last executing test programs: 4m40.001533971s ago: executing program 32 (id=174): ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$unix(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000680)="604f3ba2fdb12384", 0x8}], 0x1, 0x0, 0x0, 0x4000}, 0x1) recvmmsg$unix(r4, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/134, 0x86}], 0x1}}], 0x1, 0xa120, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r6, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000440)=@ethtool_cmd={0x9, 0x2, 0x8f, 0x9, 0x7f, 0x2, 0x81, 0x7, 0x5, 0x62, 0xa, 0x2002, 0x0, 0x1, 0x6, 0x1002, [0x3d6b, 0x443f]}}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x40000000}]}]}}, 0x0, 0x4a}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000a000000140002"], 0x34}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmmsg$unix(r4, &(0x7f0000002300)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000500)="b238d7ff67c210520065f56ee8deaeefda5fad8bb6c9cc9edaf03069a76c3d5f7b907b62e047edb96dcd3c2895618faad427c94447a70941ba34e16bcf780e4582d899552bce48b2d544f8177b24daada6e5ffcf736a0ded79d12867b566a5012663250aa6ee79bbb130b19b256776d2ff07cbff196dd34320fc9e2036b04d0ad9c4830cc4afdbd4166485282aa2720ca20d91ba78b1b4b4c7fd584782f9bda3e4c6d2d470851fd57610905f371232a8a46d68500ce8bd63270fa8bdcb850407754e4f", 0xc3}, {&(0x7f0000000380)="10d5560fef3580d64a7a62bd64ee647b", 0x10}, {&(0x7f00000006c0)="ce3e5bd38490aa44f430d86769174f40f4b975399f323670fcb94b4b662d0dc221a7ca8ca67d268967c375ad218687e8a58ad5a10e99c7aedd3c69babf17a96099473ad180b42f60d4c258b6802c914594e67ea4561dc47fd57bf14101ff883df895d1ca7d4dc37bab76f9462a15bcf50404e11ce88764a8b76ccd644bcfdb14bb1ae1d659735811b0ac82aeee599f961563a462874546e6", 0x98}, {&(0x7f0000000400)="5ab26c", 0x3}, {&(0x7f0000000780)="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", 0xfb}, {&(0x7f0000000600)="8fc67f0b11a0e7c1d661594c4a486bd93d082499606135ffdb5cd22b4726749238964ac8ca0aea517a60b52bbda2c76a23025a6e", 0x34}, {&(0x7f0000000880)="aa5ebfcd1301680fd042804f6bb2acf03cb91152526a041fd30f1dcc717731b31fe42bf1f1e39644f1c1e5b0b1ae9fa8eb1488cd0bcde0868938379c23e45d0b4200eec89e1dcf3fb0fddbfe88080ed34f5a48f84ba7202734fd8a0eaa7aa8b0f22cd2e551f762aa9a88525580204e1efdf5ba10f8d6fb64f88a69e4f1fc6914638b8aacf3dcca96760f56", 0x8b}, {&(0x7f0000000940)="2dc78113c9b9061837a8d5b1b8be91a61d129deed92182743b37d9e7190cbeea78d32525a72bb4cc2b36a72c6631430c5cc45a16d9e97294a71efe698845fb8474b4a9227a", 0x45}, {&(0x7f00000009c0)="780dd2c8764423612e64669651529a4d49d0a9d2d2daef17ae24b0aa525518565de369963c7866b0516f9309e72e1a768d7edc253de431c74f8c9c5b0a427b025b07a5e5a525b2f2f7f3d6322515ad04d673ebcf131c9dfda3e545adc8cb0e24bb9af9d0b936ac557e42704b1477271f61bf8fcc2beff601e8d6cb40a08422c1743f9698b22706781d64c09705c483aec9ff9265499aca8b998510e40448a852c826f02a0350a71e339e22bd3cd916aa49ce156c83abcff09b5b7070b0f6c77ec4ca182d166444e8b0c03ca4edecba58d624a2842521339af4db7c3232e7c6c8e8b3e1", 0xe3}, {&(0x7f0000000ac0)="56d573203e578a6d16436ea7b0569d8c50dd0d2aea19a43a2b2f72e836954f49e217c0924e8bc129374c78350d1b207c2fff8e20843ccd6060c4640f43eb0316d69cb36b0867b1fcfac715e4c0c5383a3c625c8a0b13c1bbbd8e145dbfe74f41a4b6119d445c986d8ef78e8f976c64b03652d9b9c9388c7260f570afb0f3f3ac7cff33a2c1a17ff41335984dd2901a8101b740cfbcd0013f34c9e7cbe2922799cc298d93348b0db4868ad0448117e71dd9b368591e", 0xb5}], 0xa, 0x0, 0x0, 0x4004000}}, {{&(0x7f0000000d00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000d80)="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", 0x1000}], 0x1, &(0x7f0000001e40)=[@rights={{0x1c, 0x1, 0x1, [r6, r0, r5]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x4040000}}, {{&(0x7f0000001ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001f40)="7c36c18384ac4b5e2dfbf39aa25719212c33f7c042fd7743515f0853813fd1cb178dff0b5f4da53cf7bf72960c59855c78e8ca1e96c1b35865394ddf811d719e51ceacf6962527dde38cfb08ea1a94f616465be79781baa8ca1365600653e4805c094fd75df39c47ca86f4a3f4aec558c10561dffd781c0d9617d76ed81fe48f6b1443a8befb3d70c1c5cde76521bfbf772e1921c3fc119ef0dfb197caf5712cfcd3e687e41f2ddb533ffc900f7c231272e4f0b9", 0xb4}, {&(0x7f0000002000)="f21b7fedae81aca1c80bd42de8578a7f71b542f3caede5f2f4eee7b21c5400edad12f0f1003c7aca7d61be0e9a701ea9b4bd249220a43a5fa909b70f90e91e22325ba9d2b5c92cc38b01ac52e8305efe74c6c2b6ffa787db93d81c14235d5f71728e6aefd93364dc4728482a410f41b86cf05a704ae2ba797cf9cadff8ae84f813dceb678290b11809e9e7465e19c28168beaed0d5a5b75fc96f4aa74ec859776ad45aaae5764ae42d1e0d6a21c0f759e71a1cebf8bb29ec35ad0189fb011606c0", 0xc1}], 0x2, 0x0, 0x0, 0x4000010}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002140)="6c19e7831c31221ccae89085258f4762b2101d059dcd3116a3a10e17c595d67e6161674a4676164b04f7cfedca206741c25e2fcebc8a11daa265be15a3e49a72efdbe538cba51a0c35f8946989f94674e54c2fae7a329a96144b7053b97b2d5acf1f258670cdf96e8d734b5230a2897690d4d0fa4cfe5005b691b16fe0f059f6ab03aa1a943988f507e15e7b02fd6b6200efd35c6c8de70f465e6ec1364f887aea9a75acbdff60c8153fb3a1763f074163872d135333cb1ddaacfa25adc8f4ebece99504f80194acebb8420dd7d03b02742b38b26ca96bdbff31cd2bfa13b7a565c8f54c3d", 0xe5}], 0x1, &(0x7f0000002280)=[@rights={{0x28, 0x1, 0x1, [r3, r5, r0, r2, r8, r9]}}, @rights={{0x1c, 0x1, 0x1, [r1, r10, r5]}}], 0x48, 0x20}}], 0x4, 0x8004) close(r0) 4m1.602025818s ago: executing program 3 (id=860): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c40001"], 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000300)={'trans=virtio,', {[{@access_client}, {@version_u}]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x761, 0xe, 0xb, 0x4}, {0x1000, 0x7, 0x40, 0x5}, {0x3, 0x2, 0x24, 0x3d}]}) 3m45.748624243s ago: executing program 4 (id=1109): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006207000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r5 = dup(r4) unshare(0x2c020400) r6 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x8ba, 0x696d, 0x20, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) r9 = socket(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x190da) 3m45.508756596s ago: executing program 33 (id=860): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c40001"], 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000300)={'trans=virtio,', {[{@access_client}, {@version_u}]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x761, 0xe, 0xb, 0x4}, {0x1000, 0x7, 0x40, 0x5}, {0x3, 0x2, 0x24, 0x3d}]}) 3m29.737201087s ago: executing program 34 (id=1109): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006207000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r5 = dup(r4) unshare(0x2c020400) r6 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x8ba, 0x696d, 0x20, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) r9 = socket(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x190da) 3m24.144194404s ago: executing program 35 (id=1396): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r5, 0x8) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000180)={0xfff, 0x2, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'batadv_slave_0\x00'}) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) socket$l2tp(0x2, 0x2, 0x73) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'wlan0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) (async) listen(r5, 0x8) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000180)={0xfff, 0x2, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) (async) 3m11.898290827s ago: executing program 36 (id=1546): syz_usb_connect(0x6, 0x1ec, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1da, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xb, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x1015, &(0x7f0000000980)={@broadcast, @local, @val={@void, {0x8100, 0x4, 0x0, 0x2}}, {@x25={0x805, {0x2, 0xff, 0xff, "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"}}}}, &(0x7f00000001c0)={0x0, 0x2, [0xe53, 0x7c7, 0x871, 0xc88]}) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "5d4b42fac245ae74", "21cb70af1a8d3978b3ad1a2c6ede97acca25f6a9000bab0d716e9ebdee04ab7e", "b65dab43", "9a2c4361134d8abe"}, 0x38) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1}, 0x20) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x66015, 0x1a6c0}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) 3m9.629458508s ago: executing program 37 (id=1577): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x80204705, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001180)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x28000}, 0x40) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r5, 0x0) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x26) 2m58.533658724s ago: executing program 38 (id=1709): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)={0x34, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500"}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r6, 0x1, 0x1070bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x40}}, 0x20000034) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x1, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)={0x34, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500"}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r6, 0x1, 0x1070bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x40}}, 0x20000034) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x1, 0x1) (async) 2m44.797776835s ago: executing program 2 (id=1882): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x801}, 0x14}}, 0x8081) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$unix(r2, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="e4f786d28c996630e80f0036f7e3bca3ad5984c7cf0a36db10a8e57a387f1545017986265c812121", 0x28}], 0x1, 0x0, 0x0, 0x20000080}}], 0x1, 0x40001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 2m44.640897441s ago: executing program 2 (id=1886): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001d"]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000001c0)=r1) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000640)=[{0x6, 0x2, 0x0, 0x7fff0000}, {0x6, 0xfa, 0x4, 0xa}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) timer_settime(r3, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000000140)=0xe8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000002c0)={[{@favordynmods}], [{@fowner_gt={'fowner>', r5}}, {@fowner_gt={'fowner>', r5}}]}) 2m43.678268752s ago: executing program 2 (id=1895): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x801}, 0x14}}, 0x8081) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg$qrtr(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/167, 0xa7}], 0x1, 0x0, 0x0, 0x50}, 0x1c, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 2m42.67828518s ago: executing program 2 (id=1905): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x22d2, 0x20, 0x0, 0x0, 0x0) 2m42.677674626s ago: executing program 2 (id=1906): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bc, 0x800000000000009, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x7ff, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x8, 0x46, 0x6, 0x10000000000003, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x6, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10000010001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4, 0x4000002, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x2, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x3, 0x5, 0x1e, 0x0, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xa692, 0xcc, 0x1, 0x1000003]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000940)=""/41, 0x29) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open(&(0x7f0000000000)='.\x00', 0x820100, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc020) 2m42.534292268s ago: executing program 2 (id=1907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x5, 0x6, 0x7fffffff}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f9}, {0x6, 0x11, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m26.829767045s ago: executing program 9 (id=1999): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f00000010c0)=[{&(0x7f0000000380)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) r2 = io_uring_setup(0x67bb, &(0x7f0000000280)) io_uring_enter(r2, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000300), 0x4) read$FUSE(r1, &(0x7f0000001100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r7, 0xffffffffffffffff, r8) write$binfmt_elf64(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000040000000000000000000bfef9004af9a20eaf3"], 0x78) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r9, @ANYBLOB="050003"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', r9, 0x2f, 0x4, 0xc6, 0x33a, 0x23, @mcast2, @private2, 0x80, 0x8, 0x10000, 0x7}}) 2m26.765399228s ago: executing program 9 (id=2000): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x801}, 0x14}}, 0x8081) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$unix(r1, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="e4f786d28c996630e80f0036f7e3bca3ad5984c7cf0a36db10a8e57a387f1545017986265c812121", 0x28}], 0x1, 0x0, 0x0, 0x20000080}}], 0x1, 0x40001) recvmsg$qrtr(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/167, 0xa7}], 0x1, 0x0, 0x0, 0x50}, 0x1c, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 2m26.61596468s ago: executing program 9 (id=2001): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m26.615759904s ago: executing program 9 (id=2002): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) chdir(&(0x7f0000000280)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0x4, 0x4, 0x2, 0x3000, 0x1, 0xfffffffe}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1e3) r7 = syz_clone(0x20022180, 0x0, 0xfe02, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x18, &(0x7f0000000040)=0x5858, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r9 = syz_open_procfs(r7, &(0x7f00000001c0)='statm\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x99, 0x10, 0x6, 0x24, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x8700, 0x81, 0x3}}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xfff, 0x0, r9, 0x7, '\x00', r10, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) cachestat(r11, &(0x7f0000000100)={0x9, 0x2}, &(0x7f0000000240), 0x0) sendfile(r6, r12, 0x0, 0x20fffe82) pread64(r6, &(0x7f0000000000)=""/34, 0x22, 0x10) 2m26.421828527s ago: executing program 39 (id=1907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x5, 0x6, 0x7fffffff}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f9}, {0x6, 0x11, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m25.641799394s ago: executing program 9 (id=2006): syz_usb_connect(0x6, 0x1ec, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1da, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xb, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2m24.934119276s ago: executing program 9 (id=2014): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000024c0)={0xa, 0x7, 0x200000, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8, 0x3}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000001300)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r2}}}], 0x28}}], 0x1, 0x4000) 2m24.843814722s ago: executing program 40 (id=2014): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000024c0)={0xa, 0x7, 0x200000, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8, 0x3}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000001300)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r2}}}], 0x28}}], 0x1, 0x4000) 2m20.457656016s ago: executing program 3 (id=2004): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x7, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m19.985808666s ago: executing program 4 (id=2015): rt_sigprocmask(0x1, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0xfffffffffffffcda) (async) r0 = gettid() (async) r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000000)={0x28, 0x1, 0x5}) (async) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r4 = socket$kcm(0x2, 0x3, 0x2) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYRES64=r1, @ANYRES16=0x0, @ANYRES8=r4, @ANYRESDEC=r1, @ANYBLOB="41a8a7ebe371e3546e52d4c5449226cb18fbaa7f65d34bab991cb3d92c9180abb9731287ea78be876406c522998b415af7329bc38d83bd219612a18233534e7e4e4af76e7d1511763efc874c2dce5cfdc2c335e7a68197813f48da0be4a5a7acd8108d34526bffc2084ef14bb1c7ce0e66a3c0d9a2f2a9fd8d639e8da2c5e61619ddb6f48676232ebaffa27c7fa8ec34258dd636b834274c81baec0452fcb296ab60a38eafe75283f6de34ff9fac280ff945c0332863bc69c5de0bac2eba81437a8db837127c4b40ca6e69dea59bdb6238672c3399924ca6f66a684f2f223ba0a1b0bea48c235cb046663adeffd11135beef66e80cb0e95c61"], 0x14}}, 0x0) (async, rerun: 64) r6 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000004000000000007ee9c4c50061886348a968d6949300000000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x20000000000001e5, &(0x7f00000008c0)=ANY=[@ANYRES64=r4, @ANYRES32=r7, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r8, 0x0, 0x138, 0x42, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/66, 0x4000, 0x0, 0x47, 0xffffffffffffff78, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x50) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x20, 0x4) (async, rerun: 64) bind$xdp(r6, &(0x7f0000000180)={0x2c, 0xa, r10}, 0x10) (rerun: 64) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1800, 0x0) (async, rerun: 32) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x80401, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r11) sendmsg$NFC_CMD_DEP_LINK_DOWN(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010029bd7000fcdbdf3605bc060000000100", @ANYRES32=0x0, @ANYBLOB="3e18a87980ffc68e643667f463fe09024a0916790cd3a9a305f213a5fbd1f1134c2dbb6893e0f7c1a42760c0a5d34ecaed3ee0ccd37728f942b4c9cf21522a8a4c5efd724d5bc975e8b5c85baa81b998c20a4b0100000000000000ee1b9ec800ef05e6a05acde68faa07732468a358a81a15401f980b8b2d92e718b648587aa2905458cc2074b62575e83517349c2fcbe0a7892633d2f71367b6ef2c8c5c4115561aa575f82882fa604ad9036ea4cbae73d8b0e2b16db16857acbc8ca4cf91f1415295ba7cdfddb8510694be9a"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0xfffffffffffffff2) r13 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r13, &(0x7f0000000740)=""/384, 0x200008c0) 2m19.911062894s ago: executing program 4 (id=2044): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001340)={0x0, 0x0}) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000400), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0440, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CSA_IES={0x24, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xa5, 0x6, 0x2f}}]}], @beacon_params, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x46e4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x9, 0x0, 0x7a, 0x1]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1f}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x24040800) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r9, 0x1000000}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2m19.910174218s ago: executing program 3 (id=2045): syz_usb_connect(0x6, 0x1f5, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e3, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2m19.75182825s ago: executing program 4 (id=2047): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000024c0)={0xa, 0x7, 0x200000, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8, 0x3}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000001300)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r2}}}], 0x28}}], 0x1, 0x4000) (fail_nth: 7) 2m19.751599015s ago: executing program 4 (id=2048): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bc, 0x800000000000009, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x7ff, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x8, 0x46, 0x6, 0x10000000000003, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x6, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10000010001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4, 0x4000002, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x2, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x3, 0x5, 0x1e, 0x0, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xa692, 0xcc, 0x1, 0x1000003]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000940)=""/41, 0x29) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open(&(0x7f0000000000)='.\x00', 0x820100, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) brk(0x400000ffc020) 2m19.601367379s ago: executing program 4 (id=2050): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) setuid(0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fremovexattr(r4, &(0x7f00000006c0)=@random={'btrfs.', './binderfs2/custom0\x00'}) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc8, "2393ee", "489963", "3567a3", "f93acc", 0x2, 0x4, 0xa, 0x10, 0x5, 0x40, 0x9, 0xfc01, 0x6, 0x2}}}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xa, [@var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x32, 0x101, 0x6}, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x8, @local, 0x3}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) socket$nl_route(0x10, 0x3, 0x0) 2m19.31381204s ago: executing program 3 (id=2055): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0xfffffffffffffef1, 0x0}) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) close(r1) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x80, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaab16affffffffffff08004500001c02000000fb02907800000000e000030000009078006400d2"], 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$CEC_ADAP_S_PHYS_ADDR(r4, 0x40026102, &(0x7f0000000080)=0x1) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2m19.312644868s ago: executing program 3 (id=2058): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bc, 0x800000000000009, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x7ff, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x8, 0x46, 0x6, 0x10000000000003, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x6, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10000010001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4, 0x4000002, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x2, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x3, 0x5, 0x1e, 0x0, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xa692, 0xcc, 0x1, 0x1000003]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000940)=""/41, 0x29) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open(&(0x7f0000000000)='.\x00', 0x820100, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) brk(0x400000ffc020) 2m19.153699855s ago: executing program 3 (id=2059): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x43000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0xc, 0x0, 0x0, 0xc03d, 0xfffffffffffffffd}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0xdc, &(0x7f0000000000)="6acc06420bacbfab8b4136fca3fe97343d5c44a35d4e330eca132d6deebea1b8b733271632e47773dc6078748fa2ff41fce9cddbf1b5ceb4a01756da374a7c2d0f1e06eb8a36a4ecd8476244eb54d4d3617c36fd66c6ec71e5b012facb10753e02b4e60c93362102fc8dd8a08e92c64518a0e2821012ab6d1a23c32b95fd9c5c0deacfae8838cc2e3e7869ee3cc4d0a9a653eb82e399e40be81d386fa61174199a44303e12be3ee21614a8fc539970597d3114084bcae7b1debb6787cc6725c9d014f7b4cf292d892e5e286a13494067c7f188345bfa4b16fc8dc6a1", 0x1000, 0x0, &(0x7f0000000380)="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"}) r1 = socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'bond_slave_0\x00', @multicast}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r0) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) 2m3.505137649s ago: executing program 41 (id=2050): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) setuid(0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fremovexattr(r4, &(0x7f00000006c0)=@random={'btrfs.', './binderfs2/custom0\x00'}) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc8, "2393ee", "489963", "3567a3", "f93acc", 0x2, 0x4, 0xa, 0x10, 0x5, 0x40, 0x9, 0xfc01, 0x6, 0x2}}}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xa, [@var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x32, 0x101, 0x6}, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x8, @local, 0x3}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) socket$nl_route(0x10, 0x3, 0x0) 2m3.146474023s ago: executing program 42 (id=2059): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x43000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0xc, 0x0, 0x0, 0xc03d, 0xfffffffffffffffd}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0xdc, &(0x7f0000000000)="6acc06420bacbfab8b4136fca3fe97343d5c44a35d4e330eca132d6deebea1b8b733271632e47773dc6078748fa2ff41fce9cddbf1b5ceb4a01756da374a7c2d0f1e06eb8a36a4ecd8476244eb54d4d3617c36fd66c6ec71e5b012facb10753e02b4e60c93362102fc8dd8a08e92c64518a0e2821012ab6d1a23c32b95fd9c5c0deacfae8838cc2e3e7869ee3cc4d0a9a653eb82e399e40be81d386fa61174199a44303e12be3ee21614a8fc539970597d3114084bcae7b1debb6787cc6725c9d014f7b4cf292d892e5e286a13494067c7f188345bfa4b16fc8dc6a1", 0x1000, 0x0, &(0x7f0000000380)="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"}) r1 = socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'bond_slave_0\x00', @multicast}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r0) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) 1m53.902160525s ago: executing program 1 (id=2208): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x401, 0xfffffdfe, 0x25dfdbfc, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) (async, rerun: 32) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) (rerun: 32) landlock_restrict_self(r1, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x24fc, &(0x7f00000000c0)={0x0, 0x0, 0x10100, 0x1, 0xe6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001240)={r1, &(0x7f0000000240)="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", &(0x7f0000000000)=""/55}, 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) (async, rerun: 64) io_uring_enter(r2, 0x5b43, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r6, 0x1) 1m53.899797981s ago: executing program 1 (id=2210): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x8) ioctl$I2C_SLAVE(r0, 0x703, 0x7) (async) ioctl$I2C_SLAVE(r0, 0x703, 0x7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x1, 0xd, 0x7, &(0x7f00000001c0)={0x13, "0329aedbf37e5ad4a9b6dbaf1d85ea5c315c660ec032e38616d62900"}}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ffdc03d415d828d67d00000000bd02ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1m53.815106538s ago: executing program 1 (id=2211): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m53.814707865s ago: executing program 1 (id=2212): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="260000002200470105000007000000000000ff03002b1f002d4a51f1ee019cd53400b017ca5bfa30", 0x28) (async) write(r0, &(0x7f0000000040)="260000002200470105000007000000000000ff03002b1f002d4a51f1ee019cd53400b017ca5bfa30", 0x28) 1m53.752215444s ago: executing program 1 (id=2213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bc, 0x800000000000009, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x7ff, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x8, 0x46, 0x6, 0x10000000000003, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x6, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10000010001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4, 0x4000002, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x2, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x3, 0x5, 0x1e, 0x0, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xa692, 0xcc, 0x1, 0x1000003]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000940)=""/41, 0x29) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) brk(0x400000ffc020) 1m53.667085518s ago: executing program 1 (id=2214): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$unix(r1, 0x0, 0x0, 0x40001) recvmsg$qrtr(r1, 0x0, 0x0, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 1m37.619094934s ago: executing program 43 (id=2214): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$unix(r1, 0x0, 0x0, 0x40001) recvmsg$qrtr(r1, 0x0, 0x0, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 1m6.41343348s ago: executing program 5 (id=2846): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="043c07aaaaaaaaaa1003"], 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x13, 0x0, 0x310) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x1050, 0x13, 0x1, 0x70bd2a, 0x25dfdbff, {0x27, 0x6, 0x2, 0x6, {0x4e21, 0x4e21, [0x1ff, 0x1, 0x5, 0x4], [0x0, 0x4, 0xefb, 0x8001], 0x0, [0x0, 0x9]}, 0x6e9b, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1050}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040080) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r4, 0x0, 0xb, 0x0, &(0x7f0000000280)) r5 = request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='vcan0\x00', 0xfffffffffffffff8) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000001500)="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", 0x176, r5) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r6, r3}, 0x0, 0x0, 0x0) brk(0x400000ffc020) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4c, &(0x7f0000001800), 0x4) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x8000000000000000, r8}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r9, 0xc0405519, &(0x7f0000000040)={0xa, 0x6, 0xb9d, 0x91f, '\x00', 0xf09}) 1m5.783577979s ago: executing program 5 (id=2851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 1m5.440850684s ago: executing program 5 (id=2858): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40040) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getown(r1, 0x9) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000161411"], 0x20}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) (async) r4 = syz_open_dev$audion(&(0x7f00000000c0), 0x800, 0x88400) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000001c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0}) r10 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r10, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r10, 0xc02064cc, &(0x7f00000001c0)={r11, r11, 0x1, 0x2005, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r10, 0xc01064c4, &(0x7f0000000240)={&(0x7f0000000180)=[r11], 0x1}) (async) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r12, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r12, 0xc02064cc, &(0x7f0000000080)={r13, r13, 0x0, 0x0, 0x2}) r14 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r14, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r14, 0xc03064ca, &(0x7f0000000380)={&(0x7f0000000000)=[r15, r15], &(0x7f0000000340)=[0x100000020], 0x400000000009608, 0x2, 0x3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r4, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r5, r6, r7, r8, r9, r11, r13, r15, r16], 0x9}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r3}) 1m5.376818702s ago: executing program 5 (id=2861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22c81, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r2, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (rerun: 32) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='ip_vti0\x00', 0x10) (async) bind$xdp(r1, &(0x7f0000000100), 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x7}) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x4, &(0x7f0000000100)=[@cr4={0x1, 0x40000}], 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000004c0)="430f01d1b9800000c00f3235000100000f30440f21390f005f004381d100000000670f01c8c40108c22d7d30d9ae06663ef4656736410f0d9b6f0b00002e3ef2400f38f09d0d000000", 0x49}], 0x1, 0x27, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 64) 1m5.172952666s ago: executing program 5 (id=2862): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x121202, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'none\x00', 0x20, 0x8, 0x5b}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m4.928356131s ago: executing program 5 (id=2867): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fcntl$setstatus(r0, 0x4, 0x6000) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000001980)=""/236, &(0x7f0000000080)=0x18) read$FUSE(r0, &(0x7f0000006500)={0x2020}, 0x2020) 48.105800749s ago: executing program 44 (id=2867): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fcntl$setstatus(r0, 0x4, 0x6000) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000001980)=""/236, &(0x7f0000000080)=0x18) read$FUSE(r0, &(0x7f0000006500)={0x2020}, 0x2020) 3.817886186s ago: executing program 0 (id=3416): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) (async) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000500a80016000a0001400200002000060000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef528906301b7ce06bbace8017cbec", 0x67}, {&(0x7f0000001680)="66672324118a5a090ddd327d57e4e0e1353bb0cb85933035009e0e5dc3bc161cb6289a3389da904f7557a56e6113e564da5b96c6f863c7b8d71515a1897e1ca95f89d69521011a983e85f57f12a1856c9976f2976e645bf7220fcd53214a466fb3de85e1b1df808f772249265e447c034dd0", 0x72}, {&(0x7f0000000000)="d8e2ec50747b5cf1915ac7c0ce1bd1a2e44dbd33672272438b83ba6862002c590991a1d7cb668b97a6301604747b65ee40d4cd6701678977b3d3f84f72eb622727c4679b13ebff3281a4fd2c5988eae9e2ae4b771d0a1ca9958f21ade3e950c076e8d7a90cbbe2bff04b91b8d378da6be0277469f060dcdadfb56d3e54", 0x7d}], 0x3}, 0x4004000) (rerun: 32) 2.802061902s ago: executing program 0 (id=3426): r0 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486"], 0xfdef) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4044010) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/6, 0x6}], 0x1, 0x2, 0x2, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x9, 0x0, {{0x12, 0x4, 0x1, 0x7, 0x48, 0x67, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, {[@timestamp={0x44, 0xc, 0xb5, 0x0, 0x4, [0x39d1e8b7, 0x8001]}, @noop, @generic={0x86, 0x10, "d1d1b69a82e72f7c5bd92a29ab8d"}, @lsrr={0x83, 0x13, 0xb7, [@broadcast, @rand_addr=0x64010101, @remote, @rand_addr=0x64010100]}, @end]}}}}}) sendmsg$nl_route(r0, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000007fc0)={&(0x7f0000007f80)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x0, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe050}, 0x20000000) 1.872354789s ago: executing program 6 (id=3436): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) bind$qrtr(r0, &(0x7f0000000100)={0x2a, 0x1}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 1.872160791s ago: executing program 8 (id=3437): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.870855386s ago: executing program 0 (id=3438): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.767086885s ago: executing program 6 (id=3439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000050601004c0003ce000000000000fffd05000400000000000900020073797a3000000000"], 0x64}}, 0x0) 1.764134011s ago: executing program 6 (id=3440): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.700611828s ago: executing program 6 (id=3441): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000002c0)=0x62, 0x8) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000100)=""/96, 0x60, 0x40010120, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) r5 = openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) 1.605783785s ago: executing program 6 (id=3442): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa4}, {0x6}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x880) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) listen(r4, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) shutdown(r6, 0x1) close(0x4) 1.362058566s ago: executing program 8 (id=3443): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400080) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000180)={r5, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r8, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x40}) 1.2512369s ago: executing program 0 (id=3444): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="98cabca5", 0x4) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x37, 0x6, 0x10, 0x2, 0x63, 0x0, 0xf7}}) 1.250152836s ago: executing program 0 (id=3445): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10c008}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c0, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}, @NFC_ATTR_VENDOR_DATA={0xf1, 0x1f, "20b2b5b356f3c5227632544cac01000699f1832bbcbb44bfe8c683195c57d8f02df66a89a6d5c4176fc13c44cbbd5e26d335537686a91cfb2c3da34994023db5481df95747519b4d59df63ac3b16cbcbd4a6062442c59e8e1fdf4668f96da5ed855a54982e25d662c8e5c58d5d457e722fae5ca79c831eb184f8468733e14770c8936973eece4ef408233c75949534829e466608f29ae67ac638764df4d81535d06431c6843f13b634adf8039d007b558a34d6ae5e3c5c536d064acec2d45dd4a4bbbe3fb1d10db70079fb4be464d0995c5f35584d552a0596f0ab6d9f3e8c1ea00525bcf2d2f07397b158d85b"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffffffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}, @NFC_ATTR_VENDOR_DATA={0x9d, 0x1f, "87aafea41d241072e18b76c33870487ece9921f6abf57fda3d3a964a809f3008a78c82289cdd48b22041bfb4053c76d8b3e87bf66a6bf021d85a6300139d1e89da885117ed7b0cf99c2bf662239d9776c542674c7d0b156727a4428835058ea7ddf92a59818784fd4dabce6199a13545852202bb9e7752539b979b9f55951b28d86095e3b317f760942ffa51caf5938d299e9ab5a7c30333f0"}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$nci(r2, &(0x7f0000000340)=""/5, 0x5) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x866d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48055}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008042}, 0xc0c0) preadv(r2, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/103, 0x67}, {&(0x7f0000000640)=""/233, 0xe9}, {&(0x7f0000000740)=""/85, 0x55}], 0x3, 0x9, 0x10000) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xdc, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "935803f74c627259ee9483bf67d3cd4dbd6fb36d57f7c3cc7d4f"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xaabebe3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x790c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x774c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000009c0)={0x45, r3, 'id1\x00'}) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000e00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000a80)={0x318, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa8c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44ea}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e6d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd22}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x42}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1de}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff80000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x98}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8a}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8992}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33fa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x15) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x78, r7, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004810}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000001100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001180), r8) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f00000011c0)={@dev, @private, 0x0}, &(0x7f0000001200)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x30, r9, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c880}, 0x40000) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), r8) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x50, r11, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000001480)={'wpan1\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000015c0)={@ifindex=r10, 0x2e, 0x1, 0xc, &(0x7f00000014c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0], &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0]}, 0x40) inotify_add_watch(r8, &(0x7f0000001600)='./file0\x00', 0x81) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000001640)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680), 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x4c, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2600c041}, 0x20) 1.168230353s ago: executing program 7 (id=3446): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_ext={0x1c, 0x2, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0xd}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x39, &(0x7f0000000080)=""/57, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x8, 0xb06, 0x5}, 0x10, 0x2c79f, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000140)=[{0x5, 0x2, 0x4, 0x9}, {0x1, 0x5, 0x8, 0x6}, {0x5, 0x4, 0xc, 0x5}], 0x10, 0x6e5b8532}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/disk', 0x204000, 0x10a) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0xbe, 0x1a, 0x1, 0x2, @private2, @private2, 0x3b77, 0x80, 0x3ff, 0x7}}) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv6_newaddrlabel={0x54, 0x48, 0x100, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x18, 0x0, r2, 0x8000}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x54}}, 0x92) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x1f, 0x9, 0x20, r1, 0xa074, '\x00', r2, r1, 0x3, 0x2, 0x5, 0x4}, 0x50) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x4, 0xa}, {0x8, 0x7, 0xf, 0x8, 0x5}}}}, 0x17) splice(r3, &(0x7f0000000580)=0x3, r0, &(0x7f00000005c0)=0x15e, 0x4, 0x5) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffff}, @NL80211_ATTR_MESH_SETUP={0x2c, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0xe0}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xde}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4050) r5 = accept$inet6(r1, &(0x7f0000000780)={0xa, 0x0, 0x0, @empty}, &(0x7f00000007c0)=0x1c) accept4$inet6(r5, 0x0, &(0x7f0000000800), 0x80800) faccessat(r1, &(0x7f0000000840)='./file0\x00', 0x80) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000008c0)=@req={0x60, 0x8, 0x3, 0x1000}, 0x10) bind(r6, &(0x7f0000000900)=@nl=@kern={0x10, 0x0, 0x0, 0x20}, 0x80) chdir(&(0x7f0000000980)='./file0\x00') openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x6aea02, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000a00)={0x8001, 0x9, 0x9, 0x10, 0xf5, 0x9, 0x4}, 0xc) accept4$netrom(r1, &(0x7f0000000a40)={{0x3, @rose}, [@default, @netrom, @netrom, @default, @default, @netrom, @remote, @null]}, &(0x7f0000000ac0)=0x48, 0x40800) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000b00)="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", 0x1000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b40), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x3c, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x9}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x6761}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xf8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c40)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r1) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000001e40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d00)={0xc8, r8, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x8c, 0x2a, [@mesh_id={0x72, 0x6}, @random={0x3, 0x76, "f325df7eb67bcf2b789f2bde3844773e2b0c87c046b71f0e0efb8ee375bcf3a3ae3b8838c82b277c332168d4ea50256d81689c37551f8f240ff02b4eb6e706952cb02f2306264b02da7e8181b6c348da0db9e7352f746071cd6028b5f2b4630acd3cf2f5811934fd41030a7a6303274f415d912faf0d"}, @cf={0x4, 0x6, {0x5, 0x9, 0x1, 0x6}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x23}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24844}, 0x81) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000001e80)={0x0, 0x8000, 0x4}, 0x8) 1.167626962s ago: executing program 7 (id=3447): r0 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x29, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)=[0x4], 0x0, 0x4, 0x1}}, 0x40) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x70) unshare(0x2c020400) r2 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x8ba, 0x696d, 0x20, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r7, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) 1.114670928s ago: executing program 8 (id=3448): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) r4 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x9, 0x0, 0x1, 0x1003, 0x6, 0x8000, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0x1ff, 0x746f, 0x8, 0x5, 0x3, 0xfffffffe, 0x4, 0x8049]}) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f00000000c0)="748823f7eaa1b654628059937ab85fcf0cdbe6aef5735ffba31e5ee389e214bbafffc4d2bcce4fc6ad6197753b3c3ee7be69bbf4b4071ab35372aa12a7aff74bcbcacc8fe8bfb190611e6439604f1a4e625f723dbe7b243182d4cb65612e0f5570e13f20624f8cbfc833c5d484e2b426c19cea14ce3ea869b83bb5dfc79177e10499762d4502308c30e811c45ab349852cb83cd9e90b307ab092e38f74b2f6abbeec7a33c926c7aa5dda235c00eb764e246962424cd622de"}, 0x20) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f0000000180)=""/81, 0x51}], 0x3, 0x0, 0x0, 0x1) 1.023205296s ago: executing program 7 (id=3449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000050601004c0003ce000000000000fffd05000400000000000900020073797a30000000000500010007000000050005000a00000014000780"], 0x64}}, 0x0) 943.83937ms ago: executing program 7 (id=3450): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r1, 0x4004092b, 0x7) sendto$inet6(r1, 0x0, 0xfffffffffffffc3c, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0xd, @remote}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x4c, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x10, 0xfc, 0x0, 0x1, [@typed={0xc, 0x5, 0x0, 0x0, @u64=0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="c4139b78"]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0xa, @loopback, 0x23}, 0x1c) r6 = dup(r5) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) r7 = socket(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="cfb14e407d33ffffffffffff86dd697a262d00383afefe8000000000000000000000000000aafc000000000000000000000000000001020091e600000005620813317804000000000000000000000000000000000100"/98], 0x0) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 869.588039ms ago: executing program 8 (id=3451): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 868.611179ms ago: executing program 8 (id=3452): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 302.230464ms ago: executing program 8 (id=3453): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x623, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x80) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000500)=0xd0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r9) sendto$inet6(r7, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x20007}]}}]}, 0xa4}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000080)={0xdd, r11, r10}) 301.821286ms ago: executing program 6 (id=3454): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 299.217841ms ago: executing program 0 (id=3461): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.222737ms ago: executing program 7 (id=3455): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="98cabca5", 0x4) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x37, 0x6, 0x10, 0x2, 0x63, 0x0, 0xf7}}) 0s ago: executing program 7 (id=3456): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000480), 0x792cf01940166d41}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0x40000000000002b4}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) setuid(0x0) linkat(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002e40)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r4, &(0x7f00000010c0)=[{&(0x7f0000000380)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) ppoll(&(0x7f0000000480)=[{r4, 0x8}, {r0, 0x8040}], 0x2, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)={[0xe76b]}, 0x8) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000380)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000003c0)={r1, 0xfffffff8, 0x9, 0x52b, 0x0, [r3, r5, r6], [0x8001, 0xf, 0xfffff88d, 0x8000], [0x4, 0x3, 0x5, 0x5], [0x6, 0xff, 0x2, 0x5]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000080)={0xf8, 0x5, 0x1ff, 0xea, 0x10, "2212a2c2010100f0ffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x5412, &(0x7f0000000040)=0xa) setsockopt$inet6_tcp_int(r8, 0x6, 0x18, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r11 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r11, 0xc) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=r11, @ANYBLOB="0100ffffffff00000000010000000c00060003000000000000000400275ded8008c2c6d02201000000e5000c000200ff7f009600000000"], 0x38}}, 0x20000000) kernel console output (not intermixed with test programs): it(253.411:9090): avc: denied { watch watch_reads } for pid=14942 comm="syz.6.2623" path="pipe:[63277]" dev="pipefs" ino=63277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 265.236807][T14943] batadv1: entered promiscuous mode [ 265.238052][ T40] audit: type=1400 audit(253.411:9091): avc: denied { write } for pid=14942 comm="syz.6.2623" name="0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 265.262639][ T40] audit: type=1400 audit(253.439:9092): avc: denied { mounton } for pid=14944 comm="syz.8.2624" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 265.330045][ T40] audit: type=1400 audit(253.504:9093): avc: denied { name_bind } for pid=14948 comm="syz.0.2626" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 265.331105][T14949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2626'. [ 265.363295][T14954] max out of range [ 265.365674][T14954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14954 comm=syz.8.2627 [ 265.370397][T14954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14954 comm=syz.8.2627 [ 265.489662][T14959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60432 sclass=netlink_route_socket pid=14959 comm=syz.0.2630 [ 265.742744][T14968] gretap0: entered promiscuous mode [ 266.235317][T14891] net_ratelimit: 30 callbacks suppressed [ 266.235331][T14891] Set syz1 is full, maxelem 65536 reached [ 266.306041][ T8683] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 266.426610][T15007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.472910][T15012] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 266.475705][T15012] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 266.476567][ T8683] usb 11-1: Using ep0 maxpacket: 32 [ 266.481298][T15012] vhci_hcd vhci_hcd.0: Device attached [ 266.486249][ T8683] usb 11-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 266.491102][T15013] vhci_hcd: unknown pdu 1 [ 266.491570][ T8683] usb 11-1: config 1 interface 0 has no altsetting 0 [ 266.493942][ T61] vhci_hcd: stop threads [ 266.497663][ T61] vhci_hcd: release socket [ 266.500065][ T61] vhci_hcd: disconnect device [ 266.502114][T15010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.611262][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2648'. [ 266.818390][T15022] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2650'. [ 266.830763][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2650'. [ 266.880231][T15024] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20001 [ 267.463588][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.465571][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.775684][T15065] gtp0: entered promiscuous mode [ 268.371561][T15075] netlink: 'syz.0.2670': attribute type 1 has an invalid length. [ 268.373973][T15075] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2670'. [ 269.274700][ T8683] usb 11-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.40 [ 269.277716][ T8683] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.280307][ T8683] usb 11-1: Product: 줊콟䪿螟៾ç»é‰î¹‡äœ ï¥–䢃昃밋Էᱰᦳ떋풨ಽ嚨岙åŒâ˜³ïŸ [ 269.286212][ T8683] usb 11-1: can't set config #1, error -71 [ 269.290063][ T8683] usb 11-1: USB disconnect, device number 7 [ 269.329811][T15088] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2676'. [ 269.376859][T15090] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2677'. [ 269.764214][T15108] FAULT_INJECTION: forcing a failure. [ 269.764214][T15108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.769610][T15108] CPU: 3 UID: 0 PID: 15108 Comm: syz.0.2684 Not tainted syzkaller #0 PREEMPT(full) [ 269.769633][T15108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 269.769644][T15108] Call Trace: [ 269.769652][T15108] [ 269.769659][T15108] dump_stack_lvl+0x16c/0x1f0 [ 269.769687][T15108] should_fail_ex+0x512/0x640 [ 269.769713][T15108] _copy_from_user+0x2e/0xd0 [ 269.769736][T15108] copy_msghdr_from_user+0x98/0x160 [ 269.769756][T15108] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 269.769788][T15108] ___sys_sendmsg+0xfe/0x1d0 [ 269.769814][T15108] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.769866][T15108] __sys_sendmsg+0x16d/0x220 [ 269.769887][T15108] ? __pfx___sys_sendmsg+0x10/0x10 [ 269.769927][T15108] do_syscall_64+0xcd/0x4e0 [ 269.769952][T15108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.769972][T15108] RIP: 0033:0x7f0182d8ec29 [ 269.769987][T15108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.770004][T15108] RSP: 002b:00007f0183b73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.770023][T15108] RAX: ffffffffffffffda RBX: 00007f0182fd5fa0 RCX: 00007f0182d8ec29 [ 269.770034][T15108] RDX: 0000000020004804 RSI: 0000200000000e40 RDI: 0000000000000004 [ 269.770043][T15108] RBP: 00007f0183b73090 R08: 0000000000000000 R09: 0000000000000000 [ 269.770053][T15108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.770061][T15108] R13: 00007f0182fd6038 R14: 00007f0182fd5fa0 R15: 00007ffd50a39cb8 [ 269.770084][T15108] [ 269.932331][T15114] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 269.934677][T15114] [U] J"—e:ÀÆ" [ 270.344357][T15139] FAULT_INJECTION: forcing a failure. [ 270.344357][T15139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.349987][T15139] CPU: 1 UID: 0 PID: 15139 Comm: syz.6.2693 Not tainted syzkaller #0 PREEMPT(full) [ 270.350010][T15139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 270.350021][T15139] Call Trace: [ 270.350027][T15139] [ 270.350034][T15139] dump_stack_lvl+0x16c/0x1f0 [ 270.350060][T15139] should_fail_ex+0x512/0x640 [ 270.350085][T15139] _copy_from_user+0x2e/0xd0 [ 270.350110][T15139] move_addr_to_kernel+0x65/0x170 [ 270.350139][T15139] __copy_msghdr+0x386/0x470 [ 270.350160][T15139] copy_msghdr_from_user+0xc1/0x160 [ 270.350181][T15139] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 270.350213][T15139] ___sys_sendmsg+0xfe/0x1d0 [ 270.350235][T15139] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.350287][T15139] __sys_sendmsg+0x16d/0x220 [ 270.350309][T15139] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.350346][T15139] do_syscall_64+0xcd/0x4e0 [ 270.350370][T15139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.350386][T15139] RIP: 0033:0x7f1d2118ec29 [ 270.350399][T15139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.350415][T15139] RSP: 002b:00007f1d2202d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.350431][T15139] RAX: ffffffffffffffda RBX: 00007f1d213d5fa0 RCX: 00007f1d2118ec29 [ 270.350443][T15139] RDX: 0000000020004804 RSI: 0000200000000e40 RDI: 0000000000000004 [ 270.350453][T15139] RBP: 00007f1d2202d090 R08: 0000000000000000 R09: 0000000000000000 [ 270.350462][T15139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.350473][T15139] R13: 00007f1d213d6038 R14: 00007f1d213d5fa0 R15: 00007ffdeff90668 [ 270.350496][T15139] [ 270.450864][ T40] kauditd_printk_skb: 166 callbacks suppressed [ 270.450878][ T40] audit: type=1400 audit(258.294:9260): avc: denied { bind } for pid=15140 comm="syz.0.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 270.461584][ T40] audit: type=1400 audit(258.303:9261): avc: denied { setopt } for pid=15140 comm="syz.0.2698" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 270.496019][ T40] audit: type=1400 audit(258.331:9262): avc: denied { execute } for pid=15150 comm="syz.6.2700" name="file0" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 270.503313][ T40] audit: type=1400 audit(258.340:9263): avc: denied { execute_no_trans } for pid=15150 comm="syz.6.2700" path="/146/file0" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 270.511674][ T40] audit: type=1400 audit(258.340:9264): avc: denied { create } for pid=15150 comm="syz.6.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 270.517449][ T40] audit: type=1400 audit(258.340:9265): avc: denied { getopt } for pid=15150 comm="syz.6.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 270.523431][ T40] audit: type=1400 audit(258.340:9266): avc: denied { read } for pid=15150 comm="syz.6.2700" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 270.531363][ T40] audit: type=1400 audit(258.340:9267): avc: denied { open } for pid=15150 comm="syz.6.2700" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 270.538531][ T40] audit: type=1400 audit(258.340:9268): avc: denied { write } for pid=15152 comm="syz.0.2701" name="udplite6" dev="proc" ino=4026534476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 270.547140][ T40] audit: type=1400 audit(258.350:9269): avc: denied { ioctl } for pid=15150 comm="syz.6.2700" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 270.554597][T15155] netlink: 'syz.0.2702': attribute type 2 has an invalid length. [ 270.624224][T15160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2702'. [ 270.653965][T15168] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 270.692770][T15174] FAULT_INJECTION: forcing a failure. [ 270.692770][T15174] name failslab, interval 1, probability 0, space 0, times 0 [ 270.696855][T15174] CPU: 2 UID: 0 PID: 15174 Comm: syz.6.2708 Not tainted syzkaller #0 PREEMPT(full) [ 270.696870][T15174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 270.696877][T15174] Call Trace: [ 270.696881][T15174] [ 270.696886][T15174] dump_stack_lvl+0x16c/0x1f0 [ 270.696904][T15174] should_fail_ex+0x512/0x640 [ 270.696918][T15174] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 270.696932][T15174] should_failslab+0xc2/0x120 [ 270.696945][T15174] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 270.696956][T15174] ? cred_has_capability.isra.0+0x190/0x310 [ 270.696973][T15174] ? __alloc_skb+0x2b2/0x380 [ 270.696988][T15174] __alloc_skb+0x2b2/0x380 [ 270.697000][T15174] ? __pfx___alloc_skb+0x10/0x10 [ 270.697013][T15174] ? cap_capable+0xb3/0x250 [ 270.697028][T15174] netlink_alloc_large_skb+0x69/0x130 [ 270.697045][T15174] netlink_sendmsg+0x6a1/0xdd0 [ 270.697061][T15174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.697081][T15174] ____sys_sendmsg+0xa95/0xc70 [ 270.697099][T15174] ? copy_msghdr_from_user+0x10a/0x160 [ 270.697112][T15174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.697135][T15174] ___sys_sendmsg+0x134/0x1d0 [ 270.697149][T15174] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.697179][T15174] __sys_sendmsg+0x16d/0x220 [ 270.697192][T15174] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.697214][T15174] do_syscall_64+0xcd/0x4e0 [ 270.697230][T15174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.697241][T15174] RIP: 0033:0x7f1d2118ec29 [ 270.697250][T15174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.697261][T15174] RSP: 002b:00007f1d2202d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.697272][T15174] RAX: ffffffffffffffda RBX: 00007f1d213d5fa0 RCX: 00007f1d2118ec29 [ 270.697279][T15174] RDX: 0000000020004804 RSI: 0000200000000e40 RDI: 0000000000000004 [ 270.697286][T15174] RBP: 00007f1d2202d090 R08: 0000000000000000 R09: 0000000000000000 [ 270.697292][T15174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.697298][T15174] R13: 00007f1d213d6038 R14: 00007f1d213d5fa0 R15: 00007ffdeff90668 [ 270.697312][T15174] [ 270.786070][T15180] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2710'. [ 270.800261][T15183] program syz.6.2711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.012127][T15192] FAULT_INJECTION: forcing a failure. [ 271.012127][T15192] name failslab, interval 1, probability 0, space 0, times 0 [ 271.017288][T15192] CPU: 2 UID: 0 PID: 15192 Comm: syz.5.2714 Not tainted syzkaller #0 PREEMPT(full) [ 271.017310][T15192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 271.017321][T15192] Call Trace: [ 271.017327][T15192] [ 271.017333][T15192] dump_stack_lvl+0x16c/0x1f0 [ 271.017359][T15192] should_fail_ex+0x512/0x640 [ 271.017381][T15192] ? fs_reclaim_acquire+0xae/0x150 [ 271.017405][T15192] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 271.017429][T15192] should_failslab+0xc2/0x120 [ 271.017449][T15192] __kmalloc_noprof+0xd2/0x510 [ 271.017472][T15192] tomoyo_realpath_from_path+0xc2/0x6e0 [ 271.017498][T15192] ? tomoyo_profile+0x47/0x60 [ 271.017516][T15192] tomoyo_path_number_perm+0x245/0x580 [ 271.017535][T15192] ? tomoyo_path_number_perm+0x237/0x580 [ 271.017558][T15192] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 271.017580][T15192] ? find_held_lock+0x2b/0x80 [ 271.017621][T15192] ? find_held_lock+0x2b/0x80 [ 271.017640][T15192] ? hook_file_ioctl_common+0x145/0x410 [ 271.017662][T15192] ? __fget_files+0x20e/0x3c0 [ 271.017689][T15192] security_file_ioctl+0x9b/0x240 [ 271.017714][T15192] __x64_sys_ioctl+0xb7/0x210 [ 271.017741][T15192] do_syscall_64+0xcd/0x4e0 [ 271.017763][T15192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.017779][T15192] RIP: 0033:0x7fc0d5d8ec29 [ 271.017793][T15192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.017808][T15192] RSP: 002b:00007fc0d6cda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.017824][T15192] RAX: ffffffffffffffda RBX: 00007fc0d5fd5fa0 RCX: 00007fc0d5d8ec29 [ 271.017835][T15192] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 271.017844][T15192] RBP: 00007fc0d6cda090 R08: 0000000000000000 R09: 0000000000000000 [ 271.017854][T15192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.017863][T15192] R13: 00007fc0d5fd6038 R14: 00007fc0d5fd5fa0 R15: 00007ffccccffe28 [ 271.017885][T15192] [ 271.017891][T15192] ERROR: Out of memory at tomoyo_realpath_from_path. [ 271.203126][T15197] tipc: Enabling of bearer rejected, failed to enable media [ 271.224471][T15200] ALSA: mixer_oss: invalid OSS volume '' [ 271.308194][T15212] netlink: 'syz.6.2720': attribute type 17 has an invalid length. [ 271.311153][T15212] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2720'. [ 271.314012][T15212] macvtap0: entered allmulticast mode [ 271.315767][T15212] veth0_macvtap: entered allmulticast mode [ 271.319047][T15212] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 271.375581][T15214] netlink: 696 bytes leftover after parsing attributes in process `syz.8.2721'. [ 271.547350][T15223] FAULT_INJECTION: forcing a failure. [ 271.547350][T15223] name failslab, interval 1, probability 0, space 0, times 0 [ 271.551777][T15223] CPU: 0 UID: 0 PID: 15223 Comm: syz.8.2725 Not tainted syzkaller #0 PREEMPT(full) [ 271.551798][T15223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 271.551807][T15223] Call Trace: [ 271.551811][T15223] [ 271.551816][T15223] dump_stack_lvl+0x16c/0x1f0 [ 271.551850][T15223] should_fail_ex+0x512/0x640 [ 271.551869][T15223] ? fs_reclaim_acquire+0xae/0x150 [ 271.551885][T15223] ? tomoyo_encode2+0x100/0x3e0 [ 271.551901][T15223] should_failslab+0xc2/0x120 [ 271.551914][T15223] __kmalloc_noprof+0xd2/0x510 [ 271.551929][T15223] tomoyo_encode2+0x100/0x3e0 [ 271.551947][T15223] tomoyo_encode+0x29/0x50 [ 271.551962][T15223] tomoyo_realpath_from_path+0x18f/0x6e0 [ 271.551980][T15223] ? tomoyo_profile+0x47/0x60 [ 271.551992][T15223] tomoyo_path_number_perm+0x245/0x580 [ 271.552006][T15223] ? tomoyo_path_number_perm+0x237/0x580 [ 271.552021][T15223] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 271.552036][T15223] ? find_held_lock+0x2b/0x80 [ 271.552062][T15223] ? find_held_lock+0x2b/0x80 [ 271.552075][T15223] ? hook_file_ioctl_common+0x145/0x410 [ 271.552090][T15223] ? __fget_files+0x20e/0x3c0 [ 271.552105][T15223] security_file_ioctl+0x9b/0x240 [ 271.552122][T15223] __x64_sys_ioctl+0xb7/0x210 [ 271.552140][T15223] do_syscall_64+0xcd/0x4e0 [ 271.552161][T15223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.552173][T15223] RIP: 0033:0x7f103e18ec29 [ 271.552183][T15223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.552194][T15223] RSP: 002b:00007f103ef65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.552209][T15223] RAX: ffffffffffffffda RBX: 00007f103e3d5fa0 RCX: 00007f103e18ec29 [ 271.552216][T15223] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 271.552222][T15223] RBP: 00007f103ef65090 R08: 0000000000000000 R09: 0000000000000000 [ 271.552229][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.552235][T15223] R13: 00007f103e3d6038 R14: 00007f103e3d5fa0 R15: 00007ffc58c6a998 [ 271.552248][T15223] [ 271.552259][T15223] ERROR: Out of memory at tomoyo_realpath_from_path. [ 271.726423][T15229] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 271.728512][T15229] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.730912][T15229] vhci_hcd vhci_hcd.0: Device attached [ 271.735311][T15229] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5) [ 271.737378][T15229] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.740456][T15229] vhci_hcd vhci_hcd.0: Device attached [ 271.746563][T15232] vhci_hcd: connection closed [ 271.746641][T15230] vhci_hcd: connection closed [ 271.747291][ T13] vhci_hcd: stop threads [ 271.751195][ T13] vhci_hcd: release socket [ 271.752682][ T13] vhci_hcd: disconnect device [ 271.754202][ T13] vhci_hcd: stop threads [ 271.755576][ T13] vhci_hcd: release socket [ 271.757020][ T13] vhci_hcd: disconnect device [ 272.132454][T15242] FAULT_INJECTION: forcing a failure. [ 272.132454][T15242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.137557][T15242] CPU: 0 UID: 0 PID: 15242 Comm: syz.5.2729 Not tainted syzkaller #0 PREEMPT(full) [ 272.137572][T15242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 272.137579][T15242] Call Trace: [ 272.137583][T15242] [ 272.137587][T15242] dump_stack_lvl+0x16c/0x1f0 [ 272.137609][T15242] should_fail_ex+0x512/0x640 [ 272.137626][T15242] _copy_from_iter+0x29f/0x1720 [ 272.137644][T15242] ? __alloc_skb+0x200/0x380 [ 272.137658][T15242] ? __pfx__copy_from_iter+0x10/0x10 [ 272.137674][T15242] ? cap_capable+0xb3/0x250 [ 272.137692][T15242] netlink_sendmsg+0x829/0xdd0 [ 272.137709][T15242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.137728][T15242] ____sys_sendmsg+0xa95/0xc70 [ 272.137746][T15242] ? copy_msghdr_from_user+0x10a/0x160 [ 272.137759][T15242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.137782][T15242] ___sys_sendmsg+0x134/0x1d0 [ 272.137796][T15242] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.137825][T15242] __sys_sendmsg+0x16d/0x220 [ 272.137838][T15242] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.137874][T15242] do_syscall_64+0xcd/0x4e0 [ 272.137890][T15242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.137902][T15242] RIP: 0033:0x7fc0d5d8ec29 [ 272.137911][T15242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.137922][T15242] RSP: 002b:00007fc0d6cda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.137933][T15242] RAX: ffffffffffffffda RBX: 00007fc0d5fd5fa0 RCX: 00007fc0d5d8ec29 [ 272.137940][T15242] RDX: 0000000020004804 RSI: 0000200000000e40 RDI: 0000000000000004 [ 272.137947][T15242] RBP: 00007fc0d6cda090 R08: 0000000000000000 R09: 0000000000000000 [ 272.137953][T15242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.137959][T15242] R13: 00007fc0d5fd6038 R14: 00007fc0d5fd5fa0 R15: 00007ffccccffe28 [ 272.137973][T15242] [ 272.214176][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.501994][T15261] IPv6: NLM_F_CREATE should be specified when creating new route [ 272.507213][T15261] loop6: detected capacity change from 0 to 2560 [ 272.509601][T15261] buffer_io_error: 6 callbacks suppressed [ 272.509609][T15261] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.513990][T15261] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.516389][T15261] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.519100][T15261] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.521591][T15261] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.524062][T15261] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.526555][T15261] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.529273][T15261] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.532515][T15261] ldm_validate_partition_table(): Disk read failed. [ 272.534670][T15261] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.537278][T15261] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.541227][T15261] Dev loop6: unable to read RDB block 0 [ 272.543245][T15261] loop6: unable to read partition table [ 272.546707][T15261] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 272.649157][T15267] dns_resolver: Unsupported content type (234) [ 272.724001][T15272] FAULT_INJECTION: forcing a failure. [ 272.724001][T15272] name failslab, interval 1, probability 0, space 0, times 0 [ 272.728280][T15272] CPU: 0 UID: 0 PID: 15272 Comm: syz.5.2741 Not tainted syzkaller #0 PREEMPT(full) [ 272.728295][T15272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 272.728302][T15272] Call Trace: [ 272.728306][T15272] [ 272.728310][T15272] dump_stack_lvl+0x16c/0x1f0 [ 272.728328][T15272] should_fail_ex+0x512/0x640 [ 272.728343][T15272] ? __kmalloc_noprof+0xbf/0x510 [ 272.728356][T15272] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 272.728374][T15272] should_failslab+0xc2/0x120 [ 272.728387][T15272] __kmalloc_noprof+0xd2/0x510 [ 272.728405][T15272] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 272.728440][T15272] ? cred_has_capability.isra.0+0x190/0x310 [ 272.728459][T15272] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 272.728494][T15272] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 272.728517][T15272] ? bpf_lsm_capable+0x9/0x10 [ 272.728533][T15272] ? security_capable+0x7e/0x260 [ 272.728549][T15272] genl_rcv_msg+0x55c/0x800 [ 272.728567][T15272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.728584][T15272] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 272.728594][T15272] ? __pfx_nl802154_set_cca_ed_level+0x10/0x10 [ 272.728605][T15272] ? __pfx_nl802154_post_doit+0x10/0x10 [ 272.728622][T15272] ? __lock_acquire+0x62e/0x1ce0 [ 272.728642][T15272] netlink_rcv_skb+0x158/0x420 [ 272.728657][T15272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.728674][T15272] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.728694][T15272] ? netlink_deliver_tap+0x1ae/0xd30 [ 272.728707][T15272] ? is_vmalloc_addr+0x86/0xa0 [ 272.728720][T15272] genl_rcv+0x28/0x40 [ 272.728734][T15272] netlink_unicast+0x5a7/0x870 [ 272.728751][T15272] ? __pfx_netlink_unicast+0x10/0x10 [ 272.728770][T15272] netlink_sendmsg+0x8d1/0xdd0 [ 272.728787][T15272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.728807][T15272] ____sys_sendmsg+0xa95/0xc70 [ 272.728824][T15272] ? copy_msghdr_from_user+0x10a/0x160 [ 272.728838][T15272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.728861][T15272] ___sys_sendmsg+0x134/0x1d0 [ 272.728875][T15272] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.728906][T15272] __sys_sendmsg+0x16d/0x220 [ 272.728920][T15272] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.728942][T15272] do_syscall_64+0xcd/0x4e0 [ 272.728958][T15272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.728969][T15272] RIP: 0033:0x7fc0d5d8ec29 [ 272.728978][T15272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.728989][T15272] RSP: 002b:00007fc0d6cda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.729000][T15272] RAX: ffffffffffffffda RBX: 00007fc0d5fd5fa0 RCX: 00007fc0d5d8ec29 [ 272.729006][T15272] RDX: 0000000020004804 RSI: 0000200000000e40 RDI: 0000000000000004 [ 272.729013][T15272] RBP: 00007fc0d6cda090 R08: 0000000000000000 R09: 0000000000000000 [ 272.729019][T15272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.729025][T15272] R13: 00007fc0d5fd6038 R14: 00007fc0d5fd5fa0 R15: 00007ffccccffe28 [ 272.729039][T15272] [ 272.791419][T15276] netlink: 'syz.0.2743': attribute type 5 has an invalid length. [ 272.791783][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.795660][T15276] netlink: 'syz.0.2743': attribute type 7 has an invalid length. [ 272.851313][T15276] : entered promiscuous mode [ 272.852400][T15279] netlink: 'syz.0.2743': attribute type 10 has an invalid length. [ 272.920345][T15279] batman_adv: batadv0: Adding interface: team0 [ 272.922347][T15279] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.933106][T15279] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 272.973106][T15290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2747'. [ 273.084341][T15298] 9pnet_fd: Insufficient options for proto=fd [ 273.084520][T15299] 9pnet_fd: Insufficient options for proto=fd [ 273.160551][T15303] 9pnet_virtio: no channels available for device syz [ 273.166297][T15303] loop2: detected capacity change from 0 to 7 [ 273.170078][T15303] Dev loop2: unable to read RDB block 7 [ 273.172157][T15303] loop2: unable to read partition table [ 273.174312][T15303] loop2: partition table beyond EOD, truncated [ 273.176714][T15303] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 273.242596][T15308] FAULT_INJECTION: forcing a failure. [ 273.242596][T15308] name failslab, interval 1, probability 0, space 0, times 0 [ 273.255988][T15308] CPU: 3 UID: 0 PID: 15308 Comm: syz.0.2755 Not tainted syzkaller #0 PREEMPT(full) [ 273.256013][T15308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.256023][T15308] Call Trace: [ 273.256029][T15308] [ 273.256035][T15308] dump_stack_lvl+0x16c/0x1f0 [ 273.256064][T15308] should_fail_ex+0x512/0x640 [ 273.256085][T15308] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 273.256106][T15308] should_failslab+0xc2/0x120 [ 273.256124][T15308] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 273.256142][T15308] ? __alloc_skb+0x2b2/0x380 [ 273.256164][T15308] __alloc_skb+0x2b2/0x380 [ 273.256181][T15308] ? __pfx___alloc_skb+0x10/0x10 [ 273.256200][T15308] ? genl_rcv_msg+0x4bb/0x800 [ 273.256231][T15308] netlink_ack+0x15d/0xb80 [ 273.256259][T15308] netlink_rcv_skb+0x332/0x420 [ 273.256280][T15308] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.256305][T15308] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.256336][T15308] ? netlink_deliver_tap+0x1ae/0xd30 [ 273.256356][T15308] ? is_vmalloc_addr+0x86/0xa0 [ 273.256378][T15308] genl_rcv+0x28/0x40 [ 273.256401][T15308] netlink_unicast+0x5a7/0x870 [ 273.256429][T15308] ? __pfx_netlink_unicast+0x10/0x10 [ 273.256462][T15308] netlink_sendmsg+0x8d1/0xdd0 [ 273.256490][T15308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.256523][T15308] ____sys_sendmsg+0xa95/0xc70 [ 273.256550][T15308] ? copy_msghdr_from_user+0x10a/0x160 [ 273.256572][T15308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.256610][T15308] ___sys_sendmsg+0x134/0x1d0 [ 273.256634][T15308] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.256691][T15308] __sys_sendmsg+0x16d/0x220 [ 273.256714][T15308] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.256752][T15308] do_syscall_64+0xcd/0x4e0 [ 273.256778][T15308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.256795][T15308] RIP: 0033:0x7f0182d8ec29 [ 273.256811][T15308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.256827][T15308] RSP: 002b:00007f0183b73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.256845][T15308] RAX: ffffffffffffffda RBX: 00007f0182fd5fa0 RCX: 00007f0182d8ec29 [ 273.256857][T15308] RDX: 0000000020004804 RSI: 0000200000000e40 RDI: 0000000000000004 [ 273.256867][T15308] RBP: 00007f0183b73090 R08: 0000000000000000 R09: 0000000000000000 [ 273.256878][T15308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.256888][T15308] R13: 00007f0182fd6038 R14: 00007f0182fd5fa0 R15: 00007ffd50a39cb8 [ 273.256928][T15308] [ 273.272147][T15311] netlink: 292 bytes leftover after parsing attributes in process `syz.5.2753'. [ 273.613540][T15338] xt_policy: neither incoming nor outgoing policy selected [ 274.193882][T15379] FAULT_INJECTION: forcing a failure. [ 274.193882][T15379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.198027][T15379] CPU: 3 UID: 0 PID: 15379 Comm: syz.8.2777 Not tainted syzkaller #0 PREEMPT(full) [ 274.198042][T15379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.198049][T15379] Call Trace: [ 274.198054][T15379] [ 274.198058][T15379] dump_stack_lvl+0x16c/0x1f0 [ 274.198076][T15379] should_fail_ex+0x512/0x640 [ 274.198093][T15379] _copy_to_user+0x32/0xd0 [ 274.198111][T15379] simple_read_from_buffer+0xcb/0x170 [ 274.198124][T15379] proc_fail_nth_read+0x197/0x240 [ 274.198138][T15379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.198152][T15379] ? rw_verify_area+0xcf/0x6c0 [ 274.198169][T15379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.198181][T15379] vfs_read+0x1e1/0xcf0 [ 274.198194][T15379] ? __pfx___mutex_lock+0x10/0x10 [ 274.198210][T15379] ? __pfx_vfs_read+0x10/0x10 [ 274.198225][T15379] ? __fget_files+0x20e/0x3c0 [ 274.198241][T15379] ksys_read+0x12a/0x250 [ 274.198251][T15379] ? __pfx_ksys_read+0x10/0x10 [ 274.198266][T15379] do_syscall_64+0xcd/0x4e0 [ 274.198282][T15379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.198294][T15379] RIP: 0033:0x7f103e18d63c [ 274.198302][T15379] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 274.198313][T15379] RSP: 002b:00007f103ef65030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.198324][T15379] RAX: ffffffffffffffda RBX: 00007f103e3d5fa0 RCX: 00007f103e18d63c [ 274.198331][T15379] RDX: 000000000000000f RSI: 00007f103ef650a0 RDI: 0000000000000003 [ 274.198337][T15379] RBP: 00007f103ef65090 R08: 0000000000000000 R09: 0000000000000000 [ 274.198344][T15379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.198350][T15379] R13: 00007f103e3d6038 R14: 00007f103e3d5fa0 R15: 00007ffc58c6a998 [ 274.198363][T15379] [ 274.319428][T15381] could not allocate digest TFM handle blake2s-160-arm [ 274.325184][T15390] pim6reg: entered allmulticast mode [ 274.415577][T15407] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2784'. [ 274.739834][T15427] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2790'. [ 274.769796][T15429] Invalid ELF header type: 0 != 1 [ 274.805195][ T5978] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 274.808420][ T5978] Bluetooth: hci3: Injecting HCI hardware error event [ 274.811777][ T5978] Bluetooth: hci3: hardware error 0x00 [ 274.849617][T15429] netlink: 180 bytes leftover after parsing attributes in process `syz.8.2791'. [ 275.079016][T15442] sp0: Synchronizing with TNC [ 275.130263][T15444] netlink: 'syz.8.2796': attribute type 10 has an invalid length. [ 275.143744][T15444] batman_adv: batadv0: Adding interface: team0 [ 275.146594][T15444] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.154885][T15444] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 275.159960][T15444] netlink: 'syz.8.2796': attribute type 10 has an invalid length. [ 275.162497][T15444] netlink: 'syz.8.2796': attribute type 10 has an invalid length. [ 275.165115][T15444] netlink: 'syz.8.2796': attribute type 10 has an invalid length. [ 275.167798][T15444] netlink: 'syz.8.2796': attribute type 10 has an invalid length. [ 275.339014][ T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 275.499519][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 275.503041][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.506175][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.509378][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.512646][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.516505][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.519702][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.653911][T15460] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2799'. [ 275.692567][ T5981] Bluetooth: hci3: unexpected event for opcode 0x203e [ 275.696000][T15462] team0: Device ipvlan1 failed to register rx_handler [ 275.703623][T15463] team0: Device ipvlan1 failed to register rx_handler [ 275.753457][ T9] usb 10-1: GET_CAPABILITIES returned 0 [ 275.756481][ T9] usbtmc 10-1:16.0: can't read capabilities [ 275.818078][ T40] kauditd_printk_skb: 263 callbacks suppressed [ 275.818095][ T40] audit: type=1400 audit(263.317:9533): avc: denied { mounton } for pid=15466 comm="syz.6.2804" path="/170/file0" dev="tmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 275.829563][ T40] audit: type=1400 audit(263.326:9534): avc: denied { create } for pid=15466 comm="syz.6.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 275.971921][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.975989][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.979694][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.984242][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.988002][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.991515][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.994791][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.000078][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.003915][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.007751][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.011539][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.015328][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.019490][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.023275][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.026972][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.030728][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.045196][ T53] usb 10-1: USB disconnect, device number 10 [ 276.349880][T15472] validate_nla: 30 callbacks suppressed [ 276.349895][T15472] netlink: 'syz.8.2806': attribute type 6 has an invalid length. [ 276.356815][T15472] xt_policy: neither incoming nor outgoing policy selected [ 276.408027][T15472] netlink: 'syz.8.2806': attribute type 6 has an invalid length. [ 276.485085][ T40] audit: type=1400 audit(263.943:9535): avc: denied { prog_load } for pid=15476 comm="syz.8.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 276.493061][ T40] audit: type=1400 audit(263.943:9536): avc: denied { read write } for pid=15476 comm="syz.8.2807" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 276.503582][ T40] audit: type=1400 audit(263.943:9537): avc: denied { open } for pid=15476 comm="syz.8.2807" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 276.513270][ T40] audit: type=1400 audit(263.943:9538): avc: denied { ioctl } for pid=15476 comm="syz.8.2807" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 276.707454][ T40] audit: type=1400 audit(264.140:9539): avc: denied { allowed } for pid=15487 comm="syz.6.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 276.720119][ T40] audit: type=1400 audit(264.158:9540): avc: denied { map_create } for pid=15487 comm="syz.6.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 276.728061][ T40] audit: type=1400 audit(264.158:9541): avc: denied { create } for pid=15487 comm="syz.6.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 276.738229][ T40] audit: type=1400 audit(264.158:9542): avc: denied { write } for pid=15487 comm="syz.6.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 276.820611][T15495] overlayfs: failed to clone upperpath [ 276.825928][T15495] netlink: 'syz.6.2815': attribute type 12 has an invalid length. [ 276.828896][T15495] __nla_validate_parse: 2 callbacks suppressed [ 276.828907][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2815'. [ 276.842278][T11173] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.842400][T15495] netlink: 'syz.6.2815': attribute type 12 has an invalid length. [ 276.845448][T11173] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.848706][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2815'. [ 276.851305][T11173] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.858679][T11173] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.901115][ T53] libceph: connect (1)[c::]:6789 error -22 [ 276.903073][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 276.969433][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2814'. [ 277.026803][ T53] libceph: connect (1)[b::]:6789 error -22 [ 277.031980][ T53] libceph: mon0 (1)[b::]:6789 connect error [ 277.179041][ T53] libceph: connect (1)[c::]:6789 error -22 [ 277.181202][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 277.184618][T15512] sctp: [Deprecated]: syz.6.2818 (pid 15512) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.184618][T15512] Use struct sctp_sack_info instead [ 277.285080][ T5978] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 277.317714][ T53] libceph: connect (1)[b::]:6789 error -22 [ 277.319661][ T53] libceph: mon0 (1)[b::]:6789 connect error [ 277.735744][ T53] libceph: connect (1)[c::]:6789 error -22 [ 277.738066][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 277.807265][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2831'. [ 277.865705][ T53] libceph: connect (1)[b::]:6789 error -22 [ 277.868474][ T53] libceph: mon0 (1)[b::]:6789 connect error [ 279.337738][T10761] libceph: connect (1)[b::]:6789 error -22 [ 279.339809][T10761] libceph: mon0 (1)[b::]:6789 connect error [ 279.341948][T10761] libceph: connect (1)[c::]:6789 error -22 [ 279.344368][T10761] libceph: mon0 (1)[c::]:6789 connect error [ 279.576222][T15614] block nbd0: Attempted send on invalid socket [ 279.578695][T15614] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.582249][T15614] vxfs: unable to read disk superblock at 1 [ 279.586550][T15614] block nbd0: Attempted send on invalid socket [ 279.589575][T15614] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.593513][T15614] vxfs: unable to read disk superblock at 8 [ 279.596380][T15614] vxfs: can't find superblock. [ 279.600288][T15614] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 279.835065][T15630] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2858'. [ 280.106298][T15497] ceph: No mds server is up or the cluster is laggy [ 280.106321][T15500] ceph: No mds server is up or the cluster is laggy [ 280.190820][ T9] IPVS: starting estimator thread 0... [ 280.211181][T15656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2865'. [ 280.289115][T15654] IPVS: using max 44 ests per chain, 105600 per kthread [ 280.367573][T15661] netfs: Couldn't get user pages (rc=-14) [ 280.430045][T15666] sp0: Synchronizing with TNC [ 280.479793][T15669] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2870'. [ 280.581697][T15675] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 280.800019][T15693] 9pnet_fd: Insufficient options for proto=fd [ 280.871608][T15697] 9pnet_virtio: no channels available for device syz [ 280.874780][T15697] block nbd8: Attempted send on invalid socket [ 280.880192][T15697] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 280.883394][T15697] SQUASHFS error: Failed to read block 0x0: -5 [ 280.885383][T15697] unable to read squashfs_super_block [ 280.891250][T15699] 9pnet_virtio: no channels available for device syz [ 280.891726][T15697] block nbd8: Attempted send on invalid socket [ 280.896193][T15697] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 280.902012][T15697] SQUASHFS error: Failed to read block 0x0: -5 [ 280.904347][T15697] unable to read squashfs_super_block [ 280.961413][T15706] 9pnet_virtio: no channels available for device syz [ 280.969519][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'. [ 280.972519][T15708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2886'. [ 280.975964][T15708] netlink: 'syz.0.2886': attribute type 14 has an invalid length. [ 280.980053][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'. [ 280.982985][T15708] netlink: 'syz.0.2886': attribute type 14 has an invalid length. [ 281.012804][T15710] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.282448][ T40] kauditd_printk_skb: 176 callbacks suppressed [ 281.282465][ T40] audit: type=1400 audit(268.424:9719): avc: denied { mount } for pid=15723 comm="syz.8.2891" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 281.305312][ T40] audit: type=1400 audit(268.452:9720): avc: denied { unmount } for pid=11145 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 281.333407][ T40] audit: type=1400 audit(268.471:9721): avc: denied { module_request } for pid=15725 comm="syz.8.2892" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 281.345945][ T40] audit: type=1400 audit(268.480:9722): avc: denied { read write } for pid=11145 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.356654][ T40] audit: type=1400 audit(268.480:9723): avc: denied { open } for pid=11145 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.365398][ T40] audit: type=1400 audit(268.480:9724): avc: denied { ioctl } for pid=11145 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.416256][ T40] audit: type=1400 audit(268.555:9725): avc: denied { ioctl } for pid=15733 comm="syz.8.2894" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.619626][ T40] audit: type=1400 audit(268.742:9726): avc: denied { prog_load } for pid=15740 comm="syz.6.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 281.620134][T15664] netfs: Couldn't get user pages (rc=-4) [ 281.625737][ T40] audit: type=1400 audit(268.742:9727): avc: denied { bpf } for pid=15740 comm="syz.6.2897" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 281.625763][ T40] audit: type=1400 audit(268.742:9728): avc: denied { perfmon } for pid=15740 comm="syz.6.2897" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 281.630034][T15664] netfs: Zero-sized read [R=13f2] [ 281.668116][ T9] usb 13-1: new full-speed USB device number 17 using dummy_hcd [ 281.829834][ T9] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.834965][ T9] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.837883][ T9] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.840679][ T9] usb 13-1: Product: syz [ 281.842331][ T9] usb 13-1: Manufacturer: ã°Š [ 281.843864][ T9] usb 13-1: SerialNumber: syz [ 282.266612][ T9] cdc_ether 13-1:1.0: probe with driver cdc_ether failed with error -22 [ 282.274091][ T9] usb 13-1: USB disconnect, device number 17 [ 286.094244][ T5981] Bluetooth: hci0: command 0x0406 tx timeout [ 292.083840][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 292.083852][ T40] audit: type=1400 audit(278.536:9745): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 292.093223][ T40] audit: type=1400 audit(278.536:9746): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 296.765447][ T40] audit: type=1400 audit(282.913:9747): avc: denied { execute } for pid=15761 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 296.774561][ T40] audit: type=1400 audit(282.913:9748): avc: denied { execute_no_trans } for pid=15761 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 297.193840][ T40] audit: type=1400 audit(283.315:9749): avc: denied { read } for pid=15762 comm="syz.8.2905" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 297.211601][ T40] audit: type=1400 audit(283.315:9750): avc: denied { open } for pid=15762 comm="syz.8.2905" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 297.225576][ T40] audit: type=1400 audit(283.315:9751): avc: denied { bind } for pid=15762 comm="syz.8.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 297.234351][ T40] audit: type=1400 audit(283.315:9752): avc: denied { ioctl } for pid=15762 comm="syz.8.2905" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 297.245899][ T40] audit: type=1400 audit(283.334:9753): avc: denied { create } for pid=15764 comm="syz.6.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 297.252298][ T40] audit: type=1400 audit(283.334:9754): avc: denied { write } for pid=15764 comm="syz.6.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 297.260727][T15773] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 297.369594][ T5981] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.376087][ T5981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.379991][ T5981] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.387526][ T5981] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.407972][ T5981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.446398][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 297.446414][ T40] audit: type=1400 audit(283.549:9775): avc: denied { read write } for pid=15785 comm="syz.0.2912" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.457911][ T40] audit: type=1400 audit(283.549:9776): avc: denied { open } for pid=15785 comm="syz.0.2912" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.466914][ T40] audit: type=1400 audit(283.549:9777): avc: denied { ioctl } for pid=15785 comm="syz.0.2912" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.479830][ T40] audit: type=1400 audit(283.559:9778): avc: denied { associate } for pid=15780 comm="syz.8.2911" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 297.487509][ T40] audit: type=1400 audit(283.559:9779): avc: denied { mounton } for pid=15779 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 297.547584][ T40] audit: type=1400 audit(283.643:9780): avc: denied { create } for pid=15788 comm="syz.8.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 297.554449][ T40] audit: type=1400 audit(283.643:9781): avc: denied { write } for pid=15788 comm="syz.8.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 297.564268][ T40] audit: type=1400 audit(283.652:9782): avc: denied { ioctl } for pid=15788 comm="syz.8.2913" path="socket:[68382]" dev="sockfs" ino=68382 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 297.640585][ T40] audit: type=1400 audit(283.736:9783): avc: denied { module_request } for pid=15779 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 297.671998][T15779] chnl_net:caif_netlink_parms(): no params data found [ 297.680305][ T40] audit: type=1400 audit(283.764:9784): avc: denied { read write } for pid=11145 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.813843][T15779] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.816719][T15779] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.819773][T15779] bridge_slave_0: entered allmulticast mode [ 297.823825][T15779] bridge_slave_0: entered promiscuous mode [ 297.828074][T15779] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.830339][T15779] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.832973][T15779] bridge_slave_1: entered allmulticast mode [ 297.836815][T15779] bridge_slave_1: entered promiscuous mode [ 297.913838][T15779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.921787][T15779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.977498][T15779] team0: Port device team_slave_0 added [ 297.981069][T15779] team0: Port device team_slave_1 added [ 298.020602][T15779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.023359][T15779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.037468][T15779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.041870][T15779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.044050][T15779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.054602][T15779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.110201][T15779] hsr_slave_0: entered promiscuous mode [ 298.112566][T15779] hsr_slave_1: entered promiscuous mode [ 298.114670][T15779] debugfs: 'hsr0' already exists in 'hsr' [ 298.116546][T15779] Cannot create hsr debugfs directory [ 298.185710][T15812] binder: BINDER_SET_CONTEXT_MGR already set [ 298.188325][T15812] binder: 15811:15812 ioctl 4018620d 2000000000c0 returned -16 [ 298.191361][T15812] binder: BINDER_SET_CONTEXT_MGR already set [ 298.193802][T15812] binder: 15811:15812 ioctl 4018620d 2000000000c0 returned -16 [ 298.197389][T15812] binder: BINDER_SET_CONTEXT_MGR already set [ 298.200020][T15815] binder: 15811:15815 ioctl 941c 0 returned -22 [ 298.200048][T15814] binder: 15811:15814 unknown command 0 [ 298.205030][T15812] binder: 15811:15812 ioctl 4018620d 2000000000c0 returned -16 [ 298.205568][T15814] binder: 15811:15814 ioctl c0306201 200000000080 returned -22 [ 298.329234][T15779] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.433392][T15779] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.446508][T15825] netlink: 'syz.8.2923': attribute type 4 has an invalid length. [ 298.535191][T15779] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.600689][T15779] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.769258][T15831] 9pnet_virtio: no channels available for device syz [ 298.885160][T15779] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 298.894381][T15779] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 298.900912][T15779] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 298.908094][T15779] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 298.969294][ T5978] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 298.972646][ T5978] CPU: 3 UID: 0 PID: 5978 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 298.972672][ T5978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.972684][ T5978] Workqueue: hci2 hci_rx_work [ 298.972708][ T5978] Call Trace: [ 298.972716][ T5978] [ 298.972723][ T5978] dump_stack_lvl+0x16c/0x1f0 [ 298.972748][ T5978] sysfs_warn_dup+0x7f/0xa0 [ 298.972769][ T5978] sysfs_create_dir_ns+0x24b/0x2b0 [ 298.972785][ T5978] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 298.972799][ T5978] ? find_held_lock+0x2b/0x80 [ 298.972817][ T5978] ? do_raw_spin_unlock+0x172/0x230 [ 298.972832][ T5978] kobject_add_internal+0x2c4/0x9b0 [ 298.972851][ T5978] kobject_add+0x16e/0x240 [ 298.972866][ T5978] ? __pfx_kobject_add+0x10/0x10 [ 298.972882][ T5978] ? do_raw_spin_unlock+0x172/0x230 [ 298.972895][ T5978] ? kobject_put+0xab/0x5a0 [ 298.972914][ T5978] device_add+0x288/0x1aa0 [ 298.972947][ T5978] ? __pfx_dev_set_name+0x10/0x10 [ 298.972965][ T5978] ? __pfx_device_add+0x10/0x10 [ 298.972982][ T5978] ? mgmt_send_event_skb+0x2fb/0x460 [ 298.972998][ T5978] hci_conn_add_sysfs+0x17e/0x230 [ 298.973014][ T5978] le_conn_complete_evt+0x1075/0x1d70 [ 298.973027][ T5978] ? preempt_count_sub+0xb0/0x160 [ 298.973045][ T5978] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 298.973056][ T5978] ? hci_event_packet+0x459/0x11c0 [ 298.973071][ T5978] hci_le_conn_complete_evt+0x23c/0x370 [ 298.973086][ T5978] hci_le_meta_evt+0x357/0x5e0 [ 298.973098][ T5978] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 298.973112][ T5978] hci_event_packet+0x682/0x11c0 [ 298.973123][ T5978] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 298.973140][ T5978] ? __pfx_hci_event_packet+0x10/0x10 [ 298.973153][ T5978] ? kcov_remote_start+0x3c9/0x6d0 [ 298.973165][ T5978] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.973184][ T5978] hci_rx_work+0x2c5/0x16b0 [ 298.973199][ T5978] ? rcu_is_watching+0x12/0xc0 [ 298.973215][ T5978] process_one_work+0x9cc/0x1b70 [ 298.973234][ T5978] ? __pfx_process_one_work+0x10/0x10 [ 298.973250][ T5978] ? assign_work+0x1a0/0x250 [ 298.973263][ T5978] worker_thread+0x6c8/0xf10 [ 298.973279][ T5978] ? __kthread_parkme+0x19e/0x250 [ 298.973295][ T5978] ? __pfx_worker_thread+0x10/0x10 [ 298.973307][ T5978] kthread+0x3c2/0x780 [ 298.973318][ T5978] ? __pfx_kthread+0x10/0x10 [ 298.973329][ T5978] ? rcu_is_watching+0x12/0xc0 [ 298.973342][ T5978] ? __pfx_kthread+0x10/0x10 [ 298.973353][ T5978] ret_from_fork+0x56a/0x730 [ 298.973363][ T5978] ? __pfx_kthread+0x10/0x10 [ 298.973374][ T5978] ret_from_fork_asm+0x1a/0x30 [ 298.973395][ T5978] [ 298.973444][ T5978] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 298.977866][T15779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.981048][ T5978] Bluetooth: hci2: failed to register connection device [ 298.993214][T15779] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.997136][ T5978] Bluetooth: hci2: link tx timeout [ 299.002459][T11173] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.002817][ T5978] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 299.004071][T11173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.084910][T11173] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.087311][T11173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.124650][T15779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.167977][T15869] __nla_validate_parse: 2 callbacks suppressed [ 299.167988][T15869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2935'. [ 299.177686][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2932'. [ 299.181018][T15859] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2932'. [ 299.235070][T15877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2936'. [ 299.282324][T15880] netlink: 'syz.0.2937': attribute type 11 has an invalid length. [ 299.297492][T15779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.606480][T15779] veth0_vlan: entered promiscuous mode [ 299.606818][ T5978] Bluetooth: hci1: command tx timeout [ 299.619222][T15779] veth1_vlan: entered promiscuous mode [ 299.638178][T15779] veth0_macvtap: entered promiscuous mode [ 299.646249][T15893] random: crng reseeded on system resumption [ 299.650522][T15779] veth1_macvtap: entered promiscuous mode [ 299.662975][T15779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.674326][T15779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.687262][ T1150] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.690691][ T1150] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.702229][ T1150] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.713607][ T1150] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.795246][T11221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.799037][T11221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.839012][T11221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.844339][T11221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.874241][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2942'. [ 299.877490][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2942'. [ 299.929797][T15903] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 299.932155][T15904] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2904'. [ 299.933871][T15903] SELinux: failed to load policy [ 299.962876][T15903] sch_tbf: burst 88 is lower than device gre0 mtu (1500) ! [ 300.149438][T15919] binder: 15918:15919 unknown command 4294967295 [ 300.151742][T15919] binder: 15918:15919 ioctl c0306201 200000000080 returned -22 [ 300.193840][T15925] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2950'. [ 300.322534][T15928] netlink: 'syz.7.2951': attribute type 1 has an invalid length. [ 300.335146][T15928] team0: Device vxcan3 is of different type [ 300.398106][T15933] gretap1: entered promiscuous mode [ 300.405225][T15933] team0: Port device gretap1 added [ 300.420022][T15933] macvlan2: entered promiscuous mode [ 300.422337][T15933] macvlan2: entered allmulticast mode [ 300.424709][T15933] team0: Device macvlan2 is already an upper device of the team interface [ 300.584135][T15949] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.2959'. [ 300.648206][T15954] overlayfs: conflicting lowerdir path [ 301.231751][ T5981] Bluetooth: hci2: command 0x0406 tx timeout [ 301.263791][ T839] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 301.424127][ T839] usb 5-1: Using ep0 maxpacket: 8 [ 301.429746][ T839] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 301.433497][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.437136][ T839] usb 5-1: Product: syz [ 301.438923][ T839] usb 5-1: Manufacturer: syz [ 301.440870][ T839] usb 5-1: SerialNumber: syz [ 301.669687][ T839] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 301.841506][ T5981] Bluetooth: hci1: command tx timeout [ 302.002733][T15966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.006390][T15966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.010089][T15966] 9pnet_virtio: no channels available for device syz [ 302.070341][ T8683] usb 5-1: USB disconnect, device number 16 [ 302.077746][ T8683] usblp0: removed [ 304.065005][ T5981] Bluetooth: hci1: command tx timeout [ 305.518751][ T5981] Bluetooth: hci2: command 0x0406 tx timeout [ 306.277983][ T5978] Bluetooth: hci1: command tx timeout [ 316.264287][ T40] kauditd_printk_skb: 186 callbacks suppressed [ 316.264303][ T40] audit: type=1400 audit(301.154:9971): avc: denied { read write } for pid=15974 comm="syz.7.2968" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 316.265909][T15977] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2971'. [ 316.266990][ T40] audit: type=1400 audit(301.154:9972): avc: denied { open } for pid=15974 comm="syz.7.2968" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 316.274851][T15977] netlink: 'syz.0.2971': attribute type 2 has an invalid length. [ 316.281033][ T40] audit: type=1400 audit(301.154:9973): avc: denied { read } for pid=15976 comm="syz.8.2969" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 316.298511][ T40] audit: type=1400 audit(301.154:9974): avc: denied { open } for pid=15976 comm="syz.8.2969" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 316.310733][T15979] xt_l2tp: v2 tid > 0xffff: 16462212 [ 316.313093][ T40] audit: type=1400 audit(301.154:9975): avc: denied { ioctl } for pid=15976 comm="syz.8.2969" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 316.314033][T15984] netlink: 'syz.0.2972': attribute type 1 has an invalid length. [ 316.322952][ T40] audit: type=1400 audit(301.154:9976): avc: denied { mounton } for pid=15976 comm="syz.8.2969" path="/441/file0" dev="tmpfs" ino=2356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 316.336570][ T40] audit: type=1400 audit(301.154:9977): avc: denied { map_create } for pid=15978 comm="syz.6.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 316.344702][ T40] audit: type=1400 audit(301.154:9978): avc: denied { map_read map_write } for pid=15978 comm="syz.6.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 316.352673][ T40] audit: type=1400 audit(301.163:9979): avc: denied { mount } for pid=15976 comm="syz.8.2969" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 316.361508][ T40] audit: type=1400 audit(301.163:9980): avc: denied { create } for pid=15974 comm="syz.7.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 316.377792][T15984] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.382907][T15984] bond2: (slave bond3): making interface the new active one [ 316.385475][T15984] bond2: (slave bond3): Enslaving as an active interface with an up link [ 316.531565][T16002] 9pnet_virtio: no channels available for device syz [ 316.629266][T16011] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2980'. [ 316.678194][T16013] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 316.681082][T16013] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 316.962294][T11173] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.012457][T16026] netlink: 'syz.0.2986': attribute type 12 has an invalid length. [ 317.014447][T16024] netlink: 'syz.8.2985': attribute type 10 has an invalid length. [ 317.015786][T16026] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2986'. [ 317.025454][T16024] team0: Port device dummy0 added [ 317.028723][T16024] netlink: 'syz.8.2985': attribute type 10 has an invalid length. [ 317.035998][T16024] team0: Port device dummy0 removed [ 317.062444][T11173] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.134034][T11173] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.158775][T16033] cgroup: none used incorrectly [ 317.159930][T16035] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2989'. [ 317.258450][T11173] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.262424][T16043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.269139][T16043] bridge: RTM_NEWNEIGH with invalid ether address [ 317.273960][T16043] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2992'. [ 317.446765][T11173] bridge_slave_1: left allmulticast mode [ 317.449011][T11173] bridge_slave_1: left promiscuous mode [ 317.451198][T11173] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.455722][T11173] bridge_slave_0: left allmulticast mode [ 317.457610][T11173] bridge_slave_0: left promiscuous mode [ 317.459519][T11173] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.711301][T11173] dvmrp8 (unregistering): left allmulticast mode [ 317.764100][T16062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.983897][T16073] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2997'. [ 318.040546][T11173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.084779][T11173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.099202][T16079] FAULT_INJECTION: forcing a failure. [ 318.099202][T16079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.106009][T16079] CPU: 0 UID: 0 PID: 16079 Comm: syz.8.3002 Not tainted syzkaller #0 PREEMPT(full) [ 318.106035][T16079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 318.106045][T16079] Call Trace: [ 318.106052][T16079] [ 318.106059][T16079] dump_stack_lvl+0x16c/0x1f0 [ 318.106113][T16079] should_fail_ex+0x512/0x640 [ 318.106148][T16079] _copy_from_user+0x2e/0xd0 [ 318.106175][T16079] copy_msghdr_from_user+0x98/0x160 [ 318.106199][T16079] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 318.106232][T16079] ___sys_sendmsg+0xfe/0x1d0 [ 318.106254][T16079] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.106309][T16079] __sys_sendmsg+0x16d/0x220 [ 318.106333][T16079] ? __pfx___sys_sendmsg+0x10/0x10 [ 318.106364][T16079] ? fput+0x9b/0xd0 [ 318.106393][T16079] do_syscall_64+0xcd/0x4e0 [ 318.106427][T16079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.106447][T16079] RIP: 0033:0x7f103e18ec29 [ 318.106463][T16079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.106479][T16079] RSP: 002b:00007f103ef65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.106497][T16079] RAX: ffffffffffffffda RBX: 00007f103e3d5fa0 RCX: 00007f103e18ec29 [ 318.106508][T16079] RDX: 0000000004008000 RSI: 0000200000000e00 RDI: 0000000000000003 [ 318.106519][T16079] RBP: 00007f103ef65090 R08: 0000000000000000 R09: 0000000000000000 [ 318.106546][T16079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.106558][T16079] R13: 00007f103e3d6038 R14: 00007f103e3d5fa0 R15: 00007ffc58c6a998 [ 318.106583][T16079] [ 318.182445][T11173] bond0 (unregistering): Released all slaves [ 318.208218][T16072] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3000'. [ 318.372747][T16091] 9pnet_fd: p9_fd_create_tcp (16091): problem connecting socket to 127.0.0.1 [ 318.416856][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3007'. [ 318.440427][T16097] chnl_net:caif_netlink_parms(): no params data found [ 318.523439][T16100] netlink: 'syz.6.3011': attribute type 1 has an invalid length. [ 318.525887][T16100] netlink: 'syz.6.3011': attribute type 2 has an invalid length. [ 318.528234][T16100] netlink: 1172 bytes leftover after parsing attributes in process `syz.6.3011'. [ 318.668220][ T8684] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 318.703027][T16101] unknown channel width for channel at 909000KHz? [ 318.705836][T16101] unknown channel width for channel at 909000KHz? [ 318.708754][T16101] unknown channel width for channel at 909000KHz? [ 318.823010][T11173] hsr_slave_0: left promiscuous mode [ 318.825328][T11173] hsr_slave_1: left promiscuous mode [ 318.827477][T11173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.830053][T11173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.832803][T11173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.835188][T11173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.839175][ T8684] usb 5-1: Using ep0 maxpacket: 8 [ 318.845659][ T8684] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 318.848053][ T8684] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 318.851852][ T8684] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.855460][ T8684] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.858833][ T8684] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 318.864172][ T8684] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 318.866717][ T8684] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 318.870469][ T8684] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.875287][ T8684] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.876043][T16109] FAULT_INJECTION: forcing a failure. [ 318.876043][T16109] name failslab, interval 1, probability 0, space 0, times 0 [ 318.878690][ T8684] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 318.886333][T16109] CPU: 2 UID: 0 PID: 16109 Comm: syz.7.3013 Not tainted syzkaller #0 PREEMPT(full) [ 318.886357][T16109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 318.886367][T16109] Call Trace: [ 318.886372][T16109] [ 318.886378][T16109] dump_stack_lvl+0x16c/0x1f0 [ 318.886402][T16109] should_fail_ex+0x512/0x640 [ 318.886422][T16109] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 318.886444][T16109] should_failslab+0xc2/0x120 [ 318.886462][T16109] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 318.886479][T16109] ? __alloc_skb+0x2b2/0x380 [ 318.886498][T16109] __alloc_skb+0x2b2/0x380 [ 318.886514][T16109] ? __pfx___alloc_skb+0x10/0x10 [ 318.886562][T16109] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 318.886588][T16109] netlink_alloc_large_skb+0x69/0x130 [ 318.886609][T16109] netlink_sendmsg+0x6a1/0xdd0 [ 318.886634][T16109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.886665][T16109] ____sys_sendmsg+0xa95/0xc70 [ 318.886690][T16109] ? copy_msghdr_from_user+0x10a/0x160 [ 318.886707][T16109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.886741][T16109] ___sys_sendmsg+0x134/0x1d0 [ 318.886762][T16109] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.886810][T16109] __sys_sendmsg+0x16d/0x220 [ 318.886826][T16109] ? __pfx___sys_sendmsg+0x10/0x10 [ 318.886848][T16109] do_syscall_64+0xcd/0x4e0 [ 318.886864][T16109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.886876][T16109] RIP: 0033:0x7fc17458ec29 [ 318.886885][T16109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.886896][T16109] RSP: 002b:00007fc1727f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.886907][T16109] RAX: ffffffffffffffda RBX: 00007fc1747d5fa0 RCX: 00007fc17458ec29 [ 318.886917][T16109] RDX: 0000000004008000 RSI: 0000200000000e00 RDI: 0000000000000003 [ 318.886927][T16109] RBP: 00007fc1727f6090 R08: 0000000000000000 R09: 0000000000000000 [ 318.886937][T16109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.886946][T16109] R13: 00007fc1747d6038 R14: 00007fc1747d5fa0 R15: 00007ffdc00e4c88 [ 318.886969][T16109] [ 318.898885][T11173] veth1_macvtap: left promiscuous mode [ 318.901518][ T8684] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 318.902238][T11173] veth0_macvtap: left promiscuous mode [ 318.905173][ T8684] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 318.908826][T11173] veth1_vlan: left promiscuous mode [ 318.909100][ T8684] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.913988][T11173] veth0_vlan: left promiscuous mode [ 318.917171][ T8684] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.973757][ T8684] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 318.979893][ T8684] usb 5-1: string descriptor 0 read error: -22 [ 318.982280][ T8684] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 318.985679][ T8684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.992530][ T8684] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 319.059205][T11173] pim6reg13 (unregistering): left allmulticast mode [ 319.210813][ T10] usb 5-1: USB disconnect, device number 17 [ 319.763686][T11173] team0 (unregistering): Port device team_slave_1 removed [ 319.847153][T11173] team0 (unregistering): Port device team_slave_0 removed [ 320.496415][T16111] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3014'. [ 320.509419][T16093] macvtap1: entered allmulticast mode [ 320.511923][T16093] veth0_macvtap: entered allmulticast mode [ 320.641003][T16123] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 320.646233][T16123] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 320.931892][T16137] netlink: 'syz.7.3024': attribute type 10 has an invalid length. [ 320.932793][T16138] netlink: 'syz.7.3024': attribute type 10 has an invalid length. [ 320.938083][T16138] team0: entered promiscuous mode [ 320.939710][T16138] team_slave_0: entered promiscuous mode [ 320.941576][T16138] team_slave_1: entered promiscuous mode [ 320.943643][T16138] bridge0: port 3(team0) entered blocking state [ 320.945767][T16138] bridge0: port 3(team0) entered disabled state [ 320.951363][T16138] team0: entered allmulticast mode [ 320.953004][T16138] team_slave_0: entered allmulticast mode [ 320.954820][T16138] team_slave_1: entered allmulticast mode [ 320.956666][T16138] gretap1: entered allmulticast mode [ 320.959774][T16138] bridge0: port 3(team0) entered blocking state [ 320.961870][T16138] bridge0: port 3(team0) entered forwarding state [ 320.965597][T16138] SELinux: policydb string length 14080 does not match expected length 8 [ 320.969848][T16138] SELinux: failed to load policy [ 321.090190][T16162] FAULT_INJECTION: forcing a failure. [ 321.090190][T16162] name failslab, interval 1, probability 0, space 0, times 0 [ 321.094439][T16162] CPU: 0 UID: 0 PID: 16162 Comm: syz.0.3032 Not tainted syzkaller #0 PREEMPT(full) [ 321.094454][T16162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 321.094461][T16162] Call Trace: [ 321.094465][T16162] [ 321.094470][T16162] dump_stack_lvl+0x16c/0x1f0 [ 321.094488][T16162] should_fail_ex+0x512/0x640 [ 321.094524][T16162] should_failslab+0xc2/0x120 [ 321.094538][T16162] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 321.094551][T16162] ? skb_clone+0x190/0x3f0 [ 321.094567][T16162] skb_clone+0x190/0x3f0 [ 321.094581][T16162] netlink_deliver_tap+0xabd/0xd30 [ 321.094599][T16162] netlink_unicast+0x64c/0x870 [ 321.094616][T16162] ? __pfx_netlink_unicast+0x10/0x10 [ 321.094631][T16162] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 321.094649][T16162] netlink_sendmsg+0x8d1/0xdd0 [ 321.094666][T16162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.094686][T16162] ____sys_sendmsg+0xa95/0xc70 [ 321.094704][T16162] ? copy_msghdr_from_user+0x10a/0x160 [ 321.094717][T16162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.094753][T16162] ___sys_sendmsg+0x134/0x1d0 [ 321.094768][T16162] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.094799][T16162] __sys_sendmsg+0x16d/0x220 [ 321.094813][T16162] ? __pfx___sys_sendmsg+0x10/0x10 [ 321.094831][T16162] ? fput+0x9b/0xd0 [ 321.094848][T16162] do_syscall_64+0xcd/0x4e0 [ 321.094864][T16162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.094875][T16162] RIP: 0033:0x7f0182d8ec29 [ 321.094884][T16162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.094895][T16162] RSP: 002b:00007f0183b73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.094906][T16162] RAX: ffffffffffffffda RBX: 00007f0182fd5fa0 RCX: 00007f0182d8ec29 [ 321.094913][T16162] RDX: 0000000004008000 RSI: 0000200000000e00 RDI: 0000000000000003 [ 321.094919][T16162] RBP: 00007f0183b73090 R08: 0000000000000000 R09: 0000000000000000 [ 321.094925][T16162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.094931][T16162] R13: 00007f0182fd6038 R14: 00007f0182fd5fa0 R15: 00007ffd50a39cb8 [ 321.094945][T16162] [ 321.613373][ T6038] IPVS: starting estimator thread 0... [ 321.652315][ T40] kauditd_printk_skb: 217 callbacks suppressed [ 321.652330][ T40] audit: type=1400 audit(306.195:10198): avc: denied { read write } for pid=16199 comm="syz.7.3047" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 321.672146][ T40] audit: type=1400 audit(306.195:10199): avc: denied { open } for pid=16199 comm="syz.7.3047" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 321.681280][ T40] audit: type=1400 audit(306.195:10200): avc: denied { read } for pid=16199 comm="syz.7.3047" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 321.691102][ T40] audit: type=1400 audit(306.195:10201): avc: denied { open } for pid=16199 comm="syz.7.3047" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 321.701403][ T40] audit: type=1400 audit(306.195:10202): avc: denied { ioctl } for pid=16199 comm="syz.7.3047" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 321.712590][ T40] audit: type=1400 audit(306.195:10203): avc: denied { map } for pid=16199 comm="syz.7.3047" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 321.715040][T16196] IPVS: using max 44 ests per chain, 105600 per kthread [ 321.722395][ T40] audit: type=1400 audit(306.195:10204): avc: denied { execute } for pid=16199 comm="syz.7.3047" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 321.731813][T16206] __nla_validate_parse: 10 callbacks suppressed [ 321.731828][T16206] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3049'. [ 321.735274][ T40] audit: type=1400 audit(306.195:10205): avc: denied { ioctl } for pid=16199 comm="syz.7.3047" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 321.751322][ T40] audit: type=1400 audit(306.233:10206): avc: denied { create } for pid=16201 comm="syz.6.3048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 321.759961][ T40] audit: type=1400 audit(306.233:10207): avc: denied { mount } for pid=16201 comm="syz.6.3048" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 321.930386][T16220] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3054'. [ 321.934373][T16220] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3054'. [ 322.019000][T16227] fuse: Bad value for 'fd' [ 322.062485][T16232] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3060'. [ 322.073799][T16233] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3061'. [ 322.081313][T16233] netlink: 'syz.7.3061': attribute type 10 has an invalid length. [ 322.094017][T16233] dummy0: entered promiscuous mode [ 322.097019][T16233] dummy0: entered allmulticast mode [ 322.100585][T16233] team0: Port device dummy0 added [ 322.106789][T16233] netlink: 'syz.7.3061': attribute type 10 has an invalid length. [ 322.130311][T16233] dummy0: left promiscuous mode [ 322.133128][T16233] dummy0: left allmulticast mode [ 322.136608][T16233] team0: Port device dummy0 removed [ 322.143101][T16233] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 322.157719][T16238] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3060'. [ 322.227930][T16241] xt_limit: Overflow, try lower: 271964/0 [ 322.279399][T16245] dvmrp0: entered allmulticast mode ˆÊÿà ªªªªª3ªªªªª4ˆ¨"ÜN©[ 322.399484][T16257] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 322.648140][T16269] IPv6: NLM_F_CREATE should be specified when creating new route [ 322.656092][T16269] loop6: detected capacity change from 0 to 2560 [ 322.659554][T16269] buffer_io_error: 16 callbacks suppressed [ 322.659568][T16269] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.665618][T16269] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.669443][T16269] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.672685][T16269] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.676104][T16269] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.679693][T16269] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.683122][T16269] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.686526][T16269] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.689992][T16269] ldm_validate_partition_table(): Disk read failed. [ 322.692751][T16269] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.696217][T16269] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.699301][T16269] Dev loop6: unable to read RDB block 0 [ 322.701356][T16269] loop6: unable to read partition table [ 322.703649][T16269] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 323.011256][T16283] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 323.029366][T16283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.148936][T16290] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 323.148949][T16291] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 323.430243][T16302] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.435697][T16302] loop6: detected capacity change from 0 to 2560 [ 323.438770][T16302] ldm_validate_partition_table(): Disk read failed. [ 323.441684][T16302] Dev loop6: unable to read RDB block 0 [ 323.444197][T16302] loop6: unable to read partition table [ 323.446067][T16302] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 323.473663][ T5379] ldm_validate_partition_table(): Disk read failed. [ 323.476139][ T5379] Dev loop6: unable to read RDB block 0 [ 323.478086][ T5379] loop6: unable to read partition table [ 323.502920][T16315] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3089'. [ 323.525264][T16315] netlink: 'syz.6.3089': attribute type 10 has an invalid length. [ 323.537518][T16315] team0: Port device dummy0 added [ 323.544926][T16315] netlink: 'syz.6.3089': attribute type 10 has an invalid length. [ 323.569488][T16315] team0: Port device dummy0 removed [ 323.812169][T16337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3096'. [ 324.117869][T16355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3101'. [ 324.201996][T16360] program syz.0.3103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.202983][T16361] netlink: 'syz.0.3103': attribute type 12 has an invalid length. [ 324.209564][T16361] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3103'. [ 324.345255][T16369] netlink: 'syz.7.3106': attribute type 10 has an invalid length. [ 324.369747][T16369] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 324.372865][T16369] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 324.378845][T16369] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 324.538432][T16383] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 324.686613][T16397] netlink: 'syz.8.3115': attribute type 2 has an invalid length. [ 325.167984][ T29] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 325.243877][T16417] binder: Unknown parameter 'audit' [ 325.329640][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 325.333043][ T29] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 325.336025][ T29] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 325.341041][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.344550][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.347283][ T29] usb 5-1: Product: ဇ [ 325.348740][ T29] usb 5-1: Manufacturer: 嵛䎟螠隱雼皥꯱泅뼌㋔륂䪈魣쉙í䲟ț쉄â€ï¤³ï‚‘렽꧌킛雈ꯥ䞿팽얢鬤㔱哕춙æ³ä›”䶡ë¸ãœ›å­‘쫹쮤屼巚áµà£«ì¥™á «ã¿µåŒ–擹淲웜ᓼﻢ踯櫺詩㵔阑漰඀潕ì´å¢•㫯ဂ⻻෥⋟녵䪨﹂שּ∌贄辳ㆹ㓧细蚂 [ 325.358486][ T29] usb 5-1: SerialNumber: Њ [ 325.833851][T16403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.838445][T16403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.845891][ T29] cdc_ncm 5-1:1.0: bind() failure [ 325.851271][ T29] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 325.853717][ T29] cdc_ncm 5-1:1.1: bind() failure [ 325.857758][ T29] usb 5-1: USB disconnect, device number 18 [ 326.032681][T16427] netlink: 'syz.6.3127': attribute type 1 has an invalid length. [ 326.048467][T16427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.073740][T16427] veth3: entered promiscuous mode [ 326.084517][T16427] vlan2: entered allmulticast mode [ 326.086773][T16427] bond1: entered allmulticast mode [ 326.213422][T16435] netlink: 'syz.6.3129': attribute type 10 has an invalid length. [ 326.216029][T16435] team0: entered promiscuous mode [ 326.217832][T16435] bridge0: port 2(team0) entered blocking state [ 326.219998][T16435] bridge0: port 2(team0) entered disabled state [ 326.222119][T16435] team0: entered allmulticast mode [ 326.795240][T16453] IPv6: NLM_F_CREATE should be specified when creating new route [ 326.864178][T16461] bond0: option use_carrier: invalid value (10) [ 326.963794][T16470] 9pnet_fd: p9_fd_create_tcp (16470): problem connecting socket to 127.0.0.1 [ 327.025272][ T40] kauditd_printk_skb: 215 callbacks suppressed [ 327.025283][ T40] audit: type=1400 audit(311.209:10423): avc: denied { ioctl } for pid=16474 comm="syz.7.3142" path="socket:[75420]" dev="sockfs" ino=75420 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 327.281669][ T5978] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 327.294112][ T40] audit: type=1400 audit(311.462:10424): avc: denied { write } for pid=16479 comm="syz.8.3143" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 327.322224][ T40] audit: type=1400 audit(311.490:10425): avc: denied { connect } for pid=16481 comm="syz.0.3144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 327.387402][T16480] kvm: pic: non byte write [ 327.429001][ T40] audit: type=1400 audit(311.593:10426): avc: denied { ioctl } for pid=16485 comm="syz.6.3145" path="socket:[74389]" dev="sockfs" ino=74389 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 327.440753][ T40] audit: type=1400 audit(311.593:10427): avc: denied { ioctl } for pid=16485 comm="syz.6.3145" path="socket:[74388]" dev="sockfs" ino=74388 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.450298][ T40] audit: type=1400 audit(311.593:10428): avc: denied { create } for pid=16485 comm="syz.6.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.458317][ T40] audit: type=1400 audit(311.593:10429): avc: denied { getopt } for pid=16485 comm="syz.6.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.480706][ T40] audit: type=1400 audit(311.639:10430): avc: denied { allowed } for pid=16489 comm="syz.6.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 327.486984][ T40] audit: type=1400 audit(311.639:10431): avc: denied { create } for pid=16489 comm="syz.6.3147" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 327.494407][ T40] audit: type=1400 audit(311.649:10432): avc: denied { kexec_image_load } for pid=16493 comm="syz.0.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 327.502652][T16490] netlink: 'syz.6.3147': attribute type 27 has an invalid length. [ 327.640302][T16499] binder: BINDER_SET_CONTEXT_MGR already set [ 327.642820][T16499] binder: 16496:16499 ioctl 4018620d 2000000000c0 returned -16 [ 327.647315][T16498] binder: BINDER_SET_CONTEXT_MGR already set [ 327.650167][T16498] binder: 16496:16498 ioctl 4018620d 200000000040 returned -16 [ 327.650214][T16499] binder: BINDER_SET_CONTEXT_MGR already set [ 327.655624][T16499] binder: 16496:16499 ioctl 4018620d 200000000040 returned -16 [ 327.664284][T16498] binder: 16496:16498 ioctl c0306201 2000000001c0 returned -14 [ 327.838073][T16490] veth0_macvtap: left allmulticast mode [ 327.883492][T16490] macvtap0: left allmulticast mode [ 328.129692][T16490] geneve2: left promiscuous mode [ 328.131833][T16490] geneve2: left allmulticast mode [ 328.217037][T16490] veth3: left promiscuous mode [ 328.218759][T16494] __nla_validate_parse: 10 callbacks suppressed [ 328.218775][T16494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3148'. [ 328.226276][ T13] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.230391][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.234036][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 328.238693][ T13] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.242519][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.248020][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 328.251086][ T13] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.254289][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.259749][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 328.263491][ T13] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.275611][T16507] binder: binder_mmap: 16506 200000ffc000-200001000000 bad vm_flags failed -1 [ 328.279813][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.282608][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 328.376924][T16531] delete_channel: no stack [ 328.380669][T16531] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3161'. [ 328.405896][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3162'. [ 328.409792][T16535] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 328.412762][T16535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.417390][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3162'. [ 328.422606][T16535] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 328.425590][T16535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.431320][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3162'. [ 328.434422][T16535] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 328.436859][T16535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.440179][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3162'. [ 328.443429][T16535] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 328.445906][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3162'. [ 328.449022][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3162'. [ 328.452553][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3162'. [ 328.455564][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3162'. [ 328.570065][T16548] kvm: kvm [16547]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9f00 [ 328.573645][T16548] kvm: kvm [16547]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9f00 [ 328.697299][T16553] comedi comedi2: dt2814: I/O port conflict (0x5,2) [ 328.972463][T16548] kvm: kvm [16547]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xf000 [ 328.976352][T16548] kvm: kvm [16547]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xf000 [ 328.994659][T16568] No source specified [ 328.996394][T16548] kvm: kvm [16547]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xf000 [ 328.999648][T16568] No source specified [ 329.001634][T16568] No source specified [ 329.003562][T16568] No source specified [ 329.005380][T16568] No source specified [ 329.006997][T16568] No source specified [ 329.008432][T16568] No source specified [ 329.009848][T16568] No source specified [ 329.011769][T16568] No source specified [ 329.013456][T16548] kvm: kvm [16547]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf000 [ 329.013689][T16568] No source specified [ 329.017619][T16548] kvm: kvm [16547]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf000 [ 329.019068][T16568] No source specified [ 329.024450][T16568] No source specified [ 329.026402][T16568] No source specified [ 329.029023][T16568] No source specified [ 329.030980][T16568] No source specified [ 329.032843][T16568] No source specified [ 329.034668][T16568] No source specified [ 329.037155][T16568] No source specified [ 329.040426][T16568] No source specified [ 329.042236][T16568] No source specified [ 329.043979][T16568] No source specified [ 329.045360][T16568] No source specified [ 329.046812][T16568] No source specified [ 329.048327][T16568] No source specified [ 329.049997][T16568] No source specified [ 329.384739][T16587] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 329.387535][T16588] netlink: 'syz.7.3180': attribute type 21 has an invalid length. [ 329.597259][T16604] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 329.603556][T16604] overlayfs: overlapping lowerdir path [ 329.759875][T16628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16628 comm=syz.7.3194 [ 330.727149][T16694] can0: slcan on ttyS3. [ 330.735043][T16685] pimreg3: entered allmulticast mode [ 330.749789][T16685] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 330.823714][T16694] can0 (unregistered): slcan off ttyS3. [ 330.862290][T16700] bridge10: entered promiscuous mode [ 330.864120][T16700] bridge10: entered allmulticast mode [ 331.054975][T16711] 9pnet_virtio: no channels available for device syz [ 331.254901][T16728] netlink: 'syz.6.3227': attribute type 1 has an invalid length. [ 331.273437][T16728] bond2: (slave bridge1): making interface the new active one [ 331.277113][T16728] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 331.282470][T16728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=16728 comm=syz.6.3227 [ 331.584038][T16752] (syz.8.3235,16752,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 332.053626][T16755] netlink: 'syz.6.3237': attribute type 2 has an invalid length. [ 332.056515][T16755] netlink: 'syz.6.3237': attribute type 2 has an invalid length. [ 332.374436][ T40] kauditd_printk_skb: 255 callbacks suppressed [ 332.374451][ T40] audit: type=1400 audit(316.223:10688): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60548 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 332.385454][ T40] audit: type=1400 audit(316.223:10689): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=60548 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 332.414644][ T40] audit: type=1400 audit(316.251:10690): avc: denied { map_create } for pid=16761 comm="syz.0.3239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 332.421594][ T40] audit: type=1400 audit(316.251:10691): avc: denied { read write } for pid=16761 comm="syz.0.3239" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 332.430632][ T40] audit: type=1400 audit(316.251:10692): avc: denied { open } for pid=16761 comm="syz.0.3239" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 332.439787][ T40] audit: type=1400 audit(316.260:10693): avc: denied { mounton } for pid=16761 comm="syz.0.3239" path="/204/file0" dev="tmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 332.447205][ T40] audit: type=1400 audit(316.260:10694): avc: denied { read write } for pid=16763 comm="syz.7.3240" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 332.455713][ T40] audit: type=1400 audit(316.260:10695): avc: denied { open } for pid=16763 comm="syz.7.3240" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 332.463131][ T40] audit: type=1400 audit(316.270:10696): avc: denied { ioctl } for pid=16763 comm="syz.7.3240" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 332.473239][ T40] audit: type=1400 audit(316.279:10697): avc: denied { create } for pid=16763 comm="syz.7.3240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 332.595678][T16775] netlink: 'syz.0.3243': attribute type 11 has an invalid length. [ 332.808489][T16777] syz.8.3244 (16777): drop_caches: 2 [ 332.986935][T16805] overlayfs: failed to clone lowerpath [ 333.124975][T16818] netlink: 'syz.6.3258': attribute type 4 has an invalid length. [ 333.136078][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.138163][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.163083][T16820] new mount options do not match the existing superblock, will be ignored [ 333.207116][T16822] overlay: ./file1 is not a directory [ 333.285043][T16829] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 334.253659][T16849] __nla_validate_parse: 23 callbacks suppressed [ 334.253672][T16849] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3271'. [ 334.286882][T16857] net_ratelimit: 19 callbacks suppressed [ 334.286894][T16857] openvswitch: netlink: IP tunnel dst address not specified [ 334.288089][T16858] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3273'. [ 334.295061][T16858] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3273'. [ 334.440864][T16870] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3279'. [ 334.445335][T16872] overlayfs: failed to clone upperpath [ 334.501968][T16870] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.609409][T16877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.613768][T16870] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.620843][T16897] tmpfs: Group quota inode hardlimit too large. [ 334.626774][T16877] random: crng reseeded on system resumption [ 334.701400][T16870] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.702932][T16901] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3288'. [ 334.725099][T16901] kvm: kvm [16900]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 334.728988][T16901] kvm: kvm [16900]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 334.796486][T16870] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.935538][ T1153] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.943854][ T1153] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.953569][ T1153] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.964863][ T1153] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.213384][T16913] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3292'. [ 335.915590][T16928] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3299'. [ 335.953580][T16933] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3301'. [ 335.985555][T16931] netlink: 'syz.8.3300': attribute type 32 has an invalid length. [ 336.090996][T16953] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 336.096147][T16945] tmpfs: Unknown parameter 'mp/l' [ 336.097046][T16951] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 336.098023][T16946] tmpfs: Unknown parameter 'mp/l' [ 336.189677][T16970] openvswitch: netlink: Missing valid actions attribute. [ 336.193539][T16970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.409590][T16990] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3319'. [ 336.436292][T16988] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3319'. [ 336.449850][T17000] TCP: TCP_TX_DELAY enabled [ 336.527960][T17007] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 336.537176][T17007] openvswitch: netlink: Flow key attr not present in new flow. [ 336.665862][T17022] qrtr: Invalid version 0 [ 336.988602][T17063] 9pnet_virtio: no channels available for device syz [ 337.051925][T17063] program syz.8.3344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.146465][T17074] netlink: 'syz.7.3349': attribute type 29 has an invalid length. [ 337.268097][T17081] overlay: ./file0 is not a directory [ 337.570646][T17098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.575152][T17098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.672243][T17098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.675638][T17098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.759857][ T40] kauditd_printk_skb: 265 callbacks suppressed [ 337.759874][ T40] audit: type=1400 audit(321.255:10963): avc: denied { read append } for pid=17114 comm="syz.7.3362" name="v4l-subdev2" dev="devtmpfs" ino=967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.773108][ T40] audit: type=1400 audit(321.265:10964): avc: denied { open } for pid=17114 comm="syz.7.3362" path="/dev/v4l-subdev2" dev="devtmpfs" ino=967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.776255][T17098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.782303][ T40] audit: type=1400 audit(321.274:10965): avc: denied { ioctl } for pid=17114 comm="syz.7.3362" path="/dev/v4l-subdev2" dev="devtmpfs" ino=967 ioctlcmd=0x564a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.786979][T17098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.817830][ T40] audit: type=1400 audit(321.311:10966): avc: denied { ioctl } for pid=17114 comm="syz.7.3362" path="socket:[77173]" dev="sockfs" ino=77173 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 337.827737][ T40] audit: type=1400 audit(321.311:10967): avc: denied { setattr } for pid=17114 comm="syz.7.3362" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 337.838016][ T40] audit: type=1400 audit(321.311:10968): avc: denied { create } for pid=17118 comm="syz.6.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 337.843867][ T40] audit: type=1400 audit(321.321:10969): avc: denied { ioctl } for pid=17118 comm="syz.6.3363" path="socket:[77240]" dev="sockfs" ino=77240 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 337.879440][T17098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.883256][T17098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.960857][ T40] audit: type=1400 audit(321.442:10970): avc: denied { read append } for pid=17122 comm="syz.7.3365" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 337.969721][ T40] audit: type=1400 audit(321.442:10971): avc: denied { open } for pid=17122 comm="syz.7.3365" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 337.970197][T17123] block nbd7: not configured, cannot reconfigure [ 337.977588][ T40] audit: type=1400 audit(321.442:10972): avc: denied { ioctl } for pid=17122 comm="syz.7.3365" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 338.026692][T17125] binder: 17124:17125 unknown command 0 [ 338.029138][T17125] binder: 17124:17125 ioctl c0306201 200000000300 returned -22 [ 338.100074][ T1143] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.102664][ T1143] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.112509][ T1143] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.116270][ T1143] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.136303][T11221] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.139704][T11221] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.148782][T11212] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.152010][T11212] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.208205][T17135] netlink: 'syz.8.3371': attribute type 2 has an invalid length. [ 338.355508][T17144] kAFS: No cell specified [ 338.830153][T17173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.852593][T17173] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 339.019580][T17183] netlink: 'syz.8.3390': attribute type 39 has an invalid length. [ 339.086020][T17184] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 339.088723][T17184] UDF-fs: Scanning with blocksize 2048 failed [ 339.092066][T17184] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 339.094455][T17184] UDF-fs: Scanning with blocksize 4096 failed [ 340.903261][ T61] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.919426][ T5981] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.932631][ T5981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.936347][ T5981] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.940151][ T5981] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.943605][ T5981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.008372][ T61] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.111229][T17227] chnl_net:caif_netlink_parms(): no params data found [ 341.143151][T17239] netlink: 'syz.0.3409': attribute type 10 has an invalid length. [ 341.146290][T17239] __nla_validate_parse: 7 callbacks suppressed [ 341.146308][T17239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3409'. [ 341.161283][ T61] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.174784][T17239] dummy0: entered promiscuous mode [ 341.177102][T17239] bridge0: port 1(dummy0) entered blocking state [ 341.179869][T17239] bridge0: port 1(dummy0) entered disabled state [ 341.182678][T17239] dummy0: entered allmulticast mode [ 341.186242][T17239] bridge0: port 1(dummy0) entered blocking state [ 341.188380][T17239] bridge0: port 1(dummy0) entered forwarding state [ 341.259760][T17227] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.262020][T17227] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.264459][T17227] bridge_slave_0: entered allmulticast mode [ 341.267171][T17227] bridge_slave_0: entered promiscuous mode [ 341.272275][ T61] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.280230][T17227] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.282855][T17227] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.285262][T17227] bridge_slave_1: entered allmulticast mode [ 341.291858][T17227] bridge_slave_1: entered promiscuous mode [ 341.337750][T17253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3414'. [ 341.350160][T17227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.359890][T17227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.408856][T17227] team0: Port device team_slave_0 added [ 341.413846][T17227] team0: Port device team_slave_1 added [ 341.437578][T17255] PM: Enabling pm_trace changes system date and time during resume. [ 341.437578][T17255] PM: Correct system time has to be restored manually after resume. [ 341.478340][T17227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.479082][T17258] netlink: 'syz.0.3416': attribute type 4 has an invalid length. [ 341.481286][T17227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.487106][T17258] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3416'. [ 341.496224][T17227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.515902][T17227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.518177][T17227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.527197][T17227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.537152][T17258] netlink: 'syz.0.3416': attribute type 4 has an invalid length. [ 341.540293][T17258] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3416'. [ 341.553132][T17258] netlink: 'syz.0.3416': attribute type 4 has an invalid length. [ 341.555635][T17258] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3416'. [ 341.576631][T17265] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3418'. [ 341.601787][T17258] netlink: 'syz.0.3416': attribute type 4 has an invalid length. [ 341.605150][T17258] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3416'. [ 341.609436][T17258] netlink: 'syz.0.3416': attribute type 4 has an invalid length. [ 341.614138][T17227] hsr_slave_0: entered promiscuous mode [ 341.614200][T17258] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3416'. [ 341.616455][T17227] hsr_slave_1: entered promiscuous mode [ 341.624207][T17258] netlink: 'syz.0.3416': attribute type 4 has an invalid length. [ 341.624275][ T61] team0: left allmulticast mode [ 341.626441][T17258] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3416'. [ 341.628058][ T61] team_slave_0: left allmulticast mode [ 341.633064][ T61] team_slave_1: left allmulticast mode [ 341.635115][ T61] gretap1: left allmulticast mode [ 341.636932][ T61] bridge0: port 3(team0) entered disabled state [ 341.641961][ T61] bridge_slave_1: left allmulticast mode [ 341.644575][ T61] bridge_slave_1: left promiscuous mode [ 341.646480][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.649860][ T61] bridge_slave_0: left allmulticast mode [ 341.651590][ T61] bridge_slave_0: left promiscuous mode [ 341.653631][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.885981][ T61] team0: Port device gretap1 removed [ 342.012456][T17277] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 342.181341][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.221582][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.264430][ T61] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 342.318065][ T61] bond0 (unregistering): Released all slaves [ 342.405708][ T61] bond1 (unregistering): Released all slaves [ 342.412989][ T61] bond2 (unregistering): Released all slaves [ 342.522764][T17288] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3427'. [ 343.149674][ T5981] Bluetooth: hci1: command tx timeout [ 343.155847][ T40] kauditd_printk_skb: 136 callbacks suppressed [ 343.155861][ T40] audit: type=1400 audit(326.306:11109): avc: denied { read write } for pid=17297 comm="syz.8.3431" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.167979][ T40] audit: type=1400 audit(326.306:11110): avc: denied { open } for pid=17297 comm="syz.8.3431" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.178002][ T40] audit: type=1400 audit(326.316:11111): avc: denied { ioctl } for pid=17297 comm="syz.8.3431" path="/dev/virtual_nci" dev="devtmpfs" ino=709 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.227138][ T40] audit: type=1400 audit(326.372:11112): avc: denied { create } for pid=17302 comm="syz.6.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 343.235802][ T40] audit: type=1400 audit(326.372:11113): avc: denied { ioctl } for pid=17302 comm="syz.6.3432" path="socket:[77727]" dev="sockfs" ino=77727 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 343.246268][ T40] audit: type=1400 audit(326.372:11114): avc: denied { connect } for pid=17302 comm="syz.6.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 343.263036][T17227] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 343.268080][T17227] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 343.275030][T17227] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 343.279402][T17227] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 343.293112][ T40] audit: type=1400 audit(326.428:11115): avc: denied { bind } for pid=17310 comm="syz.6.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 343.306322][ T40] audit: type=1400 audit(326.428:11116): avc: denied { setopt } for pid=17310 comm="syz.6.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 343.327516][ T40] audit: type=1400 audit(326.465:11117): avc: denied { create } for pid=17318 comm="syz.8.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 343.330587][T17319] MTD: Couldn't look up '/dev/sg0': -15 [ 343.334981][ T40] audit: type=1400 audit(326.465:11118): avc: denied { write } for pid=17318 comm="syz.8.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 343.336523][T17319] /dev/sg0: Can't lookup blockdev [ 343.357226][T17227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.375973][T17227] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.381831][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.384918][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.395096][T11215] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.398163][T11215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.529288][T17227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.661741][T17227] veth0_vlan: entered promiscuous mode [ 343.667818][T17227] veth1_vlan: entered promiscuous mode [ 343.686486][T17227] veth0_macvtap: entered promiscuous mode [ 343.690508][T17227] veth1_macvtap: entered promiscuous mode [ 343.699737][T17227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.705814][T17227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.712086][T11221] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.714972][T11221] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.719131][T11221] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.722904][T11221] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.767040][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.770336][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.787230][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.789767][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.937457][T17350] batman_adv: batadv0: Adding interface: dummy0 [ 343.940186][T17350] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.950864][T17350] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 344.307011][T17370] netlink: 'syz.7.3450': attribute type 5 has an invalid length. [ 344.309517][T17370] netlink: 'syz.7.3450': attribute type 7 has an invalid length. [ 344.417400][T17370] : entered promiscuous mode [ 344.755371][ T61] hsr_slave_0: left promiscuous mode [ 344.758185][ T61] hsr_slave_1: left promiscuous mode [ 344.760911][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.763749][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.768289][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.770912][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.804934][ T61] veth1_macvtap: left promiscuous mode [ 344.807443][ T61] veth0_macvtap: left promiscuous mode [ 344.809107][ T61] veth1_vlan: left promiscuous mode [ 344.810907][ T61] veth0_vlan: left promiscuous mode [ 345.296529][T17387] ------------[ cut here ]------------ [ 345.299090][T17387] WARNING: CPU: 1 PID: 17387 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 345.303434][T17387] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 345.306573][T17387] CPU: 1 UID: 0 PID: 17387 Comm: syz.7.3456 Not tainted syzkaller #0 PREEMPT(full) [ 345.312014][T17387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 345.317019][T17387] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 345.320015][T17387] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff ae 82 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 91 b5 7e 0e 00 75 0b c6 05 88 b5 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 345.328059][T17387] RSP: 0018:ffffc900040377f0 EFLAGS: 00010246 [ 345.330724][T17387] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 345.335230][T17387] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 345.338913][T17387] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 345.342357][T17387] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 345.345693][T17387] R13: 1ffff92000806f13 R14: ffffffff9ae82aa4 R15: 0000000000000015 [ 345.349064][T17387] FS: 00007f5621ac66c0(0000) GS:ffff8880d67b2000(0000) knlGS:0000000000000000 [ 345.352967][T17387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.355754][T17387] CR2: 00007f5620b729e0 CR3: 0000000057de2000 CR4: 0000000000352ef0 [ 345.359157][T17387] Call Trace: [ 345.360599][T17387] [ 345.361915][T17387] ? is_bpf_text_address+0x94/0x1a0 [ 345.364327][T17387] ? kernel_text_address+0x8d/0x100 [ 345.366552][T17387] ? __kernel_text_address+0xd/0x40 [ 345.368753][T17387] ? unwind_get_return_address+0x59/0xa0 [ 345.371150][T17387] ? arch_stack_walk+0xa6/0x100 [ 345.373293][T17387] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 345.376018][T17387] ? stack_trace_save+0x8e/0xc0 [ 345.378118][T17387] ? __lock_acquire+0xb97/0x1ce0 [ 345.380260][T17387] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 345.382773][T17387] ? policy_nodemask+0xea/0x4e0 [ 345.385259][T17387] alloc_pages_mpol+0x1fb/0x550 [ 345.387525][T17387] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 345.389817][T17387] ? find_held_lock+0x2b/0x80 [ 345.391846][T17387] ? drm_syncobj_array_find+0x35/0x3c0 [ 345.394085][T17387] ___kmalloc_large_node+0xed/0x160 [ 345.394642][ T5981] Bluetooth: hci1: command tx timeout [ 345.396466][T17387] ? drm_syncobj_array_find+0x35/0x3c0 [ 345.396496][T17387] __kmalloc_large_node_noprof+0x1c/0x70 [ 345.396527][T17387] __kmalloc_noprof.cold+0xc/0x61 [ 345.396555][T17387] ? __lock_acquire+0xb97/0x1ce0 [ 345.396590][T17387] drm_syncobj_array_find+0x35/0x3c0 [ 345.396623][T17387] drm_syncobj_signal_ioctl+0x20c/0x450 [ 345.396654][T17387] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 345.412366][T17387] ? drm_dev_exit+0x41/0x60 [ 345.413979][T17387] drm_ioctl_kernel+0x1f1/0x3e0 [ 345.415641][T17387] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 345.417798][T17387] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 345.419552][T17387] drm_ioctl+0x5c9/0xc30 [ 345.421004][T17387] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 345.423292][T17387] ? __pfx_drm_ioctl+0x10/0x10 [ 345.424945][T17387] ? selinux_file_ioctl+0x180/0x270 [ 345.426917][T17387] ? selinux_file_ioctl+0xb4/0x270 [ 345.428719][T17387] ? __pfx_drm_ioctl+0x10/0x10 [ 345.430432][T17387] __x64_sys_ioctl+0x18e/0x210 [ 345.432049][T17387] do_syscall_64+0xcd/0x4e0 [ 345.433619][T17387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.435551][T17387] RIP: 0033:0x7f5620b8ec29 [ 345.437185][T17387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.443594][T17387] RSP: 002b:00007f5621ac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.446683][T17387] RAX: ffffffffffffffda RBX: 00007f5620dd5fa0 RCX: 00007f5620b8ec29 [ 345.449686][T17387] RDX: 0000200000000440 RSI: 00000000c01064c5 RDI: 0000000000000003 [ 345.452527][T17387] RBP: 00007f5620c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 345.455207][T17387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.457785][T17387] R13: 00007f5620dd6038 R14: 00007f5620dd5fa0 R15: 00007ffc50256078 [ 345.460558][T17387] [ 345.461632][T17387] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 345.463998][T17387] CPU: 1 UID: 0 PID: 17387 Comm: syz.7.3456 Not tainted syzkaller #0 PREEMPT(full) [ 345.467042][T17387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 345.470753][T17387] Call Trace: [ 345.471813][T17387] [ 345.472775][T17387] dump_stack_lvl+0x3d/0x1f0 [ 345.474435][T17387] vpanic+0x6e8/0x7a0 [ 345.475849][T17387] ? __pfx_vpanic+0x10/0x10 [ 345.477495][T17387] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 345.479465][T17387] panic+0xca/0xd0 [ 345.480659][T17387] ? __pfx_panic+0x10/0x10 [ 345.482145][T17387] check_panic_on_warn+0xab/0xb0 [ 345.483678][T17387] __warn+0xf6/0x3c0 [ 345.484893][T17387] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 345.486967][T17387] report_bug+0x3c3/0x580 [ 345.488383][T17387] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 345.490347][T17387] handle_bug+0x184/0x210 [ 345.491708][T17387] exc_invalid_op+0x17/0x50 [ 345.493115][T17387] asm_exc_invalid_op+0x1a/0x20 [ 345.494664][T17387] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 345.496716][T17387] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff ae 82 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 91 b5 7e 0e 00 75 0b c6 05 88 b5 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 345.502847][T17387] RSP: 0018:ffffc900040377f0 EFLAGS: 00010246 [ 345.504846][T17387] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 345.507569][T17387] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 345.510235][T17387] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 345.512922][T17387] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 345.515559][T17387] R13: 1ffff92000806f13 R14: ffffffff9ae82aa4 R15: 0000000000000015 [ 345.518188][T17387] ? is_bpf_text_address+0x94/0x1a0 [ 345.520119][T17387] ? kernel_text_address+0x8d/0x100 [ 345.521826][T17387] ? __kernel_text_address+0xd/0x40 [ 345.523589][T17387] ? unwind_get_return_address+0x59/0xa0 [ 345.525486][T17387] ? arch_stack_walk+0xa6/0x100 [ 345.527142][T17387] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 345.529312][T17387] ? stack_trace_save+0x8e/0xc0 [ 345.530901][T17387] ? __lock_acquire+0xb97/0x1ce0 [ 345.532734][T17387] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 345.534844][T17387] ? policy_nodemask+0xea/0x4e0 [ 345.536506][T17387] alloc_pages_mpol+0x1fb/0x550 [ 345.538078][T17387] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 345.539891][T17387] ? find_held_lock+0x2b/0x80 [ 345.541450][T17387] ? drm_syncobj_array_find+0x35/0x3c0 [ 345.543234][T17387] ___kmalloc_large_node+0xed/0x160 [ 345.544969][T17387] ? drm_syncobj_array_find+0x35/0x3c0 [ 345.546884][T17387] __kmalloc_large_node_noprof+0x1c/0x70 [ 345.548768][T17387] __kmalloc_noprof.cold+0xc/0x61 [ 345.550537][T17387] ? __lock_acquire+0xb97/0x1ce0 [ 345.552131][T17387] drm_syncobj_array_find+0x35/0x3c0 [ 345.553901][T17387] drm_syncobj_signal_ioctl+0x20c/0x450 [ 345.555686][T17387] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 345.557770][T17387] ? drm_dev_exit+0x41/0x60 [ 345.559358][T17387] drm_ioctl_kernel+0x1f1/0x3e0 [ 345.560949][T17387] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 345.562949][T17387] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 345.564746][T17387] drm_ioctl+0x5c9/0xc30 [ 345.566148][T17387] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 345.568289][T17387] ? __pfx_drm_ioctl+0x10/0x10 [ 345.569838][T17387] ? selinux_file_ioctl+0x180/0x270 [ 345.571380][T17387] ? selinux_file_ioctl+0xb4/0x270 [ 345.573491][T17387] ? __pfx_drm_ioctl+0x10/0x10 [ 345.575480][T17387] __x64_sys_ioctl+0x18e/0x210 [ 345.577349][T17387] do_syscall_64+0xcd/0x4e0 [ 345.579051][T17387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.581232][T17387] RIP: 0033:0x7f5620b8ec29 [ 345.583100][T17387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.590348][T17387] RSP: 002b:00007f5621ac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.593045][T17387] RAX: ffffffffffffffda RBX: 00007f5620dd5fa0 RCX: 00007f5620b8ec29 [ 345.595568][T17387] RDX: 0000200000000440 RSI: 00000000c01064c5 RDI: 0000000000000003 [ 345.598139][T17387] RBP: 00007f5620c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 345.600702][T17387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.603219][T17387] R13: 00007f5620dd6038 R14: 00007f5620dd5fa0 R15: 00007ffc50256078 [ 345.605742][T17387] [ 345.607641][T17387] Kernel Offset: disabled [ 345.609227][T17387] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:22:12 Registers: info registers vcpu 0 CPU#0 RAX=0000000000510ff7 RBX=0000000000000000 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52cd1 RDI=ffffffff8c163400 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c38fe62 CR3=000000002b889000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e002fefc Opmask02=00000000f8000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd50a3a040 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd50a3a1c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd50a3a1c6 00007ffd50a3a1cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0182e12e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0182e12e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0182e12e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0182e12e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0182e12f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0182e12fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8564c2d0 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc90004037168 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffffff9b118130 R14=ffffffff9b1180e0 R15=ffffffff9b1183a0 RIP=ffffffff8564c2f7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5621ac66c0 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5620b729e0 CR3=0000000057de2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc50256586 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc50256586 00007ffc5025658c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5620c12e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5620c12e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5620c12e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5620c12e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5620c12f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5620c12fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000002907f5 RBX=0000000000000002 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52cd1 RDI=ffffffff8c163400 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2d5feff8 CR3=000000005f4d1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000b7ed DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812c7503 ffffffff812c7503 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812c7503 ffffffff812c7503 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812c7503 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc58c6aea6 00007ffc58c6aeac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f103e212e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f103e212e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f103e212e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f103e212e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f103e212f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f103e212fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f103e3a74a8 00007f103e3a74a0 00007f103e3a7498 00007f103e3a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f103ef0d100 00007f103e3a7460 00007f1000040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f103e3a74b8 00007f103e3a74b0 00007f103e3a74a8 00007f103e3a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 539805ee8786e9e3 919753be69469607 090818e721fb0792 07b6b57420e4f9a8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f2dc80ac5b57917 dc766718d14217b4 3ad864a44bf7790a 7f7f6e93d4b3c28d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 177f32426e142c9c bf998f9161f9385b 12a0857e63e1fe1e 310d2f0a0a4a10f0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b88d3a064c9bb05 e5f9a602a271b3f8 16ea8190dd98e3f2 65f02a530dd91778 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff88801da80108 RBX=ffffea0001817240 RCX=ffffffff81f6c6a2 RDX=ffff88801da80108 RSI=ffffffff81f6c6b0 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc90003be72f0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88801da80048 R13=0000000000000002 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81f6c6c0 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3608307d60 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36077a76c3 00007f36077a76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9fdf5170 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556eb2ed0c 000055556eb2d9e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556eb24461 000055556eb24080 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8080808010006b80 040100000e080606 015c8c0008006be0 030010006bd00300 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104808080801000 6b80040100000e08 0606015c8c000800 6be0030010006bd0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030010006bc00302 10006bb003701000 6a90030000000096 007fff0002000c00 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e50000000122d0c6 c20880ed5d270004 0000000000000003 0006000c00000001 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00016e0815980301 0000161006158803 0000003808081580 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000