entered allmulticast mode [ 282.863749][T15299] bridge_slave_1: entered promiscuous mode [ 282.888405][T15299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.892004][T12366] : left promiscuous mode [ 282.914049][T15299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.944136][T15299] team0: Port device team_slave_0 added [ 282.951399][T15299] team0: Port device team_slave_1 added [ 282.975529][T15299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.978686][T15299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.989373][T15299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.995326][T15299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.998106][T15299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.009152][T15299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.015840][T12366] tipc: Left network mode [ 283.044033][T15299] hsr_slave_0: entered promiscuous mode [ 283.047049][T15299] hsr_slave_1: entered promiscuous mode [ 283.134380][ T5445] 8021q: adding VLAN 0 to HW filter on device eth10 [ 283.190552][T12366] IPVS: stopping backup sync thread 15204 ... [ 283.224791][T15299] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.230669][T15299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.233453][T15299] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.237288][T15299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.253554][T15299] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.262138][T15299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.265373][T15299] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.270544][T15299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.302937][T15299] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.305194][T15299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.307460][T15299] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.309679][T15299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.380860][ T5445] 8021q: adding VLAN 0 to HW filter on device eth11 [ 283.388102][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.390801][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.426586][T15299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.435678][T15299] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.441432][T12367] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.443891][T12367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.450198][ T1270] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.452470][ T1270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.653741][ T5445] 8021q: adding VLAN 0 to HW filter on device eth12 [ 283.671625][T12366] hsr_slave_0: left promiscuous mode [ 283.680268][T12366] hsr_slave_1: left promiscuous mode [ 283.684214][T12366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.687977][T12366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.799281][ T40] audit: type=1400 audit(273.602:4836): avc: denied { view } for pid=15408 comm="syz.5.2741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 283.807018][T12366] team0 (unregistering): Port device vlan0 removed [ 283.882753][T12366] team0 (unregistering): Port device team_slave_1 removed [ 283.894803][T12366] team0 (unregistering): Port device team_slave_0 removed [ 284.009482][T15409] : renamed from vlan0 [ 284.103367][T15299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.142475][ T5751] Bluetooth: hci0: command tx timeout [ 284.188956][ T40] audit: type=1400 audit(273.958:4837): avc: denied { getopt } for pid=15427 comm="syz.5.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.188976][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2743'. [ 284.188995][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2743'. [ 284.204285][T15428] netlink: 'syz.5.2743': attribute type 12 has an invalid length. [ 284.241685][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2744'. [ 284.245939][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2744'. [ 284.246151][T15434] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2744'. [ 284.250007][T15433] netlink: 'syz.3.2744': attribute type 15 has an invalid length. [ 284.284824][T15439] netlink: 372 bytes leftover after parsing attributes in process `syz.5.2745'. [ 284.328780][T15299] veth0_vlan: entered promiscuous mode [ 284.337802][T15299] veth1_vlan: entered promiscuous mode [ 284.344020][T15446] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 284.344142][T15439] netlink: 'syz.5.2745': attribute type 1 has an invalid length. [ 284.354290][ T5445] 8021q: adding VLAN 0 to HW filter on device eth13 [ 284.383365][T15299] veth0_macvtap: entered promiscuous mode [ 284.389913][T15299] veth1_macvtap: entered promiscuous mode [ 284.401133][T12366] IPVS: stop unused estimator thread 0... [ 284.415304][T15299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.426826][T15299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.438741][ T1165] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.447082][ T1165] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.450996][ T1165] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.469521][T15458] xt_cgroup: xt_cgroup: no path or classid specified [ 284.479272][ T1165] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.545422][T14303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.553131][T14303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.569263][T15462] netlink: 'syz.5.2749': attribute type 5 has an invalid length. [ 284.588935][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.593674][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.703572][T15470] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 284.709756][T15470] overlayfs: overlapping lowerdir path [ 284.719047][T15474] netlink: 'syz.5.2753': attribute type 3 has an invalid length. [ 284.916355][T15490] netlink: 'syz.5.2757': attribute type 10 has an invalid length. [ 285.006318][T15500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2758'. [ 285.119074][T15510] bond8: entered promiscuous mode [ 285.120956][T15510] 8021q: adding VLAN 0 to HW filter on device bond8 [ 285.187606][T15513] netlink: 'syz.3.2763': attribute type 29 has an invalid length. [ 285.237455][T15518] Bluetooth: MGMT ver 1.23 [ 285.294207][T15521] netlink: 'syz.3.2765': attribute type 1 has an invalid length. [ 285.312293][T15521] bond2: entered promiscuous mode [ 285.314781][T15521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 285.322482][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2765'. [ 285.326525][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2765'. [ 285.337888][T15521] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2765'. [ 285.353640][ T40] audit: type=1400 audit(275.062:4838): avc: denied { accept } for pid=15525 comm="syz.5.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 285.359823][T15521] bond2: (slave bridge1): making interface the new active one [ 285.363117][T15521] bridge1: entered promiscuous mode [ 285.367021][T15521] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 285.421630][T15529] random: crng reseeded on system resumption [ 285.895910][ T40] audit: type=1400 audit(275.567:4839): avc: denied { create } for pid=15546 comm="syz.5.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 285.903760][ T40] audit: type=1400 audit(275.567:4840): avc: denied { connect } for pid=15546 comm="syz.5.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 286.213495][T15557] netlink: 'syz.5.2777': attribute type 23 has an invalid length. [ 286.349427][T15560] overlayfs: workdir and upperdir must be separate subtrees [ 286.375849][ T5751] Bluetooth: hci0: command tx timeout [ 286.596966][T15566] xfrm0 speed is unknown, defaulting to 1000 [ 286.599850][T15566] lo speed is unknown, defaulting to 1000 [ 287.103751][T15575] fuse: Bad value for 'fd' [ 287.180683][T15581] team0: No ports can be present during mode change [ 287.267115][ T40] audit: type=1400 audit(276.849:4841): avc: denied { setopt } for pid=15592 comm="syz.3.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 287.521967][T15619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15619 comm=syz.5.2797 [ 287.528796][ T40] audit: type=1326 audit(277.083:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.5.2797" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21a799cdd9 code=0x0 [ 287.560070][T15628] netlink: 'syz.5.2799': attribute type 1 has an invalid length. [ 287.574478][T15630] vcan1: entered allmulticast mode [ 287.646468][T15633] fuse: Bad value for 'fd' [ 287.648562][T15634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25132 sclass=netlink_route_socket pid=15634 comm=syz.5.2801 [ 287.741842][ T40] audit: type=1400 audit(277.289:4843): avc: denied { module_load } for pid=15644 comm="syz.5.2803" path="/418/bus" dev="tmpfs" ino=2234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 287.742231][T15645] Invalid ELF header magic: != ELF [ 287.759304][T15645] xt_hashlimit: size too large, truncated to 1048576 [ 287.843338][T15645] tmpfs: Unknown parameter 'noswapF' [ 288.011711][T15652] netlink: 'syz.5.2805': attribute type 4 has an invalid length. [ 288.014759][ T40] audit: type=1400 audit(277.551:4844): avc: denied { mount } for pid=15653 comm="syz.6.2806" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 288.015973][T15654] program syz.6.2806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.034372][T15652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15652 comm=syz.5.2805 [ 288.041196][ T40] audit: type=1400 audit(277.570:4845): avc: denied { unmount } for pid=15299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 288.074974][ T60] wlan1: Trigger new scan to find an IBSS to join [ 288.121334][T15659] loop9: detected capacity change from 0 to 7 [ 288.143314][T15659] Dev loop9: unable to read RDB block 7 [ 288.146238][T15659] loop9: unable to read partition table [ 288.149083][T15659] loop9: partition table beyond EOD, truncated [ 288.152125][T15659] loop_reread_partitions: partition scan of loop9 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 288.198938][T15668] MTD: Couldn't look up '/dev/sr0': -13 [ 288.201547][T15668] /dev/sr0: Can't lookup blockdev [ 288.476895][T15686] netlink: 'syz.6.2817': attribute type 9 has an invalid length. [ 288.589730][ T5751] Bluetooth: hci0: command tx timeout [ 288.729746][ T5751] Bluetooth: hci0: unexpected event 0x3e length: 475 > 260 [ 288.729775][ T5751] Bluetooth: hci0: unexpected subevent 0x0d length: 474 > 260 [ 288.736378][ T5751] Bluetooth: hci0: adv larger than maximum supported [ 288.736427][ T5751] Bluetooth: hci0: adv larger than maximum supported [ 288.743498][ T5751] Bluetooth: hci0: adv larger than maximum supported [ 288.747582][ T5751] Bluetooth: hci0: adv larger than maximum supported [ 289.218458][ T1270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.575302][T15717] __nla_validate_parse: 14 callbacks suppressed [ 289.575321][T15717] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2825'. [ 289.799208][T15734] overlayfs: failed to resolve './file0': -2 [ 289.899194][T15739] xt_hashlimit: size too large, truncated to 1048576 [ 290.386454][T15753] fuse: Bad value for 'fd' [ 290.620966][T15758] /dev/sr0: Can't lookup blockdev [ 290.810924][ T5751] Bluetooth: hci0: command tx timeout [ 290.863936][T15765] netlink: 'syz.5.2840': attribute type 1 has an invalid length. [ 290.882208][T15765] bond9: entered promiscuous mode [ 290.884739][T15765] 8021q: adding VLAN 0 to HW filter on device bond9 [ 290.897392][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2840'. [ 290.901145][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2840'. [ 290.911251][T15765] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2840'. [ 290.924330][T15765] bond9: (slave bridge2): making interface the new active one [ 290.927575][T15765] bridge2: entered promiscuous mode [ 290.930872][T15765] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 291.133477][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 291.133489][ T40] audit: type=1400 audit(280.471:4847): avc: denied { listen } for pid=15770 comm="syz.6.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 291.308173][T15798] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.311622][T15798] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.673913][T15798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.682087][T15798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.165713][ T1270] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.173370][ T1270] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.176394][ T1270] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.182176][ T1270] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.207468][T15816] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30224 sclass=netlink_audit_socket pid=15816 comm=syz.5.2856 [ 292.247097][T15818] netlink: 'syz.5.2857': attribute type 4 has an invalid length. [ 292.330371][ T40] audit: type=1400 audit(281.584:4848): avc: denied { ioctl } for pid=15822 comm="syz.5.2858" path="socket:[60928]" dev="sockfs" ino=60928 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 292.374908][ T40] audit: type=1400 audit(281.631:4849): avc: denied { unmount } for pid=10868 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 292.445784][T15830] netlink: 'syz.5.2860': attribute type 1 has an invalid length. [ 292.449042][T15830] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2860'. [ 292.452623][T15830] netlink: 658 bytes leftover after parsing attributes in process `syz.5.2860'. [ 292.456531][ T5820] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 292.456624][T15830] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2860'. [ 292.498196][ T40] audit: type=1400 audit(281.734:4850): avc: denied { accept } for pid=15834 comm="syz.5.2861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 292.498933][T15835] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 292.632304][ T5820] usb 11-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 292.635918][ T5820] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.639496][ T5820] usb 11-1: Product: syz [ 292.641343][ T5820] usb 11-1: Manufacturer: syz [ 292.643341][ T5820] usb 11-1: SerialNumber: syz [ 292.815533][T15844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2865'. [ 292.825789][ T843] IPVS: starting estimator thread 0... [ 292.867230][ T5820] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 292.873613][ T5820] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 292.878280][ T5820] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 292.917284][ T5820] lan78xx 11-1:1.0: probe with driver lan78xx failed with error -71 [ 292.925567][ T5820] usb 11-1: USB disconnect, device number 2 [ 292.936982][T15845] IPVS: using max 29 ests per chain, 69600 per kthread [ 293.755726][T15900] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.897343][T15926] xfrm0 speed is unknown, defaulting to 1000 [ 293.901675][T15926] lo speed is unknown, defaulting to 1000 [ 294.011593][T15939] fuse: Bad value for 'fd' [ 294.109982][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.118537][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.120742][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2887'. [ 294.123318][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.135620][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.138343][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.377760][T15950] xfrm0 speed is unknown, defaulting to 1000 [ 294.381719][T15950] lo speed is unknown, defaulting to 1000 [ 294.536698][T15950] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.539118][T15950] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.541585][T15950] bridge_slave_0: entered allmulticast mode [ 294.544292][T15950] bridge_slave_0: entered promiscuous mode [ 294.547478][T15950] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.549829][T15950] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.552244][T15950] bridge_slave_1: entered allmulticast mode [ 294.555116][T15950] bridge_slave_1: entered promiscuous mode [ 294.582046][T15950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.589357][T15950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.644714][T15950] team0: Port device team_slave_0 added [ 294.652310][T15950] team0: Port device team_slave_1 added [ 294.710865][T15950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.716243][T15950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.746317][T15950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.759745][T15950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.768885][T15950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.779443][T15995] overlayfs: failed to resolve './file1': -2 [ 294.782550][T15950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.855944][T15950] hsr_slave_0: entered promiscuous mode [ 294.859225][T15950] hsr_slave_1: entered promiscuous mode [ 294.862410][T15950] debugfs: 'hsr0' already exists in 'hsr' [ 294.864817][T15950] Cannot create hsr debugfs directory [ 295.067605][T16004] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2896'. [ 295.132675][T15950] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 295.138819][T15950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 295.143724][T15950] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 295.148246][T15950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 295.151256][T15950] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 295.156385][T15950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 295.159239][T15950] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 295.163684][T15950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 295.177837][T15950] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.180168][T15950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.182645][T15950] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.185037][T15950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.251144][ T40] audit: type=1400 audit(284.317:4851): avc: denied { write } for pid=16013 comm="syz.6.2898" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 295.262727][T15950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.276358][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.280572][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.294993][T15950] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.305862][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.308982][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.313356][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.316483][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.619720][ T5843] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 295.665777][T15950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.780344][ T5843] usb 11-1: Using ep0 maxpacket: 8 [ 295.788996][T15950] veth0_vlan: entered promiscuous mode [ 295.790574][ T5843] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 295.796563][ T5843] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.799625][ T5843] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.804594][ T5843] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.809337][ T5843] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.809953][T15950] veth1_vlan: entered promiscuous mode [ 295.816181][ T5843] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.821682][ T5843] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.833941][T15950] veth0_macvtap: entered promiscuous mode [ 295.834407][T16031] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 295.839530][T16031] overlayfs: missing 'lowerdir' [ 295.840510][T15950] veth1_macvtap: entered promiscuous mode [ 295.855496][T15950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.863584][T15950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.876799][ T1165] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.880792][ T1165] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.884966][ T1165] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.890220][ T1165] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.024211][T12367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.027980][T12367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.057279][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.060636][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.236875][T16053] binder: 16052:16053 ioctl c0306201 200000000680 returned -14 [ 296.367302][ T5737] Bluetooth: hci3: command tx timeout [ 296.566777][T16065] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 296.609628][T16067] /dev/nullb0: Can't lookup blockdev [ 296.655122][T16070] usbtmc 11-1:16.0: simple control status returned fc [ 296.662867][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2900'. [ 296.668522][ T6179] usb 11-1: USB disconnect, device number 3 [ 296.668677][ T40] audit: type=1326 audit(285.646:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.5.2910" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21a799cdd9 code=0x0 [ 296.709467][ T5820] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 296.805791][T16072] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 296.869527][ T5820] usb 12-1: Using ep0 maxpacket: 8 [ 296.873621][ T5820] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.878558][ T5820] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.883743][ T5820] usb 12-1: config 0 interface 0 has no altsetting 0 [ 296.886749][ T5820] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 296.890856][ T5820] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.897327][ T5820] usb 12-1: config 0 descriptor?? [ 297.259314][ T40] audit: type=1400 audit(286.198:4853): avc: denied { listen } for pid=16079 comm="syz.3.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 297.336172][ T5820] hid_parser_main: 5 callbacks suppressed [ 297.336186][ T5820] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 297.341047][ T5820] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 297.343324][ T5820] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 297.345678][ T5820] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 297.347879][ T5820] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 297.351000][ T5820] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 297.584831][ T1345] usb 12-1: USB disconnect, device number 2 [ 297.895634][ T5820] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 297.919094][T16117] netlink: 'syz.3.2920': attribute type 1 has an invalid length. [ 297.921683][T16117] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2920'. [ 298.076902][ T5820] usb 11-1: Using ep0 maxpacket: 32 [ 298.080953][ T5820] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 298.086978][ T5820] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 298.090179][ T5820] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 298.092865][ T5820] usb 11-1: Product: syz [ 298.094260][ T5820] usb 11-1: Manufacturer: syz [ 298.096161][ T5820] usb 11-1: SerialNumber: syz [ 298.100181][ T5820] usb 11-1: config 0 descriptor?? [ 298.103114][T16100] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 298.107925][ T5820] hub 11-1:0.0: bad descriptor, ignoring hub [ 298.110609][ T5820] hub 11-1:0.0: probe with driver hub failed with error -5 [ 298.234135][T16128] syzkaller0: entered promiscuous mode [ 298.236776][T16128] syzkaller0: entered allmulticast mode [ 298.592462][ T5737] Bluetooth: hci3: command tx timeout [ 298.702805][ T5737] Bluetooth: hci2: unexpected event for opcode 0x202d [ 298.763592][T16100] usb 11-1: reset high-speed USB device number 4 using dummy_hcd [ 298.949616][T16100] usb 11-1: device firmware changed [ 298.953143][ T5820] usb 11-1: USB disconnect, device number 4 [ 298.955964][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2933'. [ 299.114151][ T5820] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 299.273862][ T5820] usb 11-1: Using ep0 maxpacket: 32 [ 299.283689][ T5820] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 299.296089][ T5820] usb 11-1: string descriptor 0 read error: -22 [ 299.298663][ T5820] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 299.302185][ T5820] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 299.307697][ T5820] usb 11-1: config 0 descriptor?? [ 299.311371][T16134] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 299.315122][ T5820] hub 11-1:0.0: bad descriptor, ignoring hub [ 299.317688][ T5820] hub 11-1:0.0: probe with driver hub failed with error -5 [ 299.497563][T16178] netlink: 'syz.3.2938': attribute type 39 has an invalid length. [ 299.648175][ T58] usb 11-1: USB disconnect, device number 5 [ 299.741771][T16185] netlink: 'syz.7.2942': attribute type 10 has an invalid length. [ 299.749079][T16185] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2942'. [ 299.798124][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.803330][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.809297][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.814967][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.817955][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.828678][ T40] audit: type=1400 audit(288.603:4854): avc: denied { getopt } for pid=16188 comm="syz.7.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 299.924958][T16195] team0: Port device vlan2 added [ 300.007137][ T40] audit: type=1400 audit(288.771:4855): avc: denied { setattr } for pid=16203 comm="syz.7.2945" name="RAWv6" dev="sockfs" ino=62688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 300.054514][T16186] xfrm0 speed is unknown, defaulting to 1000 [ 300.058191][T16186] lo speed is unknown, defaulting to 1000 [ 300.147550][ T40] audit: type=1400 audit(288.893:4856): avc: denied { ioctl } for pid=16209 comm="syz.6.2948" path="socket:[63630]" dev="sockfs" ino=63630 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 300.164989][T16210] team0: entered allmulticast mode [ 300.167196][T16210] team_slave_0: entered allmulticast mode [ 300.169639][T16210] team_slave_1: entered allmulticast mode [ 300.173719][T16210] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.179319][T16212] syz_tun: entered allmulticast mode [ 300.196559][T16212] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 300.202632][T16212] mroute: pending queue full, dropping entries [ 300.265328][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2950'. [ 300.272165][T16221] netlink: 'syz.7.2947': attribute type 2 has an invalid length. [ 300.288357][T16221] netlink: 'syz.7.2947': attribute type 1 has an invalid length. [ 300.293017][T16221] /dev/nullb0: Can't open blockdev [ 300.417538][ T40] audit: type=1400 audit(289.146:4857): avc: denied { setattr } for pid=16225 comm="syz.6.2952" name="NETLINK" dev="sockfs" ino=63645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 300.474099][T16233] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 300.479919][T16233] bond1 (unregistering): Released all slaves [ 300.480305][T16242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2956'. [ 300.508483][ T1195] bridge_slave_1: left allmulticast mode [ 300.510494][ T1195] bridge_slave_1: left promiscuous mode [ 300.513162][ T1195] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.522781][T16239] 0x00000000c682-0x00010000c681 : "" [ 300.524987][ T1195] bridge_slave_0: left allmulticast mode [ 300.527014][ T1195] bridge_slave_0: left promiscuous mode [ 300.527501][T16239] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1397e [ 300.529032][ T1195] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.553139][T16239] ftl_cs: FTL header corrupt! [ 300.578439][ T58] SELinux: failure in sel_netif_sid_slow(), invalid network interface (103) [ 300.703201][ T1195] erspan0 (unregistering): left promiscuous mode [ 300.812630][ T5751] Bluetooth: hci3: command tx timeout [ 300.890499][ T1195] bond9 (unregistering): (slave bridge2): Releasing backup interface [ 300.893220][ T1195] bridge2 (unregistering): left promiscuous mode [ 300.976909][ T1195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.027642][ T1195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.048700][ T1195] bond0 (unregistering): Released all slaves [ 301.054714][ T1195] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 301.090948][ T1195] bond1 (unregistering): Released all slaves [ 301.099299][ T1195] bond2 (unregistering): Released all slaves [ 301.113792][ T1195] bond3 (unregistering): Released all slaves [ 301.130028][ T1195] bond4 (unregistering): Released all slaves [ 301.138244][ T1195] bond5 (unregistering): Released all slaves [ 301.146319][ T1195] bond6 (unregistering): Released all slaves [ 301.157554][ T1195] bond7 (unregistering): Released all slaves [ 301.169942][ T1195] bond8 (unregistering): Released all slaves [ 301.197043][ T1195] bond9 (unregistering): Released all slaves [ 301.237313][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14 [ 301.247045][T16248] macvlan2: entered promiscuous mode [ 301.319776][T16186] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.324988][T16186] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.342359][T16186] bridge_slave_0: entered allmulticast mode [ 301.346388][T16186] bridge_slave_0: entered promiscuous mode [ 301.379962][ T1195] : left promiscuous mode [ 301.460515][T16186] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.474804][T16186] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.478896][T16186] bridge_slave_1: entered allmulticast mode [ 301.483247][T16186] bridge_slave_1: entered promiscuous mode [ 301.548728][T16186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.557310][T16186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.598309][T16186] team0: Port device team_slave_0 added [ 301.602421][T16186] team0: Port device team_slave_1 added [ 301.622170][T16186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.624766][T16186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.628478][ T40] audit: type=1326 audit(290.287:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.6.2965" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f681b99cdd9 code=0x0 [ 301.633282][T16186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.634363][T16186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.648291][T16186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.656287][T16186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.678999][T16186] hsr_slave_0: entered promiscuous mode [ 301.681353][T16186] hsr_slave_1: entered promiscuous mode [ 301.683490][T16186] debugfs: 'hsr0' already exists in 'hsr' [ 301.685330][T16186] Cannot create hsr debugfs directory [ 301.719528][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15 [ 301.733541][T16271] /dev/sr0: Can't open blockdev [ 301.905255][T16186] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 301.912213][T16186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 301.915617][T16186] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 301.921439][T16186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 301.970803][T16186] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 301.976366][T16186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 301.979454][T16186] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 301.982192][T16270] /dev/sr0: Can't open blockdev [ 301.986818][T16186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 301.990241][ T5445] 8021q: adding VLAN 0 to HW filter on device eth16 [ 302.006131][T16186] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.008414][T16186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.009548][ T5751] Bluetooth: hci2: command tx timeout [ 302.065581][ T40] audit: type=1804 audit(290.699:4859): pid=16307 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2966" name="/newroot/13/file0" dev="tmpfs" ino=86 res=1 errno=0 [ 302.066519][T16186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.088482][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.107956][T16186] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.118789][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.121937][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.251594][ T5445] 8021q: adding VLAN 0 to HW filter on device eth17 [ 302.255692][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.258562][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.397631][ T1195] hsr_slave_0: left promiscuous mode [ 302.400404][ T1195] hsr_slave_1: left promiscuous mode [ 302.508716][ T1195] team0 (unregistering): Port device team_slave_1 removed [ 302.552457][T16323] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2968'. [ 302.573574][T16324] sctp: [Deprecated]: syz.3.2967 (pid 16324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.573574][T16324] Use struct sctp_sack_info instead [ 302.776520][T16348] syzkaller0: entered promiscuous mode [ 302.897185][T16186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.046214][ T5751] Bluetooth: hci3: command tx timeout [ 303.082848][T16186] veth0_vlan: entered promiscuous mode [ 303.093956][T16186] veth1_vlan: entered promiscuous mode [ 303.127569][T16186] veth0_macvtap: entered promiscuous mode [ 303.136682][T16186] veth1_macvtap: entered promiscuous mode [ 303.149492][T16186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.158980][T16186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.167348][T14303] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.171371][T14303] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.176290][T14303] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.179107][T14303] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.238809][T14303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.243823][T14303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.283028][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.287042][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.485171][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2978'. [ 303.523681][T16386] fuse: Unknown parameter 'f?0x0000000000000004' [ 303.527770][T16386] netlink: 'syz.7.2979': attribute type 21 has an invalid length. [ 303.530214][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2979'. [ 303.538338][T16386] netlink: 'syz.7.2979': attribute type 21 has an invalid length. [ 303.538345][T14303] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.540862][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2979'. [ 303.543576][T14303] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.553430][T14303] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.556323][T14303] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.723151][ T40] audit: type=1400 audit(292.243:4860): avc: denied { getattr } for pid=16389 comm="syz.3.2980" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 303.729630][T16390] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 304.232382][ T5751] Bluetooth: hci2: command tx timeout [ 304.511530][T16401] /dev/nullb0: Can't open blockdev [ 304.572051][T16406] loop9: detected capacity change from 0 to 524287999 [ 304.586521][T16406] Buffer I/O error on dev loop9, logical block 0, async page read [ 304.592593][T16406] Buffer I/O error on dev loop9, logical block 0, async page read [ 304.599219][T16406] Buffer I/O error on dev loop9, logical block 0, async page read [ 304.602801][T16406] Buffer I/O error on dev loop9, logical block 0, async page read [ 304.608046][T16406] Buffer I/O error on dev loop9, logical block 0, async page read [ 304.611291][T16406] Buffer I/O error on dev loop9, logical block 0, async page read [ 304.614212][T16406] Buffer I/O error on dev loop9, logical block 0, async page read [ 304.617388][T16406] Buffer I/O error on dev loop9, logical block 0, async page read [ 304.620034][T16406] ldm_validate_partition_table(): Disk read failed. [ 304.622401][T16406] Buffer I/O error on dev loop9, logical block 0, async page read [ 304.625300][T16406] Buffer I/O error on dev loop9, logical block 0, async page read [ 304.629613][T16406] Dev loop9: unable to read RDB block 0 [ 304.632110][T16406] loop9: unable to read partition table [ 304.640126][T16406] loop_reread_partitions: partition scan of loop9 (3 x) failed (rc=-5) [ 304.701102][T16417] netlink: 408 bytes leftover after parsing attributes in process `syz.3.2987'. [ 304.701779][T16416] Invalid logical block size (-1) [ 304.820312][T16421] wireguard0: entered allmulticast mode [ 305.184147][T16443] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 305.214678][T16443] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 305.379920][T16447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.437206][T16450] bond4: Removing last ns target with arp_interval on [ 305.443465][T16450] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2998'. [ 306.028664][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3001'. [ 306.117964][T16469] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 306.185298][T16473] netlink: 'syz.3.3004': attribute type 2 has an invalid length. [ 306.194875][T16473] !: entered promiscuous mode [ 306.199939][T16473] netlink: 'syz.3.3004': attribute type 2 has an invalid length. [ 306.203379][T16473] !: left promiscuous mode [ 306.414636][T16481] bridge34: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 306.465544][ T5751] Bluetooth: hci2: command tx timeout [ 306.501792][T16485] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3006'. [ 306.599850][T16488] kvm: pic: non byte read [ 306.602421][T16488] kvm: pic: non byte read [ 306.605340][T16488] kvm: pic: non byte read [ 306.608058][T16488] kvm: pic: non byte read [ 306.653647][T16491] sock: sock_set_timeout: `syz.3.3010' (pid 16491) tries to set negative timeout [ 307.810400][ T40] audit: type=1400 audit(296.071:4861): avc: denied { shutdown } for pid=16520 comm="syz.6.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.922068][T16527] dlm: non-version read from control device 202 [ 307.950314][T16531] netlink: 'syz.6.3020': attribute type 7 has an invalid length. [ 307.960020][T16531] netlink: 'syz.6.3020': attribute type 7 has an invalid length. [ 307.960042][ T1165] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.966015][ T1165] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.968924][ T1165] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.971682][ T1165] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.108727][T16538] pim6reg: entered allmulticast mode [ 308.303735][ T5820] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 308.476661][ T5820] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 308.481290][ T5820] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.485422][ T5820] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.489932][ T5820] usb 12-1: config 0 interface 0 has no altsetting 0 [ 308.493765][ T5820] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.497601][ T5820] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.501551][ T5820] usb 12-1: config 0 interface 0 has no altsetting 0 [ 308.504716][ T5820] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.507961][ T5820] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.511398][ T5820] usb 12-1: config 0 interface 0 has no altsetting 0 [ 308.514184][ T5820] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.517044][ T5820] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.520741][ T5820] usb 12-1: config 0 interface 0 has no altsetting 0 [ 308.523627][ T5820] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.529236][ T5820] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.533511][ T5820] usb 12-1: config 0 interface 0 has no altsetting 0 [ 308.536421][ T5820] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.539953][ T5820] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.543537][ T5820] usb 12-1: config 0 interface 0 has no altsetting 0 [ 308.546442][ T5820] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.549470][ T5820] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.552941][ T5820] usb 12-1: config 0 interface 0 has no altsetting 0 [ 308.555839][ T5820] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.558672][ T5820] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.562283][ T5820] usb 12-1: config 0 interface 0 has no altsetting 0 [ 308.565919][ T5820] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 308.568789][ T5820] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 308.572087][ T5820] usb 12-1: Product: syz [ 308.573889][ T5820] usb 12-1: Manufacturer: syz [ 308.575850][ T5820] usb 12-1: SerialNumber: syz [ 308.582575][ T5820] usb 12-1: config 0 descriptor?? [ 308.587447][ T5820] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 308.677582][ T5751] Bluetooth: hci2: command tx timeout [ 308.922681][ C1] usb 12-1: yurex_control_callback - control failed: -71 [ 308.926221][ T5820] usb 12-1: USB disconnect, device number 3 [ 308.926533][T16558] yurex 12-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 308.946325][ T5820] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 309.323823][T16566] netlink: 'syz.8.3030': attribute type 11 has an invalid length. [ 309.327255][T16566] netlink: 199788 bytes leftover after parsing attributes in process `syz.8.3030'. [ 309.332808][T16566] netlink: 'syz.8.3030': attribute type 11 has an invalid length. [ 309.337840][T16566] netlink: 199788 bytes leftover after parsing attributes in process `syz.8.3030'. [ 309.343073][T16566] netlink: 'syz.8.3030': attribute type 11 has an invalid length. [ 309.346854][T16566] netlink: 199788 bytes leftover after parsing attributes in process `syz.8.3030'. [ 309.351435][T16566] netlink: 'syz.8.3030': attribute type 11 has an invalid length. [ 309.354785][T16566] netlink: 199788 bytes leftover after parsing attributes in process `syz.8.3030'. [ 309.359183][T16566] netlink: 'syz.8.3030': attribute type 11 has an invalid length. [ 309.362656][T16566] netlink: 199788 bytes leftover after parsing attributes in process `syz.8.3030'. [ 309.363613][T16568] netlink: 666 bytes leftover after parsing attributes in process `syz.6.3031'. [ 309.366934][T16566] netlink: 'syz.8.3030': attribute type 11 has an invalid length. [ 309.370834][T16568] netlink: 666 bytes leftover after parsing attributes in process `syz.6.3031'. [ 309.373568][T16566] netlink: 199788 bytes leftover after parsing attributes in process `syz.8.3030'. [ 309.381123][T16566] netlink: 'syz.8.3030': attribute type 11 has an invalid length. [ 309.385490][T16566] netlink: 'syz.8.3030': attribute type 11 has an invalid length. [ 309.389490][T16566] netlink: 'syz.8.3030': attribute type 11 has an invalid length. [ 309.393209][T16566] netlink: 'syz.8.3030': attribute type 11 has an invalid length. [ 309.547923][T16577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.591566][T16579] netem: change failed [ 310.251745][T16590] netlink: 'syz.8.3039': attribute type 7 has an invalid length. [ 310.254628][T16590] netlink: 'syz.8.3039': attribute type 8 has an invalid length. [ 310.344933][ T40] audit: type=1400 audit(298.438:4862): avc: denied { append } for pid=16594 comm="syz.8.3041" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 310.852961][T16574] /dev/nullb0: Can't open blockdev [ 311.028640][T16617] EXT4-fs (nbd7): unable to read superblock [ 311.101970][T16621] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 311.106469][T16621] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 311.342568][ T40] audit: type=1400 audit(299.374:4863): avc: denied { execute } for pid=16650 comm="syz.7.3055" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=66689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 311.396096][ T40] audit: type=1326 audit(299.430:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16659 comm="syz.7.3057" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f7459cdd9 code=0x0 [ 311.408039][ T40] audit: type=1326 audit(299.439:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16659 comm="syz.7.3057" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7f7459cdd9 code=0x7ffc0000 [ 311.417945][ T40] audit: type=1326 audit(299.439:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16659 comm="syz.7.3057" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7f7459cdd9 code=0x7ffc0000 [ 311.427729][ T40] audit: type=1326 audit(299.439:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16659 comm="syz.7.3057" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7f7459cdd9 code=0x7ffc0000 [ 311.443443][ T40] audit: type=1326 audit(299.439:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16659 comm="syz.7.3057" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7f7459cdd9 code=0x7ffc0000 [ 311.451595][ T40] audit: type=1326 audit(299.439:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16659 comm="syz.7.3057" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7f7459cdd9 code=0x7ffc0000 [ 311.458593][ T40] audit: type=1326 audit(299.439:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16659 comm="syz.7.3057" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7f7459cdd9 code=0x7ffc0000 [ 311.505144][T16634] cgroup: fork rejected by pids controller in /syz6 [ 311.791661][T16694] overlayfs: failed lookup in lower (newroot/20, name='file1', err=-40): overlapping layers [ 311.855695][T16700] xfrm0 speed is unknown, defaulting to 1000 [ 311.859676][T16700] lo speed is unknown, defaulting to 1000 [ 312.339981][T16727] __nla_validate_parse: 62 callbacks suppressed [ 312.339998][T16727] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3064'. [ 312.488475][T16730] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.493859][T16730] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.609748][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3067'. [ 312.622584][T16737] syzkaller0: entered promiscuous mode [ 312.625144][T16737] syzkaller0: entered allmulticast mode [ 312.635889][T16738] iommufd_mock iommufd_mock2: Adding to iommu group 11 [ 312.779705][T16740] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 313.164341][T16749] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 313.164340][T16750] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 313.590541][ T40] kauditd_printk_skb: 620 callbacks suppressed [ 313.590560][ T40] audit: type=1400 audit(301.479:5491): avc: denied { create } for pid=16751 comm="syz.8.3072" name="#51" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 313.602135][ T40] audit: type=1400 audit(301.489:5492): avc: denied { link } for pid=16751 comm="syz.8.3072" name="#51" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 313.611152][ T40] audit: type=1400 audit(301.489:5493): avc: denied { rename } for pid=16751 comm="syz.8.3072" name="#52" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 314.049937][T16770] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 314.054908][ T40] audit: type=1400 audit(301.919:5494): avc: denied { relabelto } for pid=16769 comm="syz.3.3074" name="138" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 314.068564][ T40] audit: type=1400 audit(301.919:5495): avc: denied { associate } for pid=16769 comm="syz.3.3074" name="138" dev="tmpfs" ino=735 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 314.074266][ T10] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 314.245038][ T10] usb 12-1: Using ep0 maxpacket: 32 [ 314.249177][ T10] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 314.254034][ T10] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 314.259457][ T10] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.264091][ T10] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 314.274252][ T40] audit: type=1400 audit(302.116:5496): avc: denied { remove_name } for pid=14069 comm="syz-executor" name="binderfs" dev="tmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 314.288510][ T10] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 314.292410][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.295787][ T10] usb 12-1: Product: syz [ 314.297611][ T10] usb 12-1: Manufacturer: syz [ 314.299944][ T40] audit: type=1400 audit(302.116:5497): avc: denied { rmdir } for pid=14069 comm="syz-executor" name="138" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 314.302875][T16772] xt_hashlimit: size too large, truncated to 1048576 [ 314.310760][ T10] usb 12-1: SerialNumber: syz [ 314.325832][ C0] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 314.345474][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input20 [ 314.363370][T16776] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3075'. [ 314.378025][ T40] audit: type=1400 audit(302.219:5498): avc: denied { module_load } for pid=16771 comm="syz.3.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 314.378143][T16776] Invalid ELF header type: 2 != 1 [ 314.619447][ T10] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 314.623433][ T10] (id 0x00) [ 314.624391][ T40] audit: type=1400 audit(302.443:5499): avc: denied { mount } for pid=16797 comm="syz.3.3080" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 314.643512][ T40] audit: type=1400 audit(302.471:5500): avc: denied { unmount } for pid=14069 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 314.686425][ T10] rc_core: IR keymap rc-imon-pad not found [ 314.689012][ T10] Registered IR keymap rc-empty [ 314.691057][ T10] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 314.697829][ T10] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 314.726449][T16803] "syz.6.3082" (16803) uses obsolete ecb(arc4) skcipher [ 314.764001][T16807] xfrm0 speed is unknown, defaulting to 1000 [ 314.769715][T16807] lo speed is unknown, defaulting to 1000 [ 314.778243][T16813] RDS: rds_bind could not find a transport for ::ffff:172.30.1.9, load rds_tcp or rds_rdma? [ 314.794015][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3083'. [ 314.822817][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 314.828309][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input21 [ 314.835770][ T10] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:4> initialized [ 314.862805][T16819] dlm: no local IP address has been set [ 314.866838][T16819] dlm: cannot start dlm midcomms -107 [ 314.869034][T16819] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3083'. [ 315.095680][ T5737] Bluetooth: hci2: command 0x0405 tx timeout [ 315.326073][T16831] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 315.478940][T16835] netlink: 'syz.6.3089': attribute type 1 has an invalid length. [ 315.482226][T16835] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3089'. [ 315.498278][T16835] hpfs: hpfs_map_sector(): read error [ 315.615200][T16837] overlayfs: failed to resolve './file0': -2 [ 315.658103][T16845] usb usb2: usbfs: interface 0 claimed by hub while 'syz.6.3092' sets config #0 [ 316.279563][T16908] /dev/nullb0: Can't open blockdev [ 316.311371][T16911] iommufd_mock iommufd_mock2: Adding to iommu group 11 [ 316.436244][T16916] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 316.456601][T16916] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 316.464430][T16929] bond0: Error: Cannot enslave bond to itself. [ 316.499663][ T10] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 316.499904][T16916] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.504712][T16916] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 316.517180][T16916] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 316.520856][T16916] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 316.522925][T16916] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 316.527462][T16916] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 316.540765][T16916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.543278][T16916] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 316.547246][T16916] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 316.552874][T16916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 316.555012][T16916] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 316.558481][T16916] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 316.671751][ T10] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 316.675288][ T10] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.678191][ T10] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.682498][ T10] usb 13-1: config 0 interface 0 has no altsetting 0 [ 316.685609][ T10] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.688427][ T10] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.691868][ T10] usb 13-1: config 0 interface 0 has no altsetting 0 [ 316.695450][ T10] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.698386][ T10] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.702034][ T10] usb 13-1: config 0 interface 0 has no altsetting 0 [ 316.705789][ T10] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.708642][ T10] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.712146][ T10] usb 13-1: config 0 interface 0 has no altsetting 0 [ 316.715423][ T10] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.718369][ T10] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.721866][ T10] usb 13-1: config 0 interface 0 has no altsetting 0 [ 316.724923][ T10] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.727854][ T10] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.731942][ T10] usb 13-1: config 0 interface 0 has no altsetting 0 [ 316.735381][ T10] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.738938][ T10] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.742483][ T10] usb 13-1: config 0 interface 0 has no altsetting 0 [ 316.746213][ T10] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.749232][ T10] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.752962][ T10] usb 13-1: config 0 interface 0 has no altsetting 0 [ 316.757091][ T10] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 316.760203][ T10] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 316.763053][ T10] usb 13-1: Product: syz [ 316.764618][ T10] usb 13-1: Manufacturer: syz [ 316.766328][ T10] usb 13-1: SerialNumber: syz [ 316.769993][ T10] usb 13-1: config 0 descriptor?? [ 316.776299][ T10] yurex 13-1:0.0: USB YUREX device now attached to Yurex #1 [ 316.989603][T16901] imon:display_open: display port is already open [ 316.995929][ T10] usb 13-1: USB disconnect, device number 2 [ 317.005328][ T10] yurex 13-1:0.0: USB YUREX #1 now disconnected [ 317.027335][T12762] usb 12-1: USB disconnect, device number 4 [ 317.442296][T16948] binder: 16947:16948 ioctl 4018620d 0 returned -22 [ 317.445606][T16948] binder: 16947:16948 ioctl 40086607 2000000000c0 returned -22 [ 317.449118][T16948] tmpfs: Unknown parameter '' [ 317.451835][T16949] binder: 16947:16949 ioctl 4018620d 0 returned -22 [ 317.550586][T16953] 9pnet_fd: p9_fd_create_tcp (16953): problem connecting socket to 127.0.0.1 [ 317.563485][T16958] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 317.565614][T16958] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 317.568261][T16958] vhci_hcd vhci_hcd.0: Device attached [ 317.573966][T16959] vhci_hcd: connection closed [ 317.574246][T12367] vhci_hcd vhci_hcd.8: stop threads [ 317.583953][T12367] vhci_hcd vhci_hcd.8: release socket [ 317.588627][T12367] vhci_hcd vhci_hcd.8: disconnect device [ 317.788985][T16974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.791338][T16974] IPv6: NLM_F_CREATE should be set when creating new route [ 317.793719][T16974] IPv6: NLM_F_CREATE should be set when creating new route [ 317.796153][T16974] IPv6: NLM_F_CREATE should be set when creating new route [ 317.800780][T16974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.808485][T16971] ip6gretap1: entered promiscuous mode [ 317.810837][T16971] ip6gretap1: entered allmulticast mode [ 317.955034][T16985] netlink: 'syz.6.3135': attribute type 1 has an invalid length. [ 317.967156][T16985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.979719][T16985] bond1: (slave ip6erspan0): making interface the new active one [ 317.983023][T16985] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 318.250620][T16997] iommufd_mock iommufd_mock2: Adding to iommu group 11 [ 318.390535][T17005] fuse: Bad value for 'user_id' [ 318.392994][T17005] fuse: Bad value for 'user_id' [ 318.393218][T17006] fuse: Bad value for 'user_id' [ 318.396904][T17006] fuse: Bad value for 'user_id' [ 318.512318][T17011] 9pnet_fd: p9_fd_create_unix (17011): problem connecting socket: ./file0: -111 [ 318.526757][T17013] sctp: [Deprecated]: syz.8.3143 (pid 17013) Use of int in max_burst socket option. [ 318.526757][T17013] Use struct sctp_assoc_value instead [ 318.536631][T17010] xt_l2tp: invalid flags combination: 8 [ 318.594221][ T5737] Bluetooth: hci4: command 0x2016 tx timeout [ 318.609849][T17015] kvm: kvm [17014]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x40000079) = 0x2 [ 318.679873][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 318.679849][ T5751] Bluetooth: hci0: command 0x0c1a tx timeout [ 318.683439][ T5737] Bluetooth: hci3: command 0x0c1a tx timeout [ 318.765187][ T5737] Bluetooth: hci2: command 0x0405 tx timeout [ 318.779478][T17024] binder: 17022:17024 ioctl c018620c 200000000240 returned -1 [ 318.879818][T17034] : renamed from vlan0 [ 318.886221][T17037] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3146'. [ 319.427647][T15452] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 319.813607][T15452] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 319.817781][T15452] usb 13-1: can't read configurations, error -71 [ 320.419466][T17051] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3156'. [ 320.664966][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 320.664984][ T40] audit: type=1400 audit(308.096:5505): avc: denied { accept } for pid=17059 comm="syz.7.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 320.816943][ T5737] Bluetooth: hci4: command 0x2016 tx timeout [ 320.902448][ T5737] Bluetooth: hci0: command 0x0c1a tx timeout [ 320.902632][ T5751] Bluetooth: hci3: command 0x0c1a tx timeout [ 320.902805][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 320.987872][ T5751] Bluetooth: hci2: command 0x0405 tx timeout [ 321.066526][T17073] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3161'. [ 321.387424][T17076] netlink: 'syz.8.3162': attribute type 8 has an invalid length. [ 321.390177][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3162'. [ 322.055615][ T40] audit: type=1400 audit(309.396:5506): avc: denied { mounton } for pid=17110 comm="syz.6.3171" path="/114/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 322.258384][T17119] comedi comedi2: aio_aio12_8: I/O base address or length out of range [ 322.263282][ T5751] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 322.481320][T17131] /dev/nullb0: Can't open blockdev [ 322.619540][ T40] audit: type=1400 audit(309.930:5507): avc: denied { setattr } for pid=17144 comm="syz.7.3181" name="TIPC" dev="sockfs" ino=68081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 322.753535][T17161] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 322.823772][T17178] netlink: 'syz.6.3189': attribute type 10 has an invalid length. [ 322.828193][T17178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.831519][T17178] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 322.855546][T17180] ================================================================== [ 322.858983][T17180] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 322.862113][T17180] Write of size 4 at addr ffff88802e8f2b08 by task syz.7.3190/17180 [ 322.866778][T17180] [ 322.867834][T17180] CPU: 1 UID: 0 PID: 17180 Comm: syz.7.3190 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.867865][T17180] Tainted: [L]=SOFTLOCKUP [ 322.867872][T17180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.867884][T17180] Call Trace: [ 322.867891][T17180] [ 322.867899][T17180] dump_stack_lvl+0x100/0x190 [ 322.867926][T17180] print_report+0x13d/0x4b0 [ 322.867990][T17180] ? __virt_addr_valid+0x239/0x430 [ 322.868014][T17180] ? try_module_get+0x4c/0xd0 [ 322.868033][T17180] kasan_report+0xdf/0x1d0 [ 322.868056][T17180] ? try_module_get+0x4c/0xd0 [ 322.868078][T17180] kasan_check_range+0x10f/0x1e0 [ 322.868103][T17180] try_module_get+0x4c/0xd0 [ 322.868144][T17180] dvb_device_open+0x124/0x3b0 [ 322.868183][T17180] ? __pfx_dvb_device_open+0x10/0x10 [ 322.868216][T17180] chrdev_open+0x234/0x6a0 [ 322.868240][T17180] ? __pfx_chrdev_open+0x10/0x10 [ 322.868263][T17180] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 322.868292][T17180] do_dentry_open+0x6d8/0x1660 [ 322.868314][T17180] ? __pfx_chrdev_open+0x10/0x10 [ 322.868340][T17180] vfs_open+0x82/0x3f0 [ 322.868368][T17180] path_openat+0x208c/0x31a0 [ 322.868392][T17180] ? __pfx_path_openat+0x10/0x10 [ 322.868414][T17180] do_file_open+0x20e/0x430 [ 322.868436][T17180] ? __pfx_do_file_open+0x10/0x10 [ 322.868460][T17180] ? alloc_fd+0x476/0x790 [ 322.868483][T17180] ? do_getname+0x191/0x390 [ 322.868510][T17180] do_sys_openat2+0x10d/0x1e0 [ 322.868536][T17180] ? __pfx_do_sys_openat2+0x10/0x10 [ 322.868566][T17180] __x64_sys_openat+0x12d/0x210 [ 322.868592][T17180] ? __pfx___x64_sys_openat+0x10/0x10 [ 322.868615][T17180] ? rcu_is_watching+0x12/0xc0 [ 322.868648][T17180] do_syscall_64+0x10b/0xf80 [ 322.868679][T17180] ? clear_bhb_loop+0x40/0x90 [ 322.868701][T17180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.868721][T17180] RIP: 0033:0x7f7f7455d60e [ 322.868738][T17180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 322.868755][T17180] RSP: 002b:00007f7f754a7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 322.868773][T17180] RAX: ffffffffffffffda RBX: 00007f7f754a86c0 RCX: 00007f7f7455d60e [ 322.868783][T17180] RDX: 0000000000000002 RSI: 00007f7f754a7c00 RDI: ffffffffffffff9c [ 322.868793][T17180] RBP: 00007f7f754a7c00 R08: 0000000000000000 R09: 0000000000000000 [ 322.868803][T17180] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 322.868814][T17180] R13: 00007f7f74816038 R14: 00007f7f74815fa0 R15: 00007ffe0daede58 [ 322.868834][T17180] [ 322.868840][T17180] [ 322.970137][T17180] Allocated by task 1: [ 322.971746][T17180] kasan_save_stack+0x30/0x50 [ 322.973339][T17180] kasan_save_track+0x14/0x30 [ 322.974942][T17180] __kasan_kmalloc+0xaa/0xb0 [ 322.976476][T17180] bus_add_driver+0x92/0x5b0 [ 322.978040][T17180] driver_register+0x1e2/0x360 [ 322.979568][T17180] vidtv_bridge_init+0x38/0x70 [ 322.981132][T17180] do_one_initcall+0x121/0x750 [ 322.983110][T17180] kernel_init_freeable+0x6ea/0x7b0 [ 322.985363][T17180] kernel_init+0x1f/0x1e0 [ 322.987159][T17180] ret_from_fork+0x72b/0xd50 [ 322.989055][T17180] ret_from_fork_asm+0x1a/0x30 [ 322.991018][T17180] [ 322.992024][T17180] The buggy address belongs to the object at ffff88802e8f2a00 [ 322.992024][T17180] which belongs to the cache kmalloc-256 of size 256 [ 322.997642][T17180] The buggy address is located 56 bytes to the right of [ 322.997642][T17180] allocated 208-byte region [ffff88802e8f2a00, ffff88802e8f2ad0) [ 323.003485][T17180] [ 323.004515][T17180] The buggy address belongs to the physical page: [ 323.007242][T17180] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e8f2 [ 323.010839][T17180] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 323.014244][T17180] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 323.017423][T17180] page_type: f5(slab) [ 323.019098][T17180] raw: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 323.022606][T17180] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 323.026127][T17180] head: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 323.029418][T17180] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 323.032198][T17180] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 323.034917][T17180] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 323.038017][T17180] page dumped because: kasan: bad access detected [ 323.040372][T17180] page_owner tracks the page as allocated [ 323.042481][T17180] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19528712157, free_ts 0 [ 323.049855][T17180] post_alloc_hook+0x153/0x170 [ 323.051388][T17180] get_page_from_freelist+0x11a6/0x33b0 [ 323.053601][T17180] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 323.056052][T17180] new_slab+0xa6/0x6c0 [ 323.057847][T17180] refill_objects+0x277/0x420 [ 323.059818][T17180] __pcs_replace_empty_main+0x375/0x650 [ 323.062196][T17180] __kmalloc_cache_noprof+0x493/0x6f0 [ 323.064427][T17180] bus_add_driver+0x92/0x5b0 [ 323.066347][T17180] driver_register+0x1e2/0x360 [ 323.068022][T17180] usb_register_driver+0x21c/0x3e0 [ 323.070067][T17180] pvr_init+0xa1/0x130 [ 323.071488][T17180] do_one_initcall+0x121/0x750 [ 323.073042][T17180] kernel_init_freeable+0x6ea/0x7b0 [ 323.074809][T17180] kernel_init+0x1f/0x1e0 [ 323.076246][T17180] ret_from_fork+0x72b/0xd50 [ 323.077757][T17180] ret_from_fork_asm+0x1a/0x30 [ 323.079290][T17180] page_owner free stack trace missing [ 323.081001][T17180] [ 323.081805][T17180] Memory state around the buggy address: [ 323.084062][T17180] ffff88802e8f2a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.087420][T17180] ffff88802e8f2a80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 323.090807][T17180] >ffff88802e8f2b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.094165][T17180] ^ [ 323.096040][T17180] ffff88802e8f2b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.099359][T17180] ffff88802e8f2c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.102729][T17180] ================================================================== [ 323.107424][T17180] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 323.110131][T17180] CPU: 0 UID: 0 PID: 17180 Comm: syz.7.3190 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.114130][T17180] Tainted: [L]=SOFTLOCKUP [ 323.115933][T17180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.119766][T17180] Call Trace: [ 323.121023][T17180] [ 323.122189][T17180] dump_stack_lvl+0x100/0x190 [ 323.123928][T17180] vpanic+0x552/0x970 [ 323.125495][T17180] ? __pfx_vpanic+0x10/0x10 [ 323.127173][T17180] ? try_module_get+0x4c/0xd0 [ 323.128917][T17180] panic+0xd1/0xe0 [ 323.130314][T17180] ? __pfx_panic+0x10/0x10 [ 323.131944][T17180] ? try_module_get+0x4c/0xd0 [ 323.133667][T17180] ? preempt_schedule_common+0x42/0xc0 [ 323.135615][T17180] check_panic_on_warn.cold+0x19/0x34 [ 323.137557][T17180] end_report.part.0+0x3a/0x90 [ 323.139317][T17180] kasan_report.cold+0xe/0x18 [ 323.141075][T17180] ? try_module_get+0x4c/0xd0 [ 323.142812][T17180] kasan_check_range+0x10f/0x1e0 [ 323.144672][T17180] try_module_get+0x4c/0xd0 [ 323.146367][T17180] dvb_device_open+0x124/0x3b0 [ 323.148145][T17180] ? __pfx_dvb_device_open+0x10/0x10 [ 323.150077][T17180] chrdev_open+0x234/0x6a0 [ 323.151717][T17180] ? __pfx_chrdev_open+0x10/0x10 [ 323.153514][T17180] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 323.155747][T17180] do_dentry_open+0x6d8/0x1660 [ 323.157435][T17180] ? __pfx_chrdev_open+0x10/0x10 [ 323.159177][T17180] vfs_open+0x82/0x3f0 [ 323.160630][T17180] path_openat+0x208c/0x31a0 [ 323.162289][T17180] ? __pfx_path_openat+0x10/0x10 [ 323.164067][T17180] do_file_open+0x20e/0x430 [ 323.165740][T17180] ? __pfx_do_file_open+0x10/0x10 [ 323.167496][T17180] ? alloc_fd+0x476/0x790 [ 323.169095][T17180] ? do_getname+0x191/0x390 [ 323.170749][T17180] do_sys_openat2+0x10d/0x1e0 [ 323.172476][T17180] ? __pfx_do_sys_openat2+0x10/0x10 [ 323.174371][T17180] __x64_sys_openat+0x12d/0x210 [ 323.176135][T17180] ? __pfx___x64_sys_openat+0x10/0x10 [ 323.178095][T17180] ? rcu_is_watching+0x12/0xc0 [ 323.179850][T17180] do_syscall_64+0x10b/0xf80 [ 323.181524][T17180] ? clear_bhb_loop+0x40/0x90 [ 323.183217][T17180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.185360][T17180] RIP: 0033:0x7f7f7455d60e [ 323.186996][T17180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 323.193845][T17180] RSP: 002b:00007f7f754a7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 323.196759][T17180] RAX: ffffffffffffffda RBX: 00007f7f754a86c0 RCX: 00007f7f7455d60e [ 323.199549][T17180] RDX: 0000000000000002 RSI: 00007f7f754a7c00 RDI: ffffffffffffff9c [ 323.202318][T17180] RBP: 00007f7f754a7c00 R08: 0000000000000000 R09: 0000000000000000 [ 323.205110][T17180] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 323.207864][T17180] R13: 00007f7f74816038 R14: 00007f7f74815fa0 R15: 00007ffe0daede58 [ 323.210732][T17180] [ 323.213384][T17180] Kernel Offset: disabled [ 323.214992][T17180] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:26:00 Registers: info registers vcpu 0 CPU#0 RAX=00000000002df1e9 RBX=ffffffff8e4955c0 RCX=ffffffff8b89b045 RDX=0000000000000000 RSI=ffffffff8df1e844 RDI=ffffffff8c1c3480 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed100d4867b5 R10=ffff88806a433dab R11=0000000000000000 R12=0000000000000000 R13=fffffbfff1c92ab8 R14=0000000000000000 R15=ffffffff90d78850 RIP=ffffffff8b89987f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6379000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000100 CR3=00000000532c0000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f681c74d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2107e0b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2107e0b6 00007ffd2107e0bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f681ba3334c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f681ba3338c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f681ba334f0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f681ba3337e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9412000080020000 000f000a000e0000 00240206145e0000 004348f8a11b9fcc ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f681bbed5f8 00007f681bbed5c8 00007f681bbed600 00007f681bbed5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857e36d5 RDI=ffffffff9b46d040 RBP=ffffffff9b46d000 RSP=ffffc900060a72b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666657 R12=0000000000000000 R13=0000000000000030 R14=0000000000000010 R15=ffffffff857e3670 RIP=ffffffff857e36ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f7f754a86c0 ffffffff 00c00000 GS =0000 ffff8880d6479000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7f74586400 CR3=000000003c937000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0daee346 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0daee346 00007ffe0daee34c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f7463334c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f7463338c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f746334f0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f7463337e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f747ed5f8 00007f7f747ed5c8 00007f7f747ed600 00007f7f747ed5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000041 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=0000000000000001 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8e7e54e0 RBP=ffffffff8e7e54e0 RSP=ffffc90000648680 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000200 R11=0000000000000000 R12=7b76783364553c00 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e44be1 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6579000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7f75488880 CR3=000000003b8a5000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=000000000000001f Opmask02=00000000ffff7fdf Opmask03=0000000002000020 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005574197ef920 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71ccff1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71ccff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326076a0d7483 737326023d686f59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 02fa1f2c4d3960b3 737373762432e498 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 71896c5f3e4a13c0 00000005574197ed 0000000000000021 0000000000000038 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c4339 312c3739312c3938 312c3838312c3538 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88806a733da8 RCX=ffffffff91852e01 RDX=0000000000000000 RSI=ffffffff8c1c3400 RDI=ffffffff8e1d2938 RBP=0000000000000003 RSP=ffffc90006546cc8 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000017619 R12=ffffc90006546da0 R13=ffffc90006546d50 R14=ffffc900065470e0 R15=ffffc90006546d84 RIP=ffffffff81ecd870 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6679000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f681c7d3ff8 CR3=00000000364ab000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000003000001 Opmask01=0000000000000001 Opmask02=0000000000c00000 Opmask03=0000000000000000 Opmask04=00000000ffffdfff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd80d5ccab 00007ffd80d5ccab ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd80d5d1b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd80d5d1b0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 685f696368760000 313d657669737369 6d7265702074656b 636f735f67616900 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6255636362760000 3137657663737363 6772657020746561 6365735567616300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 206e612073612067 6e6976616c736e45 203a29316d697376 656474656e206576 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d7265702074656b 636f735f63706974 3d7373616c637420 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 745f6d6461737973 3a725f6d64617379 733a746f6f723d74 7865746e6f637420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 745f6d6461737973 3a725f6d64617379 733a746f6f723d74 7865746e6f637320 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31383038363d6f6e 69202273666b636f 73223d7665642022 43504954223d656d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 723d747865746e6f 637320313d6f6e69 20226373696d5f74 6d666e6962223d76 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000