last executing test programs: 2m19.262429537s ago: executing program 3 (id=845): r0 = syz_usb_connect(0x4, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xf454, 0x800000, 0x20000008, 0x8001, 0x8}}, @TCA_DEF_DATA={0x9, 0x3, ')$)+\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) unshare(0x2c020400) r2 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x207a98, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000480)=""/74, 0x4a) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 2m18.722472188s ago: executing program 3 (id=851): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000340)={0x2, 0x2, 0x2}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x2, @sdr}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x80180, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000180)={0x60, 0xa0, 0xb60, 0x1e0, 0x22000, 0xb8, 0x0, 0x4, {0x9, 0x3ff}, {0x4, 0x1}, {0xba8, 0x5}, {0x1, 0x5}, 0x0, 0x1, 0xabe, 0x5, 0x1, 0x7, 0x3, 0x80000000, 0xc, 0x1, 0x8, 0xfffffff9, 0x10, 0x100, 0x3, 0x2}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00010000000000000000008100800000000000000000001402000000000000000000000000ffff00000000"], 0x30}}, 0x0) 2m18.722221558s ago: executing program 3 (id=852): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=0x189) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10) listen(r1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT=0x0], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsync(r2) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000040)=ANY=[@ANYBLOB="7472613d7463702c706f72743d087830de32322c00"/38]) 2m17.443778385s ago: executing program 3 (id=872): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000180)={0x4000, r0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00') landlock_restrict_self(r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) 2m17.443091114s ago: executing program 3 (id=873): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) ioctl$KVM_CAP_DISABLE_QUIRKS2(r0, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x33}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x2}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000100)={0x5, 0x1}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[@wrmsr={0x65, 0x20, {0x630, 0x5b94}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x7, 0x2, 0x1}}, @nested_load_syzos={0x136, 0x38, {0x3, 0x81, [@nested_amd_vmload={0x182, 0x18, 0x1}]}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xf8, 0x2, 0xffffffffffff0000, 0x3}}, @wr_drn={0x68, 0x20, {0x0, 0x2f}}, @in_dx={0x69, 0x20, {0x6210, 0xf4af47d52e54870e}}, @nested_amd_vmload={0x182, 0x18, 0x3}], 0x140}) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0xa5a, 0x0, 0x5}]}) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x7, 0x420d42) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000340)={0xc9, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f00000003c0)={'filter\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffd, 0xe1, 0x100000000, 0x6cc, 0xb16, 0xe8d3]}, &(0x7f0000000440)=0x78) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000700)={{r5, &(0x7f0000000540)='/dev/fuse\x00', 0x20000, &(0x7f0000000580)={@_ha_fsid={[0x5, 0x4e]}, {0x8, 0x6, 0x400, 0x101}}, 0x200, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0x7fff}, {[0x7, 0x7, 0x9, 0x7]}, 0x71, 0x95, &(0x7f0000000640)=""/149}) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000780)) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, 0x0, 0x201, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff329}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0xc0) mount$bind(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x2000000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r6, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f0000000a80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'tunl0\x00', r7, 0x700, 0x700, 0x200, 0x1, {{0x12, 0x4, 0x1, 0x3, 0x48, 0x68, 0x0, 0x8, 0x4, 0x0, @multicast2, @multicast1, {[@end, @generic={0x88, 0x6, "ecf1a8cd"}, @noop, @timestamp={0x44, 0x1c, 0x95, 0x0, 0x3, [0x81, 0x4, 0x1, 0x9, 0x7, 0x8]}, @ssrr={0x89, 0xf, 0x96, [@broadcast, @private=0xa010101, @multicast2]}]}}}}}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000d80)) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x8c, 0x1, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x39a927e7d846f7dd}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xbe1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x884}, 0x4000005) accept4$nfc_llcp(r6, &(0x7f0000000f80), &(0x7f0000001000)=0x60, 0x80800) listen(r5, 0x3) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000001080)=@riscv64_v={0x8030000009000021, &(0x7f0000001040)=0x4}) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000010c0)={0x4, 0x1, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$nl_route(r4, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)=@ipv4_delrule={0x24, 0x21, 0x70e, 0x70bd26, 0x25dfdbfe, {0x2, 0x10, 0x0, 0x80, 0x3, 0x0, 0x0, 0x2, 0x3}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x1) sendmsg$tipc(r6, &(0x7f0000002480)={&(0x7f0000001200)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10, &(0x7f0000002380)=[{&(0x7f0000001240)="5c48ccc6d0059a9987aeca570c09696b3f7d748f1c568f433825cf80f7bd19c19c96b076bbae8efa19abe56b5b7173da770ba6a56c57f78fe01b025d07bd835b487ab710e95b16a75f077b8521470cd49d5d523e76e90f0d8742d87bc8adc9db5eb590a0ba", 0x65}, {&(0x7f00000012c0)="84dfc1d58ad4e798ed1d9c4a52884d9b465c7a334ab5cbd43ccc1974", 0x1c}, {&(0x7f0000001300)="d0ed3e6d3df0c3359df68495598f76e835b4e3baaa8d219fed35258ac67c345d42ebc1293e0772fe9fab54fc2ee374525ec0e6319c784f28f780d44f5b5b27e563b9ed6ef6eb2c25e1a31767f8643d9420bc5deda1a2ad8f4f8b075535b489162e490f1d598dda19a842731d02d19616879343d1cd79910c9273ac82fc4ff2717708d1b34c651ca7b5839449bde776f399b99902c404c9d8948108d629bfc195814aada68ff9e202959069f7b5b4183a3758f6678c9612c0ff84cbf350aca7f9146dca73b5352d9cc69af71777d057b28e0e5d3d99fde4b9ba961c20f41a64849e448627e1e7b949905ee8100f0a00121cb1f0ad5fa167bd4ef2120c3e8e4ae13cae111a50e3af8e8c1ba96e6a4d36aa51f470922d96e07565190273686e3bc0c1a14fc648f7b8fa4e7fa46fc98fb698ef57288766e39e2a5830114e8d50cf05eaf8dc45eecdda6368aff82fa0b72376adf40ffde883f06baa66edb3dc3eb2fbf074d1c72b71bd61acef748b8edae8a3bdb5d38ffd96994d891dabc7f4daa089a4b6a793e89b046e68b1d4692a8cb28cafd57d7da4c988eb1870db4df1731229ed047811173a72a47ddbe69b95910ae28449931b811e30e15f65b97101f6053b0bf47bb5ed5db10963b8921675c8d4f3272ccf697a790c93f90e67bde87c6bf03a3cd9b449a26750f8380bab3c4baaa8bdc313071f9e007be5270f5fcbbe98fb2bc7965c08d01541345a98b8789585d9c158b16f220e670ad706d2ba58c563dd0a596ff6b475a2b512c26b40e9527e4848047acb8ef6c094590410452a3025d31dce19fe123bca361875cc5ca0159e6b4c4772108fa399af9f34c96cf41ef9f363eb624cedabb98e622efb46435327e7afd32f7c544d11aa96d2793a08c2372b8e7fdf1196709539f9dd1ad9aa682dff4a8be8440c37c4fbee3c0030c4527116469c447468d1ee6a8e30d7d3b22e0733e54bf119b3c4cac12f84301c501ea8382c9367eca95c38d924d383bb42970d8dce4fc6482f7e69437c103b8e65683a4bfbf9e01bce9720c1178e5724a45e6f04aad43e9db9127bfcd1010e346afde02bf36b69a20001a1950c4f1ec413e4f8d053212f23f21b9115c5ff4de964208f9a478ccb66a450aa2da5ce1e4a8aaf78f2ec679609f4992e5d4b2fe3605b4ed71c8dce2c5bb2484051f241151f4f2a4242840e7c789f79f818292a810beaebf7db1a5e62c3f43f3225cb49a333ba2ac94be8d47e90e2ce211ea864a264b57e13e889ff9977730c4860293b4143cabe5b2682b70746f4349aed690b2ba82a7a6e17f726d0d611e69a2cabe76ca1e7e8c81f0a559a2cf7593c99d07ce3b4126429f8a7b7121d8b702676b0a30fbff638c166eeff22648343aac1f7cf9b7795e320b24376e3afe433edd2f45179651a17f4ea20797684e456823831f2dc4997b7885d0922e556d82bb7f8d7b89da3c575e065758687ebc130e301fbc5c01fbb191f04c5ced71c80a324f5ce5716c3b23814b6c717f546dfb0e3a43b0d8c06c6f69fb22fc51cdfab5be9269556db1fab05f795dfa0d64bfab3c4267801a0e0dee8256e0a1b6a8549b5ba2d72c2e2faa070c5b933cccd84d15b4a092c9e03fbf81e07d3a458cb3305858434e114a58cb633c75bed03ca286e34a1a1643a806b74ef9178f59bb51981be6bb3633667ccbec8e6ba5e6a36607aaa963a60745360bfe1db2b0b6da188d8b0e89ec8cbc22707394cd9ccd633666b9c1abd482ade17812d6350e5ce11b9d5197ca49f11a946dfc2e26a3d2bbaefe6a82fdb0ff5813eb88c2d3b8764eddf55d3c0116809c58e779fea6da8fb3c981ba2ece77c08d5edc26ead0df8dc733047f90908d57e8003b7c8a6ee538c17069beae7a10509e67c2bec840fafa732c3de0072fb329332316536fb4a866d63d5f22758bb28a48b451d8c31ea004942d64d9c49d07596c5b4c4d6b97890393f5ca0daca802dc0ab471a300b0c45ff3272d57c88efd84ae88eab7110f43b3a61bfcc33e3cf63c47400db8d4f542a195f7d70ae8693e3795ad096b7311686711355927ad794dde44151b7b5a40018c12d2b9fadcf628404a80e8a882cc30089fd8457facf91026a2f77a61b22d5d9654ea773b3fd44f98a6ea8d6dc54e608ec1406ee6f06e5afcbbad4c04edada910e02ccd681d4dac27b96692680ac38902191e538926c908d4cbdd8f3a1989224bb19c70941199d8a8cc7cb2583d49c0c1b41f773f2bb01d870f616e6d77be965363bfc3988bcdcf37e6f019420d6a489252c171a6038a4ed0edccae8ed93046c6bc33b00a91f2f74c54851bbfef1a77188350406309d459536b681cde4da7e476756c000c5cf98d743835e802fe6d2243a461222b920c4fd6550ae844b233fb957190c1bb65a78263ee41f06d3222ff500645a3135d5fe94835a38b8bb253b32f1f65d0a4da74957c0dfe2c27c6ed8cce645ff86e9b7fb008700a02d925cd11ccbbc0309db2eb0a5a7f7e6ab6d770fd9a38dbcdc1455627f79f6e29868554982be0696c55a23691c1697789da6083945c86f7c766cbc354f16db564b02acb7a632aa6a962130355c5073c4123f7b64685821846424ff61c869a449f989d4b96a1ed41610f0965a1382b6d6d8c942b9151f2522a46864cbd174bd278dc25b5d09770482eadb71a1adb39d546ad35a3c00a904dfdded909b3849b20abf680bea84e5b87dfd103973c4163a6d4973d32d0a5f6df2aae766d5a1bdbfaf4a043f957956fe241295b453582f96b6e48095a9ad1c2c0c347371821db18402ac38be237938d7b1f67a054b955a381f0e7234b575714e9637d5cdd40a0308fa12cd89b4d8ff581b7b0fd99046e815ab123e86970b7d8a8937edab927519a8d274fac2a2293821fe6b62a738dbd94a8c99ca7fdcba961398109cef014e5d684f2d41a721fa73f30e2946ce4039f72566de78c6ac40a4b7026565b233a08cc81ae0341454cab70094386268f8ec36127a254d6fdca67f24c38617d54526cd567724b3a4d3c717ecfba37943274668dee3a739fbec7f9b5c3d14576bffee6b8b90f602657ff719700e20f68a1b270014d88e94051805c5dc2c6fb91211e3ba2c2145c55d3864465ca77a66c4595310be53cf21a9c8bba56d19854b39a16134fa7fa37884021571582cb553a3e54765033f009ddf2fabae3cdee294bf9b814cdb0503e9f07c1ccc324e5b076da5188e618929f89fadef1e127bd49bd3d7f597979af6357d40ee258aa63f9166d2d15939afa5972ab8a38e93523340613cbc36120348be06b1cdb1f31ee6b8e646c12e402acc9c19740840727af8e142cfc7399852f83b49e278fda7c0de931657db977373885744edf85874dca98dc4e872e319aae37b97f29aac15e91da980f25bbd45f31d2decea9c369462685fae933e22be29e653f0a11f2a05f35e458cc84f62309dcf7167ced8199ed53220585285cc490d61624e6f36dadcec1c051425939a9005ea877e73588a680010de3295ce11374c162b7fb33fbf2858f4f7ede654ff896453feb585ab1950351946efdb2efa70c2a80b876314642c3aef1b0783b1bcb92579d617fbdc8abedc36c2dc0f63d83dac8e688e1904ed43241088ef2b078c4d7c1a8cdf2b5d1b32be19b1138383555be5e763baa4f07a4089cd398bf797f45520757c747b231b472af3b48cf049ca2852f85550f173605bed89d27188b8dde5aa907fd2555f0387dead89268b71846ae76e4af96e261a56df3f51c6a0c1bc70b27462575188ad4526850caacf4fc40d7235c54fe65d8f45bda937a0e88b63889da1ac003145d62c6a5910792d54187c10d1e3c63185d8aed6379b18458997466f5bd13ef4ee5b9d6204f24b3af2e911b5b88f5b458a44850b7a530678feadf4df861117ff4e9cfd3caf5ff6db52df8f7f67b87dad9e1c27712ca46216db43d2fe56ad248c29f1909bf3012deb3ededdfeebd70f7b4138313943fa1c3020222c0dce383049bf7106c8704a295160010bf0f49f8ef49db548e811bd975be987955b83c69366532d58221d8dd40d4373fa590a65f99148556aa3326159a57eaa53514b97033f1086db2f895ca966204f77dbe00ebfc17be9a9c670135bf7e5aa33107e99039cfcb96c8a20a08d83d6d3bfb8717a1425037bcc2cde6b526cfd8feed90f4e395726cf093e9eeb06682123b680d9eb8e782fed960bfe6f6855c5c78b046716d1bf8af9b55764fc838a28a2412aeaf2c3d8a10444bb0c84e4a7f837dd2fe2a479f77c1ea6ee6b28e7449abdd6da3277b2362a548f5c823c28463d827c5ef1cf8756c63df25a9184f7e7e225513461a51d5b6705deada10826c085cfe3c886694a6705a93941187590eb41576e42384eeb7009e7cafabf5d317e50e9665eeeaa243a0eedea612e0098c6565a493e670a2aa8cb7f67473e251186c9fc99732f2161d51b0632a1660f70bd7dbb56e1badab1072d53abecb77988b1f26dcb9168bf3a1cddada7c3788497df4d41901a73393df4163c433ac3ac9725772cf43435e5f637404ba5bfe06b5c9c3626e2e72e5f40adb781bd93100f74be4506ce46ffac40ee7bb6cc449425fbd9d92faffa4f6184f8d9e0d9f4a82b9c45469855b68c42444b86e62acac7b654346b05aa12f4318bd687c2dc50250c1072a7235b788733a9f80c57bee86dfb6a7c5fb9924e42b8010c2e74142af5a9ca807e2994ac069f990bb60468e2a0ec4218aa97849c57e1afd4ab8bb5b3951eee8f983637f553504d390c0723795ab639835ddf69ce176c57c257365f1706911774092858a0eb8c9753995c1b5b486c104f65a6fb844a3f9da30d4d3f759c824090dfa9c92419ea237079341c1b37e1cae8b2fe5ec030f7b3d7d22595b8800fdf8066e39d13e107a091216f5f60c797b9da987185ff9a2e773e8dabeed8203a11da4689772e7e319f503393b147efba76940ebce2ae55bf6dbcd7247d3c58f01ce1840c3f2d9352fd80b1466bf99536ae73190651c630a06747c6521309361a2352c45adeb9612d88b1a691007b3b2c7432965ea3346416abd8e6a362bd58d5502f44ebbef96514778b06e3cb79267834f223c0537e9ec9783a10fbbf746784943a5088c66641d1d92bf3527921dc7d62884c6f116a6c0587788d9c63a6b683fd7605da3e5b9d9fc21e004990f09cfd78fa995a5cba4509e7fe597809bc636f2d961e496f82ed95a6a24c478f58eb2c6e81e84deb0272045b2d57432fdc79685f1ad2185d4d6b5431c2c4bd87c4b919d535dab021051d0caf6b1089b69e86d81e83d732e5b520fc049245bf4c55e791f78e969d6b31083038cca4de8068c0786b6901da4e4b6d8fdc4a697fe7f6c0f0d06a221427b367d14614bdf5802ea52d5b269f0e3a87ac27d8a7926c12f37592b65978a6410c19a1db40336424118bafebb93964a5a3e0a404268fb2e8f6e253af2a5ef4e50d5ae90c506cdfd874a4c2be7b8b7876e0c0e215ff213ac6872bbcb9ff3ffa9bbb98cca761eed0a29f2dedef0aaca7e8999d15fe94cf4c84d0a120ff5c30972980139eabf1921473859a667ef7232e066259df149e03c15aa9a9a588d72da3e5c6649c69522e02fa2576d9bb06b81f423e52c03e68347bbc8a93b2ebbdf93ce674bac21788f824d48d55d08edf5e33510d91b55f49c72ce4ff0a9628832ad3b630f4bd9f12e08535e8d82721d6375fc2841c2ca0b101c1f9b74a8a601e67609b7f422166ae70fe386805a071364dbf2709ba076268831c5648c65f08f498240dd5b5236565", 0x1000}, {&(0x7f0000002300)="332e866dfce3f0d4c03eb8f20ed4e4ab14cb0243f9761b13fa634e60dc4b0def41e7ff3533379e22795f586abd96d7d96daa5335d781dc3fa6802829dc513444fda14e0e", 0x44}], 0x4, &(0x7f00000023c0)="fce8217d4ef3ee4bdecca11f856850db4caf48eee5383109dca5f24f4447ee918e948a29b2d55e8d9afecf59a1b777aca52cd21a259ac236c12e3ee0d860f40a26973dc85da5a823d6a2d8620876ca8aaf44da38cc049821730d9029f198379784147ce018d28814708aceca2739bbee971679b3b9c1d0e9476f372c47cc9955a3c59a60ec596fdd201546a90a24226134897859f8f4309d721faaa43337c4ad06d474e42b6bf7c3f181dbd64ce76ec445156a72", 0xb4, 0x4}, 0x10) 2m16.813963939s ago: executing program 3 (id=881): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0xfffd}}}}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x194, 0x0, 0x3, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x42fe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1fe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x520}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20040000}, 0x200000c1) 2m16.786029607s ago: executing program 32 (id=881): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0xfffd}}}}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x194, 0x0, 0x3, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x42fe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1fe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x520}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20040000}, 0x200000c1) 1m49.438968395s ago: executing program 4 (id=1294): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="140100002800010000000000fcdbdf250301f2800800180064010101140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff50000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m49.063663679s ago: executing program 4 (id=1306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000002f40)=""/4096, 0x1000}], 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=0x0, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0xffffffffffffff5d, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000ffdbdf250200000008000100", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x4) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000bd87495f40eaf9f41c6ba96dcfe5ab84a8a0e1d63a2dbd700afedbdf25020000000800010019287607000000000000004a", @ANYRESDEC, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8008001}, 0x20000000) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r1, 0x1, 0xfffffffa, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x50010}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0x8002}, {0x6}]}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) gettid() r12 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x5, 0x1, 0x3d3f, 0x0, 0x9, 0x3, 0x8001}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x4c}}, 0x24040084) 1m45.959119501s ago: executing program 4 (id=1322): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x29) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000004c0)={0xfffffff8, 0x100401, 0xfffffffd, 0xc4cf, 0x7, "000008010000000000000000eeffffff00", 0x7, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0xd, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008080}, 0x48000) 1m45.888192058s ago: executing program 4 (id=1325): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000000340)=""/35, 0x23}, {&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000000700)=""/131, 0x83}], 0x7}, 0x3}], 0x1, 0x3, &(0x7f0000000800)={0x77359400}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x10000004000, 0x0) ioctl$SG_SET_DEBUG(r7, 0x227e, &(0x7f0000000140)=0x1) 1m45.744267587s ago: executing program 4 (id=1329): r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x7) (async) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)=0x6) (async, rerun: 64) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x7, &(0x7f0000000000)={0x12, "a3dd982d0ba2d984c335f78f76704978a2f62f39d29c31372205cd39c53f80d4be"}}) (rerun: 64) 1m45.333590553s ago: executing program 4 (id=1333): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d0ef8cefff40498aa836efba58d484be1c4316dc20b0802eb2bf637c8222f4badffbf236756d8168c7b36432"], 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) (async) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x20, 0x0, &(0x7f0000000580)=[@acquire={0x40046305, 0x4000003}, @enter_looper, @acquire_done], 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x8804b3, 0x0) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r6, 0x7, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe}) (async, rerun: 64) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x3c, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x21, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x5, &(0x7f0000000640)=@framed={{}, [@generic={0x2d, 0x3, 0xa, 0x1, 0x3}, @call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3585cac2}, 0x94) 1m45.269408413s ago: executing program 33 (id=1333): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d0ef8cefff40498aa836efba58d484be1c4316dc20b0802eb2bf637c8222f4badffbf236756d8168c7b36432"], 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) (async) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x20, 0x0, &(0x7f0000000580)=[@acquire={0x40046305, 0x4000003}, @enter_looper, @acquire_done], 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x8804b3, 0x0) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r6, 0x7, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe}) (async, rerun: 64) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x3c, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x21, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x5, &(0x7f0000000640)=@framed={{}, [@generic={0x2d, 0x3, 0xa, 0x1, 0x3}, @call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3585cac2}, 0x94) 1m23.733106387s ago: executing program 2 (id=1667): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fsopen(&(0x7f0000000300)='devpts\x00', 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) fsopen(&(0x7f0000000300)='devpts\x00', 0x1) (async) fcntl$dupfd(r1, 0x0, r1) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) (async) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x6) (async) 1m23.680237354s ago: executing program 2 (id=1669): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) (rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0x4018aee2, &(0x7f0000000500)={0x59}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x78, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) (async) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e20, 0x1, @private1, 0x7ff}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) (async, rerun: 32) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x420800, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000480)={r6}, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x5, 0x0, 0x2a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7810, 0x0, 0x5, 0x9}}) (async, rerun: 64) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) (rerun: 64) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=@updpolicy={0x514, 0x19, 0x200, 0x70bd25, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e23, 0x1000, 0x2, 0x80, 0xa0, 0x5c, r7, r8}, {0x8000, 0x0, 0x2, 0x7, 0x3, 0x13a3, 0x46bf, 0x1}, {0x9, 0xffffffffffffffff, 0x0, 0x6}, 0xf8e, 0x6e6bb0, 0x1, 0x0, 0x2, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x8}}, @migrate={0x180, 0x11, [{@in6=@mcast1, @in6=@loopback, @in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x2b, 0x3, 0x0, 0x0, 0xa, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@local, @in6=@remote, @in6=@mcast2, 0xff, 0x0, 0x0, 0x3503, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in6=@local, @in6=@remote, @in6=@mcast2, 0x32, 0x1, 0x0, 0x3503, 0x2, 0xa}, {@in6=@loopback, @in6=@private2, @in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x29}, @in6=@mcast2, @in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x2b, 0x3, 0x0, 0x3507, 0x6b594eb154dd0eaa, 0xa}]}, @coaddr={0x14, 0xe, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @algo_auth_trunc={0xea, 0x14, {{'md5-generic\x00'}, 0x4f0, 0xc0, "77a6ce275b25b5f6c259a4ed8983f2129057e0bc7e6ac540121a2382719dae844a1ce8429811337c783b05d8a1b09c17fd54358a210eb84e920328646321ac520be19512b77f7666f99ff969a0dfdfa3b35185f42c3bdca5be01a0a6c494cc67dbe5e06e29023af6a6f440028f783bae9fcd888e8ff0fb9f3455bae13f5a38ee0a8ccfb01f58a4ab5170e31b6b61c3d33bd45ee2da76aa8ec3e85057801c"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd25, 0x70bd27, 0x70bd2c, 0x9, [0x7ff, 0xe, 0x3ff, 0x7, 0x3ff0000]}}, @algo_crypt={0x128, 0x2, {{'ctr(aes-aesni)\x00'}, 0x700, "89258c12272de6b568692b4bfc490ab0824cf3016b8f32a87d875849247e3a1ac5341736d0dd300f641bab895a85de36eec2e67e125828ec49eb8eaaf0b04f32f86a52ddbb4e21398ed204b44861f13a9b2f2935a1f77b99f50d9fbd355ded3b6252805ddcfd34d79386c4a35224ff66aa6b09de98a19a8607ecf2b88a33abcdfc791a59316d0fe93208127d826b80deb35f19f2ace77daeb7fd0cbadc87d6facf510a746e9b416b6d4cba7df1738cfbcb703198ba5b1c9f69b75c31e175200f0af000d20262e5da02e9ba41a2fbebc8198a3941806648bbb481704b9fbc6239"}}, @lastused={0xc, 0xf, 0x81}, @coaddr={0x14, 0xe, @in6=@empty}, @migrate={0x50, 0x11, [{@in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0xdd89e3e98cba5efd, 0x0, 0x0, 0x3504, 0x2, 0x2}]}]}, 0x514}, 0x1, 0x0, 0x0, 0x8800}, 0x4001010) 1m23.63062314s ago: executing program 2 (id=1671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000080)="f78d9c", 0x3}], 0x1, 0x0, 0x0, 0x40004}], 0x1, 0x400c0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 1m23.487523281s ago: executing program 2 (id=1674): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x191411, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000040)) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x191411, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) (async) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (async) write$snddsp(r3, &(0x7f0000000200)="a38d", 0x2) (async) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000040)) (async) 1m23.487171095s ago: executing program 2 (id=1675): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000000)={0x200, 0x8000000000000001, 0x4, 0x4, 0xb3d6}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1m23.233418074s ago: executing program 2 (id=1679): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4050) (async) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[], 0x20}}, 0x4000) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) ioctl$CDROM_CLEAR_OPTIONS(r2, 0x5321, 0x0) (async) landlock_restrict_self(r4, 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020) 1m23.216456692s ago: executing program 34 (id=1679): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4050) (async) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[], 0x20}}, 0x4000) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) ioctl$CDROM_CLEAR_OPTIONS(r2, 0x5321, 0x0) (async) landlock_restrict_self(r4, 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020) 1m1.583235748s ago: executing program 1 (id=2050): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000040)=0x1ff, 0x4) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x14, 0x51b, 0x70bd28, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "d76f51d2877e3e1d6a"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x12) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m1.582701108s ago: executing program 1 (id=2051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef87910905090020000108"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES64=r2, @ANYRES16=r2], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) lseek(0xffffffffffffffff, 0x10001, 0x0) bind$inet(r1, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000d68809f9f486146fc525455a5713fe1e050013000500000014000800"/58], 0x30}}, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r10, 0x25, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f000085b000/0x2000)=nil, 0x2000, 0x4c494cd22167c1b8) 1m0.982419831s ago: executing program 1 (id=2052): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1c00, 0x0) (async) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1c00, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000080)=@x86={0x6, 0x2, 0x10, 0x0, 0xb, 0x7, 0x2, 0x9, 0x5, 0xa, 0x0, 0x8, 0x0, 0x4, 0x10, 0xff, 0xb, 0xa, 0x3, '\x00', 0x6, 0x9}) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000080)=@x86={0x6, 0x2, 0x10, 0x0, 0xb, 0x7, 0x2, 0x9, 0x5, 0xa, 0x0, 0x8, 0x0, 0x4, 0x10, 0xff, 0xb, 0xa, 0x3, '\x00', 0x6, 0x9}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000280)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) (async) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000200)=0x7fffffff, 0x4) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x2d, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000000)={0x0, 0x0, r7}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000000)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f0000000240)={r8}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r5, 0x100000000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001dc0)=ANY=[], 0x18c0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m0.243006035s ago: executing program 1 (id=2061): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000014ff7f001c00"/28], 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m0.183494182s ago: executing program 1 (id=2063): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f00000011c0), 0xfffffffffffffffe) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x5, 0x0, &(0x7f0000000100)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) accept4$rose(r2, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @null}, &(0x7f0000000080)=0x1c, 0x100800) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x81, 0x1092c2) 1m0.093267561s ago: executing program 1 (id=2066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_emit_ethernet(0x1212, &(0x7f00000040c0)={@local, @random="cce390677742", @void, {@mpls_uc={0x8847, {[{0x8}], @ipv6=@generic={0xe, 0x6, "dae032", 0x11d8, 0x3c, 0xfe, @empty, @empty, {[@dstopts={0x2b, 0x2, '\x00', [@generic={0x8b, 0x15, "732460df6759829a8a7666d80a268aec1953f8133b"}]}, @hopopts={0x5e, 0x0, '\x00', [@pad1]}, @hopopts={0x3b, 0x1b, '\x00', [@generic={0x7, 0xd2, "c652899a98405d192ff8fb1a4df25d5d1545569f60ede042e7b88ce1a5741161bc453425ae885e6eb64eac02c7b024fb84b364e0620e47ef570e8b5d8954ec904ab319464898ef3546335dadb8ba1111433ee8aed90bb22e79047c2bdcb2673af5461c447be67c6337a96a3d449786551997b186b864b6b10ea4dd9a2f4a3d662d0ef68e01f48b8813ce088e210548a62da6a06ec3e95500c724086f13f7ec77521bc0b1b542c35d538904880c0dd4e28d38e4a01a88ea7ed8d7e7858a1a99dfc98f6898cf18e352b1823762bc1ab7a7321c"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x7e, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}]}, @fragment={0xff, 0x0, 0x8e, 0x1, 0x0, 0x4, 0x64}, @routing={0x33, 0xc, 0x2, 0x80, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x25}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}, @dstopts={0x89, 0x6, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x3, [0x200, 0xfffffffffffffffe, 0x6]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x81, [0x80]}}, @pad1]}], "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"}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) unshare(0x2a020400) r1 = syz_clone3(&(0x7f0000001240)={0xc0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) fcntl$getflags(r2, 0x3) chdir(&(0x7f00000003c0)='./bus\x00') r3 = fanotify_init(0x10, 0x80000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9d) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$CDROM_DEBUG(r5, 0x5330, 0x1) r6 = epoll_create(0x2) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001340)={0x4, 0x3, {r1}, {0xffffffffffffffff}, 0xba, 0x8}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240), 0x0, &(0x7f0000001380)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r0, r5]}}, @rights={{0x24, 0x1, 0x1, [r0, r6, r7, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r8}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {r1, r10}}}], 0x110, 0x4000040}, 0x800) r11 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r11, 0xc0606610, 0x0) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x8880, 0x85) lseek(r12, 0x101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/3465], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 45.063406907s ago: executing program 35 (id=2066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_emit_ethernet(0x1212, &(0x7f00000040c0)={@local, @random="cce390677742", @void, {@mpls_uc={0x8847, {[{0x8}], @ipv6=@generic={0xe, 0x6, "dae032", 0x11d8, 0x3c, 0xfe, @empty, @empty, {[@dstopts={0x2b, 0x2, '\x00', [@generic={0x8b, 0x15, "732460df6759829a8a7666d80a268aec1953f8133b"}]}, @hopopts={0x5e, 0x0, '\x00', [@pad1]}, @hopopts={0x3b, 0x1b, '\x00', [@generic={0x7, 0xd2, "c652899a98405d192ff8fb1a4df25d5d1545569f60ede042e7b88ce1a5741161bc453425ae885e6eb64eac02c7b024fb84b364e0620e47ef570e8b5d8954ec904ab319464898ef3546335dadb8ba1111433ee8aed90bb22e79047c2bdcb2673af5461c447be67c6337a96a3d449786551997b186b864b6b10ea4dd9a2f4a3d662d0ef68e01f48b8813ce088e210548a62da6a06ec3e95500c724086f13f7ec77521bc0b1b542c35d538904880c0dd4e28d38e4a01a88ea7ed8d7e7858a1a99dfc98f6898cf18e352b1823762bc1ab7a7321c"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x7e, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}]}, @fragment={0xff, 0x0, 0x8e, 0x1, 0x0, 0x4, 0x64}, @routing={0x33, 0xc, 0x2, 0x80, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x25}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}, @dstopts={0x89, 0x6, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x3, [0x200, 0xfffffffffffffffe, 0x6]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x81, [0x80]}}, @pad1]}], "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"}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) unshare(0x2a020400) r1 = syz_clone3(&(0x7f0000001240)={0xc0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) fcntl$getflags(r2, 0x3) chdir(&(0x7f00000003c0)='./bus\x00') r3 = fanotify_init(0x10, 0x80000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9d) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$CDROM_DEBUG(r5, 0x5330, 0x1) r6 = epoll_create(0x2) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001340)={0x4, 0x3, {r1}, {0xffffffffffffffff}, 0xba, 0x8}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240), 0x0, &(0x7f0000001380)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r0, r5]}}, @rights={{0x24, 0x1, 0x1, [r0, r6, r7, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r8}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {r1, r10}}}], 0x110, 0x4000040}, 0x800) r11 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r11, 0xc0606610, 0x0) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x8880, 0x85) lseek(r12, 0x101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000003400000001ed00007b130000000000001d440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37ca3c23b12c72058459b6cf548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb00f8ffff92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca485683cdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b508bc1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6cab44feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d086fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dd0500a4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52ab39c9ba1a7491a18d713f4169c3cf3a2becfe458687c562950bddfb58e6cf23ed86eec11214d70c7142c487ca405f9ac813189fcc7c4eae47e9ecc5b39c0d2861ff17d7c9c1ebc20244e52b87c8589efdd3b1b4e603ba65fd85864057f3e7bdd39cde36021745c9302117ddaaab0c1ddacce1aa4a4fd021b9c1d9829c905ec903946d98fb41180fe28df358cbba009743875e0a0eba096ad6e4a16a443e26358c2bc02efbc540ad7e1f3564ef6f4dba9fe91350036cef773f421f7c209e26877b6fca000000000000000000000000000025cef574b07f18f65f499daa3b5b5a37ab2c484aab9b2884821d989a00"/3465], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 39.810544533s ago: executing program 7 (id=2285): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setresgid(0xee00, 0xee01, 0x0) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f00000001c0)) (async) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f00000001c0)) lseek(r2, 0x10001, 0x0) (async) lseek(r2, 0x10001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000) 32.272503425s ago: executing program 7 (id=2285): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setresgid(0xee00, 0xee01, 0x0) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f00000001c0)) (async) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f00000001c0)) lseek(r2, 0x10001, 0x0) (async) lseek(r2, 0x10001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000) 25.123979408s ago: executing program 7 (id=2285): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setresgid(0xee00, 0xee01, 0x0) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f00000001c0)) (async) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f00000001c0)) lseek(r2, 0x10001, 0x0) (async) lseek(r2, 0x10001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000) 18.246805571s ago: executing program 7 (id=2285): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setresgid(0xee00, 0xee01, 0x0) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f00000001c0)) (async) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f00000001c0)) lseek(r2, 0x10001, 0x0) (async) lseek(r2, 0x10001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000) 10.312074189s ago: executing program 7 (id=2285): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setresgid(0xee00, 0xee01, 0x0) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f00000001c0)) (async) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f00000001c0)) lseek(r2, 0x10001, 0x0) (async) lseek(r2, 0x10001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000) 2.658934678s ago: executing program 7 (id=2285): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setresgid(0xee00, 0xee01, 0x0) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f00000001c0)) (async) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f00000001c0)) lseek(r2, 0x10001, 0x0) (async) lseek(r2, 0x10001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000) 1.873297788s ago: executing program 0 (id=2903): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xdc79}, {}, {}, {}, {0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x400000}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {0xbe5b, 0x6}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x44}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9c5}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffe, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffff}, {}, {}, {0x2}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x101}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r2, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f00003e3000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000, 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}}], {0x14}}, 0x78}}, 0x0) 1.382858361s ago: executing program 0 (id=2912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x3, '\x00', @data=0x7, 0x40}, {0xa, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x1, @uvalue=0x2}, {0x2, @svalue=0xa}, {0x0, @svalue=0xee}]}, 0x7b3}, {0x1a, '\x00', @buffer={"6ec190283a8cc61aa9c9e87940989ce36c189075f1513b6faea3f510efe03f93", 0x20}, 0x40}, {0x1e, '\x00', @data=0x4d55, 0x745}, {0x38, '\x00', @st={0x4, [{0x2, @uvalue=0xfff}, {0x0, @uvalue=0x1ff}, {0x3, @uvalue=0xfffffffffffffffb}, {0x0, @svalue=0x47b6cc5d}]}, 0x9}, {0x2b, '\x00', @data=0x4, 0xbd}, {0x32, '\x00', @buffer={"36a4a4255f9fb936e2c4f2de7e5e3ad7880ad29ce682ab12e13758f94ea4656b", 0x20}, 0x3034}, {0x2e, '\x00', @data=0x9, 0x9}, {0x3a, '\x00', @data=0x8, 0x10000}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.293071022s ago: executing program 5 (id=2913): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000380)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000040)=[{0x20}, {0x6}]}) 1.283701892s ago: executing program 5 (id=2915): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x19}, 0x80000001}, 0x1c) 1.19298763s ago: executing program 5 (id=2917): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x28011, r0, 0xe9328000) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x3, 0x2, &(0x7f0000000100)="8183", 0x9, 0xb, 0x46d, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) (async, rerun: 64) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) (async) listen(r5, 0x0) (async, rerun: 32) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4004000) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000000c0)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc08312fc5ed690d3857cb28b06be21049a20f7ff13197a7e84832e", 0x66}, {&(0x7f0000001400)="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", 0xf2b}], 0x2}, 0x9cdc2384056f8939) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r10 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0x7c81, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1.073084475s ago: executing program 5 (id=2919): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x29) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) tee(r1, r0, 0x7, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000200)={0x4, 0x1ff, 0x1, 'queue1\x00', 0xfffffffe}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000004c0)={0xfffffff8, 0x100401, 0xfffffffd, 0xc4cf, 0x7, "000008010000000000000000eeffffff00", 0x7, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x1) 1.072295259s ago: executing program 5 (id=2921): r0 = userfaultfd(0x801) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000019200)=""/198, &(0x7f0000019300)=0xc6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x1ff}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7a}, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x4, 0x0, &(0x7f00000003c0)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000019400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f00000000c0)=0x6, 0x0, 0x4) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019440)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRESOCT, @ANYBLOB="400900000800000054001a8048000a801400070000000000000000000000000000000000140007000008000000fc0000000000000000000105000800400000001400070000000000000000000000000000000000040007000400070068172b281ea809609580fbbfd85d5c9c4e02a471741a87af3f"], 0x74}, 0x1, 0x0, 0x0, 0x4104}, 0x0) io_uring_setup(0x3677, &(0x7f0000019340)={0x0, 0x6140, 0x4, 0x1, 0x37e}) 989.604305ms ago: executing program 0 (id=2923): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) ioctl$LOOP_SET_DIRECT_IO(r0, 0xc0401289, 0x6e) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xa, 0x9}, {}, {0xc, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2, 0x6, 0xffff, 0x10210, 0xffffffffffffffff, 0x6c16, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pI4 \x00'}, 0x20) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pK \x00'}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') preadv(r11, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/181, 0xb5}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x66, &(0x7f00000001c0)=""/102, 0x40f00, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x8, 0xdc, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r5, r6, r7, r9, r10, r11], &(0x7f0000000580)=[{0x4, 0x1, 0x8, 0x2}, {0x5, 0x4, 0xc, 0xc}, {0x0, 0x3, 0x4, 0x3}], 0x10, 0x1}, 0x94) 988.855534ms ago: executing program 5 (id=2924): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{r0, r1+10000000}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) close(r3) (async) lseek(r2, 0x6b, 0x1) 771.085948ms ago: executing program 6 (id=2926): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x31, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @value64}}) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) capget(&(0x7f0000000100)={0x20071026}, &(0x7f0000000240)={0x3, 0x667, 0xbda, 0x4, 0x0, 0x5}) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x10) (async) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffffffe, 0x40002) write$nbd(r4, &(0x7f0000000500)={0x67446698, 0x0, 0x0, 0x2, 0x3}, 0x10) close(r3) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) (async, rerun: 64) chown(&(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0xee01) (rerun: 64) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 770.494925ms ago: executing program 0 (id=2927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc334747575"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r2, 0x29, 0x7, 0x0, &(0x7f00000017c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfc, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x0, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000180)={[0x6e, 0x0, 0x0, 0x21, 0x6, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000480, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8003], 0xfffa1005, 0x3c4212}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 462.170048ms ago: executing program 6 (id=2928): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xfff) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x9, &(0x7f00000001c0)=[{0x4, 0x2, 0xf9, 0x1}, {0x1add, 0x7f, 0x0, 0x1}, {0xffff, 0x7, 0x7, 0xb9}, {0x1000, 0xc, 0x0, 0x8}, {0xff, 0xc, 0x1, 0x2}, {0x50, 0x6, 0xd, 0xb}, {0x80, 0x7f, 0x0, 0x7}, {0xac32, 0x63, 0x10, 0x6}, {0xba09, 0x15, 0x7, 0x2}]}) write$ppp(r0, &(0x7f0000000140)="1e08", 0x2) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x859) 393.276289ms ago: executing program 6 (id=2929): r0 = io_uring_setup(0x15b6, &(0x7f0000000000)={0x0, 0x40f6, 0x1000, 0x0, 0x91}) (async) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc840, 0x8) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{}, {r4, r5/1000+60000}}, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00') (async) nanosleep(&(0x7f0000000200)={0x77359400}, &(0x7f0000000240)) (async) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x401, 0x0) clock_getres(0x1, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1ff, 0x80000000, {}, {0xffffffffffffffff}, 0xffffffffffff5697, 0x8}) r8 = getuid() (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) setresuid(r7, r8, r9) (async) getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, r10, &(0x7f0000000580)={0x1, 0x8, 0x1}) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x1, 0x4e20, 0x3, 0x2, 0x20, 0x60, 0x5c, 0x0, r11}, {0x100000000, 0x6, 0x2, 0x4b, 0x4, 0x0, 0x9c1, 0x2}, {0x9, 0x8000, 0x1, 0x6fa1}, 0x3a, 0x6e6bb8, 0x0, 0x1, 0x2, 0x2}, {{@in6=@local, 0x4d3}, 0x2, @in6=@private2, 0x3506, 0x3, 0x1, 0x5, 0x664d4d66, 0x1, 0xbd}}, 0xe8) (async) socket(0x1, 0xa, 0x7f) (async) ioctl$EVIOCGREP(r12, 0x80084503, &(0x7f00000006c0)=""/174) (async) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x24, &(0x7f0000000800)={[{@xino_auto}, {@default_permissions}, {@userxattr}, {@redirect_dir_off}, {@metacopy_off}, {@uuid_auto}, {@verity_off}, {@uuid_auto}, {@redirect_dir_off}], [{@fsname={'fsname', 0x3d, '/dev/nbd'}}]}) (async) syz_80211_inject_frame(&(0x7f00000008c0)=@broadcast, &(0x7f0000000900)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_a, @initial, {0x0, 0x774}, @value=@ver_80211n={0x0, 0xc, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x0, 0x40, @random=0x3, @void, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x4, 0x9, 0x0, 0x10}, 0x800, 0x0, 0x80}}, [{0xdd, 0x85, "37d37b6c98c20c48aa07bbd71e58fe8f8498912d713258c20b3e17739e923262754dddcfc773a6955e9f6f021886b7f39b8bb8a45051d0ace2fceaee85c7027177c273ffb1c857f4a9fb0b492de41a35285408613b00c10e9d61e728aed55bfc403e63d60502731aea0b24cfc182d003dd37eddcb8a0219156384652cf1fc2eede3e2d829f"}, {0xdd, 0xf4, "adfb2dc3af91fac28397bc398431f339157b5077a685c734934539d35d5fd9df3263ad7246ad2cb095b51ee620076948bdb9c3a6cb719a97ddd17dc44f9cce3911364e10cda5ee8971d9d75014883ec6efccb2a1d4055b3c942107f123bf0c9cd258287edd98e87f0ac33dfde4a16b61e21acbd168b3b97a5c1b1e9af0090881dec9c066f1a12418461333f4b7c219f3523655468fbbc30cd8bf4622ee947fea6084ae2e0172caa21886861dc278c9b1b7fe6ace50e54b7e92f4957f7f14fd82620117b46fb549dec189651c1027362713387d01f51b79db9214f56aa941fb051bbaad8d86a0ade306205c7d8e71c0fb82e649ac"}, {0xdd, 0xa1, "8fdc02dd6509b0a20be5c431f6a4cc1d85b8bb3ccf18d289aec35e1e1d3dd12ea3f89b5490a65483aae83e801410620bdf99c5a2d9ef53d155384515ddf898d70b35a764e73c9a60256aaabbb2925899d635ab870d6c5693c2956a399d62e8e1f207fb549b677d817624badba82d05947c15f4d9e1593732249f2806d4846ddc6117ecd223f5c334697a92cfc011d49882d98628f95f004b8e9afbd23270fd8b78"}, {0xdd, 0x65, "b83af17434581bf27dc0652010445571e2b782d6f190b9bf377609631da841810aec7ec34c794407d1fb4366b160bd35f001b3a48a9b20b0b153f8a881b23cf5fdde1d6fe02fce109c5af3aafd732342669d01030643332e4b20b8032231e4f023f035071e"}]}, 0x2c5) syz_80211_inject_frame(&(0x7f0000000c00)=@device_b, &(0x7f0000000c40)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9}, @device_a, @random='-&c}JA', @broadcast, {0xb, 0x4}}, @random="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"}, 0x64e) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0}) ppoll(&(0x7f00000012c0)=[{r13, 0x423}], 0x1, &(0x7f0000001340)={r14, r15+10000000}, &(0x7f0000001380)={[0x7c]}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000013c0)={'wg1\x00'}) getdents(r3, &(0x7f0000001400)=""/245, 0xf5) ioctl$XFS_IOC_GETBMAPX(r6, 0xc0205838, &(0x7f0000001500)={0x1, 0x1ff, 0x933, 0x1ff, 0x3, 0x3f, 0x4}) 193.045195ms ago: executing program 6 (id=2930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x30040800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000983de43fd81d17aba4d790e8cd6759734e402d1838b469ef7408d996e53ee67e5218d7c7ebc278d4b3a6f030dd6b466a6d78a7788629", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf252300000005002500010000000a0001007770616e30000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r6, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES16=r4], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x40080) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaea0800450000280064000004029078ac1e0101e000000211009078e0000002000100010000000000000000"], 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x4c, r10, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x1b, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}]}, 0x4c}}, 0x20004800) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r10, @ANYBLOB="05002bbd7000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="1c00e70005a6e1a17e35d6c43ec8d440068d7831aca1af76adea67a720001784040004000400030004000300040006000400040004000500040005001c00e700fb8a4f0e9a9f3b18095aedd40fae4e570845e3d72852c6471c00e70054a210a43ed8e2017dd3509d803ad93776d2985478e3e8940a00e80008021100000100001c00e70087dc5ead9af1d3bd4ea0ed703575c7da2f979a9f646208880a00e80008021100000100001800178004000300040002000400040004000600040002001000178004000400040002000400020010001780040003000400040004000300"], 0xfc}, 0x1, 0x0, 0x0, 0xc4}, 0x0) unshare(0x64000600) socket$inet6_sctp(0xa, 0x1, 0x84) 63.083761ms ago: executing program 0 (id=2931): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x260, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0xf}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x260}, 0x1, 0x0, 0x0, 0x4}, 0x8010) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000600)=@assoc_value={r4, 0x43f}, &(0x7f00000005c0)=0xfdb4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 1.758004ms ago: executing program 0 (id=2932): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0x5c) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000100)) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getrandom(&(0x7f0000000540)=""/196, 0xc4, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0x5c) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000100)) (async) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) write$qrtrtun(r1, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) (async) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) getrandom(&(0x7f0000000540)=""/196, 0xc4, 0x2) (async) 680.057µs ago: executing program 6 (id=2933): getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000020180)=0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@filename='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 0s ago: executing program 6 (id=2934): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'wlan0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x1, 0x7, 0x4, 0x106a, 0x53, 0x0, 0x5, [0x61, 0x9]}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x80000001, 0x408000) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="d84eeadf47507a8dc73257b2db9c9c05", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800e000100696d6d6564696174650000001300028024000140000000001c000280180002800900020073797a3200000000080001800b0000750900010073797a30040000000900020073797a3200000000140000001100010000000000000000000000000a89502a5feec4d424"], 0x94}, 0x1, 0x0, 0x0, 0xc814}, 0x400c880) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): mode [ 178.014375][T12695] ip6gretap1: entered allmulticast mode [ 178.023873][T12698] netlink: 'syz.6.1895': attribute type 11 has an invalid length. [ 178.026624][T12698] __nla_validate_parse: 18 callbacks suppressed [ 178.026633][T12698] netlink: 199804 bytes leftover after parsing attributes in process `syz.6.1895'. [ 178.056981][T12690] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 178.063330][ T40] audit: type=1400 audit(1773005902.522:30192): avc: denied { write } for pid=12700 comm="syz.5.1896" name="usbmon4" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.207644][ T40] audit: type=1400 audit(1773005902.662:30193): avc: denied { mounton } for pid=12715 comm="syz.1.1900" path="/523/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 178.207765][T12717] 9pnet_fd: Insufficient options for proto=fd [ 178.309874][ T40] audit: type=1400 audit(1773005902.762:30194): avc: denied { map } for pid=12730 comm="syz.5.1904" path="/117/file0" dev="tmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 178.321639][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1904'. [ 178.328280][T12731] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1904'. [ 178.333478][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1904'. [ 178.336941][T12731] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1904'. [ 178.340598][T12731] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1904'. [ 178.344791][ T40] audit: type=1400 audit(1773005902.802:30195): avc: denied { write } for pid=12730 comm="syz.5.1904" name="/" dev="configfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.361447][ T40] audit: type=1400 audit(1773005902.812:30196): avc: denied { unmount } for pid=10571 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 178.384152][T12741] netlink: 'syz.5.1907': attribute type 11 has an invalid length. [ 178.387757][T12741] netlink: 199804 bytes leftover after parsing attributes in process `syz.5.1907'. [ 178.813155][T12757] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.010148][T12770] vcan1: entered allmulticast mode [ 179.051395][T12773] CUSE: unknown device info "ý<±5æç—‘ë\áïð«ºzöŒ0z,~XY©+A}sÎ…F'%ÓËó:„Ij!ó@Q…åmß‘RÞúGQãò––q 6*³5p)ÙxÙ?," [ 179.073346][T12773] CUSE: unknown device info "ÿŽ&b¬í%Z‰ñWú«)«×3\my­ åû" [ 179.075615][T12773] CUSE: unknown device info "Ò­Sû‡¨‚¨«€ýmMÀiÊ_¿Ä0˱°Ý¯;qÈ]Â{ìi¹ë79ñ©{Ò0Ôµßt•º~ø±>V¤ûÞÂZÀ\.9êÁOC‡«®U™&†qÿ…±Ïmsfûkž½cêð±"" [ 179.080180][T12773] CUSE: DEVNAME unspecified [ 179.099299][T12775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12775 comm=syz.6.1917 [ 179.212600][T12741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.340932][T12792] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1922'. [ 179.432822][T12801] openvswitch: netlink: IP tunnel dst address not specified [ 179.435280][T12802] openvswitch: netlink: IP tunnel dst address not specified [ 179.458582][T12805] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 179.833426][T12828] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1932'. [ 180.724723][T12838] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12838 comm=syz.0.1934 [ 180.780460][T12818] netlink: 'syz.5.1931': attribute type 6 has an invalid length. [ 180.797768][T12820] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 180.924322][T12853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40030 sclass=netlink_route_socket pid=12853 comm=syz.6.1938 [ 180.947423][T12855] syz.1.1936: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 180.967015][T12839] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 181.019491][T12862] nbd: must specify at least one socket [ 181.302524][T12874] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 181.391671][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d0ff400: rx timeout, send abort [ 181.462170][T12886] trusted_key: encrypted_key: keylen parameter is missing [ 181.573512][T12888] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 181.590201][T12888] kvm: pic: single mode not supported [ 181.590215][T12888] kvm: pic: level sensitive irq not supported [ 181.592634][T12888] kvm: pic: non byte read [ 181.895399][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d0ff400: abort rx timeout. Force session deactivation [ 182.031930][ T6017] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 182.100789][T12907] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 182.107643][T12907] input: syz1 as /devices/virtual/input/input22 [ 182.118002][T12907] QAT: Device 2 not found [ 182.163079][T12909] overlayfs: failed to resolve './file1': -2 [ 182.184819][ T6017] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 182.189062][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.192787][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.196111][ T6017] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 182.201196][ T6017] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 182.204491][ T6017] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 182.207139][ T6017] usb 6-1: Manufacturer: syz [ 182.211556][ T6017] usb 6-1: config 0 descriptor?? [ 182.352146][ T40] audit: type=1326 audit(1773005906.812:30197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12887 comm="syz.6.1949" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8619c799 code=0x7fc00000 [ 182.493435][T12919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1042 sclass=netlink_route_socket pid=12919 comm=syz.5.1960 [ 182.506438][T12919] bridge1: port 1(veth0_to_bond) entered blocking state [ 182.506505][T12919] bridge1: port 1(veth0_to_bond) entered disabled state [ 182.506576][T12919] veth0_to_bond: entered allmulticast mode [ 182.507362][T12919] veth0_to_bond: entered promiscuous mode [ 182.620687][ T6017] hid_parser_main: 9 callbacks suppressed [ 182.620702][ T6017] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 182.652792][ T6017] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 182.655774][ T40] kauditd_printk_skb: 880 callbacks suppressed [ 182.655787][ T40] audit: type=1400 audit(1773005907.112:31078): avc: denied { read } for pid=12926 comm="syz.6.1964" name="file0" dev="tmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 182.666737][ T40] audit: type=1400 audit(1773005907.112:31079): avc: denied { open } for pid=12926 comm="syz.6.1964" path="/79/file0" dev="tmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 182.681950][ T40] audit: type=1400 audit(1773005907.112:31080): avc: denied { ioctl } for pid=12926 comm="syz.6.1964" path="/79/file0" dev="tmpfs" ino=434 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 182.778144][T12943] overlayfs: overlapping lowerdir path [ 182.872830][T12950] Failed to initialize the IGMP autojoin socket (err -2) [ 182.886950][ T6017] usb 6-1: USB disconnect, device number 28 [ 183.217093][T12955] vxfs: unable to read disk superblock at 1 [ 183.219729][T12955] vxfs: unable to read disk superblock at 8 [ 183.222664][T12955] vxfs: can't find superblock. [ 183.331291][T12967] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 183.411082][T12974] openvswitch: netlink: IP tunnel dst address not specified [ 183.540781][T12986] loop7: detected capacity change from 0 to 16384 [ 183.902967][T13020] can0: slcan on ttynull. [ 183.915700][ T40] audit: type=1400 audit(1773005908.372:31081): avc: denied { create } for pid=13021 comm="syz.1.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 183.924803][ T40] audit: type=1400 audit(1773005908.372:31082): avc: denied { write } for pid=13021 comm="syz.1.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 183.947698][T13024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24080 sclass=netlink_route_socket pid=13024 comm=syz.1.1994 [ 183.983114][T13019] can0 (unregistered): slcan off ttynull. [ 184.102831][ T40] audit: type=1400 audit(1773005908.562:31083): avc: denied { bind } for pid=13031 comm="syz.5.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 184.247425][T13040] __nla_validate_parse: 10 callbacks suppressed [ 184.247437][T13040] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2000'. [ 184.257307][T13040] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 184.261316][T13040] gretap1: entered promiscuous mode [ 184.263736][T13040] gretap1: entered allmulticast mode [ 184.266682][T13042] netlink: 'syz.6.2001': attribute type 29 has an invalid length. [ 184.269685][T13043] netlink: 'syz.6.2001': attribute type 29 has an invalid length. [ 184.367076][T13058] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.485433][T13069] program syz.5.2008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.540842][T13085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2012'. [ 184.581783][T13092] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.2014'. [ 184.821976][ T50] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 184.971966][ T50] usb 11-1: device descriptor read/64, error -71 [ 185.187086][T13157] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 185.222736][ T6354] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 185.231911][ T50] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 185.371936][ T50] usb 11-1: device descriptor read/64, error -71 [ 185.384524][ T6354] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 185.472972][T13189] tipc: Started in network mode [ 185.475036][T13189] tipc: Node identity dad3ae258472, cluster identity 4711 [ 185.477503][T13189] tipc: Enabled bearer , priority 0 [ 185.481506][T13189] tipc: Disabling bearer [ 185.492011][ T50] usb usb11-port1: attempt power cycle [ 185.571639][ T40] audit: type=1400 audit(1773005910.022:31084): avc: denied { read } for pid=13192 comm="syz.0.2030" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 185.581951][ T40] audit: type=1400 audit(1773005910.022:31085): avc: denied { open } for pid=13192 comm="syz.0.2030" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 185.591386][ T40] audit: type=1400 audit(1773005910.032:31086): avc: denied { ioctl } for pid=13192 comm="syz.0.2030" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 185.660772][T13207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63182 sclass=netlink_route_socket pid=13207 comm=syz.1.2034 [ 185.660870][T13208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63182 sclass=netlink_route_socket pid=13208 comm=syz.1.2034 [ 185.696823][T13214] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 185.698645][ T5936] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 185.732022][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 185.757773][T13217] bond11: entered promiscuous mode [ 185.760774][T13217] 8021q: adding VLAN 0 to HW filter on device bond11 [ 185.789856][T13222] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 185.805049][T13227] netlink: 'syz.0.2039': attribute type 11 has an invalid length. [ 185.808245][T13217] 8021q: adding VLAN 0 to HW filter on device bond11 [ 185.810931][T13217] bond11: (slave sit3): The slave device specified does not support setting the MAC address [ 185.815853][T13217] bond11: (slave sit3): Error -95 calling set_mac_address [ 185.846904][ T40] audit: type=1400 audit(1773005910.302:31087): avc: denied { bind } for pid=13228 comm="syz.5.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.851970][ T50] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 185.852393][T13227] omfs: Invalid superblock (0) [ 185.882573][ T50] usb 11-1: device descriptor read/8, error -71 [ 185.929733][T13238] netlink: 'syz.1.2045': attribute type 7 has an invalid length. [ 186.090898][T13258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2051'. [ 186.151971][ T50] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 186.172381][ T50] usb 11-1: device descriptor read/8, error -71 [ 186.191907][ T5991] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 186.282983][ T50] usb usb11-port1: unable to enumerate USB device [ 186.361964][ T5991] usb 5-1: Using ep0 maxpacket: 32 [ 186.366462][ T5991] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 186.369939][ T5991] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 186.375819][ T5991] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 186.380490][ T5991] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 186.384791][ T5991] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 186.390335][ T5991] usb 5-1: config 0 interface 0 has no altsetting 0 [ 186.395380][ T5991] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 186.399259][ T5991] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 186.403060][ T5991] usb 5-1: Product: syz [ 186.404889][ T5991] usb 5-1: Manufacturer: syz [ 186.406906][ T5991] usb 5-1: SerialNumber: syz [ 186.411377][ T5991] usb 5-1: config 0 descriptor?? [ 186.415924][ T5991] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 186.421058][ T5991] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 186.616019][T13241] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 186.620264][ T10] usb 5-1: USB disconnect, device number 16 [ 186.625375][ T10] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 186.874573][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880267f7400: rx timeout, send abort [ 186.903541][T13271] No buffer was provided with the request [ 186.906923][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2054'. [ 187.223844][T13299] netlink: 'syz.0.2057': attribute type 1 has an invalid length. [ 187.227088][T13299] netlink: 'syz.0.2057': attribute type 4 has an invalid length. [ 187.229679][T13299] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2057'. [ 187.272044][T13306] kernel profiling enabled (shift: 63) [ 187.274568][T13306] profiling shift: 63 too large [ 187.374691][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880267f6c00: rx timeout, send abort [ 187.377517][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880267f7400: abort rx timeout. Force session deactivation [ 187.406268][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'. [ 187.409306][T13325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2061'. [ 187.443929][T13331] netlink: 'syz.5.2065': attribute type 39 has an invalid length. [ 187.608606][T13341] ip6gretap1: entered promiscuous mode [ 187.610611][T13341] ip6gretap1: entered allmulticast mode [ 187.650322][T13348] netlink: 'syz.6.2069': attribute type 1 has an invalid length. [ 187.695527][T13348] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 187.700114][T13348] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 187.728380][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 187.728396][ T40] audit: type=1400 audit(1773005912.182:31090): avc: denied { lock } for pid=13350 comm="syz.0.2070" path="socket:[57766]" dev="sockfs" ino=57766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.745214][T13358] gretap1: entered promiscuous mode [ 187.751661][T13358] bond2: (slave gretap1): making interface the new active one [ 187.758634][T13358] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 187.825553][T13361] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 187.830535][T13361] block device autoloading is deprecated and will be removed. [ 187.877506][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880267f6c00: abort rx timeout. Force session deactivation [ 187.893189][T13365] bond3: Removing last arp target with arp_interval on [ 187.923432][ T40] audit: type=1400 audit(1773005912.382:31091): avc: denied { append } for pid=13371 comm="syz.6.2076" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 188.010146][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2077'. [ 188.023942][T13374] bridge2: entered promiscuous mode [ 188.025748][T13374] bridge2: entered allmulticast mode [ 188.250926][T13398] kvm: pic: level sensitive irq not supported [ 188.251249][T13398] kvm: pic: non byte read [ 188.257335][T13398] kvm: pic: single mode not supported [ 188.257732][T13398] kvm: pic: non byte read [ 188.263733][T13398] kvm: pic: non byte read [ 188.267009][T13398] kvm: pic: single mode not supported [ 188.268212][T13398] kvm: pic: non byte read [ 188.274315][T13398] kvm: pic: non byte read [ 188.277147][T13398] kvm: pic: single mode not supported [ 188.277155][T13398] kvm: pic: level sensitive irq not supported [ 188.279651][T13398] kvm: pic: non byte read [ 188.285129][T13398] kvm: pic: non byte read [ 188.288121][T13398] kvm: pic: single mode not supported [ 188.288129][T13398] kvm: pic: level sensitive irq not supported [ 188.290200][T13398] kvm: pic: non byte read [ 188.295696][T13398] kvm: pic: non byte read [ 188.335545][ T40] audit: type=1400 audit(1773005912.792:31092): avc: denied { bind } for pid=13409 comm="syz.5.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 188.340413][T13410] input: syz1 as /devices/virtual/input/input23 [ 188.421200][T13419] loop6: detected capacity change from 0 to 8 [ 188.473068][T13420] loop6: detected capacity change from 8 to 7 [ 188.754813][ T6354] Dev loop6: unable to read RDB block 7 [ 188.757286][ T6354] loop6: unable to read partition table [ 188.759820][ T6354] loop6: partition table beyond EOD, truncated [ 188.981102][ T6199] xfrm0 speed is unknown, defaulting to 1000 [ 189.034146][T13420] Dev loop6: unable to read RDB block 7 [ 189.037136][T13420] loop6: unable to read partition table [ 189.039692][T13420] loop6: partition table beyond EOD, truncated [ 189.043360][T13420] loop_reread_partitions: partition scan of loop6 (aQ¤"¸ÍAZD–Îå0̹¨Š¾, priority 0 [ 194.365421][T13579] __nla_validate_parse: 73 callbacks suppressed [ 194.365432][T13579] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2138'. [ 194.434817][T13580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13580 comm=syz.0.2138 [ 194.531609][ T5998] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 194.534286][ T5998] usb 11-1: can't read configurations, error -71 [ 194.552973][T13578] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 194.561574][T13578] tipc: Disabling bearer [ 194.826080][T13612] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13612 comm=syz.0.2149 [ 194.895025][T13611] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 194.922335][T13616] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 194.967320][T13616] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 195.322308][ T6017] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 195.493752][ T6017] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 195.498173][ T6017] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 195.503120][ T6017] usb 5-1: config 0 interface 0 has no altsetting 0 [ 195.507697][ T6017] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 195.511481][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 195.515261][ T6017] usb 5-1: Product: syz [ 195.517066][ T6017] usb 5-1: Manufacturer: syz [ 195.519140][ T6017] usb 5-1: SerialNumber: syz [ 195.524432][ T6017] usb 5-1: config 0 descriptor?? [ 195.528893][ T6017] hub 5-1:0.0: bad descriptor, ignoring hub [ 195.531559][ T6017] hub 5-1:0.0: probe with driver hub failed with error -5 [ 195.537263][ T6017] usb 5-1: selecting invalid altsetting 0 [ 195.842090][ T9] usb 5-1: USB disconnect, device number 17 [ 196.144973][T13669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=13669 comm=syz.5.2169 [ 196.334783][T13676] tmpfs: Bad value for 'mpol' [ 196.503295][T13684] delete_channel: no stack [ 196.819170][T13698] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2179'. [ 196.822227][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2179'. [ 196.825118][T13698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2179'. [ 196.855753][T13700] bridge0: entered allmulticast mode [ 196.890443][T13705] team0 (unregistering): Port device team_slave_0 removed [ 196.897385][T13705] team0 (unregistering): Port device team_slave_1 removed [ 197.033883][T13725] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 197.090407][T13731] netlink: 'syz.6.2188': attribute type 4 has an invalid length. [ 197.140031][T13737] netlink: 'syz.6.2190': attribute type 1 has an invalid length. [ 197.143870][T13737] netlink: 'syz.6.2190': attribute type 3 has an invalid length. [ 197.147248][T13737] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2190'. [ 197.198790][T13747] tmpfs: Unknown parameter 'usrquota_inode_èf' [ 197.226975][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2194'. [ 197.302214][T13758] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2191'. [ 197.305521][T13758] unsupported nlmsg_type 40 [ 197.312076][T13760] 9pnet_virtio: no channels available for device syz [ 197.422410][T13766] 9pnet_fd: p9_fd_create_unix (13766): problem connecting socket: ./file0: -111 [ 197.491361][T13772] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 197.531988][T13781] tmpfs: Bad value for 'huge' [ 197.562811][T13786] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2205'. [ 197.719017][T13796] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2209'. [ 197.758248][T13791] block device autoloading is deprecated and will be removed. [ 197.762724][T13791] md: invalid raid superblock magic on ram32 [ 197.766953][T13791] md: ram32 does not have a valid v0.0 superblock, not importing! [ 197.769766][T13791] md: md_import_device returned -22 [ 197.774841][T13798] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2210'. [ 197.822886][T13789] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 197.886075][T13803] delete_channel: no stack [ 197.952413][T13807] overlay: Unknown parameter 'ÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ./file0' [ 197.963006][T13807] overlay: ./file1 is not a directory [ 198.067500][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 198.067511][ T40] audit: type=1400 audit(1773005922.522:31282): avc: denied { audit_write } for pid=13815 comm="syz.5.2218" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 198.069986][T13816] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 198.077950][ T40] audit: type=1400 audit(1773005922.522:31283): avc: denied { mount } for pid=13815 comm="syz.5.2218" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 198.089119][ T40] audit: type=1400 audit(1773005922.522:31284): avc: denied { mounton } for pid=13815 comm="syz.5.2218" path="/232/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 198.096697][ T40] audit: type=1400 audit(1773005922.532:31285): avc: denied { write } for pid=13815 comm="syz.5.2218" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 198.104194][ T40] audit: type=1400 audit(1773005922.542:31286): avc: denied { create } for pid=13815 comm="syz.5.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.110555][ T40] audit: type=1400 audit(1773005922.542:31287): avc: denied { create } for pid=13815 comm="syz.5.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.116898][ T40] audit: type=1400 audit(1773005922.542:31288): avc: denied { bind } for pid=13815 comm="syz.5.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.123277][ T40] audit: type=1400 audit(1773005922.562:31289): avc: denied { wake_alarm } for pid=13815 comm="syz.5.2218" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 198.147812][ T40] audit: type=1400 audit(1773005922.602:31290): avc: denied { unmount } for pid=10571 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 198.171018][ T40] audit: type=1400 audit(1773005922.622:31291): avc: denied { append } for pid=13820 comm="syz.5.2219" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 198.237871][T13830] netlink: 'syz.5.2222': attribute type 1 has an invalid length. [ 198.279080][T13834] binder: 13833:13834 ioctl c0306201 2000000003c0 returned -14 [ 198.305388][T13841] Failed to initialize the IGMP autojoin socket (err -2) [ 198.326678][T13842] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 198.414456][T13854] ip6gre2: entered promiscuous mode [ 198.416360][T13854] ip6gre2: entered allmulticast mode [ 198.455872][T13860] No source specified [ 198.527532][T13862] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.534976][T13864] gretap0: entered promiscuous mode [ 198.540416][T13864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32541 sclass=netlink_route_socket pid=13864 comm=syz.0.2232 [ 198.800816][T13873] kAFS: Can only specify source 'none' with -o dyn [ 199.052405][T13877] netlink: 'syz.0.2236': attribute type 20 has an invalid length. [ 199.128762][T13881] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 199.137287][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.241872][T13830] comedi comedi2: reset error (fatal) [ 199.467586][T13893] 9p: Unknown access argument Žh: -22 [ 199.671940][ T6017] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 199.842867][ T6017] usb 5-1: Using ep0 maxpacket: 32 [ 199.847878][ T6017] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 199.855281][T13911] 9p: Bad value for 'rfdno' [ 199.855519][ T6017] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 199.857556][T13911] 9p: Bad value for 'rfdno' [ 199.861379][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 199.866901][ T6017] usb 5-1: Product: syz [ 199.868342][ T6017] usb 5-1: Manufacturer: syz [ 199.869913][ T6017] usb 5-1: SerialNumber: syz [ 199.873724][ T6017] usb 5-1: config 0 descriptor?? [ 199.876453][T13898] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 199.888196][ T6017] hub 5-1:0.0: bad descriptor, ignoring hub [ 199.888892][T13918] __nla_validate_parse: 5 callbacks suppressed [ 199.888902][T13918] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2247'. [ 199.890242][ T6017] hub 5-1:0.0: probe with driver hub failed with error -5 [ 200.320114][T13952] overlayfs: unescaped trailing colons in lowerdir mount option. [ 200.360203][T13959] program syz.6.2261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.414336][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2267'. [ 201.454986][T13980] input: syz1 as /devices/virtual/input/input24 [ 201.457422][T13980] input: failed to attach handler leds to device input24, error: -6 [ 201.482852][T13977] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 201.522187][T13985] SELinux: truncated policydb string identifier [ 201.524415][T13985] SELinux: failed to load policy [ 201.612572][T13995] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 201.865038][T14006] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2278'. [ 202.113031][T14023] program syz.6.2281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.113468][T14024] program syz.6.2281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.649704][ T5942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.662503][ T10] usb 5-1: USB disconnect, device number 18 [ 202.665485][ T5942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.668562][ T5942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.676937][ T5942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.679784][ T5942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.719408][T14034] Failed to initialize the IGMP autojoin socket (err -2) [ 202.943656][T14034] chnl_net:caif_netlink_parms(): no params data found [ 202.991978][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 203.030981][T14034] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.033467][T14034] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.035812][T14034] bridge_slave_0: entered allmulticast mode [ 203.038627][T14034] bridge_slave_0: entered promiscuous mode [ 203.041719][T14034] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.044702][T14034] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.047080][T14034] bridge_slave_1: entered allmulticast mode [ 203.052474][T14034] bridge_slave_1: entered promiscuous mode [ 203.144719][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 203.153567][ T10] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.154859][T14034] team0: Port device team_slave_0 added [ 203.158290][ T10] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.177523][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.180157][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 203.186712][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.187860][ T40] kauditd_printk_skb: 54 callbacks suppressed [ 203.187870][ T40] audit: type=1400 audit(1773005927.642:31346): avc: denied { ioctl } for pid=14059 comm="syz.5.2288" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 203.194678][T14034] team0: Port device team_slave_1 added [ 203.201737][ T10] usb 5-1: config 0 descriptor?? [ 203.218416][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2287'. [ 203.222067][T14057] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2287'. [ 203.235644][T14034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.237862][T14034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.247196][T14034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.252721][T14059] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 203.254598][T14034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.257858][T14034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.266425][T14034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.300092][ T40] audit: type=1400 audit(1773005927.752:31347): avc: denied { map } for pid=14061 comm="syz.5.2289" path="/dev/video4" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 203.341023][T14034] hsr_slave_0: entered promiscuous mode [ 203.343502][T14034] hsr_slave_1: entered promiscuous mode [ 203.346082][T14034] debugfs: 'hsr0' already exists in 'hsr' [ 203.349498][T14034] Cannot create hsr debugfs directory [ 203.368396][ T40] audit: type=1400 audit(1773005927.822:31348): avc: denied { read } for pid=14063 comm="syz.6.2290" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 203.379331][ T40] audit: type=1400 audit(1773005927.822:31349): avc: denied { open } for pid=14063 comm="syz.6.2290" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 203.394191][ T40] audit: type=1400 audit(1773005927.832:31350): avc: denied { ioctl } for pid=14063 comm="syz.6.2290" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 203.407563][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2291'. [ 203.416296][T14069] program syz.5.2291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.581265][T14034] netdevsim netdevsim7 netdevsim0: renamed from eth6 [ 203.590811][T14034] netdevsim netdevsim7 netdevsim1: renamed from eth7 [ 203.599630][T14034] netdevsim netdevsim7 netdevsim2: renamed from eth8 [ 203.604810][T14034] netdevsim netdevsim7 netdevsim3: renamed from eth9 [ 203.613009][ T10] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 203.615336][ T10] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 203.623558][ T10] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 203.625879][ T10] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 203.628155][ T10] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 203.630762][ T10] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 203.646661][T14034] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.648921][T14034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.651380][T14034] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.653756][T14034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.764217][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.768797][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.784531][T14034] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.799491][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.802627][ T6279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.816316][ T10] usb 5-1: USB disconnect, device number 19 [ 203.820407][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.823572][ T6279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.891932][ T6017] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 204.027487][T14034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.051919][ T6017] usb 10-1: Using ep0 maxpacket: 8 [ 204.055824][ T6017] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 204.058839][ T6017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.065394][ T6017] pvrusb2: Hardware description: Terratec Grabster AV400 [ 204.067741][ T6017] pvrusb2: ********** [ 204.069065][ T6017] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 204.073463][ T6017] pvrusb2: Important functionality might not be entirely working. [ 204.076022][ T6017] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 204.079948][ T6017] pvrusb2: ********** [ 204.223728][T14034] veth0_vlan: entered promiscuous mode [ 204.228512][T14034] veth1_vlan: entered promiscuous mode [ 204.270503][ T2490] pvrusb2: Invalid write control endpoint [ 204.274770][T14034] veth0_macvtap: entered promiscuous mode [ 204.293497][T14034] veth1_macvtap: entered promiscuous mode [ 204.296685][ T2490] pvrusb2: Invalid write control endpoint [ 204.298565][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 204.302128][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 204.305354][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 204.309467][ T2490] pvrusb2: Device being rendered inoperable [ 204.311417][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 204.314520][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 204.319345][ T2490] pvrusb2: Attached sub-driver cx25840 [ 204.321128][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 204.325605][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 204.341671][T14034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.355619][T14034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.359089][ T40] audit: type=1400 audit(1773005928.812:31351): avc: denied { append } for pid=14101 comm="syz.0.2293" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.370123][T14034] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 204.379275][T14034] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 204.390223][T14034] wireguard: wg0: Could not create IPv4 socket [ 204.394639][T14034] wireguard: wg1: Could not create IPv4 socket [ 204.398758][T14034] wireguard: wg2: Could not create IPv4 socket [ 204.445257][T14106] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2295'. [ 204.450175][T14106] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 204.473602][T14075] pvrusb2: Attempted to execute control transfer when device not ok [ 204.481964][ T50] usb 10-1: USB disconnect, device number 7 [ 204.502481][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2295'. [ 204.517053][ T40] audit: type=1400 audit(1773005928.972:31352): avc: denied { map } for pid=14105 comm="syz.0.2295" path="socket:[62701]" dev="sockfs" ino=62701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 204.547680][ T40] audit: type=1400 audit(1773005929.002:31353): avc: denied { read write } for pid=14109 comm="syz.0.2296" name="usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 204.556093][ T40] audit: type=1400 audit(1773005929.002:31354): avc: denied { open } for pid=14109 comm="syz.0.2296" path="/dev/usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 204.680559][ T40] audit: type=1400 audit(1773005929.132:31355): avc: denied { append } for pid=14114 comm="syz.0.2298" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 205.152026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 205.232891][T14147] netlink: 'syz.0.2306': attribute type 4 has an invalid length. [ 205.236230][T14147] netlink: 'syz.0.2306': attribute type 5 has an invalid length. [ 205.264395][T14150] netlink: 4376 bytes leftover after parsing attributes in process `syz.0.2307'. [ 205.267602][T14150] netlink: 4376 bytes leftover after parsing attributes in process `syz.0.2307'. [ 205.355312][T14157] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17 [ 205.357537][T14157] PKCS7: Only support pkcs7_signedData type [ 206.241074][T14202] input: syz1 as /devices/virtual/input/input25 [ 206.383445][T14217] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2316'. [ 206.386688][T14218] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2316'. [ 206.552005][ T50] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 206.638620][T14235] usb usb7: usbfs: process 14235 (syz.6.2320) did not claim interface 0 before use [ 206.708213][ T50] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 206.715669][ T50] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 206.720092][ T50] usb 10-1: config 0 interface 0 has no altsetting 0 [ 206.728027][T14253] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 206.730160][ T50] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 206.734049][T14254] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 206.737912][ T50] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 206.741532][ T50] usb 10-1: Product: syz [ 206.744580][ T50] usb 10-1: Manufacturer: syz [ 206.746614][ T50] usb 10-1: SerialNumber: syz [ 206.752896][ T50] usb 10-1: config 0 descriptor?? [ 206.762977][ T50] usb 10-1: selecting invalid altsetting 0 [ 206.969617][ T50] usb 10-1: USB disconnect, device number 8 [ 207.083404][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2330'. [ 207.084350][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2330'. [ 207.086438][T14290] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 207.089516][T14289] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 207.095649][T14290] netlink: 'syz.6.2330': attribute type 1 has an invalid length. [ 207.095957][T14291] netlink: 'syz.6.2330': attribute type 1 has an invalid length. [ 207.108779][T14290] bond0: entered promiscuous mode [ 207.110644][T14290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.128718][T14289] bond0: (slave bridge1): making interface the new active one [ 207.131400][T14289] bridge1: entered promiscuous mode [ 207.134650][T14289] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 207.154558][T14290] bond0: (slave bridge2): Enslaving as a backup interface with an up link [ 207.325368][T14310] netlink: 'syz.6.2334': attribute type 10 has an invalid length. [ 207.336685][T14310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.341473][T14310] .`: (slave batadv0): Enslaving as an active interface with an up link [ 207.429681][T14316] netlink: 'syz.6.2335': attribute type 8 has an invalid length. [ 207.429681][T14317] netlink: 'syz.6.2335': attribute type 8 has an invalid length. [ 207.902127][T14352] binder: 14351:14352 ioctl c0306201 0 returned -14 [ 208.027085][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.036769][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.040139][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.044652][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.048008][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.064775][T14372] Failed to initialize the IGMP autojoin socket (err -2) [ 208.142302][T14394] SELinux: truncated policydb string identifier [ 208.144572][T14394] SELinux: failed to load policy [ 208.162975][T14394] netlink: 4456 bytes leftover after parsing attributes in process `syz.5.2348'. [ 208.201688][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 208.201698][ T40] audit: type=1400 audit(1773005932.652:31388): avc: denied { connect } for pid=14401 comm="syz.5.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 208.213543][ T40] audit: type=1400 audit(1773005932.672:31389): avc: denied { connect } for pid=14401 comm="syz.5.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 208.259975][ T40] audit: type=1400 audit(1773005932.712:31390): avc: denied { map } for pid=14406 comm="syz.6.2351" path="socket:[64617]" dev="sockfs" ino=64617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.290991][ T40] audit: type=1400 audit(1773005932.712:31391): avc: denied { read accept } for pid=14406 comm="syz.6.2351" path="socket:[64617]" dev="sockfs" ino=64617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.308997][T14411] Sensor A: ================= START STATUS ================= [ 208.311492][T14411] Sensor A: Test Pattern: 75% Colorbar [ 208.314238][T14411] Sensor A: Show Information: All [ 208.316090][T14411] Sensor A: Vertical Flip: false [ 208.317707][T14411] Sensor A: Horizontal Flip: false [ 208.319380][T14411] Sensor A: Brightness: 3 [ 208.320810][T14411] Sensor A: Contrast: 3 [ 208.322285][T14411] Sensor A: Hue: 127 [ 208.323596][T14411] Sensor A: Saturation: 128 [ 208.325095][T14411] Sensor A: ================== END STATUS ================== [ 208.331646][T14414] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2352'. [ 208.442894][T14418] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2354'. [ 208.492823][T14423] netlink: 'syz.5.2355': attribute type 1 has an invalid length. [ 208.504923][T14423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.509814][T14423] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2355'. [ 208.962066][T14460] mmap: syz.6.2362 (14460): VmData 29335552 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 209.046492][ T40] audit: type=1400 audit(1773005933.502:31392): avc: denied { write } for pid=14465 comm="syz.6.2363" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 209.095845][ T40] audit: type=1400 audit(1773005933.552:31393): avc: denied { listen } for pid=14468 comm="syz.6.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.542105][ T40] audit: type=1400 audit(1773005934.002:31394): avc: denied { write } for pid=14492 comm="syz.6.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 209.567016][ T40] audit: type=1400 audit(1773005934.022:31395): avc: denied { ioctl } for pid=14492 comm="syz.6.2369" path="socket:[63168]" dev="sockfs" ino=63168 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 209.643851][T14499] cgroup2: Unknown parameter 'euid' [ 209.654933][T14372] netdevsim netdevsim7 netdevsim0: renamed from eth6 [ 209.672200][T14372] netdevsim netdevsim7 netdevsim1: renamed from eth7 [ 209.702393][T14372] netdevsim netdevsim7 netdevsim2: renamed from eth8 [ 209.724069][T14372] netdevsim netdevsim7 netdevsim3: renamed from eth9 [ 209.787348][T14303] syz.0.2333 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=1000 [ 209.790814][T14303] CPU: 2 UID: 0 PID: 14303 Comm: syz.0.2333 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.790832][T14303] Tainted: [L]=SOFTLOCKUP [ 209.790835][T14303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.790842][T14303] Call Trace: [ 209.790846][T14303] [ 209.790850][T14303] dump_stack_lvl+0x100/0x190 [ 209.790879][T14303] dump_header+0xfb/0x606 [ 209.790892][T14303] oom_kill_process.cold+0xd/0x330 [ 209.790905][T14303] out_of_memory+0x340/0x14f0 [ 209.790923][T14303] ? __pfx_out_of_memory+0x10/0x10 [ 209.790941][T14303] mem_cgroup_out_of_memory+0xc6/0x130 [ 209.790955][T14303] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 209.790968][T14303] ? find_held_lock+0x2b/0x80 [ 209.790984][T14303] ? do_raw_spin_unlock+0x145/0x1e0 [ 209.790996][T14303] ? _raw_spin_unlock+0x28/0x50 [ 209.791018][T14303] try_charge_memcg+0x652/0xc90 [ 209.791032][T14303] ? __pfx_try_charge_memcg+0x10/0x10 [ 209.791042][T14303] ? find_held_lock+0x2b/0x80 [ 209.791055][T14303] ? rcu_read_unlock+0x17/0x60 [ 209.791065][T14303] ? rcu_read_unlock+0x17/0x60 [ 209.791080][T14303] charge_memcg+0xa6/0x280 [ 209.791090][T14303] __mem_cgroup_charge+0x2b/0x1e0 [ 209.791107][T14303] filemap_add_folio+0xe7/0x690 [ 209.791124][T14303] ? __pfx_filemap_add_folio+0x10/0x10 [ 209.791143][T14303] __filemap_get_folio_mpol+0x5d5/0xe70 [ 209.791163][T14303] kvm_gmem_get_folio+0xec/0x2a0 [ 209.791177][T14303] kvm_gmem_fault_user_mapping+0x151/0x6e0 [ 209.791191][T14303] __do_fault+0x10d/0x550 [ 209.791209][T14303] do_fault+0xaf9/0x1950 [ 209.791222][T14303] __handle_mm_fault+0x180f/0x2b60 [ 209.791239][T14303] ? __pfx___handle_mm_fault+0x10/0x10 [ 209.791254][T14303] ? pte_offset_map_lock+0x174/0x320 [ 209.791271][T14303] ? find_held_lock+0x2b/0x80 [ 209.791288][T14303] ? follow_page_pte+0x5b3/0x1400 [ 209.791302][T14303] handle_mm_fault+0x36d/0xa20 [ 209.791318][T14303] __get_user_pages+0xf9c/0x34d0 [ 209.791334][T14303] ? __pfx___get_user_pages+0x10/0x10 [ 209.791349][T14303] populate_vma_page_range+0x267/0x3f0 [ 209.791362][T14303] ? __pfx_populate_vma_page_range+0x10/0x10 [ 209.791374][T14303] ? __pfx_find_vma_intersection+0x10/0x10 [ 209.791391][T14303] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 209.791405][T14303] __mm_populate+0x107/0x3a0 [ 209.791417][T14303] ? __pfx___mm_populate+0x10/0x10 [ 209.791430][T14303] ? up_write+0x290/0x4f0 [ 209.791442][T14303] do_mremap+0x11c0/0x2130 [ 209.791460][T14303] ? futex_wait+0x125/0x380 [ 209.791474][T14303] ? __pfx_do_mremap+0x10/0x10 [ 209.791496][T14303] __do_sys_mremap+0x126/0x170 [ 209.791510][T14303] ? __pfx___do_sys_mremap+0x10/0x10 [ 209.791526][T14303] ? fput+0x79/0x100 [ 209.791540][T14303] ? __x64_sys_futex+0x34f/0x4d0 [ 209.791559][T14303] do_syscall_64+0x106/0xf80 [ 209.791570][T14303] ? clear_bhb_loop+0x40/0x90 [ 209.791583][T14303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.791594][T14303] RIP: 0033:0x7f770df9c799 [ 209.791603][T14303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.791614][T14303] RSP: 002b:00007f770edbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 209.791624][T14303] RAX: ffffffffffffffda RBX: 00007f770e215fa0 RCX: 00007f770df9c799 [ 209.791630][T14303] RDX: 0000000040000000 RSI: 0000000000004000 RDI: 000020000016c000 [ 209.791637][T14303] RBP: 00007f770e032bd9 R08: 000020000063c000 R09: 0000000000000000 [ 209.791643][T14303] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 209.791649][T14303] R13: 00007f770e216038 R14: 00007f770e215fa0 R15: 00007ffc35290468 [ 209.791663][T14303] [ 209.791667][T14303] memory: usage 307200kB, limit 307200kB, failcnt 4387 [ 209.912214][T14303] memory+swap: usage 307608kB, limit 9007199254740988kB, failcnt 0 [ 209.922163][T14303] kmem: usage 18664kB, limit 9007199254740988kB, failcnt 0 [ 209.924619][T14303] Memory cgroup stats for /syz0: [ 209.924881][T14303] cache 295452672 [ 209.928115][T14303] rss 0 [ 209.929038][T14303] rss_huge 0 [ 209.930124][T14303] shmem 0 [ 209.931097][T14303] mapped_file 295452672 [ 209.940611][T14303] dirty 0 [ 209.941623][T14303] writeback 0 [ 209.942808][T14303] workingset_refault_anon 2 [ 209.951888][T14303] workingset_refault_file 0 [ 209.953401][T14303] swap 417792 [ 209.954515][T14303] swapcached 3866624 [ 209.955800][T14303] pgpgin 169096 [ 209.956951][T14303] pgpgout 97986 [ 209.958112][T14303] pgfault 186202 [ 209.959291][T14303] pgmajfault 69 [ 209.960455][T14303] inactive_anon 0 [ 209.961662][T14303] active_anon 0 [ 209.971868][T14303] inactive_file 0 [ 209.973114][T14303] active_file 0 [ 209.974278][T14303] unevictable 295452672 [ 209.975638][T14303] hierarchical_memory_limit 314572800 [ 209.977380][T14303] hierarchical_memsw_limit 9223372036854771712 [ 209.979379][T14303] total_cache 295452672 [ 209.980755][T14303] total_rss 0 [ 209.986085][T14303] total_rss_huge 0 [ 209.987352][T14303] total_shmem 0 [ 209.988510][T14303] total_mapped_file 295452672 [ 209.990646][T14303] total_dirty 0 [ 210.001863][T14303] total_writeback 0 [ 210.003151][T14303] total_workingset_refault_anon 2 [ 210.004801][T14303] total_workingset_refault_file 0 [ 210.006451][T14303] total_swap 417792 [ 210.007708][T14303] total_swapcached 3866624 [ 210.009172][T14303] total_pgpgin 169096 [ 210.010484][T14303] total_pgpgout 97986 [ 210.011805][T14303] total_pgfault 186202 [ 210.034244][T14303] total_pgmajfault 69 [ 210.035585][T14303] total_inactive_anon 0 [ 210.036961][T14303] total_active_anon 0 [ 210.038294][T14303] total_inactive_file 0 [ 210.039664][T14303] total_active_file 0 [ 210.040997][T14303] total_unevictable 295452672 [ 210.043014][T14303] anon_cost 0 [ 210.044138][T14303] file_cost 0 [ 210.045252][T14303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2333,pid=14302,uid=0 [ 210.051362][T14303] Memory cgroup out of memory: Killed process 14302 (syz.0.2333) total-vm:1140912kB, anon-rss:1180kB, file-rss:316356kB, shmem-rss:0kB, UID:0 pgtables:704kB oom_score_adj:1000 [ 210.085446][ T5936] Bluetooth: hci1: command tx timeout [ 210.087978][ T5928] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 210.091655][ T5928] CPU: 2 UID: 0 PID: 5928 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 210.091672][ T5928] Tainted: [L]=SOFTLOCKUP [ 210.091676][ T5928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.091682][ T5928] Call Trace: [ 210.091687][ T5928] [ 210.091691][ T5928] dump_stack_lvl+0x100/0x190 [ 210.091711][ T5928] dump_header+0xfb/0x606 [ 210.091724][ T5928] oom_kill_process.cold+0xd/0x330 [ 210.091737][ T5928] out_of_memory+0x340/0x14f0 [ 210.091754][ T5928] ? __pfx_out_of_memory+0x10/0x10 [ 210.091772][ T5928] mem_cgroup_out_of_memory+0xc6/0x130 [ 210.091786][ T5928] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 210.091799][ T5928] ? find_held_lock+0x2b/0x80 [ 210.091815][ T5928] ? do_raw_spin_unlock+0x145/0x1e0 [ 210.091842][ T5928] ? _raw_spin_unlock+0x28/0x50 [ 210.091860][ T5928] try_charge_memcg+0x652/0xc90 [ 210.091874][ T5928] ? __pfx_try_charge_memcg+0x10/0x10 [ 210.091897][ T5928] ? find_held_lock+0x2b/0x80 [ 210.091910][ T5928] ? rcu_read_unlock+0x17/0x60 [ 210.091921][ T5928] ? rcu_read_unlock+0x17/0x60 [ 210.091935][ T5928] charge_memcg+0xa6/0x280 [ 210.091958][ T5928] __mem_cgroup_charge+0x2b/0x1e0 [ 210.091971][ T5928] filemap_add_folio+0xe7/0x690 [ 210.091987][ T5928] ? __pfx_filemap_add_folio+0x10/0x10 [ 210.092007][ T5928] __filemap_get_folio_mpol+0x5d5/0xe70 [ 210.092026][ T5928] filemap_fault+0x8a2/0x2eb0 [ 210.092046][ T5928] ? __pfx_filemap_fault+0x10/0x10 [ 210.092068][ T5928] ? __pfx_filemap_map_pages+0x10/0x10 [ 210.092086][ T5928] __do_fault+0x10d/0x550 [ 210.092104][ T5928] do_fault+0xaf9/0x1950 [ 210.092118][ T5928] __handle_mm_fault+0x180f/0x2b60 [ 210.092134][ T5928] ? reacquire_held_locks+0xce/0x1e0 [ 210.092151][ T5928] ? __pfx___handle_mm_fault+0x10/0x10 [ 210.092166][ T5928] ? lock_vma_under_rcu+0x17c/0x590 [ 210.092188][ T5928] handle_mm_fault+0x36d/0xa20 [ 210.092205][ T5928] do_user_addr_fault+0x5a3/0x12f0 [ 210.092221][ T5928] exc_page_fault+0x6f/0xd0 [ 210.092233][ T5928] asm_exc_page_fault+0x26/0x30 [ 210.092243][ T5928] RIP: 0033:0x7f770de6a7b4 [ 210.092253][ T5928] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 [ 210.092263][ T5928] RSP: 002b:00007ffc352907d0 EFLAGS: 00010202 [ 210.092271][ T5928] RAX: 0000001b2f024000 RBX: 0000000000000664 RCX: 0000000000033068 [ 210.092278][ T5928] RDX: 000000000a42a018 RSI: 00007f770edbf010 RDI: 0026b49c8d655200 [ 210.092284][ T5928] RBP: 00007ffc3529080c R08: 0000000000000000 R09: 0000000000000000 [ 210.092290][ T5928] R10: 00007f770edbf000 R11: 0000000000000001 R12: 0000000000001388 [ 210.092296][ T5928] R13: 00000000000927c0 R14: 0000000000032953 R15: 00007ffc35290860 [ 210.092310][ T5928] [ 210.181997][ T5928] memory: usage 307200kB, limit 307200kB, failcnt 4396 [ 210.184368][ T5928] memory+swap: usage 307596kB, limit 9007199254740988kB, failcnt 0 [ 210.187219][ T5928] kmem: usage 18600kB, limit 9007199254740988kB, failcnt 0 [ 210.189590][ T5928] Memory cgroup stats for /syz0: [ 210.189802][ T5928] cache 295456768 [ 210.192846][ T5928] rss 12288 [ 210.194009][ T5928] rss_huge 0 [ 210.195394][ T5928] shmem 0 [ 210.196742][ T5928] mapped_file 279724032 [ 210.198216][ T5928] dirty 0 [ 210.200131][ T5928] writeback 0 [ 210.201302][ T5928] workingset_refault_anon 2 [ 210.203183][ T5928] workingset_refault_file 0 [ 210.206693][ T5928] swap 405504 [ 210.207912][ T5928] swapcached 3866624 [ 210.209268][ T5928] pgpgin 169100 [ 210.210526][ T5928] pgpgout 97986 [ 210.211744][ T5928] pgfault 186206 [ 210.215152][ T5928] pgmajfault 72 [ 210.216379][ T5928] inactive_anon 0 [ 210.217636][ T5928] active_anon 8192 [ 210.226113][ T5928] inactive_file 0 [ 210.229779][ T5928] active_file 0 [ 210.246129][ T5928] unevictable 295456768 [ 210.250513][ T5928] hierarchical_memory_limit 314572800 [ 210.257505][ T5928] hierarchical_memsw_limit 9223372036854771712 [ 210.264617][ T5928] total_cache 295456768 [ 210.268931][ T5928] total_rss 12288 [ 210.270257][ T5928] total_rss_huge 0 [ 210.271545][ T5928] total_shmem 0 [ 210.273635][ T5928] total_mapped_file 279724032 [ 210.275483][ T5928] total_dirty 0 [ 210.276709][ T5928] total_writeback 0 [ 210.278037][ T5928] total_workingset_refault_anon 2 [ 210.279737][ T5928] total_workingset_refault_file 0 [ 210.281447][ T5928] total_swap 405504 [ 210.284862][T14372] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 210.289943][ T5928] total_swapcached 3866624 [ 210.293166][ T5928] total_pgpgin 169100 [ 210.295734][ T5928] total_pgpgout 97986 [ 210.297130][ T5928] total_pgfault 186206 [ 210.302855][T14372] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 210.312336][ T5928] total_pgmajfault 72 [ 210.315158][T14372] wireguard: wg0: Could not create IPv4 socket [ 210.319426][ T5928] total_inactive_anon 0 [ 210.324211][ T5928] total_active_anon 8192 [ 210.325962][T14372] wireguard: wg1: Could not create IPv4 socket [ 210.333467][ T5928] total_inactive_file 0 [ 210.336055][T14372] wireguard: wg2: Could not create IPv4 socket [ 210.339265][ T5928] total_active_file 0 [ 210.346795][ T5928] total_unevictable 295456768 [ 210.351629][ T5928] anon_cost 0 [ 210.359561][ T5928] file_cost 0 [ 210.367163][ T5928] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.587,pid=8071,uid=0 [ 210.386824][ T5928] Memory cgroup out of memory: Killed process 8071 (syz.0.587) total-vm:102224kB, anon-rss:292kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 210.619573][ T40] audit: type=1400 audit(1773005935.072:31396): avc: denied { write } for pid=14560 comm="syz.5.2378" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 210.902193][ T40] audit: type=1400 audit(1773005935.362:31397): avc: denied { bind } for pid=14584 comm="syz.5.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.902378][T14585] __nla_validate_parse: 5 callbacks suppressed [ 210.902388][T14585] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2383'. [ 211.091590][T14585] syz.5.2383 (14585): drop_caches: 2 [ 211.208659][T14596] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2384'. [ 211.352072][ T6017] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 211.527056][ T6017] usb 11-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 211.530022][ T6017] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.536102][T14629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14629 comm=syz.5.2390 [ 211.542319][ T6017] usb 11-1: Product: syz [ 211.544934][ T6017] usb 11-1: Manufacturer: syz [ 211.546496][ T6017] usb 11-1: SerialNumber: syz [ 211.557969][T14629] CUSE: info not properly terminated [ 211.762322][T14583] QAT: Device 132 not found [ 211.767024][ T6017] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 211.770782][ T6017] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 211.774329][ T6017] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 211.779082][ T6017] lan78xx 11-1:1.0: probe with driver lan78xx failed with error -71 [ 211.784228][ T6017] usb 11-1: USB disconnect, device number 11 [ 212.048117][T14652] exfat: block size(16384) > page size(4096) not supported by filesystem [ 212.051051][T14652] exFAT-fs (nullb0): invalid boot record signature [ 212.055869][T14652] exFAT-fs (nullb0): failed to read boot sector [ 212.058062][T14652] exFAT-fs (nullb0): failed to recognize exfat type [ 212.081784][T14657] SELinux: policydb string length 0 does not match expected length 8 [ 212.087242][T14657] SELinux: failed to load policy [ 212.271451][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'. [ 212.402414][T14690] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2398'. [ 212.682005][ T10] usb 11-1: new low-speed USB device number 12 using dummy_hcd [ 212.846793][ T10] usb 11-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 212.851149][ T10] usb 11-1: config 1 interface 0 altsetting 7 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 212.854843][ T10] usb 11-1: config 1 interface 0 has no altsetting 0 [ 213.052627][T14718] kvm: user requested TSC rate below hardware speed [ 213.058510][T14718] nft_compat: unsupported protocol 0 [ 213.077530][T14720] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2402'. [ 213.080453][T14720] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 213.221803][T14734] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2404'. [ 213.233152][T14734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14734 comm=syz.5.2404 [ 213.299553][T14741] bridge0: port 3(syz_tun) entered blocking state [ 213.302661][T14741] bridge0: port 3(syz_tun) entered disabled state [ 213.304822][T14741] syz_tun: entered allmulticast mode [ 213.308960][T14741] syz_tun: entered promiscuous mode [ 213.315375][T14741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=14741 comm=syz.0.2405 [ 213.437684][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 213.437695][ T40] audit: type=1326 audit(1773005937.892:31405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.5.2410" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83ba59c799 code=0x0 [ 213.509015][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2411'. [ 213.512714][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2411'. [ 213.601970][ T5936] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.663975][ T40] audit: type=1400 audit(1773005938.122:31406): avc: denied { write } for pid=14785 comm="syz.0.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.928416][T14810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2415'. [ 213.931583][T14810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2415'. [ 213.966547][ T40] audit: type=1400 audit(1773005938.422:31407): avc: denied { getopt } for pid=14812 comm="syz.0.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.144904][ T40] audit: type=1400 audit(1773005938.602:31408): avc: denied { setopt } for pid=14833 comm="syz.0.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.279856][ T40] audit: type=1400 audit(1773005938.732:31409): avc: denied { validate_trans } for pid=14846 comm="syz.0.2424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 214.344511][ T40] audit: type=1400 audit(1773005938.802:31410): avc: denied { read } for pid=14851 comm="syz.0.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.621411][T14868] program syz.5.2427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.625903][T14868] ata1.00: invalid service action 31 [ 214.704317][ T40] audit: type=1400 audit(1773005939.162:31411): avc: denied { mount } for pid=14878 comm="syz.5.2429" name="/" dev="gadgetfs" ino=8999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 214.729529][ T40] audit: type=1400 audit(1773005939.182:31412): avc: denied { unmount } for pid=10571 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 215.031960][ T6017] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 215.191978][ T6017] usb 10-1: Using ep0 maxpacket: 8 [ 215.201609][ T6017] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 215.205394][ T6017] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 215.210269][ T6017] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 215.215863][ T6017] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 215.220849][ T6017] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 215.225223][ T6017] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.229382][ T6017] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.234273][ T6017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.267891][ T40] audit: type=1400 audit(1773005939.722:31413): avc: denied { mount } for pid=14916 comm="syz.0.2433" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 215.269838][T14917] max out of range [ 215.277234][ T40] audit: type=1400 audit(1773005939.722:31414): avc: denied { remount } for pid=14916 comm="syz.0.2433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 215.439255][ T6017] usb 10-1: usb_control_msg returned -32 [ 215.444703][ T6017] usbtmc 10-1:16.0: can't read capabilities [ 215.456117][ T10] usb 11-1: string descriptor 0 read error: -71 [ 215.458265][ T10] usb 11-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 215.461227][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.492878][ T10] usb 11-1: can't set config #1, error -71 [ 215.499038][ T10] usb 11-1: USB disconnect, device number 12 [ 215.570923][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.576619][ T9] usb 10-1: USB disconnect, device number 9 [ 215.577306][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.584929][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.596796][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.602436][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.620134][T14939] Failed to initialize the IGMP autojoin socket (err -2) [ 215.956259][T14986] Failed to initialize the IGMP autojoin socket (err -2) [ 215.961661][T14983] syzkaller0: entered promiscuous mode [ 215.963720][T14983] syzkaller0: entered allmulticast mode [ 216.159050][T14982] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 216.279177][T15028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15028 comm=syz.5.2448 [ 216.366045][T15037] __nla_validate_parse: 4 callbacks suppressed [ 216.366057][T15037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2450'. [ 216.380100][T15037] ip6gre3: entered promiscuous mode [ 216.382218][T15037] ip6gre3: entered allmulticast mode [ 216.399782][T14939] netdevsim netdevsim7 netdevsim0: renamed from eth6 [ 216.409406][T14939] netdevsim netdevsim7 netdevsim1: renamed from eth7 [ 216.418287][T14939] netdevsim netdevsim7 netdevsim2: renamed from eth8 [ 216.423793][T14939] netdevsim netdevsim7 netdevsim3: renamed from eth9 [ 216.538611][T15063] Failed to initialize the IGMP autojoin socket (err -2) [ 216.744126][T15079] kvm: kvm [15078]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x0 [ 216.761531][T14939] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 216.774035][T14939] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 216.786324][T14939] wireguard: wg0: Could not create IPv4 socket [ 216.790699][T14939] wireguard: wg1: Could not create IPv4 socket [ 216.795492][T14939] wireguard: wg2: Could not create IPv4 socket [ 216.821112][T15091] bridge4: entered promiscuous mode [ 216.851403][T15093] binfmt_misc: register: failed to install interpreter file ./file1 [ 216.958696][T15097] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2464'. [ 216.984205][T15097] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2464'. [ 216.988878][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2464'. [ 217.087084][T15111] Failed to initialize the IGMP autojoin socket (err -2) [ 217.162611][ T5936] Bluetooth: hci3: Invalid handle: 0x37c9 > 0x0eff [ 217.337448][T15116] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2469'. [ 217.429530][T15124] tipc: Started in network mode [ 217.431577][T15124] tipc: Node identity 4004, cluster identity 4711 [ 217.434447][T15124] tipc: Node number set to 16388 [ 217.761358][T15144] misc userio: Invalid payload size [ 217.766800][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2475'. [ 217.769941][T15144] misc userio: No port type given on /dev/userio [ 218.139561][T15176] binder: 15175:15176 ioctl 4018620d 0 returned -22 [ 218.144258][T15176] binder: 15175:15176 ioctl c0306201 200000000240 returned -11 [ 218.194647][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2484'. [ 218.218102][T15184] tipc: Enabling of bearer rejected, failed to enable media [ 218.853269][T15216] overlayfs: failed to clone upperpath [ 218.974370][T15234] netlink: 'syz.6.2492': attribute type 1 has an invalid length. [ 218.989783][T15234] 8021q: adding VLAN 0 to HW filter on device bond7 [ 219.009853][T15234] bond7: (slave gretap2): making interface the new active one [ 219.015100][T15234] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 219.050309][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 219.050326][ T40] audit: type=1400 audit(1773005943.502:31432): avc: denied { ioctl } for pid=15238 comm="syz.6.2493" path="socket:[67207]" dev="sockfs" ino=67207 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 219.107453][T15243] team0: No ports can be present during mode change [ 219.143885][T15247] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 219.280788][ T5942] Bluetooth: min 65535 > max 2 [ 219.284479][ T40] audit: type=1400 audit(1773005943.742:31433): avc: denied { mount } for pid=15262 comm="syz.6.2499" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 219.326656][ T40] audit: type=1400 audit(1773005943.782:31434): avc: denied { listen } for pid=15270 comm="syz.5.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 219.359347][T15273] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2502'. [ 219.410466][T15288] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2505'. [ 219.510992][T15307] netlink: 'syz.6.2510': attribute type 1 has an invalid length. [ 219.533377][T15307] bond8: entered promiscuous mode [ 219.535863][T15307] 8021q: adding VLAN 0 to HW filter on device bond8 [ 219.547227][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2510'. [ 219.570782][T15307] bond8: (slave bridge5): making interface the new active one [ 219.574206][T15307] bridge5: entered promiscuous mode [ 219.577786][T15307] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 219.640251][T15324] Cannot find add_set index 46338 as target [ 219.667014][T15327] overlayfs: failed to clone upperpath [ 219.747947][ T40] audit: type=1400 audit(1773005944.202:31435): avc: denied { checkpoint_restore } for pid=15338 comm="syz.0.2517" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 219.832054][ T40] audit: type=1400 audit(1773005944.292:31436): avc: denied { setopt } for pid=15350 comm="syz.6.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.105233][T15388] IPv6: sit1: Disabled Multicast RS [ 220.246664][T15399] input: syz1 as /devices/virtual/input/input29 [ 220.320933][ T40] audit: type=1400 audit(1773005944.772:31437): avc: denied { create } for pid=15414 comm="syz.5.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 220.477275][ T40] audit: type=1400 audit(1773005944.932:31438): avc: denied { setopt } for pid=15420 comm="syz.5.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 220.506116][ T40] audit: type=1400 audit(1773005944.962:31439): avc: denied { connect } for pid=15424 comm="syz.5.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.536155][ T40] audit: type=1326 audit(1773005944.992:31440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.5.2537" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83ba59c799 code=0x0 [ 221.125207][ T5942] Bluetooth: hci3: command 0x0406 tx timeout [ 221.169432][T15473] netlink: 'syz.0.2542': attribute type 1 has an invalid length. [ 221.388590][T15502] geneve2: entered promiscuous mode [ 221.390870][T15502] geneve2: entered allmulticast mode [ 221.440813][T15509] 8021q: adding VLAN 0 to HW filter on device .` [ 221.450452][T15509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.455484][T15512] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 221.473160][ T6274] bond4: (slave .`): link status definitely up, 20000 Mbps full duplex [ 221.476049][ T6274] bond4: (slave .`): making interface the new active one [ 221.487402][ T6274] bond4: active interface up! [ 221.529317][T15526] __nla_validate_parse: 3 callbacks suppressed [ 221.529333][T15526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2556'. [ 221.586206][T15535] gfs2: not a GFS2 filesystem [ 221.667722][ T40] audit: type=1400 audit(1773005946.122:31441): avc: denied { mount } for pid=15546 comm="syz.0.2563" name="/" dev="hugetlbfs" ino=66473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 221.671805][T15549] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2563'. [ 221.676523][T15556] syzkaller0: entered promiscuous mode [ 221.676536][T15556] syzkaller0: entered allmulticast mode [ 221.686113][T15549] netlink: Conntrack attr has 4 unknown bytes [ 221.757239][T15556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=15556 comm=syz.5.2566 [ 221.763897][T15556] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 221.864897][T15573] netlink: 'syz.5.2569': attribute type 1 has an invalid length. [ 221.877188][T15573] bond3: entered promiscuous mode [ 221.879112][T15573] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.887584][T15573] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 221.891641][T15573] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 221.895585][T15573] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 222.056408][T15586] tmpfs: Unknown parameter 'grpquota_bloVk' [ 222.065120][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2572'. [ 222.123202][T15593] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 222.226977][T15599] openvswitch: netlink: Duplicate or invalid key (type 0). [ 222.229285][T15599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.379352][T15615] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2578'. [ 222.379352][T15614] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2578'. [ 222.726653][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.735002][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.738086][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.741336][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.745314][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.764883][T15647] Failed to initialize the IGMP autojoin socket (err -2) [ 222.879623][T15658] netlink: 272 bytes leftover after parsing attributes in process `syz.5.2582'. [ 222.903020][T15660] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2583'. [ 222.928807][T15665] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2584'. [ 222.991690][T15674] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2587'. [ 222.996281][T15670] Failed to initialize the IGMP autojoin socket (err -2) [ 222.996337][T15671] Failed to initialize the IGMP autojoin socket (err -2) [ 223.148105][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2589'. [ 223.202096][ T5936] Bluetooth: hci3: command 0x0406 tx timeout [ 223.255672][T15733] hsr_slave_0: left promiscuous mode [ 223.260509][T15733] hsr_slave_1: left promiscuous mode [ 223.373055][T15743] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 223.598572][T15647] netdevsim netdevsim7 netdevsim0: renamed from eth6 [ 223.612482][T15647] netdevsim netdevsim7 netdevsim1: renamed from eth7 [ 223.619874][T15647] netdevsim netdevsim7 netdevsim2: renamed from eth8 [ 223.626886][T15647] netdevsim netdevsim7 netdevsim3: renamed from eth9 [ 223.947464][T15647] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 223.956716][T15647] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 223.964541][T15647] wireguard: wg0: Could not create IPv4 socket [ 223.967972][T15647] wireguard: wg1: Could not create IPv4 socket [ 223.971169][T15647] wireguard: wg2: Could not create IPv4 socket [ 224.088716][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 224.088729][ T40] audit: type=1400 audit(1773005948.542:31452): avc: denied { create } for pid=15782 comm="syz.5.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 224.097970][ T40] audit: type=1400 audit(1773005948.542:31453): avc: denied { bind } for pid=15782 comm="syz.5.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 224.287662][T15791] netlink: 'syz.6.2607': attribute type 32 has an invalid length. [ 224.298458][T15791] bond9: Setting coupled_control to off (0) [ 224.802099][ T24] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 224.952571][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 224.955833][ T24] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 224.958972][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.967324][ T24] usb 10-1: config 0 descriptor?? [ 224.979925][ T24] as10x_usb: device has been detected [ 224.983493][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 224.995010][ T24] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 225.015717][ T24] as10x_usb: error during firmware upload part1 [ 225.018119][ T24] Registered device nBox DVB-T Dongle [ 225.176770][ T9] usb 10-1: USB disconnect, device number 10 [ 225.195608][ T9] Unregistered device nBox DVB-T Dongle [ 225.197823][ T9] as10x_usb: device has been disconnected [ 226.082656][T15784] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 226.213290][T15864] kAFS: unparsable volume name [ 226.386773][T15877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15877 comm=syz.6.2624 [ 226.392750][T15877] netlink: 'syz.6.2624': attribute type 1 has an invalid length. [ 226.413983][T15877] 8021q: adding VLAN 0 to HW filter on device bond10 [ 226.425883][T15877] vlan4: entered allmulticast mode [ 226.428164][T15877] vlan0: entered allmulticast mode [ 226.430429][T15877] veth0_vlan: entered allmulticast mode [ 226.436560][T15877] bond10: (slave vlan4): making interface the new active one [ 226.440868][T15877] bond10: (slave vlan4): Enslaving as an active interface with an up link [ 226.476138][T15880] netlink: 'syz.6.2625': attribute type 178 has an invalid length. [ 226.562372][T15880] __nla_validate_parse: 8 callbacks suppressed [ 226.562388][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2625'. [ 226.567703][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2625'. [ 226.648450][ T5936] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 226.692313][ T6017] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 226.807611][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2633'. [ 226.812020][ T40] audit: type=1400 audit(1773005951.262:31454): avc: denied { read } for pid=15902 comm="syz.0.2633" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 226.813889][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2633'. [ 226.823737][ T6017] usb 10-1: device descriptor read/64, error -71 [ 227.002687][T15911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.015892][T15911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.071917][ T6017] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 227.084889][T15918] fuse: Unknown parameter 'fv+0x0000000000000004' [ 227.165192][T15911] ip6gre1: left promiscuous mode [ 227.187011][T15911] bond1: left promiscuous mode [ 227.188857][T15911] bridge9: left promiscuous mode [ 227.211917][ T6017] usb 10-1: device descriptor read/64, error -71 [ 227.212643][T15911] ip6gre2: left promiscuous mode [ 227.222234][T15911] ip6gre3: left promiscuous mode [ 227.225573][T15911] geneve2: left promiscuous mode [ 227.232106][ T46] netdevsim netdevsim0 ªªªªªª: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.235172][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 227.235290][ T46] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.237127][ T9] syz1: Port: 1 Link DOWN [ 227.250031][T15928] bond11: option downdelay: invalid value (18446744073709551615) [ 227.252680][T15928] bond11: option downdelay: allowed values 0 - 2147483647 [ 227.257994][T15928] bond11 (unregistering): Released all slaves [ 227.270486][ T46] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.281917][ T46] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.342068][ T6017] usb usb10-port1: attempt power cycle [ 227.358177][T15936] netlink: 'syz.6.2643': attribute type 16 has an invalid length. [ 227.358359][T15937] netlink: 'syz.6.2643': attribute type 16 has an invalid length. [ 227.361192][T15936] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.2643'. [ 227.365036][T15937] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.2643'. [ 227.490038][T15954] netlink: 'syz.0.2646': attribute type 5 has an invalid length. [ 227.628603][T15961] fuse: Unknown parameter './file0' [ 227.702131][ T6017] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 227.717293][ T40] audit: type=1400 audit(1773005952.172:31455): avc: denied { write } for pid=15969 comm="syz.0.2652" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 227.723453][T15966] netlink: 'syz.6.2651': attribute type 7 has an invalid length. [ 227.732798][ T6017] usb 10-1: device descriptor read/8, error -71 [ 227.739765][ T40] audit: type=1400 audit(1773005952.192:31456): avc: denied { bind } for pid=15972 comm="syz.0.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 227.757356][ T40] audit: type=1400 audit(1773005952.212:31457): avc: denied { write } for pid=15972 comm="syz.0.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 227.765727][T15977] CIFS mount error: No usable UNC path provided in device string! [ 227.765727][T15977] [ 227.769115][T15977] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 227.875966][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2657'. [ 227.880047][T15991] hsr_slave_0: left promiscuous mode [ 227.883595][T15991] hsr_slave_1: left promiscuous mode [ 227.991914][ T6017] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 228.014834][ T6017] usb 10-1: device descriptor read/8, error -71 [ 228.028743][T16002] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2659'. [ 228.122250][ T6017] usb usb10-port1: unable to enumerate USB device [ 228.147924][T16022] netlink: 'syz.6.2665': attribute type 13 has an invalid length. [ 228.223397][T16028] macsec1: entered promiscuous mode [ 228.225760][T16028] macsec1: entered allmulticast mode [ 228.534415][T16064] overlayfs: failed to clone lowerpath [ 228.753316][ T40] audit: type=1400 audit(1773005953.212:31458): avc: denied { ioctl } for pid=16080 comm="syz.6.2679" path="socket:[72747]" dev="sockfs" ino=72747 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.754580][T16081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16081 comm=syz.6.2679 [ 228.769415][T16081] ipvlan1: Caught tx_queue_len zero misconfig [ 228.819032][T16087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.181224][T16128] cgroup: Name too long [ 229.217165][T16133] netlink: 'syz.0.2689': attribute type 1 has an invalid length. [ 229.327083][T16155] veth1: Caught tx_queue_len zero misconfig [ 229.542037][ T5991] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 229.712056][ T5991] usb 5-1: Using ep0 maxpacket: 32 [ 229.717735][ T5991] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 229.720640][ T5991] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 229.730731][ T5991] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 229.734823][ T5991] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 229.739700][ T5991] usb 5-1: config 0 interface 0 has no altsetting 0 [ 229.745801][ T5991] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 229.749668][ T5991] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 229.753270][ T5991] usb 5-1: Product: syz [ 229.755033][ T5991] usb 5-1: Manufacturer: syz [ 229.756907][ T5991] usb 5-1: SerialNumber: syz [ 229.759620][ T5991] usb 5-1: config 0 descriptor?? [ 229.762809][ T5991] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 229.767182][ T5991] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 229.975253][ T40] audit: type=1400 audit(1773005954.432:31459): avc: denied { mounton } for pid=16141 comm="syz.0.2691" path="/617/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 229.980406][ T24] usb 5-1: USB disconnect, device number 20 [ 229.992603][ T24] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 230.012986][T16182] kvm: user requested TSC rate below hardware speed [ 230.041631][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.048737][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.056149][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.060258][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.067347][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.082558][T16185] Failed to initialize the IGMP autojoin socket (err -2) [ 230.145452][T16191] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2697'. [ 230.149078][T16191] openvswitch: netlink: Flow key attr not present in new flow. [ 230.217551][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 230.256065][T16196] ceph: No mds server is up or the cluster is laggy [ 230.370758][T16214] tipc: Enabling of bearer rejected, failed to enable media [ 230.444252][T16221] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2702'. [ 230.598152][T16230] netlink: 'syz.6.2703': attribute type 9 has an invalid length. [ 230.600763][T16230] netlink: 'syz.6.2703': attribute type 11 has an invalid length. [ 230.603756][T16230] netlink: 'syz.6.2703': attribute type 12 has an invalid length. [ 230.850950][T16259] netlink: 'syz.6.2708': attribute type 30 has an invalid length. [ 230.999861][T16185] netdevsim netdevsim7 netdevsim0: renamed from eth6 [ 231.012532][T16185] netdevsim netdevsim7 netdevsim1: renamed from eth7 [ 231.024167][T16185] netdevsim netdevsim7 netdevsim2: renamed from eth8 [ 231.034394][T16185] netdevsim netdevsim7 netdevsim3: renamed from eth9 [ 231.546515][T16185] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 231.553864][T16185] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 231.559929][T16185] wireguard: wg0: Could not create IPv4 socket [ 231.568906][T16185] wireguard: wg1: Could not create IPv4 socket [ 231.572545][T16185] wireguard: wg2: Could not create IPv4 socket [ 232.005244][ T40] audit: type=1326 audit(1773005956.462:31460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.6.2723" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb8619c799 code=0x0 [ 232.230526][T16353] CIFS: Unable to determine destination address [ 232.472191][ T10] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 232.633687][ T10] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 232.636633][ T10] usb 10-1: config 1 has no interface number 0 [ 232.638858][ T10] usb 10-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 232.643388][ T10] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 232.646560][ T10] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.652083][ T10] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 232.654976][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.657611][ T10] usb 10-1: Product: syz [ 232.659236][ T10] usb 10-1: Manufacturer: syz [ 232.660990][ T10] usb 10-1: SerialNumber: syz [ 232.664964][T16353] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.832234][ T6017] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 232.880905][T16360] __nla_validate_parse: 67 callbacks suppressed [ 232.880923][T16360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2727'. [ 232.992288][ T6017] usb 5-1: Using ep0 maxpacket: 32 [ 232.996002][ T6017] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 233.002006][ T6017] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 233.005679][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 233.008965][ T6017] usb 5-1: Product: syz [ 233.010687][ T6017] usb 5-1: Manufacturer: syz [ 233.013398][ T6017] usb 5-1: SerialNumber: syz [ 233.022783][ T6017] usb 5-1: config 0 descriptor?? [ 233.025697][T16358] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 233.031740][ T6017] hub 5-1:0.0: bad descriptor, ignoring hub [ 233.034729][ T6017] hub 5-1:0.0: probe with driver hub failed with error -5 [ 233.070084][T16353] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 233.329503][ T40] audit: type=1400 audit(1773005957.782:31461): avc: denied { getopt } for pid=16352 comm="syz.5.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 233.376952][T16382] netlink: 4436 bytes leftover after parsing attributes in process `syz.6.2732'. [ 233.380240][T16382] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 233.484518][ T10] usb 10-1: Incompatible driver and firmware versions [ 233.499236][ T10] usb 10-1: USB disconnect, device number 15 [ 233.504514][ T5942] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 233.546256][T16397] Failed to initialize the IGMP autojoin socket (err -2) [ 233.633743][T16400] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 233.682020][ T40] audit: type=1400 audit(1773005958.132:31462): avc: denied { setattr } for pid=16404 comm="syz.6.2739" name="" dev="pipefs" ino=73188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 233.812376][T16413] 9p: Could not find request transport: virt«">â… 1 [ 238.069322][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.074025][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.077618][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.084217][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.119710][T16620] Failed to initialize the IGMP autojoin socket (err -2) [ 238.120116][T16630] netlink: 'syz.5.2801': attribute type 2 has an invalid length. [ 238.344580][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2809'. [ 238.348025][ T40] audit: type=1400 audit(1773005962.802:31467): avc: denied { mount } for pid=16650 comm="syz.6.2808" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 238.401668][T16660] CIFS: Unable to determine destination address [ 238.406626][T16660] netlink: 'syz.6.2810': attribute type 2 has an invalid length. [ 238.549207][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2815'. [ 238.557712][T16678] netlink: 'syz.5.2815': attribute type 1 has an invalid length. [ 238.560861][T16678] nbd: error processing sock list [ 238.861914][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 238.941180][T16693] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 238.979983][T16620] netdevsim netdevsim7 netdevsim0: renamed from eth6 [ 238.998344][T16620] netdevsim netdevsim7 netdevsim1: renamed from eth7 [ 239.014839][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 239.015907][T16620] netdevsim netdevsim7 netdevsim2: renamed from eth8 [ 239.017856][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 239.025368][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 239.029128][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 239.033988][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 239.038914][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 239.042125][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 239.045096][ T24] usb 5-1: Product: syz [ 239.046510][ T24] usb 5-1: Manufacturer: syz [ 239.050826][T16620] netdevsim netdevsim7 netdevsim3: renamed from eth9 [ 239.061322][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 239.071522][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 239.078425][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 239.091960][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 239.266462][ T40] audit: type=1400 audit(1773005963.722:31468): avc: denied { read write } for pid=16683 comm="syz.0.2817" name="cdc-wdm0" dev="devtmpfs" ino=3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 239.314688][ T40] audit: type=1400 audit(1773005963.722:31469): avc: denied { open } for pid=16683 comm="syz.0.2817" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 239.329315][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 239.331454][ T50] usb 5-1: USB disconnect, device number 24 [ 239.331728][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 239.335736][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 239.340439][T16687] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 239.364775][ T40] audit: type=1400 audit(1773005963.742:31470): avc: denied { append } for pid=16710 comm="syz.5.2826" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.392338][T16720] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2827'. [ 239.580582][T16620] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 239.589701][T16620] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 239.597165][T16620] wireguard: wg0: Could not create IPv4 socket [ 239.601378][T16620] wireguard: wg1: Could not create IPv4 socket [ 239.611454][T16620] wireguard: wg2: Could not create IPv4 socket [ 239.617971][ T40] audit: type=1400 audit(1773005964.072:31471): avc: denied { lock } for pid=16733 comm="syz.5.2830" path="/412/file0/cpuset.effective_cpus" dev="9p" ino=79691897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 240.253245][T16739] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2832'. [ 240.265193][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'. [ 240.459607][ T40] audit: type=1400 audit(1773005964.912:31472): avc: denied { mounton } for pid=16742 comm="syz.0.2834" path="/641/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 240.467291][T16744] overlay: filesystem on ./file0 not supported as upperdir [ 240.505265][T16744] program syz.0.2834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.627687][T16749] netlink: 192656 bytes leftover after parsing attributes in process `syz.5.2835'. [ 240.712861][ T40] audit: type=1400 audit(1773005965.172:31473): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 240.772538][T16753] netlink: 5224 bytes leftover after parsing attributes in process `syz.5.2837'. [ 240.889941][ T40] audit: type=1400 audit(1773005965.342:31474): avc: denied { setattr } for pid=16765 comm="syz.5.2842" name="ttyS3" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 240.893232][T16764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2841'. [ 241.042772][T16775] qrtr: Invalid version 0 [ 241.222731][T16783] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2846'. [ 241.322314][ T40] audit: type=1400 audit(1773005965.772:31475): avc: denied { getopt } for pid=16786 comm="syz.0.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.513540][T16790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2245 sclass=netlink_route_socket pid=16790 comm=syz.5.2845 [ 241.589146][ T5942] Bluetooth: hci3: unexpected event 0x18 length: 5 < 23 [ 241.713131][T16818] netlink: 'syz.6.2858': attribute type 11 has an invalid length. [ 241.733371][T16818] team_slave_0: Caught tx_queue_len zero misconfig [ 241.742859][T16816] XFS (nullb0): Invalid superblock magic number [ 241.757029][ T5339] pmem0: [POWERTEC] [ 241.852907][T16833] usb usb8: usbfs: process 16833 (syz.0.2862) did not claim interface 0 before use [ 241.856434][T16833] random: crng reseeded on system resumption [ 241.863974][T16833] loop6: detected capacity change from 0 to 8 [ 241.876416][ T40] audit: type=1400 audit(1773005966.332:31476): avc: denied { mounton } for pid=16831 comm="syz.6.2861" path="/424/file0" dev="tmpfs" ino=2273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 241.943964][T16833] loop6: detected capacity change from 8 to 7 [ 242.164321][T16833] Dev loop6: unable to read RDB block 7 [ 242.166213][T16833] loop6: unable to read partition table [ 242.168106][T16833] loop6: partition table beyond EOD, truncated [ 242.182831][T16833] loop_reread_partitions: partition scan of loop6 (aQ¤"¸ÍAZD–Îå0̹¨Š¾ 1 [ 245.933796][T16984] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2907'. [ 245.939274][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.943941][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.947949][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.951470][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.979770][ T40] audit: type=1400 audit(1773005970.432:31484): avc: denied { ioctl } for pid=16987 comm="syz.5.2908" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 246.005235][T16982] Failed to initialize the IGMP autojoin socket (err -2) [ 246.119876][T16971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2903'. [ 246.247126][T17000] lo: Caught tx_queue_len zero misconfig [ 246.252542][T16998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16998 comm=syz.6.2911 [ 246.317485][T17001] kvm: kvm [16999]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 246.325334][T17001] kvm: kvm [16999]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 246.333382][ T40] audit: type=1326 audit(1773005970.792:31485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17004 comm="syz.5.2913" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83ba59c799 code=0x0 [ 246.468331][ T6017] hid-generic 0005:046D:5508.000B: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 246.471569][T17018] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2918'. [ 246.632457][T17028] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2921'. [ 247.047083][T16982] netdevsim netdevsim7 netdevsim0: renamed from eth6 [ 247.064611][T16982] netdevsim netdevsim7 netdevsim1: renamed from eth7 [ 247.072592][T16982] netdevsim netdevsim7 netdevsim2: renamed from eth8 [ 247.084498][T16982] netdevsim netdevsim7 netdevsim3: renamed from eth9 [ 247.457813][T17069] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2930'. [ 247.476405][T17069] ip6gre1: entered promiscuous mode [ 247.478037][T17069] ip6gre1: entered allmulticast mode [ 247.502511][T17069] netlink: 'syz.6.2930': attribute type 20 has an invalid length. [ 247.513741][T17069] Failed to initialize the IGMP autojoin socket (err -2) [ 247.586332][T16982] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 247.609158][T16982] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 247.620019][T16982] wireguard: wg0: Could not create IPv4 socket [ 247.625445][T16982] wireguard: wg1: Could not create IPv4 socket [ 247.628843][T16982] wireguard: wg2: Could not create IPv4 socket [ 247.699752][T17015] ================================================================== [ 247.703103][T17015] BUG: KASAN: use-after-free in __mutex_lock+0x1861/0x1b90 [ 247.705561][T17087] SELinux: syz.0.2935 (17087) set checkreqprot to 1. This is no longer supported. [ 247.706001][T17015] Read of size 8 at addr ffff888048fd40a8 by task khidpd_046d5508/17015 [ 247.706023][T17015] [ 247.706034][T17015] CPU: 1 UID: 0 PID: 17015 Comm: khidpd_046d5508 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.706056][T17015] Tainted: [L]=SOFTLOCKUP [ 247.706062][T17015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.706072][T17015] Call Trace: [ 247.706078][T17015] [ 247.706084][T17015] dump_stack_lvl+0x100/0x190 [ 247.706111][T17015] print_report+0x156/0x4c9 [ 247.706134][T17015] ? __virt_addr_valid+0x81/0x620 [ 247.706171][T17015] ? __phys_addr+0xe8/0x180 [ 247.706195][T17015] ? __mutex_lock+0x1861/0x1b90 [ 247.706212][T17015] kasan_report+0xdf/0x1e0 [ 247.706229][T17015] ? __mutex_lock+0x1861/0x1b90 [ 247.706249][T17015] __mutex_lock+0x1861/0x1b90 [ 247.706266][T17015] ? __pfx_debug_object_deactivate+0x10/0x10 [ 247.706294][T17015] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 247.706312][T17015] ? l2cap_unregister_user+0x71/0x240 [ 247.706331][T17015] ? _raw_spin_lock_irqsave+0x52/0x60 [ 247.706355][T17015] ? __pfx___mutex_lock+0x10/0x10 [ 247.706373][T17015] ? __try_to_del_timer_sync+0x107/0x160 [ 247.706395][T17015] ? rcu_is_watching+0x12/0xc0 [ 247.706413][T17015] ? lockdep_hardirqs_on+0x78/0x100 [ 247.706431][T17015] ? __try_to_del_timer_sync+0x107/0x160 [ 247.706451][T17015] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 247.706474][T17015] ? l2cap_unregister_user+0x71/0x240 [ 247.706492][T17015] l2cap_unregister_user+0x71/0x240 [ 247.706511][T17015] hidp_session_thread+0x459/0x680 [ 247.706535][T17015] ? __pfx_hidp_session_thread+0x10/0x10 [ 247.706559][T17015] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 247.706582][T17015] ? rcu_is_watching+0x12/0xc0 [ 247.706600][T17015] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 247.706623][T17015] ? __kthread_parkme+0x18c/0x230 [ 247.706645][T17015] ? kthread+0x13a/0x450 [ 247.706659][T17015] ? __pfx_hidp_session_thread+0x10/0x10 [ 247.706682][T17015] kthread+0x370/0x450 [ 247.706695][T17015] ? __pfx_kthread+0x10/0x10 [ 247.706710][T17015] ret_from_fork+0x754/0xd80 [ 247.706726][T17015] ? __pfx_ret_from_fork+0x10/0x10 [ 247.706742][T17015] ? __switch_to+0x7b4/0x1120 [ 247.706761][T17015] ? __pfx_kthread+0x10/0x10 [ 247.706776][T17015] ret_from_fork_asm+0x1a/0x30 [ 247.706800][T17015] [ 247.706805][T17015] [ 247.713593][ T40] audit: type=1400 audit(1773005972.152:31486): avc: denied { setcheckreqprot } for pid=17086 comm="syz.0.2935" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 247.714397][T17015] The buggy address belongs to the physical page: [ 247.816938][T17015] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888048fd5000 pfn:0x48fd4 [ 247.820752][T17015] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 247.823458][T17015] raw: 00fff00000000000 ffffea00017c5a08 ffff88806a641000 0000000000000000 [ 247.826486][T17015] raw: ffff888048fd5000 0000000000000000 00000000ffffffff 0000000000000000 [ 247.829298][T17015] page dumped because: kasan: bad access detected [ 247.831572][T17015] page_owner tracks the page as freed [ 247.833394][T17015] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 16982, tgid 16982 (syz-executor), ts 245914402390, free_ts 247696545280 [ 247.839668][T17015] post_alloc_hook+0x153/0x170 [ 247.841334][T17015] get_page_from_freelist+0x111d/0x3140 [ 247.843201][T17015] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 247.845217][T17015] alloc_pages_mpol+0x1fb/0x550 [ 247.846838][T17015] ___kmalloc_large_node+0x104/0x150 [ 247.848664][T17015] __kmalloc_large_node_noprof+0x1c/0x70 [ 247.850563][T17015] __kmalloc_noprof+0x5be/0x850 [ 247.852229][T17015] hci_alloc_dev_priv+0x1d/0x28a0 [ 247.853874][T17015] __vhci_create_device+0xf0/0x880 [ 247.855670][T17015] vhci_write+0x2c4/0x490 [ 247.857152][T17015] vfs_write+0x6ac/0x1070 [ 247.858635][T17015] ksys_write+0x12a/0x250 [ 247.860166][T17015] do_syscall_64+0x106/0xf80 [ 247.861732][T17015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.863751][T17015] page last free pid 16982 tgid 16982 stack trace: [ 247.865921][T17015] __free_frozen_pages+0x7e1/0x10d0 [ 247.867699][T17015] hci_release_dev+0x4ef/0x630 [ 247.869290][T17015] bt_host_release+0x6a/0xb0 [ 247.870842][T17015] device_release+0xa4/0x240 [ 247.872407][T17015] kobject_put+0x1f7/0x640 [ 247.873921][T17015] put_device+0x1f/0x30 [ 247.875290][T17015] vhci_release+0x185/0x230 [ 247.876860][T17015] __fput+0x3ff/0xb40 [ 247.878353][T17015] task_work_run+0x150/0x240 [ 247.879941][T17015] do_exit+0x8b8/0x2b60 [ 247.881344][T17015] do_group_exit+0xd5/0x2a0 [ 247.882899][T17015] __x64_sys_exit_group+0x3e/0x50 [ 247.884567][T17015] x64_sys_call+0x102c/0x1530 [ 247.886130][T17015] do_syscall_64+0x106/0xf80 [ 247.887690][T17015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.889713][T17015] [ 247.890664][T17015] Memory state around the buggy address: [ 247.892551][T17015] ffff888048fd3f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 247.895206][T17015] ffff888048fd4000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 247.897851][T17015] >ffff888048fd4080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 247.900477][T17015] ^ [ 247.902252][T17015] ffff888048fd4100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 247.904880][T17015] ffff888048fd4180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 247.907651][T17015] ================================================================== [ 247.910903][T17015] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 247.913502][T17015] CPU: 1 UID: 0 PID: 17015 Comm: khidpd_046d5508 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.917982][T17015] Tainted: [L]=SOFTLOCKUP [ 247.919442][T17015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.923207][T17015] Call Trace: [ 247.924359][T17015] [ 247.925370][T17015] dump_stack_lvl+0x100/0x190 [ 247.926960][T17015] vpanic+0x552/0x970 [ 247.928315][T17015] ? __pfx_vpanic+0x10/0x10 [ 247.929875][T17015] ? mark_held_locks+0x40/0x70 [ 247.931487][T17015] ? __mutex_lock+0x1861/0x1b90 [ 247.933159][T17015] panic+0xd1/0xe0 [ 247.934559][T17015] ? __pfx_panic+0x10/0x10 [ 247.936081][T17015] ? check_panic_on_warn+0x1f/0x90 [ 247.937970][T17015] check_panic_on_warn.cold+0x19/0x34 [ 247.940208][T17015] end_report.part.0+0x3a/0x90 [ 247.941817][T17015] kasan_report.cold+0xe/0x18 [ 247.943412][T17015] ? __mutex_lock+0x1861/0x1b90 [ 247.945157][T17015] __mutex_lock+0x1861/0x1b90 [ 247.946807][T17015] ? __pfx_debug_object_deactivate+0x10/0x10 [ 247.948798][T17015] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 247.950622][T17015] ? l2cap_unregister_user+0x71/0x240 [ 247.952454][T17015] ? _raw_spin_lock_irqsave+0x52/0x60 [ 247.954254][T17015] ? __pfx___mutex_lock+0x10/0x10 [ 247.955998][T17015] ? __try_to_del_timer_sync+0x107/0x160 [ 247.958012][T17015] ? rcu_is_watching+0x12/0xc0 [ 247.959631][T17015] ? lockdep_hardirqs_on+0x78/0x100 [ 247.961474][T17015] ? __try_to_del_timer_sync+0x107/0x160 [ 247.963824][T17015] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 247.965853][T17015] ? l2cap_unregister_user+0x71/0x240 [ 247.967778][T17015] l2cap_unregister_user+0x71/0x240 [ 247.969518][T17015] hidp_session_thread+0x459/0x680 [ 247.971266][T17015] ? __pfx_hidp_session_thread+0x10/0x10 [ 247.973160][T17015] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 247.975230][T17015] ? rcu_is_watching+0x12/0xc0 [ 247.976851][T17015] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 247.979060][T17015] ? __kthread_parkme+0x18c/0x230 [ 247.980783][T17015] ? kthread+0x13a/0x450 [ 247.982213][T17015] ? __pfx_hidp_session_thread+0x10/0x10 [ 247.984443][T17015] kthread+0x370/0x450 [ 247.986076][T17015] ? __pfx_kthread+0x10/0x10 [ 247.987616][T17015] ret_from_fork+0x754/0xd80 [ 247.989190][T17015] ? __pfx_ret_from_fork+0x10/0x10 [ 247.990989][T17015] ? __switch_to+0x7b4/0x1120 [ 247.992612][T17015] ? __pfx_kthread+0x10/0x10 [ 247.994305][T17015] ret_from_fork_asm+0x1a/0x30 [ 247.996303][T17015] [ 247.998061][T17015] Kernel Offset: disabled [ 247.999497][T17015] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:39:32 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffffffff8e7e75e0 RCX=ffffc9000394ecc4 RDX=0000000000000002 RSI=ffffffff8de4ec18 RDI=ffffffff8c1afaa0 RBP=ffffffff8b88a397 RSP=ffffc9000394ecb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff8880266b24c0 R13=ffffc9000394ed40 R14=0000000000000202 R15=0000000000000003 RIP=ffffffff81e4ebc0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007feb8707c6c0 ffffffff 00c00000 GS =0000 ffff8880d6347000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3ffb0f CR3=0000000043cb8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3300f627b8b16657 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff93ee3066 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff93ee3066 00007fff93ee306c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb862331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb862331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb86233360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb862331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006574616964 656d6d690001000e 8001003c80040040 0000000200000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000327a7973 0002000900000004 307a797300010009 7500000b80010008 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 24d4c4ee5f2a5089 0a00000000000000 0000000000010011 0000001400000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 327a797300020009 00000004307a7973 000100097500000b 8001000800000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 327a797300020009 800200188002001c 0000000040010024 8002001300000065 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74616964656d6d69 0001000e8001003c 8004004000000002 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81e7a99e RDX=ffff888032aea4c0 RSI=ffffffff81e7a98c RDI=ffff888032aea4c0 RBP=0000000000000001 RSP=ffffc900038278d0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=000000000000760b R12=1ffff92000704f1c R13=0000000000000000 R14=ffff888056f824c0 R15=ffffc90003827998 RIP=ffffffff81e7a98e RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6447000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8460c28e9c CR3=000000002c880000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0ffc0 Opmask01=0000000000000007 Opmask02=0000000001000037 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564fb7cbcc50 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7406beb20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00ff00ff00ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff00ff0000ff 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564fb7ecf2c0 0000564fb7ecf370 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030303030303031 3132303830786c00 333100303d73656d 616e66692e74656e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000d0d0d0d0d0d0c 0c0f0d050d455100 0e0c000d004e5850 5c535b5413495853 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564fb7cc3e68 0000564fb7cbdd10 0000000000000041 000033316e616c77 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000030 0000000000303d73 656d616e66692e74 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4544006f23250045 554e51455300755c 6c25003d4d657322 203e612a2a26713c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 776f5f6f7f7dbfef 777f7d6f777ffffe 7f7f057d5f6ff7ff 7d7e616b7a3ffd3f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000070014 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e00362e353633 0038333132393738 33323d4445494949 414300303d495f43 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000030 0000000000053d49 000000043d492e43 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a63c340 RCX=ffffffff81fc78be RDX=ffff88801ea80000 RSI=ffffffff81fc7898 RDI=ffff88801ea80000 RBP=ffffc90000157cd8 RSP=ffffc90000157b80 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a733ca0 R12=1ffff9200002af78 R13=ffffed100d4c7869 R14=0000000000000003 R15=0000000000000001 RIP=ffffffff81fc789f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6547000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f770ed4da08 CR3=000000002c71f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc35290956 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc35290956 00007ffc3529095c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f770e0331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f770e0331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f770e033360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f770e0331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000a02c RBX=ffff888056f830e0 RCX=0000000000000005 RDX=0000000000000007 RSI=ffff888056f830b8 RDI=ffffffff8e7e75e0 RBP=ffff888056f824c0 RSP=ffffc900006f7bf0 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff8e7e75e0 R11=0000000000000001 R12=0000000000000000 R13=0000000000000007 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff81e4bfb1 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f770edbe6c0 ffffffff 00c00000 GS =0000 ffff8880d6647000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f770e165620 CR3=000000010e18d000 CR4=00352ef0 DR0=0000000000000070 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f770edbdf80 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc35290956 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc35290956 00007ffc3529095c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f770e0331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f770e0331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f770e033360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f770e0331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f770e1eb5f8 00007f770e1eb5c8 00007f770e1eb600 00007f770e1eb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000