last executing test programs: 2m30.37574707s ago: executing program 3 (id=638): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564233a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000827bd7000fcdbdf250d000000580006804500040046636d28616573290000000000000000000000000000000000000000000000001d000000bdf4aa035773cc5e9387ecdf69b27eb43f61784b214a45a70aeeeb2b210000000400020008000100a205000062aa0b1d0f817daec1db92dba933110da32176a56712d2d7fe0a85d12e79f4b01c6b9d77f62b17b236cddd9532a2d941811a74a2"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x44) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@gettaction={0x24, 0x32, 0x1, 0x70bd25, 0x25dffbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa00000}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8094}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r8, 0x3b70, &(0x7f0000000040)={0x30}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="6a0ac4ff0200f8ff701069000300000095442700000000002c228851e7b58576efa62e6dc3daf2ba13016128065fec616a6342fc39ccbd027a2f0236c7e47742bc4cb5b08e1cc0a7e056a5a354c38e388f9b1c6e04c0211a8e907e8738d1f03d5ae7855667e4646fba32411f3a14d6516e18fc7d652bbdba6f27995a57b2050d3a4cd071a248f119cb256e46bb9db2fec02cb3d7b37a5604a2fd61b37322699727c4ac2119cf26911b29d9d994e27a8b"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000019580)=ANY=[@ANYBLOB="680000009876cd703731a226a4108f01de39c6bbda635f930ccee1d8d007fe023ac49e7e506eaf221a27058b1b9518752f58cf317482cd60376ab43f19734187000807afbff52db6aadd936115c8162880d4d25bd885dc281d27b0d133a0359ac50b18f738983cd94a41e11dce6f24a0389cce39655d1ba8c60205827c1e57b2c2a5acf6b4c3a83f09dd1158044761bd0d74406bd547a71c82184e71a7c55a2b9271b3d8481495b6084fdcd97bd7b9cb746ad1e44eb8d3ff3f6a925fa3a9", @ANYRES16=r10, @ANYBLOB="10002dbd7000fedbdf251200000005002d000100000008000600", @ANYRES32=0x0, @ANYBLOB="0500380000000000050037000000000008000600", @ANYRESDEC=r11, @ANYBLOB="08000b00030000000a000900aaaaaaaaaabb000008003a0002000000080031000600000008000b00ff010000"], 0x68}, 0x1, 0x0, 0x0, 0x4008840}, 0x40001) (async) socket(0x15, 0x5, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 2m30.205128038s ago: executing program 3 (id=639): r0 = socket$xdp(0x2c, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) sendmsg$xdp(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2c, 0xc, r1, 0x1d}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="0df30f51cd4b923f722b57f36de6f1d6b6f2daaadb2407104b6d16e8743bf8b0403df7b997c3805757e6a2b0910e6b4d0041572604f7b37a5ffcd8d07c4100a3fdf7e274f66daf31581d15a33135e9b0460de44bd035fed7f8e9b2ede10443fd9a76d35f19424e0f282af15955bf4b7aeaa1ff6f5ae48e03f675334e366e587f62f4bbf75f5fef8745060d1503dd5355cf763c9f822b83f74786137a1427c214d013b77e51844082c4704914d6826561e415fa180d642056f7fd2a25206f98867b4568a3de4126b6e29726d665ca3ecfa2d3741d420b35a03e7c1c2d04ead5eed760b9dc", 0xe4}, {&(0x7f00000001c0)="3d2b9f7d227d2704fe8588362125845c0f4e5a316900d41f6c6b4a702d25294a79639c2d49a722339d861b7d3946894a79e9b0a694293c4d0df6e2fc4ff13a30f7bf95a5baad4bca763627cf577ad9c254adff7c591882a3edc05fe70c209a358eee765b7f26cbe5a1465b0939054a6b1559ef10b82cded804453b50b527940678ccbfc0dfe280c605c323694d3acee847eea201335192c75bdeac3f851214b8a5dfc1c4b5a0a2b3fc7bc2895cbc201c8add53943d209a9c9ee921875a4313b083927aa1fe6e9895e11bdd1e983c0f5777eec60677a9f932361e35a6693e", 0xde}, {&(0x7f00000002c0)="1dfc360e512dcfa52f7577a9cd508b1b3697a427672cd305fa477082c952c73e7b2180703e9816f8141f7cca3993896d390200121a1e680d736d4f3ab589f2a10bd5a7983a13", 0x46}], 0x3, 0x0, 0x0, 0x24004884}, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x100000) sendmsg$alg(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)="96fcf6d2b3938c17d5cb778cac09d1e20be4ebe515946b60c67a349e85e4ece8b0f39556add6859789de40b1e27e9e1eb58ef620e52bd92fa552e5e3a8341adb310743badc", 0x45}, {&(0x7f0000000440)="26402e90539342bde0c89c35d3447dc68e18a2b89141f6a146b1f35d3780ca6b5275a8f2f6c673094be3abcd6d589042eba96d45688303b1963058ef3c37da8b1e80a1e01f5c37f4731dd71da5014dccc590bb514b6d7da9ac3299eb6cd609bdd8d02244ada705ba81a37c36e7f2ad4d490ec48e9c949700ade60ccb9dcd4e79164ede8217d7957f7f4c226e865c9fd6dfe99e35fbc707d29a666ccf391a875bac7303cf8443b79015788627ec24c89a14f63db83d5dc9aa1a438b", 0xbb}, {&(0x7f0000000500)="760e86bc0a2e2e3c6f78431b842cf4d918e9272326a9f6adddf14f772f5c123abdb6d92a1661e72d072086370e138ff360cf11738fe6450cbbeb2bab71f270d7650a2765e88b9e5580e451682f121256d9", 0x51}, {&(0x7f0000000580)="3faaea6b15e5aba1288441f3deb3547d8ffd37b70cdc438d0cfd973cca3580ac64b9ab23a54b0e911efb8395ed97bab7682d244a03cab75953c13c7706c3d20d23a31371efff5051c917a3b8160672a4528006eb1030a527f4234729f72647b524b682cd42a2586ac503912a065ed0dc89658c0a2d2de2c8c42a64dadca6f00414e4f9c0d0c8b69e82c9d7c51e391cfde6d5444cf5d778cadce379076b1276e30ba7f7eb6f8a9510bff6a9b57690d88f17be297bf6e0a32e62089cc8e5007cc0be0b40495ad886b788d467a9620a8b33f9cd41", 0xd3}, {&(0x7f0000000680)="18b70e6ba347304f2282d7f54e3973ddd33906f0d1f4671790ad83e8c61b392617445d3112a020f675d771a7d3119b16e1473be2a69e6eaf9e8760ecb3bc4e21ca97863d19ad53a52d881b14e224a0bdcfd8e3bad41dd45414c15d473849415ada04b104275cc492e99f9a10623e2534d1fa1430c24d322c03009e7636562fcfc7ed869c5b207ea51f155ce3c1fc8c57e199852ca311944a9befa81b7df5d78e850438325c216cf1073d21f1e990bcc35d3ab700613f65fb2692e4344031b544e58dbb28cb2591e3", 0xc8}, {&(0x7f0000000780)="3143c2f5a10912b549ba82c444e29827b84ffca5f12e1146a6e95602c09f9c1db453c07ca3c7affa00d5eb41fb4e5a42d6e2d6c8da25a9250e30067f41f42a68f49549045b2f848647852aa2ddc3", 0x4e}, {&(0x7f0000000800)="3905c989555960f2149a8e7c0ece66c0458fc65469a316ec8388afa7b27f06a0e34289de3166742fbbbf8896d3c431579991ad9e98f9f39978d7642dd044e90242e94526f4deeb73ad34ece5c8a3a7a354f3356c054bf721db8d66eb", 0x5c}, {&(0x7f0000000880)="3866e323769c000d26879c20420043ab88e24b3bda70ef71c8903ad3d222ae12949bced8cfe5ee961d696e", 0x2b}], 0x8, &(0x7f0000000940)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x48000}, 0x800) r3 = syz_open_dev$sndctrl(&(0x7f00000009c0), 0x8d, 0x1a1000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000a00)={0x4, 0x6, 0x3, 0x7, 'syz0\x00', 0x3}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) sendmmsg$alg(r2, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a80)="8a217c260b68004ef13c19c0cecd4947a8905e99155009a88b2a660b268c8f3b3b6f6983ccabb3b468892c67718a47e93e1b0f96ba3adcd81ec913c9cc927388", 0x40}, {&(0x7f0000000ac0)="55a66496e0a82686b0a83a383bb5c61860facfbc67154b7d934b8b6ebe8e194cb1637d09c2fc84dbc36979fe4a01f905bed7e2b4c5f64bbfca60305e44306c0572f72d8b76e3df015b3ec3f5b83c8ba8a8c8a86a3a3dc25bd65348e09d807c1aead1a828188cdba2c64480cd8560212c6e31e1be42aa940638a7c06b4ed6fff8f21c4c00805f864c19e4001850a9abd4334f2ad90e07fc44fba222cc9f5d1f2403942571f93ee1bc11bf19eb3b7b444b99238b3b9d40aeb9c3e498806d4cf8840c34d03d23", 0xc5}, {&(0x7f0000000bc0)="738c0b436f352c2a8fdb", 0xa}], 0x3, &(0x7f0000000c40)=[@assoc={0x18, 0x117, 0x4, 0xffff}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x18, 0x117, 0x2, 0x3, "29dadf"}, @iv={0xf8, 0x117, 0x2, 0xdf, "36187dcc819ff663d887aa486d1db21840b8bbc96be2585fbe3e32c027bd8cb6894adceeeac18385eaad0204733e053f1c72c0ede356f691594bf90bd1fd85e283efc750009271a4375bc9095d41d3e02b6b33069e734d8c1f84fbb7caeff2ce05ff6690a563da11af46444105defd637f86943c569e26238aff7ef79cd4d2ed8266e2f384b67f77d374f27de7b1a8d7be2c7c57695a63ec944ae32fa3b78ab170e864e4dc3a5332a9fb2c789ce6297990c3c96c9348551cf244a4f661eedf423fc90350edbab2658b2d7c0554d895ef61fc961803a3a078b703f9dd3fb09e"}, @iv={0x48, 0x117, 0x2, 0x33, "b194b11f506aba26cbe1289762cff629c5d8c6d52c1f2f2701920caee5ebf6b186b78e2a157fe9f105d4995f3e164ac2f2dca7"}], 0x1a0, 0x4000010}, {0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e00)="983ee001b2de09dc95b3dc3ddbfe9d46b87a4c4b1cce63d832c2ca966f815c9c7fd789470d6dee654f9b7a05691b9e0ba9e611f39b5ce376e6a50fdfbd3d6156eb166e40244ab824ac63fd714e8961c158807d7dbba515c37a5550a46beaa4b6d68becb52aee1f9ee6e3ecb5803a5a3a3deef0c7e9aaad96960f301d5fa623b6f57a4274d32490236715f05ac01a558de7bf2131d872d121596c34a6d10a", 0x9e}, {&(0x7f0000000ec0)="8c8594e26bfa2d10712c687996542ccfad4a8bb5fac15e93dd545bad37a7b15ec4652c15af9644aa7fb21410a59d839f27e431d243360345539ee6cdd1701ad249ce3169ce0a", 0x46}], 0x2, 0x0, 0x0, 0x40008000}, {0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000f80)="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", 0x1000}], 0x1, &(0x7f0000001fc0)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x78, 0x400c000}, {0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002040)="c18dc128522a5c4a8acb502dae4454cd51224e6c584451dbf59dd756433b22795e52cd458ac52fa7b439f945ab26572b5ec26376ac67df0fd5bbf787021cd6218d3d4b5016367f058f92c306987fe326dcd5203a30f18174eeae9346d960e87f74b4196aa92df68bdde1836e3bcc433b5331fc20c9939f5c50844524807526eb9e", 0x81}, {&(0x7f0000002100)="856abe42d27955e2910ecb50df99ff4b2b3dad74676fee36825f710682c5533faa305413eed9f46fec33e3e8653366938c66c6918bc0a71d509492167021e7cc01d9a3b5b92ba2debc29938caf8463709dfc4300499dd4fa3de5104616fa2180234909ce4bdfbcfcfefd57d443ded7cb214b66628c771fc4c180e81ab45138e5710d794b712e4bb104242a56a586542481e654ba53f05632e674a951506399fef86a78f978214c28334a8308f628f766bbc980098124", 0xb6}, {&(0x7f00000021c0)="6db4d3b9549ec09faf1d8d581fa8b3cb96043abd508c6cd285604000e042e888841a545a5f0635b1e8baf686d20209cb0f18794c037cd2db79c53fc65f7a4e7a03995d9523a3893a0065a69aba1c5144d249c8ec2263804bf28a492b06220d66069eb56c55a6c9da0278adc975007f00516ac521febec009a9414c827003c774bfdfa42955a9741139cb45f0", 0x8c}], 0x3, &(0x7f00000022c0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xf8, 0x117, 0x2, 0xe4, "102676b55fc15686686285bef75adea3fedd4058d6d1928e98ab7082711cec796c651d847bc5de786fdef5ab588e4460cc769fc20d3f6dc7667443476365a27f9ae4e511ab735d49a489228c9430d548c3bc5f2cb99eb11467867d65606738cb92dfa813002948bb604173659700a1e9f140e5ff1ed84631a337a1ff3879ea653293efcbf1035531769b18c5c77f79de962fcfeb0b500df12ddc516c76a9cb5e7903c3b0935e294645ee8876cb194806980b207978bfa42674d12ef720f9994ff11a103a6292421e6d1af3d70537737ab7caf71adbef0dba8d4a2c7a8b8d90d6bb5b7766"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4aab}, @iv={0x90, 0x117, 0x2, 0x75, "7307b1961cc935ef14182c64211f71712c4ece69492eb5a4e79433b36457f6a509e1ac52a8c7c50714ee0ab2f347c55c96aac1780b5d6f34caac52c65adebf22d0c693082b83b45cbd5cf88ab3694a32a3593e9a9e3c4e5219723815d210f7a0734406bda9c98e99effa77cd936082e85c149badf3"}], 0x200}, {0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000024c0)="436fccc33558a372773e9d07b28b515650705e5b72abde60f93cb45a55a1f2be4b1ba4fac4ebe923dc6283f465d72ea2cf10a7c3c9f2fc3bd1e0865d90c8f67e9ec38004cf1914a29e8a5f309329a5e74cbfba38fe0ea7685a0a450db57155b12891a44500180bf7fa1dd7963fa89e87da92c242be7651fd395f6587e8f8631de2f50e45e1b33ffb7ea85358422d15905678afb0746d5730d7e68734e661f4514483f2bd1fd817945050c30aed33e91fbafdc07f0c59", 0xb6}, {&(0x7f0000002580)="c744086558cfd4f10685653feb0dfb7c6137a8898bf7efb08833330a92", 0x1d}, {&(0x7f00000025c0)="17566236de944d6f102f43cacff3fa6092d5ba7cf8f60d2cef9b9e51845e937a5c1d329b6bfa3fb04cfc55c1321f28b8d0359425ae646f4587d0993ad51bb0b1e506037cf5d3b4bcf2f0f94057bc8ad4578659e4782d86ee216467b72317a3c18e77eb7be33c8f0908db39a27105fd64199ce79f042d8e7f40ac7244b419337ae4bc03683428dd603624ecccedd9996caf3bbca9cd371c31a16f3a74d0031748080f057390151530a5f13c458126e55b63a5ab75706e2f362afca750012db8bb22cec82a70253689f0c7a0ca84a7b9c31905f44fda38fa89b7fda98816f2f3845d0b50551aae74ad4ad47bdb83c0b678d9a024f23637", 0xf6}, {&(0x7f00000026c0)="6e746674093b005aa0cb5f83bfcc1525fc3ae4a0afa22fe62b6e8f9b00b4bfe03d7e12331921af047a6aed2f5c4e04d1f87c4ba32c265982700b3c4d5e42040ce3a6173a3e7d97ed9ae1e7eb09432e6758962c42009e640da262", 0x5a}, {&(0x7f0000002740)="3cffee954937daf6f8d92671f992f94a3e7e8e94a96e74cce1315b7d716349779c11f265f0d54f65f8ba8a60559fb5bb71fe4c03e1cae726907118eb6e8fb98b794ebe929698ab4ed3d6200a915d9c8c8338d59c33265df3df79ccfd75dca133e425d868ba2e42bdf7c6e2c036736bef0cf2b62ecbc065a4cb431a5361f1d05872f54329c6af72ec02c40827bb66a48b608b2dfcfdc1940eed115bf34af9f4a188076f8d92f22d81", 0xa8}, {&(0x7f0000002800)="60891c5553193f1ea05027a57088e354b3e3f974141545c4d570a73cd18688b61a11d084ec4437b29e5c572ac86972730f689dd64f164cc45005d6a5bf4aed9d8ad6630c2250488a7222912535badece95246ddedbb9cb629b6228043cf6b5bb70d9419054174c2f3260192bd5568baee1edf18807772d1a2de52dcc08473d4f8d18dc5d8927e90d472722f5781ec8ef1f8504042400f9cee53eb6e597d775781b6763626e476b3fb8d2ee5535232a5c7aee098b227aa49c3d54573e01b46df0b7795818303ded01110b2c343f221062c95f3aa1f96f4d9f297380d9981f", 0xde}, {&(0x7f0000002900)="bb951aaeb8a91930f5b4890b58b2ffc5d0899dc0bd02fb6871cdc5ab56f6", 0x1e}, {&(0x7f0000002940)="db0e09d22df8abd2141812dd5cbb89d5f98b848a433bc6f052555e2baab11cde541faa9d050d659ff44ff694a08daa69eb087e75fb355b27724a1d4cc67dc464824b4bfc6120402c89965c38238ec27c0c9a5532abb7fed8979a6036147f9af4a82cabf1dfc8", 0x66}], 0x8, &(0x7f0000002a40)=[@iv={0x80, 0x117, 0x2, 0x6b, "dde129ff74414514f889ad4493324d845a0519ce1c4dd70b48259778895af261c9ad5ac9653ba08e33ccb35e616072100b63d106710e47526751641280b784fce518da176e0c9e6e360189f0ade54e0e4a9b550ce854c9a1083945abc9241f3310eb621bc2cfb5422f52f1"}, @iv={0xa8, 0x117, 0x2, 0x92, "2cf9ac71b86915f512f7bb5181f35aa6690a379b6dad742093fd773cafc8a0025ce179bc90236c1520f9929f2f8ecfc1a52423f4953c080ef32eaa96b3da15d10fd9c01df1fc41e998774172078655f620a146fe120eafac919fe12ed41511e152ba9dc748100e77680aa3f8331dbb81372fa8bac7bd5824d4526ceeb232590a9072168317dfd260b395514b07267e072244"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x140, 0x4000000}, {0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002b80)="f2f98361857cc697e6046e5c9cbff8696db6a56c6423cf992a6d1d49a4e0ff5484bed6878be918a5ef4484971a50dfa0883ee54dc712b502b48d17bcae3ab756f21ca8c323eb9d6861a21b823bd9bd2b894795efcbf6bb351f7377d16b5c829d033e794cf69e4f777913dcd4b0f5e9ccf7bd6d39f50cc6a08f38d9f27edf825203d10fe368ff3c2f0e9e1dd526873ef4aa9aae8f8fc596cff386cdd0761315db6dee55394be02fbca2df0f54f4203b897d2c9e3b58e5176ae5875fee15d0a064b9a8285d653ab91124889e1d3a04ba6297d1aece346b050b6a00e366d82e500821a2cc62f6014a18c1c64a6ce8ed2e9f59106a57eaf7d0", 0xf7}, {&(0x7f0000002c80)="7cdc33cdf5a7a7b6b2135a48ff1c542d94b268ffbdcc61de0202d781b222be594e8ca9623cbccef002f069c5430fc5b3037a81c86ec1d190592cba37a0177e87dfe4cd2fcf7995306b903fa7db5283b666be288b1be155665ded", 0x5a}, {&(0x7f0000002d00)="4aadf5d5680796dfd6faa6956cfa141c53ada8ce6a33340add67697a19da2a6b03d6db744ee4bb59bad369cbb48c5d5d2ab210ef5eef64f75d6972ddae519e00c520bc836be47023940093ef783197fedb7abcabec0386fe77f630bd0b7b7b3221a3fd723b4da192f4f39221b1331337985e402dc9", 0x75}, {&(0x7f0000002d80)="0e122ec9bc5adc7668d9c48bfbffb3c04b8604e6cec8c70a359a39c2898bfb22e6452ab1bf91a098fdf3d6985a45a80a209c9afa03cf2b69d79d91509c7d7acc08b6566244b33b77d331660fe66d05c605dd6f566b0c7a79e54079da86bc511d047a2714d742d5b4f6421e", 0x6b}, {&(0x7f0000002e00)="974c85a0a3f00dc10b82a83efc8f022858f8320dfeecad82f55b14963f8ac5ed49830edbd9c8e36a9fb35b4e1b527128ff004c8d9f12f98fcaad47c0cbf1734b32888e9b3df10602f3cf5a475a728f9fc35ce1f9b8b793c7416011b8c9cd9e98a6baea7912350099ee0662683b3fbf45a29cacdb9582ba6fedcc1d4ff28e1649862301b6707cb3aacbf2ac357fd12231366d89b161cb17bdf9b4c6d03733aca87b9e6fdf221231bb970c8507f79ab1833da76be5349475935e97fdbc670a389ca0d68fd49b63fd9fc05c3add022a8c7a8132874c3ad652e8e6964f5efd7f656d1ede85b0dfb4c77f6c4c9b5b", 0xec}, {&(0x7f0000002f00)="ea27675ed78b3e8bd61286e3e624dfb2b40c5a3fa746890ad88ded75bd8c8ba6811a36a5960afbdb049122be02bad9c2d01e009fe8c01247f58111b0412bf2f3c4aa16e4eddddc9f65", 0x49}], 0x6, &(0x7f0000003000)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfffffffd}], 0x30}, {0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000003040)}, {&(0x7f0000003080)="f35a1ff469ab3da30a4ee1273e3fbf6e3df1116449f63aa393e3c81e88f529b4881050d7ff0e1d0e39b3583ea446562478965271017dce8b407ac61e5dc14b54638a6b308a56dd15cec887a9ceb6dd8af140f37d1657741b2467d6c0952210a0d808e1bcd063cfbc5c2c428a627f22a7d2a8fed4adc50d923a12ba67540ebe9a17cdbf91a6df78d2e2ff384f3e782e0c7625196deb0965207ef48f8cc678b2d92cf1b4799b0ea4f6d5255fe7cc82fdab72ed63be590653e047", 0xb9}, {&(0x7f0000003140)="ad6aadd6f2a06958051aaa708be04c55e7d04f8b3ad340900eca076e69c0505357573c9c26b6f64b04c5826c54431650115ff88bb0f3544448e81ade0102ea8e23644cf26936f65167d25173c81c92b958320a873f93fd10012ab6bf4c494b70296798b7a04beffe11cbec96b72a2353e4753facc363ea19bb6aadd06a87cfaab0cc4657710636656a91477cd30045b891a8f3d4e2ffc85c368d49ad701622fa396d7a3a6beaf8aa", 0xa8}, {&(0x7f0000003200)="d42cdd31a45e2ec9cb8a521a16bd6a52d51ec568814aa821be53ae3e818f1cb2dab08904487d9d94e19cce3d3c4550aa6b7f177f09726faf9b962787e584a8021ae64f2cc2396ff351480b13c6ab56a6b17cdc1dfa994fc0a4165822f734ed65eade038827e0490a8466c73bcc56a5db06ab68e377e261528113870d16e3f6b19dbec8bdd0b8c5751b22d795aa138331ce07b0139a99fc8760", 0x99}, {&(0x7f00000032c0)="93cf1ffba0c2e727c940d771a631107c805b40603fe985a81d60da4d412dd69ef9eb06bcd97e4f042433f9859857890b0245074cfd46f8551546a9205591b041c6b820866f411e2478a684310226ae96c6e1296321efcec58b2bcc62e72e02f33107733054fc523d613af8dcb72b7d4e42a04b812cb7f5fbb99988e351dc", 0x7e}, {&(0x7f0000003340)="25da788b8977030dc8a0cc9a55a61f40fe5ea8f35476a7620ac9", 0x1a}, {&(0x7f0000003380)="07fec8922366783307c04dc050f9a0db89a59d3df8c32681bd10c2e54a10cc5a29c8e32a7a1202debe677f79bbf7934d152cd0bd417f9ffc986add359ee422522658e2accf78bd06e3b821ef106ec8a72df4f91f491730924e5584486b9ea20cd65031b9b77a07f46798df", 0x6b}], 0x7, &(0x7f0000003480)=[@assoc={0x18, 0x117, 0x4, 0x8001}, @iv={0xd8, 0x117, 0x2, 0xc2, "e090d434eeae64479b69829b06b1eb1f36db8feeb06688146d67acc3f3752699cea25b7c7096ac4f4dd410c7c873a1405d4967753e35d149e6f48aafd3ff88722bad48ddf3779b381d00fd99329d2c3d81881ebd3554a27b2c12f55cbe337d9d47c367c8d2b07d031b7c600d8de23856db48e02fd835a6b5c6f4e584d2aae3135822b3da0ef73ea08c0c8ad145da7cf49a2e390bfe9dd4f733633555dcd1d78e5601faba3a8a658bd433b67bd6cdf003b2616ff0ae159b1e7440854d7d5031c8463f"}], 0xf0, 0x4009000}, {0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003580)="ca7f81f08f629e33563af7d485ed2a909eac05f02e1279a12263fd7fbe118ef43cbce6ad1f9dfc885f69f6e41161312fdd3bbe5271467ac5ff0ddd464b07701e3e73142b8268bf27760c5c5402adbef14032790f21834aa3749033ee579e5b20f28bb883e5f8e793f9967b5254f7e363fd9f2059c77ac4a9aa74c2", 0x7b}, {&(0x7f0000003600)="ee1f4e9aa9abb59d5b3ef97187b2e59fe9f80b7681781925fefc1997b1cda26cf6604e6b07060e1dc2675a8a2830acf08f89502ec656f68cad060b42ec0238d0c8380c101eed3652edb33566c94ab9265a066ee5ccd7ea656ba98630cd29ccb73bf297f2b5e2da16d401fc0385e6ff6bfbf7d300f177488f655fc609d9a9cb530751f434d0f161cb941a956370a6d164ecb16dc2eb89ef58f5c199ce6dfe95d2ad7a893f878e95cc4f726548e5bb9080f6d8050816107503c8769b6247b44b91daec267189d47f4104bb459e0a76b0283d0e0361c53b8464148e9f34133f0c249dce6008d9a6041aa393baa4228244dbe7c6bf9498", 0xf5}, {&(0x7f0000003700)="b19f0d018be2ea34147a0bf7ed6ea0a014e7a8ed36a2", 0x16}, {&(0x7f0000003740)="ddceb3e14414373861efe491bd8d758d9a5e938beee0c6e9f1723f30806ffde866f7faba55db1ee58a", 0x29}, {&(0x7f0000003780)="867a1366cebe2177ad4b813c800594b518b080adbbb0a7493bed34eb205161a34bd3d7e4905a1060f8e9e0c229dc03ce14ec33800ea214f5d15e3a2461e3345a602fe09ad32c79b5b86c2d14380aaa1d32cb7f2e164933d45cfdeb9cdaf412580bd50a6fea4f41b91fed25add192705dc3008f8de704eeca5cc24b47263f564c971cff70a4eea0268b50fb5146c6cd2a8df4fcb9746771b3146a3b2e74d774c80c5899a3078d8552559d22976ac89709982c37b43b7a65f808b97ebcc5f7b824e193d2cf2482a541b82dd0", 0xcb}, {&(0x7f0000003880)="03e59d431c63f2b6", 0x8}, {&(0x7f00000038c0)="b41a6614f5863381aa708d6850e3de63acd45eaf6e4b38946a4b67cdccd7a2ac722a6a5d82a62e881fcb1edaf2af7d9f4ec3b2de21564e207d5d77646dde7b3f270f2ae6f5c7054f0d9ea0fc555952fed94872e491d81389eabdcfef07db", 0x5e}], 0x7, 0x0, 0x0, 0x20008001}], 0x8, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000003b80), 0x10001, 0x80040) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003bc0)={{{@in6=@private0, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000003cc0)=0xe8) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000701, r6, &(0x7f0000003d00)) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$sock_ax25_SIOCDELRT(r7, 0x890c, &(0x7f0000003d80)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5, [@null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f0000003e00)={'veth1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003e40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "46ff02ae4c112c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000004e40)={0x0, r8, "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", "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"}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000005e40)={0x6, 0x0, 0x7, 0x3, 'syz0\x00', 0x7f}) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r9, 0x10e, 0x6, &(0x7f0000005e80)={0x4, 0x8, 0x9, 0x9}, 0x10) ioctl$SIOCAX25GETINFO(r7, 0x89ed, &(0x7f0000005ec0)) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005f80), r9) sendmsg$IPVS_CMD_DEL_SERVICE(r9, &(0x7f0000006040)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000006000)={&(0x7f0000005fc0)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000006140)={'syztnl0\x00', &(0x7f00000060c0)={'ip6gre0\x00', r5, 0x2f, 0x5, 0x6, 0x0, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x700, 0x7, 0x9}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000062c0)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000006280)={&(0x7f0000006180)=@RTM_NEWMDB={0xd8, 0x54, 0x10, 0x70bd25, 0x25dfdbfc, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x1, 0x3, {@in6_addr=@local, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x4, {@ip4=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x5, 0x3, {@ip4=@rand_addr=0x64010100, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x1, 0x1, {@in6_addr=@remote, 0x96dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@in6_addr=@loopback, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x4, {@ip4=@remote, 0x8edd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x1) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000006340), r9) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000006440)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x5100050}, 0xc, &(0x7f0000006400)={&(0x7f0000006380)={0x7c, r12, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r13}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xc000}]}, 0x7c}}, 0x40000) sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f0000006580)={&(0x7f0000006480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006540)={&(0x7f00000064c0)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x43}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x20004040) openat$autofs(0xffffffffffffff9c, &(0x7f00000065c0), 0x44c003, 0x0) 2m30.144301433s ago: executing program 3 (id=642): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xb) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) 2m30.075693011s ago: executing program 3 (id=644): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x181, 0x20, 0x100001}, 0x25) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) ioctl$RTC_ALM_READ(r3, 0x40187014, &(0x7f0000000040)) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) r5 = socket(0x23, 0x80002, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080000fc020000000000000000000000000000fe8000030000000000000200000000aa0000000031000000"], 0x0) recvmmsg$unix(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m29.195289819s ago: executing program 3 (id=655): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x33) 2m28.843078231s ago: executing program 3 (id=660): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0xa1}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x89, 0xf9, 0x8, 0x69c, 0xfffffffa}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={r3, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r3, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x2, 0xb, 0x1, r4}, 0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r4, 0x7fffffff}, 0x8) r5 = io_uring_setup(0x6f95, &(0x7f0000001240)={0x0, 0x2dfc, 0x2, 0x0, 0x20000002}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmmsg$unix(r7, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="e44d8e", 0x3}], 0x1, 0x0, 0x0, 0x20000080}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="828c06", 0x3}], 0x1, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="eb32", 0x2}], 0x1, 0x0, 0x0, 0xc0}}], 0x3, 0x80cc) recvmsg$qrtr(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/167, 0xa7}], 0x1, 0x0, 0x0, 0x50}, 0x1c, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m28.818578343s ago: executing program 32 (id=660): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0xa1}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x89, 0xf9, 0x8, 0x69c, 0xfffffffa}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={r3, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r3, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x2, 0xb, 0x1, r4}, 0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r4, 0x7fffffff}, 0x8) r5 = io_uring_setup(0x6f95, &(0x7f0000001240)={0x0, 0x2dfc, 0x2, 0x0, 0x20000002}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmmsg$unix(r7, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="e44d8e", 0x3}], 0x1, 0x0, 0x0, 0x20000080}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="828c06", 0x3}], 0x1, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="eb32", 0x2}], 0x1, 0x0, 0x0, 0xc0}}], 0x3, 0x80cc) recvmsg$qrtr(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/167, 0xa7}], 0x1, 0x0, 0x0, 0x50}, 0x1c, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m24.222316142s ago: executing program 4 (id=724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x22, 0x2, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41c0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) 2m24.095552975s ago: executing program 4 (id=725): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) open$dir(&(0x7f0000000180)='./file0\x00', 0x44040, 0x11b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000100)="f4440f20c03504000000440f8cc066ba4267663e66460fe750bf26430858fac4a2fd252f410f2ed8f30fc7303439c74424000c000000c7442402bb000000c7442406000000000f0114244e48c2c971dd13", 0x51}], 0x1, 0x80, 0x0, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_disconnect(r3) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040d4) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x7ff}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f0000000200)={0x6c2, 0x6, 0x0, 0x800002}) (async) lseek(r4, 0x9, 0x0) (async) write$UHID_CREATE2(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007300013100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052000000feffffff03008000ffff000000080000e778c43ad31e3d4524dd9431a219e1bb280502acbd852564e84d14aa3bbb824ce027378ea78ad739848950ab1462caa264b05eb8415957b671708f411e0424c984fa8c9150585799e1ac271df740a6706262f33851600b0db62250c31d200219ae4a31aa9e811654f229263ebcb824f1228a42ef0a68b80d21dcc3ecf0f118e0767eccc85ae7ca"], 0x16a) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) (async) r6 = syz_usb_connect$cdc_ncm(0x3, 0x8f, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x4, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "bfe9d647d7"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xb9b, 0x6}, {0x6, 0x24, 0x1a, 0x6, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x315a}]}, {{0x9, 0x5, 0x81, 0x3, 0x1b7, 0xb, 0x8, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x54, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0xd, 0x2}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x51, 0xb, 0x7, 0x10, 0x10, 0x9}, 0xfe, &(0x7f0000000780)={0x5, 0xf, 0xfe, 0x1, [@generic={0xf9, 0x10, 0xb, "9ca33b90ee8706a2c313a3563b5b81d19f3b4863515add26b8e1ddb21a4d2849e48ccca25dd206cd898f185d2c231195218ddc27793a3a1d863e32b57de21822dd579ef6310616237e2755713e6c1bcbc207da69303f3eb3e513360643a7c40865c3180e4056625efd621f67f3bd6a68805bb597c211472fabbf90e22a982a29c30933e0d5ffa7f8ee3d3de96de8b9f9c97e29e6f31c1c5a83fed361feeb63a049c8750278f050f76a0da6d5eb616b223f0fcefaf21599431e9b2b90735cddd273e09bc461d3f63e7a86dd2d63c064c730fe0d3d275d29ad89661e5d8a18ae3d61d326b21f02575fd0f9af632c274dc7da0f0e0b42d7"}]}, 0x6, [{0x36, &(0x7f0000000440)=@string={0x36, 0x3, "2aa0f292852aceafd4965f0ab713fa042614b28200493a273d99e750fc571eaebdf2b701f234c4d72bfdc270516286d515037a58"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41a}}, {0xb1, &(0x7f0000000b40)=ANY=[@ANYBLOB="b103ae3966874ab41be4325f2b3f11811a8bd5231ff69afcf31dcb2536a2a0cb87412193582658738d3517ed73e3a50ebb19405eefddd4ebd8328c2c6aa6a2015b494636e7c8dc7bc290baeadfe9139a510be69bc10a1150cf1325b0fbfb56c858d1660fe212bb7031d8102728ada9ab1d284d6e64056b397b048404c479fc4d2f46723987621d9f6e2a5302b1e421b43c9cc40d5b0eedb718b0549acafc0f0a977b3d691cf1f2ee00000000000000f1250ef951765b3d78a631f4593c24838c33b7e31c888a71531d69cb1b3bb3278f62f2b8d59c2cdbfabc6f8da14d3fbd2c9b66960f4630fb2b283e8245aee43e3c83a1673f0e3f607bae5d7618991b12c80b9acd00e671c5491309c791329ac8621801d05b75736c3e04694caec6ad7e889ec57a1eaf033e18713f4efe3b832e3b56"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x861}}, {0xdd, &(0x7f0000000940)=ANY=[@ANYBLOB="dd034b2225982ead9e95ff22c429ac44a2529d7d79d858df40c24e88c9ef4815a20eacd48fe983d89f27f3956c634ba6021966497f8c0c1ef032aa8f846dd3800fe0f8e20c498359a5ac59e5d803ec438f67231fd2b0551c5bbba02be0f864a06cb45ce37924d9e642b2cf7937c97f4a0912eec5e30a3d522e784cf7d5dee92ed89bfeb911083525a7834036576f71b119ec462c796ded4904559dc18b347f29d58480536e070e314073d30dbc40b1918312fdbf3f3166c10d80407bbd0330318911a4c3c726f177757fd5308e71c1ba5d7fafcd61678ba06ffcef6d44"]}]}) syz_usb_ep_write(r6, 0x5c, 0x80, &(0x7f0000000ac0)="7d2c74ed5594129c6c06494bfea25a9fd1a91d18f3e20327b4d6c168ef52f1d922b2ca5643f1950547428d323e049900012161d3f8a637b8ece09c1404e8539d9f21fbbf8b0d777504eb4e16c7b13c5f8bbbc56b7089cd604213d3e5ab69a809e0e8f1579385a0123757b306f9e785ccfa20bfe812f78666090bbb5dd27fbc4d") (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) sendmsg$IPSET_CMD_TEST(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0xb, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7fffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x54) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m23.4051392s ago: executing program 4 (id=736): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000100)=0x3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x3414858, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x202801, 0x13) r2 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x0, 0x133) open_by_handle_at(r1, &(0x7f0000000080)=@ceph_nfs_confh={0x10, 0x2, {0x3, 0x6}}, 0x202d00) lseek(r2, 0x3, 0x1) getdents64(r2, 0x0, 0x0) 2m23.333269001s ago: executing program 4 (id=738): socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_open_dev$sndpcmc(&(0x7f0000000380), 0x1, 0x8000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f00000003c0)={0x1, 0x0, 0xe7, 0x8, 0x8000000000000001, 0x7, 0x5, 0xdb, 0x10001, 0x1, 0x8, 0x1}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1d00000019698312ecbb00000700000080040700", @ANYBLOB="0300000000", @ANYBLOB, @ANYBLOB], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a3000000000140003"], 0x60}}, 0xc000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4049000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) 2m22.450346318s ago: executing program 4 (id=741): syz_emit_ethernet(0x1e, &(0x7f0000000640)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@can={0xc, {{0x2, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "8e85abf30410928a"}}}}, 0x0) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001c00), 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x2, 0x9b3, &(0x7f0000000300)="0b4e9dab96ac31ec7f5215dbc42eba9695c3ada863719f202d74f99b15b60e2c6e46d9ac5d5dec41a8c21155162bcd8b550ac04b97cfe4bbd850b62bbd075dfd5f349cccc76a3e2811952dd0204a169c3c6fae0f288da79f8b6c3444eb5824a84106ddbf7b0ad49bd43a0ddc3961425edefd1863a90c110a7815e7eaa2634e0bf0ba6753b2f2b019df86fe7b87f4efadb516ef480ec239db1f932eb8b49de1a7affe3c61343ec20ba1fc4c9377b1c4370eaa5e9dfc1f33fd9d523dcb3867a490bca4df017bf9c09a80dae0a624d8330f82a36e7604b0b6b1ab332c69561c3c25306a99f0e10335a5f334ce6b", &(0x7f00000001c0), 0xec}) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) close(0x3) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000600)={&(0x7f0000356000/0x9000)=nil, 0x9000}) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000540001002abd7000ffffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="0103030bd1"], 0x38}}, 0x4008cc0) r7 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000140)={r8, 0x7}, 0x8) 2m22.064244272s ago: executing program 4 (id=750): socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000500), 0xfffffffffffffffe, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) capset(&(0x7f0000000080)={0x20080522, r5}, &(0x7f00000000c0)={0x3, 0x6, 0x7, 0x0, 0x0, 0x100}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000480)={[{0x7ff, 0x7fff, 0xe0, 0xfa, 0x3c, 0x7f, 0x4, 0x9, 0x0, 0xfe, 0x7d, 0x5, 0x400001}, {0x7fffffff, 0xa, 0xfd, 0xff, 0x81, 0x0, 0x1e, 0x0, 0x20, 0x3, 0x0, 0x4, 0x4}, {0x6, 0x8000, 0x0, 0x11, 0x1, 0x9, 0x78, 0x2, 0xfd, 0x6, 0x0, 0x8, 0x10000}], 0x7c1d}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000085"]) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f00000008c0)) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) (async) r8 = syz_pidfd_open(r7, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r9, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r9, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000040), 0x0, 0x0, 0x2) 2m22.027164969s ago: executing program 33 (id=750): socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000500), 0xfffffffffffffffe, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) capset(&(0x7f0000000080)={0x20080522, r5}, &(0x7f00000000c0)={0x3, 0x6, 0x7, 0x0, 0x0, 0x100}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000480)={[{0x7ff, 0x7fff, 0xe0, 0xfa, 0x3c, 0x7f, 0x4, 0x9, 0x0, 0xfe, 0x7d, 0x5, 0x400001}, {0x7fffffff, 0xa, 0xfd, 0xff, 0x81, 0x0, 0x1e, 0x0, 0x20, 0x3, 0x0, 0x4, 0x4}, {0x6, 0x8000, 0x0, 0x11, 0x1, 0x9, 0x78, 0x2, 0xfd, 0x6, 0x0, 0x8, 0x10000}], 0x7c1d}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000085"]) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f00000008c0)) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) (async) r8 = syz_pidfd_open(r7, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r9, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r9, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000040), 0x0, 0x0, 0x2) 1m25.78321799s ago: executing program 0 (id=1626): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7fff}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x42, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m25.511555901s ago: executing program 0 (id=1627): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 32) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x82, 0x0, 0x2b}, 0x18) (rerun: 32) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) mknodat$loop(r1, &(0x7f0000000180)='./file0\x00', 0x10, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000200)={r2}) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x1403, 0x100, 0x70bd25, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) (async) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) (async, rerun: 64) mknodat(r1, &(0x7f0000000380)='./file0\x00', 0x80, 0x4bc) (rerun: 64) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x0) (async) open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x4) recvmmsg$unix(r0, &(0x7f0000000940)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000580)=""/228, 0xe4}, {&(0x7f0000000680)=""/214, 0xd6}, {&(0x7f0000000780)=""/60, 0x3c}, {&(0x7f00000007c0)=""/166, 0xa6}], 0x5, &(0x7f0000000900)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x1, 0x2, &(0x7f0000000980)) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r6, 0x80184153, &(0x7f0000000f00)={0x0, &(0x7f0000000ec0)=[&(0x7f00000009c0)="a633d40e5383216e27ffcc8f71ad559f329a4db08f001be784d0ddb592aff9aca42bb6871b5ececfc4754bd180035dfcc2", &(0x7f0000000a00)="91be928ffd07d59daf80c0d0a793881b94db9f93456c2ab5593fce0495695f7086348fac38d5bc46a7b691370e0bd5e62c0d881d72121676086097aff1b5ecc0757ff98eaa89d087b2fc4abac53f03e3ed20559d40e33f272bb5bc88d28b7d93175f2f1c9c553aa32735370fadae373692bfa88f614b330b741800821c86a7f344266119632b7b67f6b4dfb5d1e4280b5e907f6a083f921a2b1c35ed9f865c5224928d88d89881e384d4468f92b4322de555bb9fc58d822733f9a38d67abd9a9fcb6f48e36a9edf37405b1c3b27e1268fa04cf7ea385fa15682792c04ff1bce8595d", &(0x7f0000000b00)="e3d505de326ab42de73b46aaf292cacf248d72570d6715fdd5addb888a28c5d33e3ee6d5df04abce927f8390fdcf588e453a9757897601196f0ba23d341d78d390501bf5a43a44562988bca6a587785ad59416cc90debb7e494444c3330699d3cf771c6fa64524a42a944514b553c207902331f2572552468930cb951e94bf39c249c668ba90363fd136fd89ef98af0e764535caa1f268228ba385d149244f239e780d89939a31aeb6a651b515cc5fa0ae382f52d078d024ac97b7f804da15d600ad7204dc39de7abbefea4778ee8b6abe91ad2edc01a3f8e74e3f22bde634751dbf83ab6d1881d907c72673f4", &(0x7f0000000c00)="49908bde2611a3074833852f098bfeb1b0c717691872d1427fe85d60f413d0e65a98b9b0de7b099ab83d4f2fc1ed77ead6fbb207948146bb0f5ac8d37a4e1c5d8c9802c240f7c70917a0d4b2f10af6a320d75a54c5bb1d34ed7e5f265ea24578a01fc1c84a436cdfa3da17bdc18d0c49388a26c6c63d82e635d15fa39203cb0f1ea1f720cda2077ac00c2504a74450cadc2ed2b2b227cce5cea5c5a734b1da2b6478a20637be25a09e42bc32199bd185cabceceb5bd90174f871d0935a6696613914816d21428ce69b771cd1aea376e97035ea2b9c8b3e0f278f84", &(0x7f0000000d00)="1af91628d828c1650c6af84e074976958be0a462b9e265ecaf522f1de1fecb4d487fa928349cabf0350781fb0c4cd40e65dd57b1873fbedbe38830549116af74933e43caf2349f0511589ed10df0ee7ceb68683d1d8df66d0dbecde523a5ea60b2056dfd2eabab22e8f195b8567ec80884c54b800c077304aa461b809bd8816fad7b9e364082e6860a0ff1d6d7bcad0390284da5fdf333fe71531aea840a508c5d30", &(0x7f0000000dc0)="332ddb3a58931059eacb58d6094d0576d625787199fa449d23d4ffd2950474865c28b3413cf171e2f9c4ad856a7b806d47407b154e285be862b992f5a719e1897dca17574bb83d350399f33a66d9568427b245e7b67ae18cd22471ab070ca2274250efd1c73ff325a36c0cdcdd42dd9192b8f8a4dda0f5d8f6e226a30125da2c5ad4ce0f3af6b4ef2a231a70e7f8b7b2c736dc9eebaed2b0211833ae1316860357b78eff8f1fe74c96f0c54b94ebb6cecf6d7e7fcc47881985df79e6aaf9156bf98e9a66f50c0c08e08c1ed6d0c5f0a89cc42cfbf0b9bb2b4b807ae4ce56d65f3319"]}) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$netlink(0x10, 0x3, 0x5) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f0000000f40)={'veth0_to_bond\x00', {0x2, 0x0, @empty}}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000fc0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001080)={'tunl0\x00', &(0x7f0000001040)={'sit0\x00', 0x0, 0x20, 0x40, 0x5a1, 0x2, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x65, 0x0, 0xe, 0x29, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001180)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x50, r10, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8c}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) (async) read$FUSE(r6, &(0x7f00000011c0)={0x2020}, 0x2020) (async) chdir(&(0x7f0000003200)='./file0\x00') ioctl$FS_IOC_GETFSLABEL(r9, 0x81009431, &(0x7f0000003240)) (async) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x79) (async) r13 = signalfd(r8, &(0x7f0000003340)={[0x53]}, 0x8) sendmsg(r13, &(0x7f0000004780)={&(0x7f0000003380)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003400)="9bc93a53baeb60c4ba32e90a40fcbd3b7d8eab59c61250fe5f07dbb1b4c0c32d2344662dc19e08bfe285875bc44f4890909e8b21fb44e2cae13dcb20560080a0d819f1793d1aef9dc8d0709729c17043018fb4bedd1a44472ba715e8013f4e569788d957896ef445b4b6be6c8066380dcda0f578e24a02182eee9ebc9736abc1c32f2ae5e24f9ce7203308f86ec28335cdab0e8cbf2393a1a724658caa1bf60558bdddd257ef74", 0xa7}], 0x1, &(0x7f0000003500)=[{0x1010, 0x84, 0x5, "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"}, {0x80, 0x1, 0x3, "9a110bdd4f7d65f4c9d76050d28a24e10a0a85087c382417b10ae41587d0ff44cf6939c2d379836c483a1c0277267bfed76f8723fdf46c4f96b926ddc598695b7b867325aaf9cb449187ad23c5118707d621384163e80e27e9fd80bd9f13e6417c3fed25bba094e82e38365e28486112"}, {0x18, 0x115, 0xffffffff, "bee96b02f478"}, {0xf0, 0x5, 0x5, "1f53dcafaf5088d06c225d3ec2e900d964a22036e7654dc72f03a09eb4d1f70b2678097b9503cdf502d4a280ecda83f3d3e4649e453cee8016f68d3aaaa4b8ee7f70b5c82e6534fc9884c5d203d6450c7be4fe8c6c8daeecdf14193ccab3d4c661f848ce2cac90bf2d8069fb69229a44daef3fea90af6ae5990f9be36f722629d9e615095bed7c386345817aba8877fc6407290c692a11819e27901b90cf12f683cb11047f4fc1274f09feba23845a12fa698ac0d926abd2d8702d9b7f150d3b15e5cd1150e2b200f242c1296ccb5327d896d058663165bc1ebc76560aed7d43"}, {0xc8, 0x103, 0x3, "5b4244a4132955d71cd17d3a4639a12c367d6bb39475ff0c20469c6274ffb627fafbd8605aebb986046a8e1767ff25856c8220776130113f6f4af5908fd63fb3a1a5df48c906a4980f553f5b316affa463904cade022b72c19eb451291f37824be79a3be6baa17d685562ae95f1adfe73e8eca359ee869d02e12f9b3eff17f6334dcd20fca2f50853d818509e5eefac297caf01fb086837eee6f7b8d4e190aac8edce8338936b3a0e174c16c1b7c6be06ba5d8c6a0"}], 0x1260}, 0x44040) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000047c0)) 1m25.511230358s ago: executing program 0 (id=1628): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4], [0x1, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) (async) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) (async, rerun: 64) write$input_event(r0, &(0x7f00000005c0)={{}, 0x0, 0xfffd, 0xecd}, 0xfffffedf) (async, rerun: 64) r1 = io_uring_setup(0x5a23, &(0x7f0000001440)) (async, rerun: 32) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (rerun: 32) close(r1) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000a80)=0x1, 0x4) 1m25.410622566s ago: executing program 0 (id=1629): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x3, 0x222fa, 0x4f, @private2, @loopback, 0x8, 0x40, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000) epoll_create1(0x0) r4 = fanotify_init(0x0, 0x8000) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) fanotify_mark(r4, 0x4, 0x10, r5, &(0x7f00000001c0)='./file0\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="440000000a060101000000000700000014000880100007800900120073797a32000000000900020073797a320000000008000940000000003cf3e7ff0d9af41f5d21dc32192b60978e64b52ce387220f405224e11559ff0c9c661a7d1b8929016cdef742c3c7874ca09c7a971f0253a77309f267a94f00e6a60cd1f730d2b5d5c30006071f14b327dee973153023cae713becd4b481dbe71f38bb93b7131342b07f1405f0e0005164730b7b81fe28a4d4da0940c894856e0bf7899838f06bd013259cd9645564830f0dd5375dc8ff2288c38de2f76e6ebadc840f1812f251c5ac866532e10f53b25064547bf1b3403e8d31f68fc5c00"/257], 0x44}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={r1, r2+10000000}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') pread64(r9, &(0x7f0000000080)=""/237, 0xed, 0x5) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r10, 0xa28b, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x12, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96076500001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc00070080190000000000ecff000000deffae1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 1m24.535067537s ago: executing program 0 (id=1633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x40}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x40, 0x0}, 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x256, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0xb9a3faa}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x1e, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000740)=""/199, 0x41100, 0x58, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r1, r4, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x1e, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000740)=""/199, 0x41100, 0x58, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r1, r4, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x144) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x28) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000400)=ANY=[@ANYBLOB='8'], 0x138) (async) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000400)=ANY=[@ANYBLOB='8'], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$pvfs2(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1022, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb6}]}, &(0x7f0000000200)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x48, r9, 0x5, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x39, 0x7}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xa}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x48051}, 0x10) (async) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x48, r9, 0x5, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x39, 0x7}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xa}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x48051}, 0x10) 1m24.339927074s ago: executing program 0 (id=1634): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f0000001d40)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_neg_reply={{0xfa}, {0x8, @none}}}}, 0xd) sendfile(r0, r0, 0x0, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x7c}, 0x1, 0x0, 0x0, 0x85}, 0x24000001) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x40000000}, 0x8001) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0xb, 0xfd, 0x8000, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x7, 0x2, 0x4}}) r8 = socket(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@gettaction={0x24, 0x32, 0x1, 0x70bd25, 0x25dffbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa00000}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8094}, 0x0) bind$xdp(r0, &(0x7f0000000340)={0x2c, 0x0, r7, 0x39, r0}, 0x10) dup3(r3, r5, 0x0) sendto$inet(r0, &(0x7f00000003c0)="93b729fc4a6e3751a5bd6a13b1a38e9e5245cc3693bf933a38ff4006b29bc84448e3ef95e479a6c83a715f4d12ebd87361cf6332d0b964dc102ef2727c0fb8be067b35725ddf3477d99918013b0b7e0b37ce49031eafca28e3119c8385e4cd7e0dfa3442e14eb42f5a2430c14d917d6301bd", 0x72, 0x4008054, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) r9 = dup3(r1, r3, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='signal_generate\x00', r9, 0x0, 0xffffffffffff8ee4}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x7ffffffe}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1m9.285105191s ago: executing program 34 (id=1634): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f0000001d40)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_neg_reply={{0xfa}, {0x8, @none}}}}, 0xd) sendfile(r0, r0, 0x0, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x7c}, 0x1, 0x0, 0x0, 0x85}, 0x24000001) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x40000000}, 0x8001) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0xb, 0xfd, 0x8000, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x7, 0x2, 0x4}}) r8 = socket(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@gettaction={0x24, 0x32, 0x1, 0x70bd25, 0x25dffbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa00000}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8094}, 0x0) bind$xdp(r0, &(0x7f0000000340)={0x2c, 0x0, r7, 0x39, r0}, 0x10) dup3(r3, r5, 0x0) sendto$inet(r0, &(0x7f00000003c0)="93b729fc4a6e3751a5bd6a13b1a38e9e5245cc3693bf933a38ff4006b29bc84448e3ef95e479a6c83a715f4d12ebd87361cf6332d0b964dc102ef2727c0fb8be067b35725ddf3477d99918013b0b7e0b37ce49031eafca28e3119c8385e4cd7e0dfa3442e14eb42f5a2430c14d917d6301bd", 0x72, 0x4008054, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) r9 = dup3(r1, r3, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='signal_generate\x00', r9, 0x0, 0xffffffffffff8ee4}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x7ffffffe}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 50.1964568s ago: executing program 6 (id=2169): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010001", 0x7) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@getsadinfo={0x1c, 0x23, 0x400, 0x70bd2b, 0x0, 0x0, [@tfcpad={0x8, 0x16, 0x2}]}, 0x1c}}, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1008004, &(0x7f00000002c0)={[{@redirect_dir_nofollow}, {@metacopy_on}]}) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) 50.116761477s ago: executing program 6 (id=2170): r0 = fsopen(&(0x7f0000000280)='vfat\x00', 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000550901009260bcac897de6b704ee38e200000000a500000000000000b7020000000000007b2d6dfe00000000b6090800000000007b92f0ff07080000f8ffffffbfa400000000f0ff06040000f0ffffff00"/132, @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x10000, 0xffffffff], [0x800], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) r4 = socket$inet_sctp(0x2, 0xae4501d05cbdc037, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000009c0)={0x0, 0x8}, &(0x7f0000000a00)=0x8) close(r0) sendmmsg$inet_sctp(r4, &(0x7f0000000d00)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="ce9f8bc5c72a5c42916ce3db55ce82ba077d80fda56ea37e7af64f734110a97516b979be2687bc1eb5246498f5399f122a746adf2b85c2561765ec623df859d51d41f244e52c6a681e1d0c85eda3f3408bec500181915de347213207997ae356aab8134f54ae", 0x66}, {&(0x7f00000000c0)="4103fcfd1bf3a35358b8e23d8847b794029ff7b94c5edb8af0cd3182deba05675d6f00005dd7ed43d47870d2ca9fa668e5ffd7cec8d8d4b90dffe9238cb9a17bb17cb927e64a55915149b2e53d1a3ab77ef827297a25b6dd058add09ffa3f470e3fbe1e6a02d626a5fb5f648c6fb771ae2ef2120ccc45a774b56e1c13082f4ef5f6336a4b9a7d0f3993042bb0437f68d498bb2f2d625a95b727f11831038c86cc2a61b4f7d221f", 0xa7}, {&(0x7f0000000180)="7ce27759beaa10", 0x7}, {&(0x7f00000001c0)="23e592f07805416691f81355bb7b4c4597174547ed032594945f0a704136288edcbc0823ddb9aaad4b7f06112d960bf60b50117b", 0x34}, {&(0x7f00000002c0)="d2bddea067c90488828636cffd455d11dec821bc36f48db741d9d178963cf8c86e1b47597bbcb7a65fce38fa0ee66bffe74438b759d7ba1ddb3b11172f8d324db4c657ef0c386602f6d54a0a0f742b6b2b0e0e1205181c96869ccb9cf6b1aa03b5769cd49d8db5e9a7ed0ae4239aa4a0f70a7adfb972e257e9c1d350e27a6f0ec7f15cda4069a70482f31a53c0dce445bfb2f567b00c83153b618509ab60a434ece258ba963ed723fc477cbed2984ce23f049bfad0d11e148fba586cc404be268984c2d3", 0xc4}, {&(0x7f0000000580)="b32254fc12fb1ca04ab30e7d902e9c0aca5dd33c43d9c20c25f1d9b7d03d4d59c0a3c0710a107487db9b17e4b88f2b435bf92eb18be5d662a358abf5b81adf091433dc711eb10628f3ef2fff700d4aa55a5704413d4d7d42037f82479bb38668cfc7eb4ee73110fb1f502a39fc7de055acdffee1626e79c69684a99a501c4639f71635112e5921d2187a1e2f760d19bd53a6e915d5f76076adfd89f156343820b51069f276550a00feb135e34416a18ab2049b905e3cdc7ce2293ec20fe159", 0xbf}], 0x6, 0x0, 0x0, 0x41}, {&(0x7f00000003c0)=@in6={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000640)="3220593f5379c9f9488eb47036724fe1c7252d7832b62064a5534fb76671b113e911af8598721dbe2a96212eb48f2fa3cd5673cda72fa083fe794b9164a340b743e0d30d71011bde35311f", 0x4b}, {&(0x7f00000006c0)="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", 0xfe}, {&(0x7f00000007c0)="22f6487ccdde431f306df0898b9c11bc8a7169766398e63a741cad8e68f853b2033619e8d81b468bf860adba8070f3c379b0824c48d3e9b0ef766ed7e9400a5c10d1a79767c5d5820f02113b27ecdba1cc7c1fd8bccb8b87c7840c7484f894b979d6d4d4c8cce1e56bf9441b1a07905e58f0d7bcbaf8aeb390b64cdec9139aaf6d229853f60c3f567a27e8629f04170b3f600ec1b212621f948d7beae4b9eebe8c787ee7bb7e1cbaf2594a92825b514801a202b674a696971e57d3e0200738efbe603621a292c3ecd5013b7c72679d2498e581ffaa1a5231f7c52ba7c045045dd2492bb0454069060487407bcaccb190", 0xf0}, {&(0x7f0000000400)="f46663e68747100dc25a41835ffb263734839a78de05cdc6e2031a7f4822434f87d046a73d68be2161c0fdebf284b09fe2a9", 0x32}, {&(0x7f00000008c0)="e0c86c64f5d9aa669c14e69f804b3904b58e82db6e0f9f9790cf244ff377746dae68c1003c8d80c1a0f1a5b40968e0b3b84021e9472650c387800c933b378c85e159da09ab96b017c3e4", 0x4a}], 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="20000000000000008400000002000000a50000808120ff0f0000", @ANYRES32=0x0, @ANYBLOB="20000000000000008400000002000000010008000400000006000000", @ANYRES32=r5], 0x40, 0x10}, {&(0x7f0000000a80)=@in6={0xa, 0x4e20, 0x9d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000b00)="47761b90b7c977cf7b8b73acba02bd8a8e9cb442df1d678134a46c9c205609d326a452ddcd2df136babef04901325f3984b356e5bc757ff2e1f1a2abd03c8b60de888196a2c820722026b471df489c3e32a79b4676dd31793510dc3830a138371cfcd524416cfe41aaadb483430428417f53b4d97e38edf35fcb633a7da3b7e86d72934c881120a8caad8559e3da35f1f7702c217200a28ee74301fe49b44eddccf7dcc5d5f1446ca3b74b4094d4008939b04043c116f6d0cf7fbd7efb59a1", 0xbf}, {&(0x7f0000000bc0)="92d2b7cf4a4b3febdb4281f9b89df9218af9b88c385b0c77ba0b2fb8ab3735990960e1fbb73fe8510c34fb08b374347b408c72f93c458c03c8", 0x39}], 0x2, &(0x7f0000000c40)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x9}}, @init={0x18, 0x84, 0x0, {0x100, 0xa, 0x5, 0x5384}}], 0x98, 0x20000010}], 0x3, 0x8000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 50.116284561s ago: executing program 6 (id=2171): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c, 0x0, 0x2}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r3], 0x400000080000001, 0x1, 0xa}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000840)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000080)={r8, r8, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="38000000000000000000000d6a6a000000000085000000bc009500000000000000000086ee1cb287ccf53d6b19b04fbe55da49dba17258873e2dbada6afd942e41550da96ee9f503576640b9f56f5e1f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000200)={r1, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[r0, r1, r3, r8, r9, 0x0, r12], &(0x7f0000000180)=[0x80, 0x3, 0x3], 0x7}) 49.976817889s ago: executing program 6 (id=2172): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x50, 0x0, &(0x7f0000000180)=0x2b) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x193) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000140)={0x1, 0x6}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rmdir(&(0x7f00000001c0)='./file1/file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 49.916801956s ago: executing program 6 (id=2173): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "7f33949373783174881a60a2e072585be4b27ea7"}, 0x15, 0x2) chdir(&(0x7f0000000080)='./file1\x00') (async) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 49.806905991s ago: executing program 6 (id=2174): syz_emit_ethernet(0x106, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x25, 0x4, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0x34, 0xf7, 0x1, 0x3, [{@empty, 0x2}, {@multicast2, 0xffffffff}, {@loopback, 0xc8}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x442}, {@local, 0x6}]}, @timestamp_prespec={0x44, 0x4c, 0xa, 0x3, 0xd, [{@multicast2, 0xa}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x7}, {@loopback, 0x2}, {@private=0xa010101, 0x1}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@remote, 0x2569}, {@private=0xa010100, 0xd9}, {@private=0xa010101, 0x8}]}]}}, @redirect={0x3, 0x4, 0x0, @local, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) 28.492962953s ago: executing program 35 (id=2174): syz_emit_ethernet(0x106, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x25, 0x4, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0x34, 0xf7, 0x1, 0x3, [{@empty, 0x2}, {@multicast2, 0xffffffff}, {@loopback, 0xc8}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x442}, {@local, 0x6}]}, @timestamp_prespec={0x44, 0x4c, 0xa, 0x3, 0xd, [{@multicast2, 0xa}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x7}, {@loopback, 0x2}, {@private=0xa010101, 0x1}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@remote, 0x2569}, {@private=0xa010100, 0xd9}, {@private=0xa010101, 0x8}]}]}}, @redirect={0x3, 0x4, 0x0, @local, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) 19.918831034s ago: executing program 2 (id=2395): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xfa7}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000440)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x2, 0x5, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000280)=[0x0], &(0x7f0000000580)=[{}, {}, {}, {}], &(0x7f0000000300)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x1, 0x0, r5}) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x82) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') readlinkat(r7, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/61, 0x3d) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x88800, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r8, 0x111, 0x3, 0x1, 0x4) getpeername(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, 0x0, 0x17) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) madvise(&(0x7f00001d6000/0x1000)=nil, 0x1000, 0x17) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa00, &(0x7f0000000080)={0x80, 0x100085, 0x20000}, 0x20) 19.005909063s ago: executing program 2 (id=2403): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x810c5a, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=virtio,posixacl']) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup(r1) write$char_usb(r2, &(0x7f00000000c0)="f3ce", 0x4000) recvfrom(r2, &(0x7f00000002c0)=""/89, 0x59, 0x10022, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0xc, 0x20008}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x4a}, 0x28) 18.870070766s ago: executing program 2 (id=2404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x410200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x20040004) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x6, 0xa, {{0x1f, 0x4, 0x1, 0x10, 0x7c, 0x67, 0x0, 0x9, 0x4, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x59, 0x3, [{0x5, 0x5, 'Wcl'}, {0x6, 0x11, "c7682511e4fca65a171282719d9edc"}, {0x2, 0x10, "957e69581f283cceae812676987e"}, {0x0, 0xe, "5bc1add6cd3da532fd8bbd5f"}, {0x6, 0xb, "d480b689519bc92ecb"}, {0x5, 0xc, "5832f083e7c45ca9c3e1"}, {0x7, 0x8, "3473a0fcc944"}]}, @timestamp={0x44, 0xc, 0x88, 0x0, 0x0, [0xc50, 0xd]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x40400c0}, 0x4000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r1, 0x8, 0x800, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x4c010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r6, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6a}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008050) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r7, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4044080) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000980)=0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x210000, 0x0) r9 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r9, &(0x7f0000000b40)="b927e8db3270d047c21dcf463106a782db9e8fa5748d414a14f0b569562677bdb3c0e5598b1441feb1aff78b0689984dab132d55538f0c234eed31e5ddd32fbc6e00d0f72a1413f45cb655060ecd53b5d98445ad6ceb5cdb9f677a2ffc254c7c5109831ca9f688298699eecbf447ea29d92a60a20d4e1d2a49c6c24a1df2a87f08de404b7961c8b37bb7e0809af3b737ebb3513b220a93db887f5e1e66935ef30948b1b7615d73496938fb3e38d674de6bc87e057b9ecb1b3a2a3e68ec45b32fbd8b85", 0xc3, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000c40)={0x5}, 0x4) write$binfmt_script(r9, &(0x7f0000000c80)={'#! ', './file0', [{}, {0x20, 'sit0\x00'}, {0x20, '}}'}], 0xa, "892ac13e96e1930074e1c1e15816396e75f34e1eec87912a15754f7c953ba6cc4e903b5ab1bb712d145a9365e79e2c4b7856f620395301de3e4257ef21f671ba3911b4f8351e6e10f912c65028ea210b335fe8f1b356e2b62b61171a146dd6472bdcdb11cccea0d1854a02e8c1124700224874e0b3c24901fc9337014c3751fece58643b0dd258013281824aaefb25"}, 0xa4) setsockopt$inet6_int(r9, 0x29, 0xd9, &(0x7f0000000d40)=0x9, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r10, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x50, r11, 0xf00, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x1c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x4) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, r13, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x80) 18.769307968s ago: executing program 2 (id=2407): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x50) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000200)='./file0\x00', 0x0) rename(&(0x7f00000003c0)='./file1/file0\x00', &(0x7f0000000400)='./bus\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xfffb, 0x8180, 0x0, 0x3}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xfffb, 0x8180, 0x0, 0x3, 0x0, 0x0}) process_vm_readv(r1, &(0x7f0000001600)=[{&(0x7f0000000140)=""/255, 0xff}, {&(0x7f0000001580)=""/96, 0x60}, {&(0x7f00000002c0)=""/23, 0x17}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000240)=""/56, 0x38}], 0x5, &(0x7f0000001540)=[{&(0x7f0000001680)=""/164, 0xa4}, {&(0x7f0000000480)=""/165, 0xa5}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x3, 0x0) ioperm(0x0, 0xe4d, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r2, 0x2, &(0x7f0000000000)=[&(0x7f0000bdc000/0x2000)=nil, &(0x7f0000bdd000/0x2000)=nil], &(0x7f0000000040)=[0x5, 0x921b, 0xb9, 0x8000], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) (async) move_pages(r2, 0x2, &(0x7f0000000000)=[&(0x7f0000bdc000/0x2000)=nil, &(0x7f0000bdd000/0x2000)=nil], &(0x7f0000000040)=[0x5, 0x921b, 0xb9, 0x8000], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18.697493584s ago: executing program 2 (id=2408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x4) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)={"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"}) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1ffe) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in6=@remote, @in6=@loopback}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x6}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xad}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x60, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0]}}]}, 0x158}}, 0x0) (async) sendmsg$nl_route(r3, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000040)={0x1, 0x6}, 0x2) (async) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x1c9902) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c00210080000000c8"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000600)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.378926278s ago: executing program 2 (id=2416): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000005400010026bdf0010000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000200e00000010000000000f1ff0000a0845900da540dad8db054bf2d0008000000"], 0x38}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@getpolicy={0x290, 0x15, 0x100, 0x70bd2b, 0x25dfdbfe, {{@in6=@mcast1, @in=@multicast2, 0x4e24, 0xa, 0x4e24, 0x0, 0x2, 0x80, 0xc0, 0x2c, 0x0, r0}, 0x6e6bbe, 0x2}, [@algo_auth={0xf8, 0x1, {{'sha384-arm64\x00'}, 0x580, "5c699408a4ed6b84ef84eae53c24ba764c7fac030879b0aa8c825000155bb51838901f640bc26f30400a8affbd45c5378ed4a87445348ca510a17e664fc74c1f44d7b0cbb0f178ff53e8fd78f2c6cd0b11ab69dbd2f4e910d7c60fba81e4a157dc68df94582046f46b7f4b9fe7129befe419baa8bbd5b318e834dcc50e39a74a836ce4b4cb2266f362338e3724f06dc78a72f58fc62a764fe0c099bf9a058488cdb357b35fd70d621456fdb7cdb38c03"}}, @migrate={0x9c, 0x11, [{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@private=0xa010102, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x3c, 0x0, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@private2, 0x3c, 0x1, 0x0, 0x3503, 0x2, 0xa}]}, @policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x4, 0x4e20, 0x1, 0xa, 0x20, 0x0, 0x30, r2, r4}, {0xb4, 0x438, 0x8, 0x0, 0x9, 0x0, 0x8, 0x2e}, {0xd9e, 0xff, 0x8f, 0x4}, 0x1, 0x6e6bb7, 0x0, 0x1, 0x1, 0x2}}]}, 0x290}, 0x1, 0x0, 0x0, 0x4081}, 0x4080) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 18.321448448s ago: executing program 36 (id=2416): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000005400010026bdf0010000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000200e00000010000000000f1ff0000a0845900da540dad8db054bf2d0008000000"], 0x38}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@getpolicy={0x290, 0x15, 0x100, 0x70bd2b, 0x25dfdbfe, {{@in6=@mcast1, @in=@multicast2, 0x4e24, 0xa, 0x4e24, 0x0, 0x2, 0x80, 0xc0, 0x2c, 0x0, r0}, 0x6e6bbe, 0x2}, [@algo_auth={0xf8, 0x1, {{'sha384-arm64\x00'}, 0x580, "5c699408a4ed6b84ef84eae53c24ba764c7fac030879b0aa8c825000155bb51838901f640bc26f30400a8affbd45c5378ed4a87445348ca510a17e664fc74c1f44d7b0cbb0f178ff53e8fd78f2c6cd0b11ab69dbd2f4e910d7c60fba81e4a157dc68df94582046f46b7f4b9fe7129befe419baa8bbd5b318e834dcc50e39a74a836ce4b4cb2266f362338e3724f06dc78a72f58fc62a764fe0c099bf9a058488cdb357b35fd70d621456fdb7cdb38c03"}}, @migrate={0x9c, 0x11, [{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@private=0xa010102, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x3c, 0x0, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@private2, 0x3c, 0x1, 0x0, 0x3503, 0x2, 0xa}]}, @policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x4, 0x4e20, 0x1, 0xa, 0x20, 0x0, 0x30, r2, r4}, {0xb4, 0x438, 0x8, 0x0, 0x9, 0x0, 0x8, 0x2e}, {0xd9e, 0xff, 0x8f, 0x4}, 0x1, 0x6e6bb7, 0x0, 0x1, 0x1, 0x2}}]}, 0x290}, 0x1, 0x0, 0x0, 0x4081}, 0x4080) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.10202728s ago: executing program 5 (id=2700): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @private}, &(0x7f00000000c0)=0x80, 0x80000) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000140)={0x1}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltaction={0x34, 0x31, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0) 2.050302099s ago: executing program 5 (id=2701): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2c}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000440)={'veth1_to_batadv\x00', &(0x7f0000000240)=@ethtool_modinfo={0x42, 0x96, 0x3ff}}) 2.049620093s ago: executing program 5 (id=2702): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x14b6deac033214c2) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x0, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xf, 0x6}, {0x1, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}, @TCA_RATE={0x6, 0x5, {0x80, 0x8}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd1, 0x7e, 0x7, 0x9, 0x0, 0x1, 0x31b, 0x3}}, {0xa, 0x2, [0x9, 0x443, 0x6]}}]}]}, 0x6c}}, 0x4004001) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xa, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.928207671s ago: executing program 7 (id=2704): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x0, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x47, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0xf000, 0xeeee8000, 0x0, 0x7, 0x3, 0xf, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x9, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x4, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x4, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x209}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000003e08"]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) r7 = syz_io_uring_setup(0x24fc, &(0x7f0000000180)={0x0, 0x6386, 0x10100, 0x2, 0xa8}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r11, 0x80811501, &(0x7f00000003c0)={0x80}) close_range(r3, 0xffffffffffffffff, 0x0) 1.879943663s ago: executing program 5 (id=2705): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/4096) syz_emit_vhci(&(0x7f0000001040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xca}, "3eb29fcc9aa63ab019f92ea71a53a89e421158e8f234465d7343d2a3192d6e3bdfbcc998ed052bbb95f9fc84e69bfa7b62b7c81e9ec32e71b8b7c1985313cf8bdf28ef5b72414bd5fcb0d35cc704dba8dab6ddf3e1c330a1ef02b1675e5eeed71b093b921b15615a98fa980d1a3aa1286a829119a2359d3e6ea5eb3245c2b013e3bdfdbb69afed9cbc9d816aa735eb622bd50295560bbec363827f526832f4a2119275e78d7e0b038c7106fdcd3a3340a9a871eed0f4232456ea38d5afcb06012bc619530959e4e3502e"}, 0xce) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001140)={0x0, "b8548191337f79348580847e1e60e7ef"}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000002140)={r3, "f02a750a731895508a2490d3aa6a9017"}) syz_emit_vhci(&(0x7f0000003140)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) io_uring_enter(r2, 0x7732, 0xc503, 0x2d, &(0x7f0000003180)={[0x5]}, 0x8) read(r1, &(0x7f00000031c0)=""/60, 0x3c) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000003240), r2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000003380)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003340)={&(0x7f0000003280)={0xa8, r4, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x85}, 0x24000810) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000033c0)={"92d36e98b9727352075a3c4c5c2bda09", 0x0, 0x0, {0x17a5, 0x8}, {0x2d51, 0x1000}, 0x7fff, [0x8, 0x5, 0x7df3, 0xd6, 0x7ff, 0xe, 0x40, 0xffffffffffffffff, 0x200, 0x4, 0x200, 0x9, 0x1, 0x200, 0x7, 0x6]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000034c0)={{r0}, r5, 0x10, @unused=[0x9, 0xc0, 0xffffffffffffff60, 0x7fffffffffffffff], @subvolid=0x1}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000004700)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000046c0)={&(0x7f0000004500)={0x198, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x94a6}, {0x8, 0xb, 0xfffffffc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe}, {0x6, 0x16, 0xe2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x7fffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xf8c3}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x200}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}, {0x5}, {0x6, 0x11, 0xfffa}, {0x8}}]}, 0x198}, 0x1, 0x0, 0x0, 0x10000018}, 0x800) r6 = getpgid(0xffffffffffffffff) read$FUSE(r0, &(0x7f0000004740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) rt_tgsigqueueinfo(r6, r7, 0x3c, &(0x7f0000006780)={0x0, 0x1}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000006800)={0x0, 0x6, 0xfc, 0x5, 0xc2c0, 0x3, 0x9, 0x0, 0x101, 0xc24, 0x6, 0x7}) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000006980)={&(0x7f00000068c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000006940)={&(0x7f0000006900)={0x2c, 0x1402, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x200400c5) r8 = dup3(r1, r2, 0x0) pidfd_send_signal(r2, 0x11, &(0x7f00000069c0)={0x30, 0x10001, 0xfffffffc}, 0x0) waitid$P_PIDFD(0x3, r8, &(0x7f0000006a40), 0x1, &(0x7f0000006ac0)) bind$802154_raw(r0, &(0x7f0000006b80)={0x24, @none={0x0, 0x1}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r9, &(0x7f0000006d40)={&(0x7f0000006bc0)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14, &(0x7f0000006d00)={&(0x7f0000006c00)="467668f27fb6910fdcda416c50871135300aa8960dc0c2929f89a9a621f9f9fd72a91f53ba855072bbc7df551f74025d8a4b484c50f8fad3d7e8ca075c332b70ec2c86c138a8064f83e01d9544186e836bcd4c72456b783db448e30649fdd1fd96c2158e24818d5c369f194ff8ddd2cdb56b986e0fa7f1536fc24362688a8b5dd41984d01640210a3eb2b6ebb034745d1585454915f1fd5fe000c68fc46108aba0f0836cbbda7e1a102bc7b500b1cbc54882fcdc5463d18e1dd1bf601203b9adcc627dec4f4dba9b0fb79ad6a74fbb1612017e2e68fb37da1b75e1eb308f61", 0xdf}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000006d80)) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r10, 0x84, 0x74, &(0x7f0000006dc0), &(0x7f0000006e00)) 1.680193331s ago: executing program 8 (id=2706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x189281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x8, 0x0, [{0xac0, 0x0, 0x80000000}, {0x8f1, 0x0, 0x7}, {0x0, 0x0, 0x5}, {0x9fc, 0x0, 0x5}, {0xa7f, 0x0, 0x68}, {0x9ac, 0x0, 0x2}, {0x9a7, 0x0, 0x400}, {0x870, 0x0, 0x6}]}) (async, rerun: 64) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="66b95502000066b80600000066ba000000000f300fc72c66b8020000000f23c00f21f86635010006000f23f8f26d660f3a229f00015e660fc62f0b66b9950900000f3266b8000000800f23d80f21f86635c00000300f23f866b8d70200000f23d00f21f866352000000e0f23f8660f73d340", 0x72}], 0x1, 0x10, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0xe, 0xa9, 0x0, 0x6, 0x8, 0x6, 0x7, 0x6, 0x23, 0xd, 0x8, 0x0, 0xfffffff9, 0xffffffff, 0x2, 0x1e, 0x4, 0x3, '\x00', 0x9, 0x1c0000000000000}) (async) r3 = syz_open_dev$audion(&(0x7f00000001c0), 0x6, 0x381000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$xdp(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x2c, 0x6, r4, 0x21}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="2aa89e3134e2aadc3cba68bf9e5247e63282976931f5ab2effb7bd440187819bbcc2daf44608527cb3fea1eaf90ef2d3cda2ca670933269883161dc8853fe6eac1502b16a543db39f1893963db01c43933b50a6d6d8cfdbe628a84df861a2a041eef308aab2f63921d6794802e481daf68e537ff223435e30918dcd13c9de22b21dcb051249aa21f99017189c2396c8be996e2834cd786ef2ea0503c602abff91f109f207cbc9fd3ca337f8db92304", 0xaf}], 0x1}, 0x9) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.628600496s ago: executing program 7 (id=2707): unshare(0x40000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[], 0x14}}, 0x40000) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000a00)) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) write(r5, &(0x7f0000000180)="01", 0x1) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r6) setregid(0x0, 0x0) statx(r6, &(0x7f0000006e80)='./file0\x00', 0x6000, 0x0, &(0x7f0000006ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setresgid(0xee00, r9, r9) syz_fuse_handle_req(r2, &(0x7f0000004580)="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", 0x2000, &(0x7f0000007100)={&(0x7f0000006580)={0x50, 0x0, 0xfffffffffffffffa, {0x7, 0x2b, 0x4, 0x80040, 0x6, 0x3, 0x2fbe, 0x6, 0x0, 0x0, 0x80, 0xfffffffa}}, &(0x7f0000000800)={0x18, 0x0, 0x9}, &(0x7f0000003b80)={0x18, 0xffffffffffffffda, 0x8, {0x6}}, &(0x7f0000006600)={0x18, 0x0, 0xfffffffffffffffb, {0xf}}, &(0x7f0000006640)={0x18, 0xfffffffffffffff5, 0x80000001, {0x8}}, &(0x7f0000006680)={0x28, 0x0, 0x0, {{0x200, 0x8}}}, &(0x7f00000066c0)={0x60, 0x0, 0xe5, {{0xc00, 0x9, 0xffffffffffffffff, 0x7631, 0x1, 0x3, 0x7, 0x3}}}, &(0x7f0000006740)={0x18, 0x0, 0x6, {0x9}}, &(0x7f0000006780)={0x18, 0x0, 0x140000, {':.(%}$[\x00'}}, &(0x7f00000067c0)={0x20, 0xa8e2eccfc2255b9e, 0x5, {0x0, 0xa}}, &(0x7f0000006800)={0x78, 0xfffffffffffffff5, 0x7, {0x8, 0x0, 0x0, {0x1, 0x6, 0x2, 0x7, 0x7, 0x4, 0x1, 0x1000, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3, 0x7}}}, &(0x7f0000006940)={0x90, 0x0, 0x3, {0x6, 0x2, 0x401, 0x5, 0x4757, 0x7f4, {0x4, 0x4, 0x8, 0x1283, 0x21ca, 0x100000000, 0xe, 0x28, 0x5, 0x8000, 0x30, 0x0, 0x0, 0x3, 0x8}}}, &(0x7f0000006a00)={0x80, 0xffffffffffffffda, 0xee3, [{0x1, 0x56f6, 0x0, 0x9}, {0x6, 0x3, 0x3, 0x7, '.&\''}, {0x3, 0x0, 0x0, 0x3}, {0x6, 0x9, 0x2, 0x6, '\'!'}]}, &(0x7f0000006c00)={0xb8, 0xfffffffffffffff5, 0x7, [{{0x3, 0x2, 0x4, 0xa, 0x5, 0x0, {0x1, 0x9, 0x4, 0x2, 0x80, 0x2, 0x1, 0x5, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x9, 0x9}}, {0x4, 0x6, 0x9, 0x7, '/dev/kvm\x00'}}]}, &(0x7f0000006d80)={0xa0, 0x0, 0x0, {{0x1, 0x1, 0xc, 0xff, 0x4, 0xd, {0x6, 0x51, 0xec1, 0x2, 0x5, 0xa, 0x24, 0x8, 0x9, 0x2000, 0x2, 0x0, 0x0, 0x7, 0x6}}, {0x0, 0x1b}}}, &(0x7f0000006e40)={0x20, 0xffffffffffffffda, 0x6, {0x3, 0x0, 0x371, 0x40}}, &(0x7f0000006fc0)={0x130, 0x0, 0x800, {0x6, 0x5, 0x0, '\x00', {0x2, 0x100, 0x9, 0x1, r7, r9, 0x1000, '\x00', 0x7, 0x213, 0x4ee1, 0xffffffffffff9357, {0x8, 0x6}, {0x5, 0x4}, {0x80, 0xbfa}, {0x8000000000000000, 0x5}, 0xef87, 0x3, 0x8, 0x200016db}}}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000004500)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000043c0)=[{{&(0x7f0000000400)=@caif, 0x80, &(0x7f0000000780)=[{&(0x7f0000006a80)=""/207, 0xcf}, {&(0x7f0000000580)=""/40, 0x28}, {&(0x7f00000005c0)=""/180, 0xb4}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000000680)=""/205, 0xcd}], 0x6, &(0x7f0000002b80)=""/4096, 0x1000}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000800)}, 0x6e8}, {{&(0x7f0000000880)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000000980)=""/58, 0x3a}, {&(0x7f0000000a40)=""/202, 0xca}, {&(0x7f0000003b80)}, {&(0x7f0000003bc0)=""/170, 0xaa}, {&(0x7f0000003c80)=""/37, 0x25}, {&(0x7f0000003cc0)=""/188, 0xbc}, {&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f0000003dc0)=""/197, 0xc5}], 0x8, &(0x7f0000003f40)=""/214, 0xd6}, 0x7}, {{&(0x7f0000004040), 0x80, &(0x7f0000004140)=[{&(0x7f00000040c0)=""/92, 0x5c}], 0x1, &(0x7f0000004180)=""/230, 0xe6}, 0x3}, {{&(0x7f0000004280)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004300)=""/126, 0x7e}], 0x1}, 0x8}], 0x5, 0x20, &(0x7f0000004540)={r10, r11+10000000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x34117e, 0x44) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) r12 = syz_open_dev$audion(&(0x7f0000000080), 0x8001, 0x2880) preadv(r12, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/155, 0x9b}, {&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/228, 0xe4}], 0x4, 0x9, 0x4) 1.579017953s ago: executing program 8 (id=2710): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(r1, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20048080) ptrace(0x10, r2) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x1c, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) ioctl$BLKROTATIONAL(r8, 0x127e, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x0, 0x10000, 0x1000, &(0x7f000021b000/0x1000)=nil}) 1.497898135s ago: executing program 8 (id=2712): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000a00)=0x1, 0x4) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @none, 0x741}, 0xe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x34]}}]}) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x34]}}]}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080), 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x7, 0x98179eaef6797421) (async) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x7, 0x98179eaef6797421) 1.497397708s ago: executing program 7 (id=2713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="66b9800000c00f326635004000000f300f00d636808a0d0001ba4300b80b00ef66b88c5000000f23d00f21f866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x4c}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x4000, 0x1000}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x2, 'sed\x00', 0x27, 0x8, 0x2c}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x4e22, 0x1, 0xa, 0x7ffffffe, 0xfb}}, 0x44) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.136388806s ago: executing program 7 (id=2715): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) (async) setpgid(0x0, r2) ioprio_get$pid(0x0, r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r4 = accept$alg(r3, 0x0, 0x0) r5 = eventfd(0x5) fcntl$dupfd(r4, 0x0, r5) (async) r6 = fcntl$dupfd(r4, 0x0, r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000140)) (async) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000140)) r7 = semget$private(0x0, 0x6, 0x3b1) setuid(0xee00) semop(r7, &(0x7f00000000c0)=[{}], 0x1) (async) semop(r7, &(0x7f00000000c0)=[{}], 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000180)={0x401, 0x0, 0x9ab1, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r8}, 0x18) preadv(r6, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f00000004c0)=""/161, 0xa1}, {&(0x7f0000000580)=""/121, 0x79}, {&(0x7f0000000600)=""/104, 0x68}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/199, 0xc7}, {&(0x7f0000000400)=""/1, 0x1}], 0x7, 0xfffffbff, 0x2) socket(0x8000000010, 0x2, 0x0) (async) r9 = socket(0x8000000010, 0x2, 0x0) write(r9, &(0x7f00000002c0)="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", 0xfc) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000040), 0x1001) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x22, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0}) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x22, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0}) 1.018740854s ago: executing program 5 (id=2716): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r2 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000180)=""/162) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB='\"S\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x20000090) 1.018298956s ago: executing program 7 (id=2717): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x30, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x10, 0x4, 0x0, 0x1, [@nested={0x4, 0x65}, @typed={0x8, 0x89, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) (async) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r5) (async) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000000603"], 0x5c}}, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x4, 0x4, 0x3}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000140)="c049caf228604b92bb38fe6ce5881793f71b185b756f9c0f28ddacd6de3c59f63d08ff0785c8c0475707cdc2e17773ab1daa07b5dee64375b4e0", 0x3a}, {&(0x7f00000005c0)="4be1b857d693caaeedd362ce94171222d7f503bde37313addca1d81bc434f4b643ad57a4c327cf1f165211705b38c5a3c612ea31967d5ee2e07ce15adb17fe93c3bb045e92d6b111388c8981c7eb1ecf264ae411b21165e4b814bfa1f6a408ffa5a4035177a4e267aeafc0a4213e31fc5781447d47ddcb976d7cd773013631c82b6bc69c9126", 0x86}, {&(0x7f0000000440)="d3ee7ad596f1cb12aaf3cc53f3abaa9d1549aa0d5edc1c01f2f0c15ed62b47b1ed0c27c9522076d4901782c23bd5129a23601483ccd12d6c652451e6ca9b9abe4834136a63f365e137924737", 0x4c}, {&(0x7f0000000240)}, {&(0x7f0000000680)="1dcbc667ef05e2e26c05081f773bcedb0492e725157b57682cd9f7775951152ebf0bc81f1e0f7676fa09237cd1750a0113c548ae42e8ddfaf2ee488a767383cacd9d3a3317e7e5673ec848c86ff6fa3da3863d3deb7827b6cc986038fd2f71d3dd404a4b68a3fe46741e036f1ad488555e065aa6eba6e7b6d46e4508db1f68fbfd2f7eaf1e638e705b2876fd66f0705edd1e410efb", 0x95}], 0x5, &(0x7f00000007c0)=[{0xf0, 0x113, 0xb94, "9ac99f8bfd066ee8b0bb2384661ab24b69c44893d68874a3bed1eb1261e52f6ed7f9da3e6279077626f3575b4468b6154f030c56d25a637cdc14201e801e21d94e87828391fbb126866ea22f5afb7ff4df674738601938ecb13d669bdc7e0b5c66b4cbc9d5f0ead1f084ab5ca620ab7a92470f832dfb2426fc27a7532c884db2922965f8b822e44982c95a083c9b12ec148a5705a01d1560f1ded8965ebb4aa8d0239e44bce170ebc2053e02cc0a20bc2e7add835723bd380b06221b4f5d1c79446e64becca0e501bd76c8daab022bc3db4e1bf07bd3e1565d4a"}, {0x50, 0x112, 0x2, "f4f6ae8137901541a18614674b53ce3c23d907c88c221212f851a9277f23042e9f1730c4badfb0e33655ec85fb35085ce84e649215ff9c64ae"}, {0x40, 0x10c, 0x7, "4752b3fe7fb455b8bb0b8d4fc85dbf8be6954d004d685cb9535484fab4c1122b9db8415cb21a785b9305ca605d931fa3"}, {0x10, 0x112, 0x5}, {0x48, 0x6, 0x0, "ce491e065a801ebd809a87e73a2fb8ba823cad6d82096d595843d613094f70a64dfe2242a9ab28348d357e6de2deded40d"}, {0x1010, 0x115, 0xfffffff4, "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"}, {0x78, 0x10f, 0x2, "c395a75300600df2bd28c2031d8dd6fcffe8606702352de1b270ee7b628516d605b372a85054201e199c469cf56aed2829df23d7111eb9fcdb7fe73afeb5f05982c68f3d2fd4e00dd9f6b7c94249536e70be8df77e262cdaff6e6865193eb5babf"}, {0x18, 0x116, 0x4, "b59aaf9f02f21a"}, {0x70, 0x112, 0x9e, "8e659b9f597e576cf3efba6823d868a1c0e75728689eb61d95f9399654d1ea4427ecbefee192db212820a2753135d7c6c14a31c48a34d20c0901208c59d66ee84012dfaa3b1ab19215d2f37e63018e1d6ef961bd637a472ca909dc024be1"}, {0xb8, 0x117, 0x4, "a52bdbea6123977a8fab034832d834f39feb6c40c7b0e21dafeecb3faae257f50b80758af4b95e79ff26ddc77a4ee776869bc346882f7454f537521a2f787fe625aabf95f33dd6ca32620c8988d004c096aa809db07e8986ff9a1a0ecaf6dd97685bae787ce280e16194e40a020c5edbd76aafa28d31a9411be57d9e31603bf556ae98ff6bb05e0eb4f9888c1dcf726436d553e708d1b932fbf78ae37b4bf902c0c2725ff7341007"}], 0x13a0}, 0x20000010) ioctl$int_out(r4, 0x5460, 0x0) (async) ioctl$int_out(r4, 0x5460, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0), &(0x7f0000000280)) (async) r7 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0x0) dup3(r7, r1, 0x80000) 1.017977238s ago: executing program 5 (id=2718): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create(0x9) r2 = dup2(r1, r1) r3 = epoll_create1(0x80000) r4 = fcntl$dupfd(r2, 0x406, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000001480)={0x4000200c}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x10}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000080)={0x20000000}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902"], 0x0) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000000c0)=0x4, 0x4) 769.623936ms ago: executing program 1 (id=2719): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0000002b00010000000000ffdbdf25aa0000800c0000000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bd2fefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe940000"], 0xbc}], 0x1}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r2 = dup2(r1, r1) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000280)={0x0, 0x1, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef49462c88b6c7451f8e5"}) (async, rerun: 32) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) (async, rerun: 32) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={0x38c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x300}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff25}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f98}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "485536cc8d8fc1399f360c96d58609d9613a6b1dd87a9d"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "bb92af106e126c86176f2677217ebacb52eeaf2a3faa76"}}, @TIPC_NLA_NODE_ID={0x94, 0x3, "9c04b5069d43364bd98a4f596620d95fd13960c208ac2cb1eae08fa108af88d4970cd27fb5a0597687f9643759ce5c9a6bf8bcd53888ec7d2a8c1adcdf36193ae4a653d0377f7165faa05e0f4ee98b7ffb77bcc69abed26dc323248550097ccb0c26c3c812783b214e134b46a34395e9498b06bb633e389e41f9b201188cf41c62d528d237f7bfe263a8ff5b4e3827ee"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff634}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x53b, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd1c}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @private2, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x850}, 0x4000800) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000840)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000280)={{0x2, 0x4, 0x4, 0x8b600000, 'syz1\x00', 0x1}, 0x6, 0x10, 0x9, r3, 0x5, 0x10, 'syz1\x00', &(0x7f0000000180)=['\x01^-\x02\x00', '),}\x00', '\x0f{\x00', '\x00', '&-![:@@\':\x00'], 0x17}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000980)={0x0, 'ip6gretap0\x00', {0x2}, 0x7b9}) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) (async, rerun: 32) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) (rerun: 32) 632.910874ms ago: executing program 1 (id=2720): timer_create(0x0, 0x0, &(0x7f0000000100)) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_vlan\x00', 0x0}) unshare(0x62040200) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x1b}, './file1\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) timer_create(0x0, 0x0, &(0x7f0000000100)) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_vlan\x00'}) (async) unshare(0x62040200) (async) gettid() (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x1b}, './file1\x00'}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) (async) 632.666865ms ago: executing program 8 (id=2721): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) 436.781253ms ago: executing program 8 (id=2722): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'lc\x00', 0x20, 0x8, 0x5b}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d6f110fccb2774e8e65033c87b2ad2a811591d0a7c564dda75d2e5e7bbebcff9fb2e5df4c661d2192dc2c925de8f8656b66f20714c18f0b890581727e34ebe579ccf81fd11afd0c065122c3310e483d49be33", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffff0000000000000000000100000000000000ff07000000000000000000000000000002000000050000000200000000000000ca00483bede1ae00000000000000000000000000800700000000000000050000000000000006000000000000000500000003000000060000000040000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="7f0000000a00000000000000000000000000000017b10000000000000700000005000000757309725f696400"], 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x35) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8008840}, 0x20008080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65401}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_kvm_setup_syzos_vm$x86(r8, &(0x7f00009dd000/0x400000)=nil) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0xe000}) 434.240863ms ago: executing program 1 (id=2723): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) (async) io_setup(0x8, &(0x7f00000002c0)) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x1d}, 0xe, 0x0, 0x0, 0x3}, 0x20) (async) syz_emit_ethernet(0x8e, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700582c0020010000000000000000000000000001ff0200000000000000000000000000013a00000000000000020090780000000468cd85b50007840020010000000000000000009d00000002fe8000000000000000000000000000bbaad25a7f302d4579b298392ccf95e1e48f10658b1a6c5d1902fd13d9ccbf356da0ddb4f15abe32f289"], 0x0) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) (async) listen(r1, 0x0) (async) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) (async) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000600)="ca391cb1e0881b450a25", 0xa) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0xc, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x200000000000000f}}, 0x40) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'macvlan1\x00', 0x0}) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x7) (async) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000000c0)=0xf9) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001d00110927bd7000fcdbdf2507000000", @ANYRES32=r9, @ANYBLOB="000016eb643fba010926aaaaaa1600005c46df0b768e65d589a8c2073e53"], 0x5b}, 0x1, 0x0, 0x0, 0xcc082}, 0x4044800) (async) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) 380.348101ms ago: executing program 1 (id=2724): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f00000001c0)=0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3, 0x800}) (async) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) 330.264572ms ago: executing program 1 (id=2725): r0 = io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x841, &(0x7f00000000c0)={0x0, 0xb35d, 0x200, 0x3, 0x186, 0x0, r0}) io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) (async) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) io_uring_setup(0x841, &(0x7f00000000c0)={0x0, 0xb35d, 0x200, 0x3, 0x186, 0x0, r0}) (async) 328.903506ms ago: executing program 8 (id=2726): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001600)=ANY=[@ANYBLOB="a4000000030705020000000000000000030000060c00024000040000000000002400078008000140000000070800014000000004080002400000007f08000140ffff00010900010073797a31000000003400078008000140000000450800024000000008080002400000ffff080001947d000001080001400000000d08000240ffffff110c000640000000c65dab3d0186399c4000000000000000090800054000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000004800010003000000040000000a10806e"], 0x14}, 0x1, 0x0, 0x0, 0x4044014}, 0x20040888) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x5, 0x0, @tid=r3}, &(0x7f00000015c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000013c0)) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x37, 0x2007, @fd=r5, 0x80, 0x0, 0x0, 0x0, 0x1, {0x5}}) io_uring_enter(r5, 0x4a5a, 0x2ae5, 0x2, 0x0, 0x0) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) syslog(0x2, &(0x7f0000000040)=""/10, 0xa) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000001500)={0x0, @in6={{0xa, 0x4e23, 0x2, @private0, 0x100}}, 0xfdff}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}], 0x10) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000001300)={0x2, 0x0, &(0x7f0000000140)=""/37, &(0x7f00000001c0)=""/73, &(0x7f0000000300)=""/4096, 0xeeef0000}) syz_clone3(&(0x7f0000000240)={0x24000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = socket$inet(0xa, 0x801, 0x8088) listen(r9, 0xfffffffe) 219.844367ms ago: executing program 1 (id=2727): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex, 0xd, 0x1, 0x5, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300), &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/timer_list\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0x1e, 0x0, r2, @void, @value=r4, @void, @void, r3}, 0x20) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0305602, &(0x7f0000000000)={0x1, 0x0, {0x4}}) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) listen(r0, 0x3) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000000, 0x0, 0x1, 0x9, 0x20, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0xb, 0x0, 0xfff}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r9, 0x80047456, &(0x7f0000000440)) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r10, &(0x7f0000000080), 0x0}, 0x20) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x3e, &(0x7f00000040c0)=0x8, 0x4) sendmmsg$inet(r11, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, 0x0, 0x19}}], 0x1, 0x8014) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000000000)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 0s ago: executing program 7 (id=2728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0x2, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x9, 0x9], 0x0, 0x2280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket(0x11, 0x3, 0x40000) (async) r3 = socket(0x11, 0x3, 0x40000) mmap(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x5, 0x13, r3, 0x836f3000) (async) mmap(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x5, 0x13, r3, 0x836f3000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@updpolicy={0xcc, 0x1b, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xf, 0x0, 0x9, 0x0, 0x3}, {0x0, 0x2, 0x2}, 0x2, 0x8}, [@srcaddr={0x14, 0xd, @in=@local}]}, 0xcc}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x5, 0x8, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.610957][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.625673][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.628934][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.806215][T12748] netlink: 'syz.2.1923': attribute type 1 has an invalid length. [ 195.806514][T12749] openvswitch: netlink: Flow actions attr not present in new flow. [ 195.839323][T12748] bond0: (slave bridge11): making interface the new active one [ 195.842031][T12748] bond0: (slave bridge11): Enslaving as an active interface with an up link [ 195.902315][ T5975] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.908003][ T5975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.914268][ T5975] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.918613][ T5975] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.922447][ T5975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.943841][ T8541] IPVS: stop unused estimator thread 0... [ 195.956131][T12764] netlink: 'syz.5.1926': attribute type 1 has an invalid length. [ 195.964666][ T7730] syz_tun (unregistering): left allmulticast mode [ 195.967499][ T7730] bond0: (slave syz_tun): Releasing backup interface [ 195.995041][T12767] FAT-fs (nullb0): bogus number of reserved sectors [ 195.997116][T12767] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 196.001643][T12767] FAT-fs (nullb0): bogus number of reserved sectors [ 196.003694][T12767] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 196.006488][T12765] __nla_validate_parse: 3 callbacks suppressed [ 196.006501][T12765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1926'. [ 196.009108][T12760] xfrm0 speed is unknown, defaulting to 1000 [ 196.026523][T12760] lo speed is unknown, defaulting to 1000 [ 196.032912][T12773] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 196.051532][T12773] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.061347][T12773] vlan3: entered promiscuous mode [ 196.063166][T12773] bond4: entered promiscuous mode [ 196.064867][T12773] vlan3: entered allmulticast mode [ 196.066595][T12773] bond4: entered allmulticast mode [ 196.084176][T12773] bond4: (slave gretap1): making interface the new active one [ 196.086572][T12773] gretap1: entered promiscuous mode [ 196.088258][T12773] gretap1: entered allmulticast mode [ 196.091979][T12773] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 196.096403][T12775] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 196.188179][T12760] chnl_net:caif_netlink_parms(): no params data found [ 196.272568][T12760] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.274934][T12760] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.277344][T12760] bridge_slave_0: entered allmulticast mode [ 196.281844][T12760] bridge_slave_0: entered promiscuous mode [ 196.285889][T12760] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.286015][T12789] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 196.288165][T12760] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.293176][T12760] bridge_slave_1: entered allmulticast mode [ 196.295858][T12760] bridge_slave_1: entered promiscuous mode [ 196.347817][T12760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.353098][T12760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.396247][T12760] team0: Port device team_slave_0 added [ 196.400453][T12760] team0: Port device team_slave_1 added [ 196.442149][T12760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.444593][T12760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.453407][T12760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.457902][T12760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.460544][T12760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.468838][T12760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.518994][T12760] hsr_slave_0: entered promiscuous mode [ 196.521556][T12760] hsr_slave_1: entered promiscuous mode [ 196.628980][T12798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=12798 comm=syz.6.1934 [ 196.634942][ T40] audit: type=1400 audit(524484.061:62042): avc: denied { listen } for pid=12797 comm="syz.6.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 196.643190][ T40] audit: type=1400 audit(524484.061:62043): avc: denied { accept } for pid=12797 comm="syz.6.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 196.686774][T12801] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1934'. [ 196.763117][ T40] audit: type=1326 audit(524484.190:62044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12802 comm="syz.5.1935" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbc918ebe9 code=0x0 [ 196.817040][T12805] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1935'. [ 197.076276][T12760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.082525][T12760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.091236][T12760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.095601][T12760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.138691][T12760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.159314][T12760] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.159596][T12829] overlay: ./file0 is not a directory [ 197.168527][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.170867][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.177236][T12829] netlink: 116 bytes leftover after parsing attributes in process `À°ý£ [ 197.177236][T12829] ú Ý!Ù'. [ 197.178629][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.184315][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.218246][T12833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.318867][T12760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.350993][T12760] veth0_vlan: entered promiscuous mode [ 197.361173][T12760] veth1_vlan: entered promiscuous mode [ 197.390798][T12760] veth0_macvtap: entered promiscuous mode [ 197.395775][T12760] veth1_macvtap: entered promiscuous mode [ 197.406387][T12760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.415101][T12760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.423497][ T8541] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.427709][ T8541] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.430887][ T8541] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.434850][ T8541] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.452188][ T5975] Bluetooth: hci2: command tx timeout [ 197.507736][ T8541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.510108][ T8541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.535491][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.538096][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.679468][T12877] binder: 12876:12877 ioctl c0306201 200000000380 returned -22 [ 197.685787][T12878] geneve2: entered promiscuous mode [ 197.688373][T12878] geneve2: entered allmulticast mode [ 197.724404][ T40] audit: type=1400 audit(524485.149:62045): avc: denied { map } for pid=12881 comm="syz.1.1957" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 197.775447][ T40] audit: type=1400 audit(524485.199:62046): avc: denied { getopt } for pid=12892 comm="syz.5.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 197.817120][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1964'. [ 197.909513][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1967'. [ 197.919416][T12915] team0: Mode changed to "loadbalance" [ 197.927416][T12886] kvm: kvm [12885]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 197.930766][T12886] kvm: kvm [12885]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 197.942715][ T5975] Bluetooth: hci4: command tx timeout [ 197.955439][T12886] kvm: kvm [12885]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 197.977485][T12886] kvm: kvm [12885]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 197.980941][T12886] kvm: kvm [12885]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 197.998412][T12886] kvm_intel: kvm [12885]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 198.000101][T12923] devpts: Bad value for 'max' [ 198.000261][T12925] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.008003][T12923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1969'. [ 198.010927][T12923] netlink: 'syz.5.1969': attribute type 7 has an invalid length. [ 198.013781][T12923] netlink: 'syz.5.1969': attribute type 8 has an invalid length. [ 198.016327][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1969'. [ 198.055330][T12928] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.059410][ T40] audit: type=1400 audit(524485.478:62047): avc: denied { shutdown } for pid=12922 comm="syz.5.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 198.060918][T12928] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.069651][T12928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.075446][T12928] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.302930][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 198.350097][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 198.360654][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1976'. [ 198.365650][ T40] audit: type=1400 audit(524485.798:62048): avc: denied { accept } for pid=12948 comm="syz.6.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 198.429679][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 198.475926][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'. [ 198.477255][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 198.483713][ T40] audit: type=1400 audit(524485.908:62049): avc: denied { bind } for pid=12960 comm="syz.6.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 198.520411][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 198.584246][T12969] sg_write: process 52 (syz.6.1984) changed security contexts after opening file descriptor, this is not allowed. [ 198.626374][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 198.657189][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 198.755058][T12983] netlink: 'syz.1.1989': attribute type 2 has an invalid length. [ 198.758245][T12983] nbd: must specify a device to reconfigure [ 198.784294][T12988] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 198.797807][T12983] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 198.802352][T12983] overlayfs: overlapping lowerdir path [ 198.896344][T12993] ubi0: attaching mtd0 [ 198.898550][T12993] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042) [ 198.959422][ T40] audit: type=1400 audit(524486.387:62050): avc: denied { shutdown } for pid=12975 comm="syz.6.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.161414][ T7412] udevd[7412]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 199.204362][T13091] openvswitch: netlink: Key type 30 is not supported [ 199.205464][ T7412] udevd[7412]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 199.442331][T13156] overlay: Bad value for 'workdir' [ 199.614626][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 199.632687][T13220] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 199.860263][ T40] audit: type=1400 audit(524487.286:62051): avc: denied { getopt } for pid=13219 comm="syz.6.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.873141][ T40] audit: type=1400 audit(524487.296:62052): avc: denied { getopt } for pid=13219 comm="syz.6.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.015678][ T63] Bluetooth: hci4: command tx timeout [ 200.520333][T13231] netlink: 'syz.2.2005': attribute type 1 has an invalid length. [ 200.607872][T13238] netlink: 'syz.6.2006': attribute type 1 has an invalid length. [ 200.613129][T13238] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 200.621292][ T40] audit: type=1400 audit(524488.045:62053): avc: denied { read append } for pid=13240 comm="syz.1.2007" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.631463][ T40] audit: type=1400 audit(524488.045:62054): avc: denied { open } for pid=13240 comm="syz.1.2007" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.676421][T13246] xfrm0 speed is unknown, defaulting to 1000 [ 200.680581][T13246] lo speed is unknown, defaulting to 1000 [ 200.969621][T13257] /dev/sr0: Can't open blockdev [ 201.172203][T13309] input input25: cannot allocate more than FF_MAX_EFFECTS effects [ 201.190081][T13304] syz.1.2019 (13304): drop_caches: 2 [ 201.194541][T13304] __nla_validate_parse: 5 callbacks suppressed [ 201.194555][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2019'. [ 201.200407][T13304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2019'. [ 201.238507][T13280] block nbd6: Attempted send on invalid socket [ 201.240610][T13280] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 201.243846][T13280] SQUASHFS error: Failed to read block 0x0: -5 [ 201.246338][T13280] unable to read squashfs_super_block [ 201.392553][T13329] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2028'. [ 201.455896][T13338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13338 comm=syz.6.2031 [ 201.465348][T13338] netlink: 'syz.6.2031': attribute type 1 has an invalid length. [ 201.472258][T13340] netlink: 'syz.6.2031': attribute type 1 has an invalid length. [ 201.661085][T13377] netlink: 'syz.6.2040': attribute type 1 has an invalid length. [ 201.664604][T13377] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2040'. [ 201.754515][T13387] binder: 13386:13387 ioctl c0306201 200000000080 returned -14 [ 201.759325][T13387] binder: 13386:13387 ioctl 40045731 200000000040 returned -22 [ 201.978077][ T61] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 202.098524][ T63] Bluetooth: hci4: command 0x040f tx timeout [ 202.117482][T13428] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2047'. [ 202.124701][T13428] openvswitch: netlink: Flow actions attr not present in new flow. [ 202.129559][T13403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.142071][ T61] usb 10-1: not running at top speed; connect to a high speed hub [ 202.146816][ T61] usb 10-1: config 10 has an invalid interface number: 3 but max is 1 [ 202.155307][ T61] usb 10-1: config 10 has an invalid descriptor of length 170, skipping remainder of the config [ 202.161436][ T61] usb 10-1: config 10 has 1 interface, different from the descriptor's value: 2 [ 202.165269][ T61] usb 10-1: config 10 has no interface number 0 [ 202.168166][ T61] usb 10-1: config 10 interface 3 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 202.174357][ T61] usb 10-1: config 10 interface 3 has no altsetting 0 [ 202.179317][ T61] usb 10-1: New USB device found, idVendor=1c9e, idProduct=9801, bcdDevice=ac.f9 [ 202.182576][ T61] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.185454][ T61] usb 10-1: Product: syz [ 202.186153][T13436] openvswitch: netlink: Flow key attr not present in new flow. [ 202.187069][ T61] usb 10-1: Manufacturer: syz [ 202.191480][ T61] usb 10-1: SerialNumber: syz [ 202.299417][T13443] syzkaller0: entered promiscuous mode [ 202.301480][T13443] syzkaller0: entered allmulticast mode [ 202.620576][ T61] usb 10-1: USB disconnect, device number 9 [ 202.791043][T13465] netlink: 'syz.1.2065': attribute type 1 has an invalid length. [ 203.145056][T13467] 9pnet_fd: Insufficient options for proto=fd [ 203.405819][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 203.957725][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 204.055151][T13492] syzkaller0: entered promiscuous mode [ 204.057433][T13492] syzkaller0: entered allmulticast mode [ 204.061513][T13492] batman_adv: batadv0: Adding interface: dummy0 [ 204.063625][T13492] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.072377][T13492] batman_adv: batadv0: Interface activated: dummy0 [ 204.081974][T13492] batadv0: mtu less than device minimum [ 204.085099][T13492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.089736][T13492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.093439][T13492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.097071][T13492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.100697][T13492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.104315][T13492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.190278][ T63] Bluetooth: hci4: command 0x040f tx timeout [ 204.220358][ T1459] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 204.255451][T13494] netlink: 'syz.1.2076': attribute type 5 has an invalid length. [ 204.326285][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 204.360643][ T1459] usb 7-1: device descriptor read/64, error -71 [ 204.373720][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 204.373736][ T40] audit: type=1400 audit(524491.790:62064): avc: denied { connect } for pid=13499 comm="syz.1.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 204.387946][T13500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=13500 comm=syz.1.2079 [ 204.600647][ T1459] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 204.731264][ T1459] usb 7-1: device descriptor read/64, error -71 [ 204.853042][ T1459] usb usb7-port1: attempt power cycle [ 204.878211][T13506] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2080'. [ 204.883103][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 204.938734][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 204.949553][T13511] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2081'. [ 205.056863][T13511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26 [ 205.201190][ T1459] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 205.221965][ T1459] usb 7-1: device descriptor read/8, error -71 [ 205.304337][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 205.330792][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 205.347930][ T7464] udevd[7464]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 205.374786][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 205.419613][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 205.446587][T13530] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 205.446587][T13530] The task syz.5.2087 (13530) triggered the difference, watch for misbehavior. [ 205.472392][ T1459] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 205.485156][T13535] fuseblk: Bad value for 'user_id' [ 205.487239][T13535] fuseblk: Bad value for 'user_id' [ 205.502093][ T1459] usb 7-1: device descriptor read/8, error -71 [ 205.606455][T13540] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2089'. [ 205.623503][ T1459] usb usb7-port1: unable to enumerate USB device [ 205.693237][T13548] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2092'. [ 205.699001][T13548] befs: (nullb0): No write support. Marking filesystem read-only [ 205.703641][T13548] befs: (nullb0): invalid magic header [ 205.707019][T13548] batadv_slave_1: entered promiscuous mode [ 205.710348][T13548] batadv_slave_1: left promiscuous mode [ 206.272281][ T63] Bluetooth: hci4: command 0x040f tx timeout [ 206.879834][T13593] cgroup: none used incorrectly [ 207.000594][ T24] IPVS: starting estimator thread 0... [ 207.030664][ T40] audit: type=1326 audit(524494.448:62065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.6.2112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e9f8ebe9 code=0x7ffc0000 [ 207.039503][ T40] audit: type=1326 audit(524494.448:62066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.6.2112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e9f8ebe9 code=0x7ffc0000 [ 207.047191][ T40] audit: type=1326 audit(524494.458:62067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.6.2112" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1e9f8ebe9 code=0x7ffc0000 [ 207.055606][ T40] audit: type=1326 audit(524494.458:62068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.6.2112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e9f8ebe9 code=0x7ffc0000 [ 207.064045][ T40] audit: type=1326 audit(524494.458:62069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.6.2112" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe1e9f8ebe9 code=0x7ffc0000 [ 207.071028][ T40] audit: type=1326 audit(524494.458:62070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.6.2112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e9f8ebe9 code=0x7ffc0000 [ 207.078288][ T40] audit: type=1326 audit(524494.458:62071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.6.2112" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe1e9f8ebe9 code=0x7ffc0000 [ 207.085376][ T40] audit: type=1326 audit(524494.458:62072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.6.2112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e9f8ebe9 code=0x7ffc0000 [ 207.086150][T13620] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2111'. [ 207.093514][T13616] IPVS: using max 42 ests per chain, 100800 per kthread [ 207.232252][T13648] dvmrp1: left allmulticast mode [ 207.363256][ T29] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 207.414583][T13657] program syz.5.2120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.513771][ T29] usb 11-1: Using ep0 maxpacket: 16 [ 207.517821][ T29] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.523043][T13671] fuse: Bad value for 'fd' [ 207.529202][ T29] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.533554][ T29] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 207.538652][ T29] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 207.541958][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.554066][ T29] usb 11-1: config 0 descriptor?? [ 207.561921][T13675] block nbd5: NBD_DISCONNECT [ 207.610384][T13685] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 207.610513][T13687] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 207.630640][T13689] netlink: 328 bytes leftover after parsing attributes in process `syz.1.2128'. [ 207.700742][ T40] audit: type=1400 audit(524495.117:62073): avc: denied { mount } for pid=13690 comm="syz.1.2129" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 207.831695][T13697] netlink: 'syz.1.2131': attribute type 12 has an invalid length. [ 207.864561][ C2] ata1: illegal qc_active transition (00000000->00018000) [ 207.878033][T13708] fuse: Bad value for 'fd' [ 207.878800][T13710] netlink: 'syz.1.2134': attribute type 12 has an invalid length. [ 207.962449][T13719] netlink: 'syz.2.2136': attribute type 10 has an invalid length. [ 208.002485][T13719] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 208.007334][T13719] .: (slave wlan1): Enslaving as an active interface with an up link [ 208.010114][T13717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.022322][ T29] hid_parser_main: 7 callbacks suppressed [ 208.022346][ T29] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 208.028898][ T29] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 208.031183][ T29] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 208.033215][ T29] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 208.036074][ T29] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 208.043033][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input27 [ 208.064833][ T29] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 208.067215][ T29] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 208.142398][T13724] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.147388][T13724] FAT-fs (loop1): unable to read boot sector [ 208.197124][ T1114] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 208.202036][ T1114] ata1.00: configured for UDMA/100 [ 208.216152][T13637] random: crng reseeded on system resumption [ 208.228710][ T5978] usb 11-1: USB disconnect, device number 2 [ 208.229163][ T29] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 208.236771][ T29] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 208.240710][ T29] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 208.245181][ T29] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 208.458580][T13744] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2142'. [ 208.646479][T13764] tmpfs: User quota inode hardlimit too large. [ 208.650180][T13764] vxfs: WRONG superblock magic 00000000 at 1 [ 208.654431][T13764] vxfs: WRONG superblock magic 00000000 at 8 [ 208.656931][T13764] vxfs: can't find superblock. [ 208.726671][T13778] netlink: 'syz.1.2147': attribute type 27 has an invalid length. [ 208.756899][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 208.774346][T13778] net_ratelimit: 15 callbacks suppressed [ 208.774352][T13778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.788061][T13784] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2150'. [ 208.835534][T13787] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2149'. [ 208.982339][T13794] 9pnet_virtio: no channels available for device syz [ 208.988517][T13794] netlink: 'syz.2.2153': attribute type 1 has an invalid length. [ 208.990966][T13794] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2153'. [ 208.993717][T13794] netlink: 'syz.2.2153': attribute type 2 has an invalid length. [ 208.997244][T13794] netlink: 'syz.2.2153': attribute type 1 has an invalid length. [ 209.023459][T13796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2154'. [ 209.065559][T13797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2154'. [ 209.193705][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 209.308782][T13802] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2155'. [ 209.619647][T13809] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 209.629397][T13809] fuse: Unknown parameter 'h' [ 209.655379][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 209.661918][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 209.661928][ T40] audit: type=1400 audit(524497.076:62078): avc: denied { setattr } for pid=13811 comm="syz.6.2158" path="socket:[56060]" dev="sockfs" ino=56060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.742731][T13824] netlink: 'syz.2.2161': attribute type 1 has an invalid length. [ 209.764425][T13824] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.794226][T13824] veth3: entered promiscuous mode [ 209.799763][T13824] bond5: (slave veth3): Enslaving as an active interface with a down link [ 209.801180][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 209.815520][T13824] vlan4: entered allmulticast mode [ 209.817582][T13824] bond5: entered allmulticast mode [ 209.820790][T13824] bond5: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 209.918050][T13830] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2163'. [ 209.946184][ T29] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 209.958409][T13832] ipip1: entered promiscuous mode [ 209.999931][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 210.073587][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 210.085374][ T29] usb 6-1: device descriptor read/64, error -71 [ 210.104083][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 210.112156][T13843] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 210.153729][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 210.183760][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 210.287419][ T7466] udevd[7466]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system [ 210.303774][ T40] audit: type=1400 audit(524497.716:62079): avc: denied { getattr } for pid=13848 comm="syz.6.2172" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 210.306057][T13849] overlayfs: statfs failed on './file0' [ 210.326797][ T29] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 210.465474][ T29] usb 6-1: device descriptor read/64, error -71 [ 210.576063][ T29] usb usb6-port1: attempt power cycle [ 210.925825][ T29] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 210.947809][ T29] usb 6-1: device descriptor read/8, error -71 [ 210.960711][T13862] trusted_key: encrypted_key: insufficient parameters specified [ 211.195992][ T29] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 211.216446][ T29] usb 6-1: device descriptor read/8, error -71 [ 211.336241][ T29] usb usb6-port1: unable to enumerate USB device [ 211.365334][T13872] xfrm0 speed is unknown, defaulting to 1000 [ 211.368020][T13872] lo speed is unknown, defaulting to 1000 [ 211.570964][T13879] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 211.655493][ T40] audit: type=1400 audit(524499.065:62080): avc: denied { accept } for pid=13883 comm="syz.2.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.831988][ T40] audit: type=1326 audit(524499.245:62081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13886 comm="syz.2.2186" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04e398ebe9 code=0x0 [ 212.456935][T13891] loop2: detected capacity change from 0 to 7 [ 212.463231][T13891] Dev loop2: unable to read RDB block 7 [ 212.465488][T13891] loop2: AHDI p1 p2 p3 [ 212.467517][T13891] loop2: partition table partially beyond EOD, truncated [ 212.471408][T13891] loop2: p1 start 1601398130 is beyond EOD, truncated [ 212.474282][T13891] loop2: p2 start 1702059890 is beyond EOD, truncated [ 212.519880][T13893] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 212.523658][T13893] PKCS7: Only support pkcs7_signedData type [ 212.592264][T13897] SELinux: syz.2.2190 (13897) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 212.663226][T13899] __nla_validate_parse: 3 callbacks suppressed [ 212.663238][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2189'. [ 212.668174][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2189'. [ 212.772712][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2191'. [ 212.776374][T13903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'. [ 212.841140][T13905] veth1_to_team: entered allmulticast mode [ 212.914166][T13907] xfrm0 speed is unknown, defaulting to 1000 [ 212.916796][T13907] lo speed is unknown, defaulting to 1000 [ 213.244453][T13917] overlayfs: failed to resolve './bus': -2 [ 213.276357][T13921] netlink: 'syz.1.2197': attribute type 64 has an invalid length. [ 213.280129][T13921] netlink: 'syz.1.2197': attribute type 4 has an invalid length. [ 213.282616][T13921] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2197'. [ 213.387370][ T40] audit: type=1326 audit(524500.794:62082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.5.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc918ebe9 code=0x7fc00000 [ 213.395402][ T40] audit: type=1326 audit(524500.794:62083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.5.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbc918ebe9 code=0x7fc00000 [ 213.402605][ T40] audit: type=1326 audit(524500.794:62084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.5.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc918ebe9 code=0x7fc00000 [ 213.410302][ T40] audit: type=1326 audit(524500.794:62085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.5.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc918ebe9 code=0x7fc00000 [ 213.417496][ T40] audit: type=1326 audit(524500.794:62086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.5.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc918ebe9 code=0x7fc00000 [ 213.424782][ T40] audit: type=1326 audit(524500.794:62087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.5.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc918ebe9 code=0x7fc00000 [ 213.470369][T13924] overlayfs: workdir and upperdir must be separate subtrees [ 213.492361][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2199'. [ 213.792572][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 213.965502][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 213.981068][T13957] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2209'. [ 214.008677][T13957] syzkaller0: entered promiscuous mode [ 214.010907][T13957] syzkaller0: entered allmulticast mode [ 214.873223][ T40] kauditd_printk_skb: 338 callbacks suppressed [ 214.873240][ T40] audit: type=1804 audit(524502.273:62426): pid=13968 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2212" name="/newroot/72/file0" dev="tmpfs" ino=404 res=1 errno=0 [ 214.879417][T13968] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 214.892376][T13968] ref_ctr increment failed for inode: 0x194 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802b778000 [ 215.416785][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 215.473083][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 215.486076][T13975] Invalid source name [ 215.487568][T13975] UBIFS error (pid: 13975): cannot open "./file0", error -22 [ 215.487652][ T40] audit: type=1400 audit(524502.893:62427): avc: denied { mounton } for pid=13974 comm="syz.1.2215" path="/73/file0" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.490980][T13975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2215'. [ 215.501505][T13975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2215'. [ 215.530647][T13972] netlink: 'syz.5.2214': attribute type 2 has an invalid length. [ 215.539594][T13975] tipc: Started in network mode [ 215.541229][T13975] tipc: Node identity ac1414aa, cluster identity 4711 [ 215.544348][T13975] tipc: Enabled bearer , priority 10 [ 215.656342][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 215.694972][T13983] ntfs3(sr0): Primary boot signature is not NTFS. [ 215.697649][T13983] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 215.728656][ T40] audit: type=1400 audit(524503.132:62428): avc: denied { set_context_mgr } for pid=13985 comm="syz.1.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 215.735842][ T40] audit: type=1400 audit(524503.142:62429): avc: denied { call } for pid=13985 comm="syz.1.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 215.799302][ T40] audit: type=1400 audit(524503.212:62430): avc: denied { link } for pid=8717 comm="syz-executor" name="#4d" dev="tmpfs" ino=1531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.806032][ T40] audit: type=1400 audit(524503.212:62431): avc: denied { rename } for pid=8717 comm="syz-executor" name="#4e" dev="tmpfs" ino=1531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.827307][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 215.891308][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 215.949662][T13998] SELinux: failed to load policy [ 216.150204][ T40] audit: type=1400 audit(524503.562:62432): avc: denied { mounton } for pid=14006 comm="syz.1.2226" path="/dev/sequencer" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 216.515242][T14011] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 216.517486][T14011] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.520853][T14011] vhci_hcd vhci_hcd.0: Device attached [ 216.523431][T14014] vhci_hcd: connection closed [ 216.523659][ T1144] vhci_hcd: stop threads [ 216.526667][ T1144] vhci_hcd: release socket [ 216.528271][ T1144] vhci_hcd: disconnect device [ 216.659043][ T1459] tipc: Node number set to 2886997162 [ 216.800605][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 216.851059][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 216.904441][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 217.073830][ T40] audit: type=1400 audit(524504.482:62433): avc: denied { map } for pid=14025 comm="syz.5.2232" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 217.137217][ T40] audit: type=1400 audit(524504.542:62434): avc: denied { accept } for pid=14034 comm="syz.5.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 217.220438][T14044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2238'. [ 217.666240][T14048] random: crng reseeded on system resumption [ 218.136807][T14061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2242'. [ 218.192632][T14062] netlink: 'syz.1.2242': attribute type 10 has an invalid length. [ 218.197501][T14062] syz_tun: entered promiscuous mode [ 218.206600][T14062] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 218.239230][ T5976] cgroup: fork rejected by pids controller in /syz2 [ 218.304193][ T9255] syz_tun (unregistering): left promiscuous mode [ 218.679124][ T5975] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.684457][ T5975] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.688520][ T5975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.693161][ T5975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.697014][ T5975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.783424][ T1144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.801713][T14078] xfrm0 speed is unknown, defaulting to 1000 [ 218.804521][T14078] lo speed is unknown, defaulting to 1000 [ 218.866244][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 218.936666][ T1144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.944048][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 218.948006][T14078] chnl_net:caif_netlink_parms(): no params data found [ 218.986978][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 219.038649][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 219.060623][ T1144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.099949][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 219.101555][T12229] Process accounting resumed [ 219.125243][T14078] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.128591][T14078] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.136013][T14078] bridge_slave_0: entered allmulticast mode [ 219.139663][T14078] bridge_slave_0: entered promiscuous mode [ 219.144978][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 219.145835][T14078] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.152335][T14078] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.155868][T14078] bridge_slave_1: entered allmulticast mode [ 219.162095][T14078] bridge_slave_1: entered promiscuous mode [ 219.184209][ T1144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.233479][T14078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.238309][T14078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.243017][T14111] IPVS: length: 24 != 387022556664 [ 219.293491][T14078] team0: Port device team_slave_0 added [ 219.297175][T14078] team0: Port device team_slave_1 added [ 219.342984][T14078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.345480][T14078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.353766][T14078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.360398][T14078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.362559][T14078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.371058][T14078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.374753][T14123] overlayfs: failed to resolve './file1': -2 [ 219.422074][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 219.466512][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 219.473356][ T40] audit: type=1400 audit(524506.881:62435): avc: denied { shutdown } for pid=14132 comm="syz.5.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 219.473610][T14078] hsr_slave_0: entered promiscuous mode [ 219.481711][T14078] hsr_slave_1: entered promiscuous mode [ 219.484689][T14078] debugfs: 'hsr0' already exists in 'hsr' [ 219.487129][T14078] Cannot create hsr debugfs directory [ 219.550184][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 219.591199][T14145] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2265'. [ 219.810326][T14147] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2263'. [ 220.751200][ T63] Bluetooth: hci0: command tx timeout [ 221.421631][ T1144] bond4 (unregistering): (slave gretap1): Releasing active interface [ 221.424968][ T1144] gretap1 (unregistering): left promiscuous mode [ 221.427581][ T1144] gretap1 (unregistering): left allmulticast mode [ 221.483328][ T1144] dvmrp1 (unregistering): left allmulticast mode [ 222.109505][ T1144] bond0 (unregistering): (slave bridge11): Releasing active interface [ 222.290455][ T1144] . (unregistering): (slave wlan1): Releasing backup interface [ 222.331614][ T1144] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 222.387271][ T1144] . (unregistering): Released all slaves [ 222.398055][ T1144] bond1 (unregistering): Released all slaves [ 222.408922][ T1144] bond2 (unregistering): Released all slaves [ 222.420403][ T1144] bond3 (unregistering): Released all slaves [ 222.435465][ T1144] bond0 (unregistering): Released all slaves [ 222.552647][ T1144] bond4 (unregistering): Released all slaves [ 222.641927][ T1144] bond5 (unregistering): (slave veth3): Releasing active interface [ 222.712483][ T1144] bond5 (unregistering): Released all slaves [ 222.810571][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 222.841608][ T63] Bluetooth: hci0: command tx timeout [ 222.906251][T14168] netlink: 'syz.1.2269': attribute type 1 has an invalid length. [ 222.934370][T14168] bond2: (slave bridge2): making interface the new active one [ 222.937248][T14168] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 223.188605][T14195] netlink: 'syz.1.2272': attribute type 1 has an invalid length. [ 223.191018][T14195] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2272'. [ 223.195231][T14195] netlink: 'syz.1.2272': attribute type 2 has an invalid length. [ 223.197609][T14195] netlink: 'syz.1.2272': attribute type 1 has an invalid length. [ 223.201052][ T63] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 223.417546][T14078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 223.426860][T14078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 223.431751][T14078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.446041][ T1144] batadv_slave_0: left promiscuous mode [ 223.459773][ T1144] hsr_slave_0: left promiscuous mode [ 223.462845][ T1144] hsr_slave_1: left promiscuous mode [ 223.499517][ T1144] veth1_macvtap: left promiscuous mode [ 223.502686][ T1144] veth0_macvtap: left promiscuous mode [ 223.504530][ T1144] veth1_vlan: left promiscuous mode [ 223.654725][ T1144] pimreg3 (unregistering): left allmulticast mode [ 223.775521][T14231] netlink: 'syz.1.2278': attribute type 6 has an invalid length. [ 223.778867][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'. [ 224.907701][T14078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.921944][ T63] Bluetooth: hci0: command tx timeout [ 225.032432][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 225.037321][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 225.054648][T14244] BIDI support in bsg has been removed. [ 225.071241][T14078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.104455][T14078] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.111244][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.113506][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.114812][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 225.117211][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.121654][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.123634][T14252] netlink: 'syz.5.2281': attribute type 1 has an invalid length. [ 225.169633][T14252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.172757][T14252] bond3: (slave bond4): making interface the new active one [ 225.175374][T14252] bond3: (slave bond4): Enslaving as an active interface with an up link [ 225.240034][T14252] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2281'. [ 225.243941][T14252] bond3: entered promiscuous mode [ 225.245560][T14252] bond4: entered promiscuous mode [ 225.247237][T14252] bond3: entered allmulticast mode [ 225.249527][T14252] bond4: entered allmulticast mode [ 225.251983][T14252] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.280459][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 225.284826][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 225.284837][ T40] audit: type=1107 audit(524512.689:62437): pid=14268 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='L& ·ù"YŽæ.šz¾â6²åeÇûòìi°e»ªrgš' [ 225.299982][T14078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.319671][ T7466] udevd[7466]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 225.321363][T14078] veth0_vlan: entered promiscuous mode [ 225.355241][T14078] veth1_vlan: entered promiscuous mode [ 225.389279][T14078] veth0_macvtap: entered promiscuous mode [ 225.393794][T14078] veth1_macvtap: entered promiscuous mode [ 225.394232][ T1144] IPVS: stop unused estimator thread 0... [ 225.408821][T14078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.432540][T14078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.447343][ T8547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.450504][ T8547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.457813][ T8547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.466797][ T8547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.533985][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.536531][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.575527][ T7464] udevd[7464]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 225.579471][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.585655][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.766846][ T5975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.771691][ T5975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.776083][ T5975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.779591][ T5975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.783639][ T5975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.805977][T14290] xfrm0 speed is unknown, defaulting to 1000 [ 225.808722][T14290] lo speed is unknown, defaulting to 1000 [ 225.891530][T14290] chnl_net:caif_netlink_parms(): no params data found [ 225.974670][T14290] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.976888][T14290] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.979113][T14290] bridge_slave_0: entered allmulticast mode [ 225.982241][T14290] bridge_slave_0: entered promiscuous mode [ 225.985580][T14290] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.987736][T14290] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.990038][T14290] bridge_slave_1: entered allmulticast mode [ 225.992729][T14290] bridge_slave_1: entered promiscuous mode [ 226.029780][T14290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.040496][T14290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.082521][T14290] team0: Port device team_slave_0 added [ 226.087268][T14290] team0: Port device team_slave_1 added [ 226.134581][T14290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.136616][T14290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.144386][T14290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.148362][T14290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.150280][T14290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.157900][T14290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.204172][T14290] hsr_slave_0: entered promiscuous mode [ 226.206239][T14290] hsr_slave_1: entered promiscuous mode [ 226.208067][T14290] debugfs: 'hsr0' already exists in 'hsr' [ 226.209646][T14290] Cannot create hsr debugfs directory [ 226.327585][T14290] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 226.331771][T14290] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 226.336098][T14290] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 226.340041][T14290] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 226.397296][T14290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.414309][T14290] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.425973][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.429037][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.438695][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.441695][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.600510][T14290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.770788][T14290] veth0_vlan: entered promiscuous mode [ 226.776879][T14290] veth1_vlan: entered promiscuous mode [ 226.797264][T14290] veth0_macvtap: entered promiscuous mode [ 226.801236][T14290] veth1_macvtap: entered promiscuous mode [ 226.812971][T14290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.820564][T14290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.826206][ T1147] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.829017][ T1147] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.833253][ T1147] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.836136][ T1147] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.875894][ T8547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.878960][ T8547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.894567][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.898049][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.977264][ T7466] udevd[7466]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 226.992006][ T5975] Bluetooth: hci0: command tx timeout [ 227.883126][ T5975] Bluetooth: hci3: command tx timeout [ 227.999803][ T7466] udevd[7466]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 229.952178][ T5975] Bluetooth: hci3: command tx timeout [ 231.914194][T14340] udevd[14340]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 231.937539][T14344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9324 sclass=netlink_route_socket pid=14344 comm=syz.5.2291 [ 231.981353][T14351] kvm: pic: single mode not supported [ 231.985127][T14353] syz_tun: entered promiscuous mode [ 231.988803][T14351] kvm: pic: single mode not supported [ 231.990077][T14351] kvm: pic: level sensitive irq not supported [ 231.995225][T14353] batadv_slave_0: entered promiscuous mode [ 231.999805][T14340] udevd[14340]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 232.000674][T14353] hsr1: entered allmulticast mode [ 232.005927][T14353] syz_tun: entered allmulticast mode [ 232.008050][T14353] batadv_slave_0: entered allmulticast mode [ 232.034776][ T5975] Bluetooth: hci3: command tx timeout [ 232.104648][T14340] udevd[14340]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 232.236704][T14380] wg2: entered promiscuous mode [ 232.238403][T14380] wg2: entered allmulticast mode [ 234.112197][ T63] Bluetooth: hci3: command tx timeout [ 234.112219][T14336] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 234.112730][ T5975] Bluetooth: hci4: command 0x040f tx timeout [ 234.834053][T14336] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 234.849302][T14336] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 234.864673][T14336] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 234.866813][T14336] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 234.871300][T14336] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 234.876888][T14336] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.880155][T14336] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.886909][T14336] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.912885][T14340] udevd[14340]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 234.974331][T14340] udevd[14340]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 235.085405][T14340] udevd[14340]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 235.141206][T14340] udevd[14340]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 235.147160][T14416] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2309'. [ 235.150888][T14416] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2309'. [ 235.170302][T14416] gretap0: entered promiscuous mode [ 235.174279][T14416] gretap0: left promiscuous mode [ 235.179288][T14340] udevd[14340]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 235.217500][T14340] udevd[14340]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 235.221685][T14422] netlink: 'syz.5.2311': attribute type 10 has an invalid length. [ 235.257304][T14340] udevd[14340]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 235.332532][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2314'. [ 235.336655][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2314'. [ 235.423158][T14434] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2315'. [ 235.472744][T14439] program syz.5.2317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.516027][T14442] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 235.539958][ T40] audit: type=1400 audit(524778.944:62438): avc: denied { connect } for pid=14447 comm="syz.5.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 235.610441][ T40] audit: type=1800 audit(524779.014:62439): pid=14448 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2320" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 235.655655][T14465] fuse: Unknown parameter '0x000000000000000400000000000000000000006' [ 235.686746][ T40] audit: type=1400 audit(524779.094:62440): avc: denied { setopt } for pid=14447 comm="syz.5.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 235.717179][T14473] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 235.793450][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2328'. [ 235.824380][T14480] IPVS: length: 184 != 24 [ 235.935739][T14495] CIFS mount error: No usable UNC path provided in device string! [ 235.935739][T14495] [ 235.939026][T14495] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 235.975135][T14498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2334'. [ 236.090320][ T40] audit: type=1400 audit(524779.494:62441): avc: denied { setopt } for pid=14508 comm="syz.2.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 236.108157][T14511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.192320][ T5975] Bluetooth: hci4: command 0x040f tx timeout [ 236.307419][T14517] Bluetooth: MGMT ver 1.23 [ 236.317436][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2339'. [ 236.342969][ T34] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 236.347289][ T40] audit: type=1400 audit(524779.744:62442): avc: denied { recv } for pid=5952 comm="syz-executor" saddr=127.0.0.1 src=60084 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 236.397469][ T40] audit: type=1400 audit(524779.804:62443): avc: denied { recv } for pid=14518 comm="syz.1.2340" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60084 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 236.447845][T14523] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2342'. [ 236.501994][ T34] usb 7-1: device descriptor read/64, error -71 [ 236.556055][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2344'. [ 236.753648][ T34] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 236.882046][ T34] usb 7-1: device descriptor read/64, error -71 [ 236.922292][ T5975] Bluetooth: hci3: command 0x0c1a tx timeout [ 236.924974][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 236.931658][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 236.938092][T14557] netlink: 'syz.7.2353': attribute type 1 has an invalid length. [ 236.987913][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 236.998746][ T40] audit: type=1400 audit(524780.404:62444): avc: denied { lock } for pid=14561 comm="syz.5.2354" path="socket:[63418]" dev="sockfs" ino=63418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 237.002211][ T34] usb usb7-port1: attempt power cycle [ 237.003681][T14562] overlayfs: missing 'workdir' [ 237.003848][T14551] : entered promiscuous mode [ 237.012240][T14551] : left promiscuous mode [ 237.012847][T14563] netlink: 'syz.7.2353': attribute type 2 has an invalid length. [ 237.014319][ T40] audit: type=1400 audit(524780.424:62445): avc: denied { connect } for pid=14556 comm="syz.7.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 237.179589][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 237.194297][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 237.196046][ T40] audit: type=1400 audit(524780.604:62446): avc: denied { read write } for pid=14572 comm="syz.5.2356" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 237.205202][T14575] program syz.5.2356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.208891][ T40] audit: type=1400 audit(524780.604:62447): avc: denied { open } for pid=14572 comm="syz.5.2356" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 237.236891][T14579] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 237.237505][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 237.240555][T14579] overlayfs: overlapping lowerdir path [ 237.344148][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 237.354634][ T34] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 237.372635][ T34] usb 7-1: device descriptor read/8, error -71 [ 237.444883][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 237.596122][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 237.613027][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 237.632780][ T34] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 237.637347][T14607] Falling back ldisc for ptm0. [ 237.647210][ T63] Bluetooth: hci3: adv larger than maximum supported [ 237.647248][ T63] Bluetooth: hci3: Malformed LE Event: 0x0d [ 237.659607][ T34] usb 7-1: device descriptor read/8, error -71 [ 237.673005][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 237.734016][T14611] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 237.736989][T14611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 237.741397][T14611] vhci_hcd vhci_hcd.0: Device attached [ 237.762240][ T34] usb usb7-port1: unable to enumerate USB device [ 237.767341][ T8694] IPVS: starting estimator thread 0... [ 237.851962][T14617] IPVS: using max 42 ests per chain, 100800 per kthread [ 237.873944][T14613] vhci_hcd: connection closed [ 237.874204][ T1147] vhci_hcd: stop threads [ 237.878956][ T1147] vhci_hcd: release socket [ 237.881360][ T1147] vhci_hcd: disconnect device [ 237.962035][ T29] vhci_hcd: vhci_device speed not set [ 238.272029][ T63] Bluetooth: hci4: command 0x040f tx timeout [ 238.471369][T14642] block nbd7: Attempted send on invalid socket [ 238.475062][T14642] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 238.477931][T14642] XFS (nbd7): SB validate failed with error -5. [ 238.518208][T14648] syzkaller0: entered promiscuous mode [ 238.520449][T14648] syzkaller0: entered allmulticast mode [ 238.555638][T14650] hub 9-0:1.0: USB hub found [ 238.559427][T14650] hub 9-0:1.0: 1 port detected [ 238.766754][T14661] CUSE: unknown device info "" [ 238.768786][T14661] CUSE: zero length info key specified [ 238.991992][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 238.992021][ T5975] Bluetooth: hci3: command 0x0c1a tx timeout [ 239.113801][T14668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.194058][T14668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.432696][T14687] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 239.437465][T14687] VFS: Can't find a romfs filesystem on dev nullb0. [ 239.437465][T14687] [ 239.497475][T14689] loop6: detected capacity change from 0 to 7 [ 239.502813][T14689] buffer_io_error: 15 callbacks suppressed [ 239.502830][T14689] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.508731][T14689] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.512106][T14689] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.515592][T14689] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.519189][T14689] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.523667][T14689] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.527284][T14689] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.530641][T14689] ldm_validate_partition_table(): Disk read failed. [ 239.533487][T14689] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.536785][T14689] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.540078][T14689] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.543755][T14689] Dev loop6: unable to read RDB block 0 [ 239.546421][T14689] loop6: unable to read partition table [ 239.549898][T14689] loop6: partition table beyond EOD, truncated [ 239.552740][T14689] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.827748][T14703] I/O error, dev loop7, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 239.832853][T14703] gfs2: error -5 reading superblock [ 239.867969][T14705] dlm: non-version read from control device 0 [ 240.286157][T14719] __nla_validate_parse: 8 callbacks suppressed [ 240.286176][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2394'. [ 240.542123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 240.618872][T14738] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2398'. [ 241.071997][ T5975] Bluetooth: hci3: command 0x0c1a tx timeout [ 241.072030][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 241.336240][T14750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2402'. [ 241.339796][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2402'. [ 241.498715][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 241.498726][ T40] audit: type=1400 audit(524784.904:62453): avc: denied { mount } for pid=14757 comm="syz.1.2406" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 241.508889][ T40] audit: type=1400 audit(524784.914:62454): avc: denied { listen } for pid=14757 comm="syz.1.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 241.521759][T14760] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 241.615373][T14763] syz_tun (unregistering): left promiscuous mode [ 241.634280][ T40] audit: type=1400 audit(524785.034:62455): avc: denied { setopt } for pid=14771 comm="syz.1.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 241.952765][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 242.017026][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 242.063160][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 242.067399][T14796] netlink: 'syz.5.2421': attribute type 1 has an invalid length. [ 242.106194][ T5975] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.110236][ T5975] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.114567][ T5975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.117694][ T5975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.120790][ T5975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.173166][T14801] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2421'. [ 242.206652][ T1262] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.236249][T14800] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.239471][T14800] bond5: (slave bond6): making interface the new active one [ 242.243223][T14800] bond5: (slave bond6): Enslaving as an active interface with an up link [ 242.251106][T14801] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 242.255283][T14801] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 242.276065][T14798] xfrm0 speed is unknown, defaulting to 1000 [ 242.278996][T14798] lo speed is unknown, defaulting to 1000 [ 242.279584][T14492] udevd[14492]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 242.306466][ T1262] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.405234][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 242.434352][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 242.775198][T14816] openvswitch: netlink: Message has 4096 unknown bytes. [ 242.779025][ T40] audit: type=1400 audit(524786.184:62456): avc: denied { remount } for pid=14815 comm="syz.1.2425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 242.902745][T14820] netlink: 'syz.1.2426': attribute type 1 has an invalid length. [ 243.708745][ T1262] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.722651][T14820] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 243.744981][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 243.803406][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 243.831275][ T1262] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.850961][T14828] tmpfs: Unknown parameter 'usrquoÛ:1¹âàŸ½taüË@Y#|`ñC“¦_inode_hard' [ 243.900058][ T40] audit: type=1400 audit(524787.304:62457): avc: denied { map } for pid=14833 comm="syz.1.2430" path="/proc/475/net/protocols" dev="proc" ino=4026533080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 243.908498][ T40] audit: type=1400 audit(524787.304:62458): avc: denied { execute } for pid=14833 comm="syz.1.2430" path="/proc/475/net/protocols" dev="proc" ino=4026533080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 243.937335][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 243.943648][T14798] chnl_net:caif_netlink_parms(): no params data found [ 243.983508][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 244.021489][T14846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2433'. [ 244.067537][T14848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14848 comm=syz.7.2434 [ 244.072084][T14848] netlink: 'syz.7.2434': attribute type 1 has an invalid length. [ 244.075013][T14852] input: syz1 as /devices/virtual/input/input30 [ 244.085249][T14798] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.087624][T14798] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.089950][T14798] bridge_slave_0: entered allmulticast mode [ 244.093445][T14798] bridge_slave_0: entered promiscuous mode [ 244.119122][T14848] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2434'. [ 244.122264][T14848] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2434'. [ 244.128860][T14798] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.131175][T14798] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.134286][T14798] bridge_slave_1: entered allmulticast mode [ 244.137622][T14798] bridge_slave_1: entered promiscuous mode [ 244.172466][T14798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.181532][T14798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.192009][ T63] Bluetooth: hci0: command tx timeout [ 244.236963][ T1262] bridge_slave_1: left allmulticast mode [ 244.238918][ T1262] bridge_slave_1: left promiscuous mode [ 244.240816][ T1262] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.246183][ T1262] bridge_slave_0: left allmulticast mode [ 244.248096][ T1262] bridge_slave_0: left promiscuous mode [ 244.250023][ T1262] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.422498][ T40] audit: type=1400 audit(524787.824:62459): avc: denied { mount } for pid=14874 comm="syz.7.2441" name="/" dev="rpc_pipefs" ino=66011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 244.436165][ T40] audit: type=1400 audit(524787.844:62460): avc: denied { mounton } for pid=14874 comm="syz.7.2441" path="/45/file0" dev="rpc_pipefs" ino=66011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 244.504592][ T40] audit: type=1400 audit(524787.914:62461): avc: denied { unmount } for pid=14290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 244.540362][T14877] PKCS8: Unsupported PKCS#8 version [ 244.734389][ T1262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.764966][ T1262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.814554][ T1262] bond0 (unregistering): Released all slaves [ 244.828182][T14798] team0: Port device team_slave_0 added [ 244.852543][T14798] team0: Port device team_slave_1 added [ 244.942305][T14798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.944726][T14798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.955453][T14798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.035445][T14897] tmpfs: Bad value for 'mpol' [ 245.045646][T14798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.047838][T14798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.055980][T14798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.139168][T14901] random: crng reseeded on system resumption [ 245.159435][T14798] hsr_slave_0: entered promiscuous mode [ 245.162178][T14798] hsr_slave_1: entered promiscuous mode [ 245.164315][T14798] debugfs: 'hsr0' already exists in 'hsr' [ 245.166117][T14798] Cannot create hsr debugfs directory [ 245.207871][T14904] tmpfs: User quota inode hardlimit too large. [ 245.290971][T14909] comedi comedi2: ni_at_a2150: I/O port conflict (0x8b013,28) [ 245.326726][ T40] audit: type=1800 audit(524788.734:62462): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2454" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 245.344151][ T838] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 245.384316][T14919] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2455'. [ 245.407740][ T1262] batadv_slave_0: left promiscuous mode [ 245.414035][ T1262] hsr_slave_0: left promiscuous mode [ 245.416176][ T1262] hsr_slave_1: left promiscuous mode [ 245.420248][ T1262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.423127][ T1262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.457846][ T1262] veth1_macvtap: left promiscuous mode [ 245.459705][ T1262] veth0_macvtap: left promiscuous mode [ 245.462228][ T1262] veth1_vlan: left promiscuous mode [ 245.464576][ T1262] veth0_vlan: left promiscuous mode [ 245.512220][ T838] usb 12-1: Using ep0 maxpacket: 8 [ 245.517981][ T838] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.523080][ T838] usb 12-1: config 0 interface 0 has no altsetting 0 [ 245.527464][ T838] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 245.531118][ T838] usb 12-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 245.534506][ T838] usb 12-1: Product: syz [ 245.539784][ T838] usb 12-1: config 0 descriptor?? [ 245.769609][ T838] usbhid 12-1:0.0: can't add hid device: -71 [ 245.772342][ T838] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 245.780588][ T838] usb 12-1: USB disconnect, device number 2 [ 246.212213][ C3] vcan0: j1939_tp_rxtimer: 0xffff888048461c00: rx timeout, send abort [ 246.216018][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888048461c00: 0x3f002: (3) A timeout occurred and this is the connection abort to close the session. [ 246.221989][ C3] vcan0: j1939_tp_rxtimer: 0xffff888048461400: rx timeout, send abort [ 246.225613][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888048461400: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 246.275902][ T63] Bluetooth: hci0: command tx timeout [ 246.344339][ T1262] team0 (unregistering): Port device team_slave_1 removed [ 246.443500][ T1262] team0 (unregistering): Port device team_slave_0 removed [ 247.187854][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 247.220803][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 247.260785][T14798] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 247.272603][T14798] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 247.277578][T14798] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 247.286519][T14798] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 247.311601][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 247.357862][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 247.407832][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 247.407847][ T40] audit: type=1400 audit(524790.814:62464): avc: denied { execmod } for pid=14978 comm="syz.1.2467" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=67632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 247.418215][T14798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.429936][T14798] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.433143][ T29] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 247.440811][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.443920][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.453895][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.456624][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.490964][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 247.499086][T14998] comedi comedi3: comedi_config --init_data is deprecated [ 247.588424][ T29] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.592049][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.596009][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 247.599023][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.611908][ T29] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.613458][T14798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.614745][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.625214][ T29] usb 10-1: config 0 descriptor?? [ 247.795130][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 247.821344][T14798] veth0_vlan: entered promiscuous mode [ 247.828838][T14798] veth1_vlan: entered promiscuous mode [ 247.840638][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 247.855054][T14798] veth0_macvtap: entered promiscuous mode [ 247.858847][T14798] veth1_macvtap: entered promiscuous mode [ 247.862959][T15026] comedi comedi2: dt2814: a I/O base address must be specified [ 247.875883][T14798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.884729][T14798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.895568][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.898553][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.903951][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.904603][ T29] usbhid 10-1:0.0: can't add hid device: -71 [ 247.907107][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.909332][ T29] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 247.920037][ T29] usb 10-1: USB disconnect, device number 10 [ 247.965577][ T8541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.968667][ T8541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.991105][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.994819][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.003987][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 248.010837][T15037] befs: (nullb0): No write support. Marking filesystem read-only [ 248.013499][T15037] befs: (nullb0): invalid magic header [ 248.018654][T15038] befs: (nullb0): No write support. Marking filesystem read-only [ 248.022188][T15038] befs: (nullb0): invalid magic header [ 248.057145][T15042] GUP no longer grows the stack in syz.8.2418 (15042): 200000007000-20000000a000 (200000004000) [ 248.058201][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 248.061265][T15042] CPU: 3 UID: 0 PID: 15042 Comm: syz.8.2418 Not tainted syzkaller #0 PREEMPT(full) [ 248.061280][T15042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.061287][T15042] Call Trace: [ 248.061292][T15042] [ 248.061296][T15042] dump_stack_lvl+0x16c/0x1f0 [ 248.061312][T15042] gup_vma_lookup+0x1d2/0x220 [ 248.061328][T15042] __get_user_pages+0x243/0x34a0 [ 248.061347][T15042] ? xsk_setsockopt+0x6db/0x9a0 [ 248.061361][T15042] ? do_sock_setsockopt+0xf0/0x1d0 [ 248.061374][T15042] ? __sys_setsockopt+0x1a0/0x230 [ 248.061384][T15042] ? __x64_sys_setsockopt+0xbd/0x160 [ 248.061394][T15042] ? __pfx___get_user_pages+0x10/0x10 [ 248.061412][T15042] __gup_longterm_locked+0x2dd/0x17e0 [ 248.061427][T15042] ? __lock_acquire+0xac0/0x1ce0 [ 248.061447][T15042] ? __pfx___gup_longterm_locked+0x10/0x10 [ 248.061469][T15042] pin_user_pages+0x13c/0x160 [ 248.061485][T15042] ? __pfx_pin_user_pages+0x10/0x10 [ 248.061501][T15042] ? xdp_umem_create+0x652/0x1270 [ 248.061542][T15042] xdp_umem_create+0x73c/0x1270 [ 248.061564][T15042] xsk_setsockopt+0x6db/0x9a0 [ 248.061580][T15042] ? __pfx_xsk_setsockopt+0x10/0x10 [ 248.061596][T15042] ? find_held_lock+0x2b/0x80 [ 248.061611][T15042] ? selinux_socket_setsockopt+0x6a/0x80 [ 248.061626][T15042] ? __pfx_xsk_setsockopt+0x10/0x10 [ 248.061642][T15042] do_sock_setsockopt+0xf0/0x1d0 [ 248.061657][T15042] __sys_setsockopt+0x1a0/0x230 [ 248.061670][T15042] __x64_sys_setsockopt+0xbd/0x160 [ 248.061680][T15042] ? do_syscall_64+0x91/0x4c0 [ 248.061692][T15042] ? lockdep_hardirqs_on+0x7c/0x110 [ 248.061703][T15042] do_syscall_64+0xcd/0x4c0 [ 248.061716][T15042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.061727][T15042] RIP: 0033:0x7f476298ebe9 [ 248.061737][T15042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.061747][T15042] RSP: 002b:00007f4763809038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 248.061758][T15042] RAX: ffffffffffffffda RBX: 00007f4762bb5fa0 RCX: 00007f476298ebe9 [ 248.061765][T15042] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 248.061772][T15042] RBP: 00007f4762a11e19 R08: 0000000000000020 R09: 0000000000000000 [ 248.061778][T15042] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 248.061784][T15042] R13: 00007f4762bb6038 R14: 00007f4762bb5fa0 R15: 00007ffe0be3af18 [ 248.061813][T15042] [ 248.092575][T15048] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 248.199638][T14493] udevd[14493]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 248.273831][T15061] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2481'. [ 248.329994][T15066] binder: 15063:15066 ioctl c018620c 200000000280 returned -1 [ 248.344710][ T40] audit: type=1326 audit(524791.754:62465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15067 comm="syz.8.2483" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f476298ebe9 code=0x0 [ 248.362069][ T63] Bluetooth: hci0: command tx timeout [ 248.727866][T15083] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 248.780150][T15097] netlink: 'syz.5.2494': attribute type 3 has an invalid length. [ 248.783926][T15097] netlink: 'syz.5.2494': attribute type 3 has an invalid length. [ 248.786441][T15097] netlink: 'syz.5.2494': attribute type 3 has an invalid length. [ 248.789272][T15097] netlink: 'syz.5.2494': attribute type 3 has an invalid length. [ 248.791898][T15097] netlink: 'syz.5.2494': attribute type 3 has an invalid length. [ 248.794382][T15097] netlink: 'syz.5.2494': attribute type 3 has an invalid length. [ 248.796967][T15097] netlink: 'syz.5.2494': attribute type 3 has an invalid length. [ 248.799591][T15097] netlink: 'syz.5.2494': attribute type 3 has an invalid length. [ 248.803401][T15097] netlink: 'syz.5.2494': attribute type 3 has an invalid length. [ 248.805960][T15097] netlink: 'syz.5.2494': attribute type 3 has an invalid length. [ 248.978453][T15102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.986749][T15121] 9pnet: p9_errstr2errno: server reported unknown error @íÿÿÿÿÿÿÿÿ [ 249.089836][ T40] audit: type=1400 audit(524792.494:62466): avc: denied { mounton } for pid=15130 comm="syz.7.2503" path="/65/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 249.153738][T15135] batadv_slave_0: entered promiscuous mode [ 249.157354][T15135] erspan0: entered promiscuous mode [ 249.177693][ T40] audit: type=1400 audit(524792.584:62467): avc: denied { unmount } for pid=14290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 249.221973][ T40] audit: type=1400 audit(524792.624:62468): avc: denied { connect } for pid=15137 comm="syz.1.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 249.224239][T15142] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2507'. [ 249.270246][ T40] audit: type=1400 audit(524792.674:62469): avc: denied { write } for pid=15137 comm="syz.1.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 249.359578][ T40] audit: type=1400 audit(524792.764:62470): avc: denied { getopt } for pid=15152 comm="syz.5.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 249.503692][T15174] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 249.581469][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2517'. [ 249.744954][T15182] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 249.869643][ T40] audit: type=1400 audit(524793.274:62471): avc: denied { prog_load } for pid=15186 comm="syz.1.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 249.871668][T15189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2520'. [ 249.880297][T15189] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 249.883792][T15189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.901182][ T40] audit: type=1400 audit(524793.304:62472): avc: denied { prog_run } for pid=15190 comm="syz.8.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 249.919434][ T40] audit: type=1400 audit(524793.324:62473): avc: denied { map_create } for pid=15192 comm="syz.5.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 249.930978][T15196] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 250.235599][T15228] overlay: Bad value for 'workdir' [ 250.432404][ T63] Bluetooth: hci0: command tx timeout [ 250.488237][T15246] afs: Unknown parameter 'À' [ 250.610014][T15249] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2539'. [ 251.054616][T15267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.057630][T15267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.060949][T15267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.063933][T15267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.196587][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2548'. [ 251.292004][ T29] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 251.362344][T15294] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2551'. [ 251.366241][T15295] sch_fq: defrate 0 ignored. [ 251.433352][ T29] usb 10-1: device descriptor read/64, error -71 [ 251.436926][ T8694] Process accounting resumed [ 251.450341][T15301] Process accounting resumed [ 251.517111][T15315] nbd: couldn't find device at index -1605786504 [ 251.528238][T15317] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2560'. [ 251.537166][T15317] 9pnet_fd: Insufficient options for proto=fd [ 251.539588][T15317] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2560'. [ 251.540503][T15315] comedi: valid board names for 8255 driver are: [ 251.544827][T15315] 8255 [ 251.545759][T15315] comedi: valid board names for vmk80xx driver are: [ 251.547875][T15315] vmk80xx [ 251.549192][T15315] comedi: valid board names for usbduxsigma driver are: [ 251.552808][T15317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.554861][T15315] usbduxsigma [ 251.556341][T15315] comedi: valid board names for usbduxfast driver are: [ 251.559168][T15315] usbduxfast [ 251.560609][T15315] comedi: valid board names for usbdux driver are: [ 251.563475][T15318] tipc: Started in network mode [ 251.563492][T15318] tipc: Node identity 5e46cd8dc526, cluster identity 4711 [ 251.563560][T15318] tipc: Enabled bearer , priority 0 [ 251.563862][T15317] syzkaller0: entered promiscuous mode [ 251.565462][T15315] usbdux [ 251.568045][T15317] syzkaller0: entered allmulticast mode [ 251.570026][T15315] comedi: valid board names for ni6501 driver are: [ 251.577063][T15315] ni6501 [ 251.578042][T15315] comedi: valid board names for dt9812 driver are: [ 251.580171][T15315] dt9812 [ 251.581137][T15315] comedi: valid board names for ni_labpc_cs driver are: [ 251.583392][T15315] ni_labpc_cs [ 251.584546][T15317] tipc: Resetting bearer [ 251.584644][T15315] comedi: valid board names for ni_daq_700 driver are: [ 251.584652][T15315] ni_daq_700 [ 251.593402][T15315] comedi: valid board names for labpc_pci driver are: [ 251.594390][T15316] tipc: Resetting bearer [ 251.595537][T15315] labpc_pci [ 251.598904][T15315] comedi: valid board names for adl_pci9118 driver are: [ 251.601645][T15315] pci9118dg [ 251.602956][T15315] pci9118hg [ 251.603981][T15315] pci9118hr [ 251.605120][T15315] comedi: valid board names for 8255_pci driver are: [ 251.607165][T15315] 8255_pci [ 251.608530][T15315] comedi: valid board names for s526 driver are: [ 251.608904][T15316] tipc: Disabling bearer [ 251.610721][T15315] s526 [ 251.610733][T15315] comedi: valid board names for multiq3 driver are: [ 251.616489][T15315] multiq3 [ 251.617636][T15315] comedi: valid board names for pcmuio driver are: [ 251.620075][T15315] pcmuio48 [ 251.621357][T15315] pcmuio96 [ 251.623569][T15315] comedi: valid board names for pcmmio driver are: [ 251.625743][T15315] pcmmio [ 251.626692][T15315] comedi: valid board names for pcmda12 driver are: [ 251.628715][T15315] pcmda12 [ 251.629725][T15315] comedi: valid board names for pcmad driver are: [ 251.631705][T15315] pcmad12 [ 251.633383][T15315] pcmad16 [ 251.634462][T15315] comedi: valid board names for ni_labpc driver are: [ 251.636627][T15315] lab-pc-1200 [ 251.637744][T15315] lab-pc-1200ai [ 251.638902][T15315] lab-pc+ [ 251.639918][T15315] comedi: valid board names for atmio16 driver are: [ 251.642678][T15315] atmio16 [ 251.643715][T15315] atmio16d [ 251.644786][T15315] comedi: valid board names for ni_at_ao driver are: [ 251.646931][T15315] at-ao-6 [ 251.647994][T15315] at-ao-10 [ 251.649010][T15315] comedi: valid board names for ni_at_a2150 driver are: [ 251.651190][T15315] ni_at_a2150 [ 251.658058][T15315] comedi: valid board names for adq12b driver are: [ 251.660213][T15315] adq12b [ 251.661141][T15315] comedi: valid board names for mpc624 driver are: [ 251.663865][T15315] mpc624 [ 251.664945][T15315] comedi: valid board names for c6xdigio driver are: [ 251.667076][T15315] c6xdigio [ 251.668467][T15315] comedi: valid board names for aio_iiro_16 driver are: [ 251.670659][T15315] aio_iiro_16 [ 251.671877][T15315] comedi: valid board names for aio_aio12_8 driver are: [ 251.674048][T15315] aio_aio12_8 [ 251.675315][T15315] aio_ai12_8 [ 251.676472][T15315] aio_ao12_4 [ 251.677586][T15315] comedi: valid board names for fl512 driver are: [ 251.679755][T15315] fl512 [ 251.680741][T15315] comedi: valid board names for dmm32at driver are: [ 251.683903][T15315] dmm32at [ 251.685227][T15315] comedi: valid board names for dt282x driver are: [ 251.687951][T15315] dt2821 [ 251.689285][T15315] dt2821-f [ 251.690731][T15315] dt2821-g [ 251.692030][ T29] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 251.692431][T15315] dt2823 [ 251.696589][T15315] dt2824-pgh [ 251.698022][T15315] dt2824-pgl [ 251.699403][T15315] dt2825 [ 251.700644][T15315] dt2827 [ 251.701889][T15315] dt2828 [ 251.702857][T15315] dt2829 [ 251.703854][T15315] dt21-ez [ 251.705074][T15315] dt23-ez [ 251.706162][T15315] dt24-ez [ 251.707202][T15315] dt24-ez-pgl [ 251.708371][T15315] comedi: valid board names for dt2817 driver are: [ 251.710657][T15315] dt2817 [ 251.711688][T15315] comedi: valid board names for dt2815 driver are: [ 251.714107][T15315] dt2815 [ 251.715283][T15315] comedi: valid board names for dt2814 driver are: [ 251.717296][T15315] dt2814 [ 251.718250][T15315] comedi: valid board names for dt2811 driver are: [ 251.720297][T15315] dt2811-pgh [ 251.721329][T15315] dt2811-pgl [ 251.722622][T15315] comedi: valid board names for dt2801 driver are: [ 251.725264][T15315] dt2801 [ 251.726507][T15315] comedi: valid board names for das6402 driver are: [ 251.729175][T15315] das6402-12 [ 251.730559][T15315] das6402-16 [ 251.732088][T15315] comedi: valid board names for das1800 driver are: [ 251.734945][T15315] das-1701st [ 251.736441][T15315] das-1701st-da [ 251.737967][T15315] das-1702st [ 251.739430][T15315] das-1702st-da [ 251.740975][T15315] das-1702hr [ 251.742506][T15315] das-1702hr-da [ 251.744052][T15315] das-1701ao [ 251.745532][T15315] das-1702ao [ 251.746938][T15315] das-1801st [ 251.748365][T15315] das-1801st-da [ 251.749895][T15315] das-1802st [ 251.751449][T15315] das-1802st-da [ 251.753230][T15315] das-1802hr [ 251.754769][T15315] das-1802hr-da [ 251.756446][T15315] das-1801hc [ 251.758247][T15315] das-1802hc [ 251.760016][T15315] das-1801ao [ 251.761998][T15315] das-1802ao [ 251.763576][T15315] comedi: valid board names for das800 driver are: [ 251.766395][T15315] das-800 [ 251.767770][T15315] cio-das800 [ 251.769127][T15315] das-801 [ 251.770812][T15315] cio-das801 [ 251.772474][T15315] das-802 [ 251.773875][T15315] cio-das802 [ 251.775276][T15315] cio-das802/16 [ 251.776790][T15315] comedi: valid board names for isa-das08 driver are: [ 251.779511][T15315] isa-das08 [ 251.780887][T15315] das08-pgm [ 251.782352][T15315] das08-pgh [ 251.783752][T15315] das08-pgl [ 251.785117][T15315] das08-aoh [ 251.786537][T15315] das08-aol [ 251.787912][T15315] das08-aom [ 251.789322][T15315] das08/jr-ao [ 251.790777][T15315] das08jr-16-ao [ 251.792281][T15315] pc104-das08 [ 251.793769][T15315] das08jr/16 [ 251.795270][T15315] comedi: valid board names for das16m1 driver are: [ 251.798016][T15315] das16m1 [ 251.799326][T15315] comedi: valid board names for dac02 driver are: [ 251.802057][T15315] dac02 [ 251.803300][T15315] comedi: valid board names for rti802 driver are: [ 251.806004][T15315] rti802 [ 251.807245][T15315] comedi: valid board names for rti800 driver are: [ 251.809897][T15315] rti800 [ 251.811149][T15315] rti815 [ 251.812450][T15315] comedi: valid board names for pcm3724 driver are: [ 251.816127][T15315] pcm3724 [ 251.817435][T15315] comedi: valid board names for pcl818 driver are: [ 251.820276][T15315] pcl818l [ 251.821966][T15315] pcl818h [ 251.823441][T15315] pcl818hd [ 251.824952][T15315] pcl818hg [ 251.826411][T15315] pcl818 [ 251.827794][T15315] pcl718 [ 251.828991][T15315] pcm3718 [ 251.830293][T15315] comedi: valid board names for pcl816 driver are: [ 251.832182][ T29] usb 10-1: device descriptor read/64, error -71 [ 251.833308][T15315] pcl816 [ 251.836944][T15315] pcl814b [ 251.838254][T15315] comedi: valid board names for pcl812 driver are: [ 251.841018][T15315] pcl812 [ 251.842373][T15315] pcl812pg [ 251.843735][T15315] acl8112pg [ 251.845105][T15315] acl8112dg [ 251.846473][T15315] acl8112hg [ 251.847857][T15315] a821pgl [ 251.849247][T15315] a821pglnda [ 251.850912][T15315] a821pgh [ 251.852401][T15315] a822pgl [ 251.853814][T15315] a822pgh [ 251.855290][T15315] a823pgl [ 251.856840][T15315] a823pgh [ 251.858203][T15315] pcl813 [ 251.859320][T15315] pcl813b [ 251.860496][T15315] acl8113 [ 251.861510][T15315] iso813 [ 251.862656][T15315] acl8216 [ 251.863756][T15315] a826pg [ 251.864705][T15315] comedi: valid board names for pcl730 driver are: [ 251.866792][T15315] pcl730 [ 251.867788][T15315] iso730 [ 251.868920][T15315] acl7130 [ 251.870023][T15315] pcm3730 [ 251.871021][T15315] pcl725 [ 251.872606][T15315] p8r8dio [ 251.874566][T15315] acl7225b [ 251.876820][T15315] p16r16dio [ 251.878711][T15315] pcl733 [ 251.880067][T15315] pcl734 [ 251.881291][T15315] opmm-1616-xt [ 251.884350][T15315] pearl-mm-p [ 251.885662][T15315] ir104-pbf [ 251.886773][T15315] comedi: valid board names for pcl726 driver are: [ 251.888903][T15315] pcl726 [ 251.890041][T15315] pcl727 [ 251.891028][T15315] pcl728 [ 251.892150][T15315] acl6126 [ 251.893290][T15315] acl6128 [ 251.894419][T15315] comedi: valid board names for pcl724 driver are: [ 251.896502][T15315] pcl724 [ 251.897667][T15315] pcl722 [ 251.898627][T15315] pcl731 [ 251.899816][T15315] acl7122 [ 251.900814][T15315] acl7124 [ 251.902024][T15315] pet48dio [ 251.903139][T15315] pcmio48 [ 251.904122][T15315] onyx-mm-dio [ 251.905281][T15315] comedi: valid board names for pcl711 driver are: [ 251.907421][T15315] pcl711 [ 251.908649][T15315] pcl711b [ 251.909616][T15315] acl8112hg [ 251.910709][T15315] acl8112dg [ 251.911892][T15315] comedi: valid board names for amplc_pc263 driver are: [ 251.914295][T15315] pc263 [ 251.915403][T15315] comedi: valid board names for amplc_pc236 driver are: [ 251.917787][T15315] pc36at [ 251.918718][T15315] comedi: valid board names for amplc_dio200 driver are: [ 251.920981][T15315] pc212e [ 251.922184][T15315] pc214e [ 251.923126][T15315] pc215e [ 251.924097][T15315] pc218e [ 251.925245][T15315] pc272e [ 251.926193][T15315] comedi: valid board names for comedi_parport driver are: [ 251.928510][T15315] comedi_parport [ 251.929858][T15315] comedi: valid board names for comedi_test driver are: [ 251.932232][T15315] comedi_test [ 251.933523][T15315] comedi: valid board names for comedi_bond driver are: [ 251.935928][T15315] comedi_bond [ 251.942294][ T29] usb usb10-port1: attempt power cycle [ 251.964907][T15335] devpts: Bad value for 'max' [ 252.176733][T15346] wg2: entered promiscuous mode [ 252.178540][T15346] wg2: entered allmulticast mode [ 252.207849][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 252.227394][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 252.234024][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2569'. [ 252.302405][ T29] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 252.332595][ T29] usb 10-1: device descriptor read/8, error -71 [ 252.486817][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 252.563697][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 252.592015][ T29] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 252.612795][ T29] usb 10-1: device descriptor read/8, error -71 [ 252.725747][ T29] usb usb10-port1: unable to enumerate USB device [ 252.811130][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 252.876121][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 252.905714][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 252.934532][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 252.969385][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 252.990133][T15374] xfrm0 speed is unknown, defaulting to 1000 [ 252.993334][T15374] lo speed is unknown, defaulting to 1000 [ 253.057812][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 253.120699][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 253.120710][ T40] audit: type=1400 audit(524796.524:62481): avc: denied { transfer } for pid=15383 comm="syz.7.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 253.186188][T15389] CIFS mount error: No usable UNC path provided in device string! [ 253.186188][T15389] [ 253.189810][T15389] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 253.600182][T15404] loop6: detected capacity change from 0 to 7 [ 253.609328][T15404] Dev loop6: unable to read RDB block 7 [ 253.611182][T15404] loop6: unable to read partition table [ 253.614467][T15404] loop6: partition table beyond EOD, truncated [ 253.617932][T15404] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 253.698188][T15412] qnx4: no qnx4 filesystem (no root dir). [ 253.905815][T15426] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2590'. [ 254.032096][ T63] Bluetooth: hci4: command 0x040f tx timeout [ 254.186430][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2593'. [ 254.242225][T15445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.244612][T15445] IPv6: NLM_F_CREATE should be set when creating new route [ 254.246866][T15445] IPv6: NLM_F_CREATE should be set when creating new route [ 254.249507][T15445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.259614][ T40] audit: type=1400 audit(524797.664:62482): avc: denied { node_bind } for pid=15443 comm="syz.8.2595" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 254.321654][T15449] fuse: Unknown parameter 'fd0x0000000000000006' [ 254.333926][ T40] audit: type=1400 audit(524797.734:62483): avc: denied { read write } for pid=15447 comm="syz.5.2596" name="file0" dev="tmpfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 254.341328][ T40] audit: type=1400 audit(524797.734:62484): avc: denied { open } for pid=15447 comm="syz.5.2596" path="/384/file0" dev="tmpfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 254.356871][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2596'. [ 254.360091][T15449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2596'. [ 254.405224][T15457] validate_nla: 8 callbacks suppressed [ 254.405237][T15457] netlink: 'syz.7.2599': attribute type 10 has an invalid length. [ 254.530977][T15457] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 254.572496][T12722] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 254.608173][T15471] netlink: 'syz.5.2600': attribute type 2 has an invalid length. [ 254.610778][T15471] netlink: 'syz.5.2600': attribute type 1 has an invalid length. [ 254.617023][T15473] netlink: 'syz.5.2600': attribute type 2 has an invalid length. [ 254.619672][T15473] netlink: 'syz.5.2600': attribute type 1 has an invalid length. [ 254.685171][ T61] IPVS: starting estimator thread 0... [ 254.692878][T15484] tipc: Started in network mode [ 254.695015][T15484] tipc: Node identity ac1414aa, cluster identity 4711 [ 254.697484][T15484] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.699853][T15484] tipc: Enabled bearer , priority 10 [ 254.717387][ T40] audit: type=1400 audit(524798.124:62485): avc: denied { getopt } for pid=15478 comm="syz.7.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.723429][T12722] usb 13-1: Using ep0 maxpacket: 8 [ 254.726226][T12722] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 254.728492][T12722] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 254.732101][T12722] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.735565][T12722] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 254.739205][T12722] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 254.744604][T12722] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 254.746985][T12722] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 254.751238][T12722] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.756398][T12722] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 254.759818][T12722] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 254.764423][T12722] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 254.766760][T12722] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 254.770243][T12722] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.774334][T12722] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 254.778015][T12722] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 254.782190][T15485] IPVS: using max 38 ests per chain, 91200 per kthread [ 254.785793][T12722] usb 13-1: string descriptor 0 read error: -22 [ 254.787840][T12722] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 254.790678][T12722] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.802066][T12722] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 254.842001][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.981992][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 255.000580][ T61] usb 13-1: USB disconnect, device number 2 [ 255.132057][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 255.206412][ T40] audit: type=1400 audit(524798.614:62486): avc: denied { append } for pid=15527 comm="syz.5.2617" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 255.218911][T15528] syz.5.2617: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 255.274481][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 255.276805][T15525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40685 sclass=netlink_route_socket pid=15525 comm=syz.1.2616 [ 255.323117][T15547] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 255.378943][ T40] audit: type=1400 audit(524798.784:62487): avc: denied { map } for pid=15534 comm="syz.8.2619" path="socket:[68462]" dev="sockfs" ino=68462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.420499][T15566] tmpfs: Bad value for 'mpol' [ 255.422430][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 255.426458][T15566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=15566 comm=syz.8.2625 [ 255.490837][ T40] audit: type=1804 audit(524798.894:62488): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.2625" name="/newroot/38/file1" dev="fuse" ino=1 res=1 errno=0 [ 255.498030][ T40] audit: type=1800 audit(524798.894:62489): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2625" name="/" dev="fuse" ino=1 res=0 errno=0 [ 255.504764][ T40] audit: type=1800 audit(524798.894:62490): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2625" name="/" dev="fuse" ino=1 res=0 errno=0 [ 255.572069][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 255.726743][ T5978] tipc: Node number set to 2886997162 [ 255.750605][T15600] __nla_validate_parse: 8 callbacks suppressed [ 255.750622][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2634'. [ 255.833972][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2634'. [ 255.872021][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 256.017033][T15618] batadv_slave_0: entered promiscuous mode [ 256.020095][T15618] batadv_slave_0: left promiscuous mode [ 256.034596][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.037130][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.142084][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 256.275043][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2650'. [ 256.280621][T15646] netlink: 'syz.5.2650': attribute type 7 has an invalid length. [ 256.290064][T15646] : entered promiscuous mode [ 256.365295][T15656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.419610][T15663] IPv6: NLM_F_CREATE should be specified when creating new route [ 256.478669][T15676] netlink: 'syz.7.2660': attribute type 25 has an invalid length. [ 256.484068][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2656'. [ 256.490168][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2660'. [ 256.496442][T15665] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2656'. [ 256.638922][T15697] ªªªªªª: renamed from wg2 [ 256.682526][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 256.691363][T15699] overlayfs: failed lookup in lower (newroot/403, name='file1', err=-40): overlapping layers [ 256.828314][T15716] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2671'. [ 256.831225][T15716] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2671'. [ 256.891023][T15721] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input36 [ 256.948714][T15729] bond0: (slave rose0): Error: Device can not be enslaved while up [ 256.973231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 256.976579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 256.980287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 256.984016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 256.987746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 256.992923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 257.172572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 257.192473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 257.283352][T15749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.310603][T15754] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2683'. [ 257.415080][T15752] sp0: Synchronizing with TNC [ 257.511959][ T6035] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 257.661959][ T6035] usb 6-1: Using ep0 maxpacket: 16 [ 257.666266][ T6035] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.671142][ T6035] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.681598][ T6035] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 257.691382][ T6035] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 257.703069][ T6035] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.706767][ T6035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 257.709447][ T6035] usb 6-1: SerialNumber: syz [ 257.725456][ T6035] hub 6-1:1.0: bad descriptor, ignoring hub [ 257.727453][ T6035] hub 6-1:1.0: probe with driver hub failed with error -5 [ 257.731557][ T6035] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 257.744514][T15771] Invalid/unusable pipe [ 257.830459][T15775] netlink: 'syz.8.2689': attribute type 1 has an invalid length. [ 257.839275][T15775] netlink: 236 bytes leftover after parsing attributes in process `syz.8.2689'. [ 257.846351][T15777] qrtr: Invalid version 0 [ 257.876507][T15777] tmpfs: Unknown parameter 'nrC~]ÕW¦íÐ1' [ 257.931739][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 257.933361][T15786] netlink: 'syz.7.2694': attribute type 1 has an invalid length. [ 257.965140][T15786] bond3: (slave geneve2): making interface the new active one [ 257.968830][T15786] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 257.973481][ T1262] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 257.976430][ T1262] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 257.980455][ T1262] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 257.985577][ T1262] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 258.016149][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 258.052851][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 258.127419][T15735] raw-gadget.0 gadget.1: fail, usb_ep_set_wedge returned -11 [ 258.157954][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 258.233691][T12722] usb 6-1: USB disconnect, device number 18 [ 258.333446][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 258.361919][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 258.648190][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 258.670868][T15839] xfrm0 speed is unknown, defaulting to 1000 [ 258.673915][T15839] lo speed is unknown, defaulting to 1000 [ 258.686076][ T63] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 258.820877][T15856] tmpfs: Cannot change global quota limit on remount [ 258.826080][T15855] tmpfs: Cannot change global quota limit on remount [ 258.832496][T14492] udevd[14492]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 258.944195][T15860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=15860 comm=syz.1.2714 [ 259.130327][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 259.201412][T15873] netlink: 'syz.7.2715': attribute type 12 has an invalid length. [ 259.267533][T14493] udevd[14493]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 259.531941][ T1459] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 259.612180][T15889] xfrm0 speed is unknown, defaulting to 1000 [ 259.614816][T15889] lo speed is unknown, defaulting to 1000 [ 259.693775][ T1459] usb 10-1: config 0 has no interfaces? [ 259.696268][ T1459] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 259.700279][ T1459] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.704861][ T1459] usb 10-1: config 0 descriptor?? [ 259.713088][T15894] autofs4:pid:15894:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 259.789192][T15889] veth1_vlan: left promiscuous mode [ 259.837120][T12722] IPVS: starting estimator thread 0... [ 259.889692][T15907] fuse: Bad value for 'group_id' [ 259.891355][T15907] fuse: Bad value for 'group_id' [ 259.891421][T15906] 9pnet_fd: p9_fd_create_tcp (15906): problem binding to privport [ 259.913599][ T1459] usb 10-1: USB disconnect, device number 15 [ 259.955442][T15900] IPVS: using max 42 ests per chain, 100800 per kthread [ 260.417356][T15925] ------------[ cut here ]------------ [ 260.419210][T15925] WARNING: CPU: 3 PID: 15925 at arch/x86/kvm/x86.c:11551 kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 260.422903][T15925] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 260.425376][T15925] CPU: 3 UID: 0 PID: 15925 Comm: syz.7.2728 Not tainted syzkaller #0 PREEMPT(full) [ 260.431019][T15925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.435123][T15925] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 260.437265][T15925] Code: 0a 00 00 00 00 00 00 e8 05 6b be 1e 31 ff 89 c5 89 c6 e8 c4 e4 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 72 e9 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 64 e9 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 260.443555][T15925] RSP: 0018:ffffc90005ce7c30 EFLAGS: 00010293 [ 260.445549][T15925] RAX: 0000000000000000 RBX: ffff888026ea5280 RCX: ffffffff814191ff [ 260.448039][T15925] RDX: ffff888025a44880 RSI: ffffffff8141a27e RDI: 0000000000000007 [ 260.450554][T15925] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 260.453334][T15925] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888028d6d000 [ 260.455928][T15925] R13: ffff888026ea5358 R14: 0000000000000000 R15: ffff888026ea55b4 [ 260.458476][T15925] FS: 00007f7403dcf6c0(0000) GS:ffff8880d69bb000(0000) knlGS:0000000000000000 [ 260.461309][T15925] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.463590][T15925] CR2: 000000005200000c CR3: 0000000054347000 CR4: 0000000000352ef0 [ 260.466276][T15925] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000508c [ 260.468917][T15925] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 260.471700][T15925] Call Trace: [ 260.472939][T15925] [ 260.474246][T15925] kvm_vcpu_ioctl+0x5eb/0x1690 [ 260.475929][T15925] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 260.477648][T15925] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 260.479584][T15925] ? do_vfs_ioctl+0x128/0x14f0 [ 260.481187][T15925] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 260.483079][T15925] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 260.485358][T15925] ? hook_file_ioctl_common+0x145/0x410 [ 260.487120][T15925] ? selinux_file_ioctl+0x180/0x270 [ 260.488827][T15925] ? selinux_file_ioctl+0xb4/0x270 [ 260.490451][T15925] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 260.492237][T15925] __x64_sys_ioctl+0x18b/0x210 [ 260.493802][T15925] do_syscall_64+0xcd/0x4c0 [ 260.495303][T15925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.497166][T15925] RIP: 0033:0x7f7402f8ebe9 [ 260.498630][T15925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.505655][T15925] RSP: 002b:00007f7403dcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.508627][T15925] RAX: ffffffffffffffda RBX: 00007f74031b5fa0 RCX: 00007f7402f8ebe9 [ 260.511037][T15925] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 260.516750][T15925] RBP: 00007f7403011e19 R08: 0000000000000000 R09: 0000000000000000 [ 260.519307][T15925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.522513][T15925] R13: 00007f74031b6038 R14: 00007f74031b5fa0 R15: 00007ffdf4d261f8 [ 260.525072][T15925] [ 260.526124][T15925] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 260.528429][T15925] CPU: 3 UID: 0 PID: 15925 Comm: syz.7.2728 Not tainted syzkaller #0 PREEMPT(full) [ 260.531399][T15925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.534843][T15925] Call Trace: [ 260.535943][T15925] [ 260.536902][T15925] dump_stack_lvl+0x3d/0x1f0 [ 260.538403][T15925] vpanic+0x6e8/0x7a0 [ 260.539698][T15925] ? __pfx_vpanic+0x10/0x10 [ 260.541167][T15925] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 260.543066][T15925] panic+0xca/0xd0 [ 260.544313][T15925] ? __pfx_panic+0x10/0x10 [ 260.545746][T15925] ? check_panic_on_warn+0x1f/0xb0 [ 260.547306][T15925] check_panic_on_warn+0xab/0xb0 [ 260.548860][T15925] __warn+0xf6/0x3c0 [ 260.550068][T15925] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 260.551840][T15925] report_bug+0x3c3/0x580 [ 260.553174][T15925] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 260.555042][T15925] handle_bug+0x184/0x210 [ 260.556421][T15925] exc_invalid_op+0x17/0x50 [ 260.557885][T15925] asm_exc_invalid_op+0x1a/0x20 [ 260.559430][T15925] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 260.561466][T15925] Code: 0a 00 00 00 00 00 00 e8 05 6b be 1e 31 ff 89 c5 89 c6 e8 c4 e4 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 72 e9 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 64 e9 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 260.567427][T15925] RSP: 0018:ffffc90005ce7c30 EFLAGS: 00010293 [ 260.569291][T15925] RAX: 0000000000000000 RBX: ffff888026ea5280 RCX: ffffffff814191ff [ 260.571731][T15925] RDX: ffff888025a44880 RSI: ffffffff8141a27e RDI: 0000000000000007 [ 260.574119][T15925] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 260.576559][T15925] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888028d6d000 [ 260.578978][T15925] R13: ffff888026ea5358 R14: 0000000000000000 R15: ffff888026ea55b4 [ 260.581364][T15925] ? kvm_arch_vcpu_ioctl_run+0x45f/0x1980 [ 260.583128][T15925] ? kvm_arch_vcpu_ioctl_run+0x14de/0x1980 [ 260.584983][T15925] kvm_vcpu_ioctl+0x5eb/0x1690 [ 260.586575][T15925] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 260.588289][T15925] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 260.590278][T15925] ? do_vfs_ioctl+0x128/0x14f0 [ 260.591834][T15925] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 260.593441][T15925] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 260.595501][T15925] ? hook_file_ioctl_common+0x145/0x410 [ 260.597229][T15925] ? selinux_file_ioctl+0x180/0x270 [ 260.598782][T15925] ? selinux_file_ioctl+0xb4/0x270 [ 260.600402][T15925] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 260.602040][T15925] __x64_sys_ioctl+0x18b/0x210 [ 260.603553][T15925] do_syscall_64+0xcd/0x4c0 [ 260.605066][T15925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.607100][T15925] RIP: 0033:0x7f7402f8ebe9 [ 260.608832][T15925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.615870][T15925] RSP: 002b:00007f7403dcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.619082][T15925] RAX: ffffffffffffffda RBX: 00007f74031b5fa0 RCX: 00007f7402f8ebe9 [ 260.621910][T15925] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 260.624323][T15925] RBP: 00007f7403011e19 R08: 0000000000000000 R09: 0000000000000000 [ 260.626790][T15925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.629232][T15925] R13: 00007f74031b6038 R14: 00007f74031b5fa0 R15: 00007ffdf4d261f8 [ 260.631746][T15925] [ 260.633461][T15925] Kernel Offset: disabled [ 260.634848][T15925] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:32:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff820746cd RDX=ffff88803184c880 RSI=ffffffff820746da RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90003d1f828 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=000055558fe13000 R13=ffff888033171098 R14=dffffc0000000000 R15=0000000000000001 RIP=ffffffff81bb8c2b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bb000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9ac66e7d60 CR3=00000000343f1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ac5b876c3 00007f9ac5b876c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd23fd2110 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558fc843b7 000055558fc83e90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ac5b87d20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558fc6f762 000055558fc6f3d0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffffffffffff 9f0803a003001000 0390030000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005ba8008 0001000004080606 011f8e00100005ba 8008000100000408 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0606011f8e000200 07038004088485ba c008000100000408 0606011fd2000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001ffff ffffffffffff9f08 03a0030010000390 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88801eef4880 RCX=ffffffff815ce6f4 RDX=1ffff110075e6c25 RSI=ffffffff815ce703 RDI=0000000000000000 RBP=ffff88803af34880 RSP=ffffc90006cdfa38 R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b9367ef RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555591660500 ffffffff 00c00000 GS =0000 ffff8880d67bb000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000fe9008 CR3=0000000000f32000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc81ccd930 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc81ccdab6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc81ccdab6 00007ffc81ccdabc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f771a812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f771a812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f771a812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f771a812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f771a812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f771a812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff95e22a40 RBX=ffff888026050af0 RCX=00000000f100f6e0 RDX=0000000000000000 RSI=ffff888026050b40 RDI=ffff888026050b18 RBP=0000000000000000 RSP=ffffc900066862d8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000000 R12=ffff888026050b40 R13=ffff888026050000 R14=0000000000000002 R15=0000000000000001 RIP=ffffffff8197a762 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f47638096c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d68bb000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc81ccd8c0 CR3=000000004edbf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000508c DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0be3b2a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0be3b426 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0be3b426 00007ffe0be3b42c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4762a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4762a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4762a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4762a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4762a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4762a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856439c5 RDI=ffffffff9b10f0a0 RBP=ffffffff9b10f060 RSP=ffffc90005ce75a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b10f060 R15=ffffffff85643960 RIP=ffffffff856439ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f7403dcf6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d69bb000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=0000000054347000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000508c DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb9ae8420 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb9ae85a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb9ae85a6 00007fffb9ae85ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc9212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc9212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc9212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc9212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc9212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc9212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000