last executing test programs: 4m19.34841744s ago: executing program 32 (id=301): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000002340)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000003c0)="919f31e60f56df74b694d3cc94ed8834859e", 0x12}], 0x1}], 0x1, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="17f8fd1a8eadad0c0ac0b4a181d976b4f353a7e5876c04d520aecc60da6ef34029009aa4fbb0b78034cc88f1e02b0ab3d51e95f958a60af350c1d1815273c9f4b178921cdcbc80", 0x47) munlockall() syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) migrate_pages(0xffffffffffffffff, 0x9, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x9) 4m12.341605047s ago: executing program 33 (id=427): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000014000180060001000200000008000300ac1414aa302c0be8300b7e5e3619430989d0b952dcbc373b353a5f14a7244b6432bd68557805580fb517a004b6fa96705eda1fbcf4d5eed9216125d5885d78a27f1d08be457d0600aae72e1ac12dca5726d1f31bdd4ce4e47cba04e2cebf0da0959c8e755ac4981470093d133ddf390ceafd927f330b338c615f4d1ca687f1ea77227d83d99a794b883b013189da968fb5e6be20b7a85668fc09a1690b5194ddd7db8efa15f196327f5e1c97f9bbf2c9f3af2e234a3d5870b7f4c820d473b89f0542c04b437ddec2f20aa7ab"], 0x28}}, 0x10) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffe25, 0x24, 0x3, [@enum={0x5, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x3}, {0xd, 0x4}, {0x0, 0x9}]}]}, {0x0, [0x0]}}, 0x0, 0x3f, 0x0, 0x8}, 0x20) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendto$inet(r6, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) 3m40.372144258s ago: executing program 4 (id=612): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0xdd, 0x0, r1}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) (async) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000340)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0x1}, 0x48) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) (async) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) (async) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000002c0)={0x50, 0x0, r7, {0x7, 0x29, 0x846, 0x5090880b, 0x0, 0xd, 0xd, 0x4, 0x0, 0x0, 0x8, 0x1}}, 0x50) (async) syz_fuse_handle_req(r6, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x80, {0x1fffffffffffffc, 0x2, 0x5, 0xfffffffffffffffe, 0xa003, 0x1ff, {0x8, 0x9, 0x6, 0x80, 0x2, 0x3f42, 0xc05, 0x6, 0xfffffffe, 0x2000, 0x0, 0x0, r8, 0xe70, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f00000002c0)) mount$fuse(0x0, &(0x7f0000000000)='./file3\x00', &(0x7f0000000040), 0x274081, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@default_permissions}, {@default_permissions}, {@blksize}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@uid_gt={'uid>', r9}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@smackfsroot={'smackfsroot', 0x3d, '))[)$^'}}]}}) 3m40.032259081s ago: executing program 4 (id=614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0xfffffffb}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r2, 0x9, 0x6}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r5, 0x0, 0x5b, 0x40, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001180)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804004, 0x8, 0x0, 0x0}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r9 = fanotify_init(0x81, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="058c4a00000000007111ab0000800000020000000200000085000000050000000018cd90b13bf7783b052653b0d06e7791fba0e6e93a1a2e43314a15fafda905a326bd377f748e8a57fe96c447ef7aceef08856f140a5113519e9100000000000000000041d25486d02dda4b3ab282a8094b6df325a4a83246edaff9d6f601c539e42bf33f36dc5e9951ba394c595dbd0feb245e8722b063a6a3a2f14af1e3c1b0"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) fanotify_mark(r9, 0x105, 0x40001032, r8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) read$FUSE(r9, &(0x7f00000057c0)={0x2020}, 0x2020) 3m39.625136146s ago: executing program 4 (id=615): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1062) socket$unix(0x1, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x40, 0x169) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000380)='@\a\x0e%\x8d\xfa\x998\xbd\x80\xe2u\xa0\xdb,\b{\x0e\x82\x9b\x91~h9\xaa.\x8b1L\xb3', &(0x7f0000000340)='./file0\x00', 0x0, 0x1885f, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500), 0x20040c1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r11, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) 3m36.222124397s ago: executing program 4 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1e0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00') readahead(r0, 0x0, 0x8) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 3m36.10236212s ago: executing program 4 (id=636): getgroups(0x4, &(0x7f0000000000)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x44) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_INGRESS_BLOCK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) setregid(r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r4, &(0x7f0000000140)=""/170, 0xaa, 0x20000000000004) 3m34.841531214s ago: executing program 4 (id=641): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000008000000000000000000000009b7ec02870c948f47baf41d130f7876ea15f4429c631a2e34bde6848a8f48258db59c16f4faa57c5b6da4f0e16f55d3bb6a53c4e10417ae1c6cd932f29ef7a2d9a24214e16420ea3710668e7d88daa38286be2e43eaad89733311c536351a0d567d420530ae5a4bbb78cba6be5ea04afd02c041369d316b3de12ca6a112e7afb9718c4006c61987b4f926d5b50536a4e7cde92fac3d2a2b0c4f5860181ca3c2a", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000280001801400040000000000000000000000ffffac1414aa060001000a00800008"], 0x3c}, 0x1, 0x0, 0x0, 0x4010080}, 0x4000000) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fbdbdf3500000000", @ANYRES32=0x0, @ANYRESDEC=r1], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x200000c4) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000006a0000022bbd7000fbdbdf250a0000001e0000000800010001000000080001000100000008000a0001000000080001000100000004000b0008000100000000000400090008000100000000000800010001000000"], 0x58}}, 0x40400c0) 3m34.592274764s ago: executing program 34 (id=641): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000008000000000000000000000009b7ec02870c948f47baf41d130f7876ea15f4429c631a2e34bde6848a8f48258db59c16f4faa57c5b6da4f0e16f55d3bb6a53c4e10417ae1c6cd932f29ef7a2d9a24214e16420ea3710668e7d88daa38286be2e43eaad89733311c536351a0d567d420530ae5a4bbb78cba6be5ea04afd02c041369d316b3de12ca6a112e7afb9718c4006c61987b4f926d5b50536a4e7cde92fac3d2a2b0c4f5860181ca3c2a", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000280001801400040000000000000000000000ffffac1414aa060001000a00800008"], 0x3c}, 0x1, 0x0, 0x0, 0x4010080}, 0x4000000) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fbdbdf3500000000", @ANYRES32=0x0, @ANYRESDEC=r1], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x200000c4) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000006a0000022bbd7000fbdbdf250a0000001e0000000800010001000000080001000100000008000a0001000000080001000100000004000b0008000100000000000400090008000100000000000800010001000000"], 0x58}}, 0x40400c0) 2m40.171386713s ago: executing program 1 (id=873): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0x1000, 0xb3, &(0x7f0000000040)=""/179}, {0xdddd1000, 0x16, &(0x7f0000000100)=""/22}]}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) 2m39.639645337s ago: executing program 1 (id=876): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000180000002cbd700000000000080012000000020000000000000000000600000000000000fdffffff00000000ac1efa01000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000700000000fe8000000000000000000000000000aa000000000000000005000600000000000a00000000000000fc020000000000000000000000000000000000000000000004000300"], 0xc0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, 0x0, 0xa17, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001400)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)={0x30, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="03000800010000000000140000004500801614000000000190780a010100ac1414aa0400907800000000450000000000001100110000ac1414aa7f000001d0105ff3cc9fc39bedf6edf73d30f71dc21701b5cdf8a92021d136b9ef5cca9346c249e801729cf5c07015a371d49be70148fce3651d28d6d88e066536929f4c1b304d8e71b56f8e7ad25884e1f7826646cab84d7e3f7789c6ee0655e85336479098193cc695a26bbf1e226f46af106cd8b59547915925"], 0xfdef) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x634}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x24}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="1201b0048020", 0x0, 0x0, 0x4, 0x0, 0x0}) r8 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440)=r6, 0x1) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:clock_device_t:s0\x00', 0x24, 0x1) sendmsg$key(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000240)={0x2, 0x11, 0x3, 0x2, 0x223, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x4d3, 0x10, 0xe8, 0x86, 0x0, 0x80000000}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2d, 0x3504}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}, @sadb_ident={0x2, 0xa, 0x1000}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x6, @empty, 0x6}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x5, @private0, 0x2}}, @sadb_x_sec_ctx={0x3, 0x18, 0x9, 0x2, 0xf, "0fdcd3d858ee895526292748958396"}, @sadb_x_sec_ctx={0x201, 0x18, 0x5, 0x6, 0x1000, "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"}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd28, 0x3502}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010102, @in=@empty, 0x11, 0x4}]}, 0x1118}}, 0x400c014) 2m38.121693664s ago: executing program 1 (id=883): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd27, 0xa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x28}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd27, 0xa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x28}}, 0x0) (async) 2m38.049140689s ago: executing program 1 (id=886): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0800000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000014130000c000000000ffffff7fffffffff0000000000000000a7c916e043670f75dac402197315ef12a6109754e41a402e8bf28b55b5017b6ba36e26e374aff1d2716163dcab3a8838dbe7a9a27aad8f631f71ded798d72f848fc7630ac5680dce4f49c0d2894872195c1eedb6b488192f2c5eedb2abeb6d38c2a64c5d84773af7e163f75dda6d4cbbf8180197a5c4d6db533c2649ef62f92d3d4c673568df55e6997e3e629591de97a6e1478525c0d2ddfb95aec6bca7c2c78ee7feef"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0xffffffffffffffff, 0x2080) timer_create(0x6, &(0x7f0000000180)={0x0, 0x28, 0x4, @thr={&(0x7f00000004c0)="15543574b039aef40944de22d32d219bef18e5ff5880917bff50c6c1b7e0817f66007eca332a0f82c2552e295faf8b83721d39b38c9db4be5383a85ba01bd14cbb89b48b32ecf17a9b6fdcee6e8b75d40fa959006d71dc0aa7acacd725e2d0a2bf4240fa589e63afd2bd33dcd88c38ae720ab51048bece5e74d96c8f7607da7404f62cbc27c468355a8d6fa00ba104a2795f106f2adf3147d2d6b72cb8d12e4c16117b36c01e28c910199c629196620faa6a85992684bf1e2616d70f96cc8260854d0efd2acc23af5515628a0c5b1232a63aa70fa033353fedcc9cce", &(0x7f00000000c0)="678f4b"}}, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0xffff, 0x5, 0x1, 0x40, r2, 0xffff0908, '\x00', 0x0, r4, 0x1, 0x3, 0x5}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0xffff, 0x5, 0x1, 0x40, r2, 0xffff0908, '\x00', 0x0, r4, 0x1, 0x3, 0x5}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044094) 2m37.450319301s ago: executing program 1 (id=890): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002", 0x17}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/113, 0x71}, {0x0}], 0x2, 0x3, 0xd) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0xa0, 0x31, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x1, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8d}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0xa0}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3], 0xfe33) r4 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) read(r4, &(0x7f00000002c0)=""/215, 0xd7) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r6, 0x8000000000000000, 0x4) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = accept4(r5, 0x0, 0x0, 0x0) writev(r7, &(0x7f00000008c0)=[{&(0x7f00000002c0)="993b2d78550caf60cbf20a575f235c4344520be82f9adcbe77dde501c1b34798b5", 0x21}], 0x1) recvmmsg(r7, &(0x7f000000a140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001980)=""/109, 0x6d}], 0x1}, 0x8}], 0x1, 0x40010061, 0x0) 2m37.1711931s ago: executing program 1 (id=893): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800010000000000000000000a002000fc0000000054294327b2418b00000014000500ff020000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800010000000000000000000a002000fc0000000054294327b2418b00000014000500ff020000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r4 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4, 0x0, 0x0, r4}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101104, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000100)={0x1, 0xffffffff, 0x2, 0x8, 0x8, 0x6}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000100)={0x1, 0xffffffff, 0x2, 0x8, 0x8, 0x6}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x80, 0x700, 0x36b, 0x1, {{0x14, 0x4, 0x0, 0x1, 0x50, 0x65, 0x0, 0x1, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x14, 0xfd, 0x3, 0x4, [{@rand_addr=0x64010100, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @end, @lsrr={0x83, 0x13, 0xcd, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0x71, 0x0, 0x0, [0x1]}, @end, @generic={0x83, 0x4, "5bc4"}]}}}}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r8, 0x107, 0xa, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x3, 0x1) (async) r9 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r9, &(0x7f0000000480), 0x21, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x2c, 0x2c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x10, 0xb}, {0xfff3, 0xb}, {0xffff, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x2c, 0x2c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x10, 0xb}, {0xfff3, 0xb}, {0xffff, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) 2m21.958099364s ago: executing program 35 (id=893): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800010000000000000000000a002000fc0000000054294327b2418b00000014000500ff020000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800010000000000000000000a002000fc0000000054294327b2418b00000014000500ff020000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r4 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4, 0x0, 0x0, r4}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101104, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000100)={0x1, 0xffffffff, 0x2, 0x8, 0x8, 0x6}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000100)={0x1, 0xffffffff, 0x2, 0x8, 0x8, 0x6}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x80, 0x700, 0x36b, 0x1, {{0x14, 0x4, 0x0, 0x1, 0x50, 0x65, 0x0, 0x1, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x14, 0xfd, 0x3, 0x4, [{@rand_addr=0x64010100, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @end, @lsrr={0x83, 0x13, 0xcd, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0x71, 0x0, 0x0, [0x1]}, @end, @generic={0x83, 0x4, "5bc4"}]}}}}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r8, 0x107, 0xa, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x3, 0x1) (async) r9 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r9, &(0x7f0000000480), 0x21, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x2c, 0x2c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x10, 0xb}, {0xfff3, 0xb}, {0xffff, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x2c, 0x2c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x10, 0xb}, {0xfff3, 0xb}, {0xffff, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) 1m25.060912469s ago: executing program 5 (id=1699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x2000}) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="70000000000905030000000000000000000000000900010073797a31000000000c00048004000140000000003c0002000c00028005000100000000002c000180140003040000000000000000000000000000000014000400fe8000000000000000000000000000bb08000540"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x5, 0x0, &(0x7f00000009c0)) (async, rerun: 64) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) (rerun: 64) 1m25.060700325s ago: executing program 5 (id=1700): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @multicast1}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000017f000001010000000100000064010111"], 0x14) io_setup(0x1, &(0x7f00000012c0)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101081, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/timers\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x2b, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="2a0aa32f9d5c778d"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x1, 0xc8a3, 0x4, 0xf, 0x30000, 0xdb3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x4000000000000061}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000240)={0x0, r6, 0x0, 0x0, 0x4}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8028}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x4, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m23.921248751s ago: executing program 5 (id=1714): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000000000061117400000000001800000000000000000000000000001295000000000000004a70404b599067033292630734d0b7a35741e52f57c3af19ee2ed0922beda993ce02274dc1111cabb1f59da7d41f39e5e3c25d83196173f74b43d9bf33843b9c3d763a99e5d023c3ff6d2cbd60a32095126c665d7539e2042ecd1087aaae40b97d01c0848afdff201409fb4f68424369ca8fdc2281780fff5dae722e000000e0427a393e0a5581adc66e2479b8"], &(0x7f0000000000)='GPL\x00'}, 0x80) 1m23.920854753s ago: executing program 5 (id=1716): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd27, 0x4, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd27, 0x4, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) 1m23.860950245s ago: executing program 5 (id=1717): symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) getsockopt$sock_int(r1, 0x1, 0x28, 0x0, &(0x7f0000000380)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x8001}]}]}}, 0x0, 0x66}, 0x28) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0155e8d94000000000003400000034000000060000000400000000000007000000000000000000000001050000000800000000000000010000850900000000000000040000000000000a00000000da00"], 0x0, 0x52, 0x0, 0x1}, 0x28) (async, rerun: 32) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async, rerun: 32) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9a, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f00000003c0), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) (async) dup3(r3, r2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0) 1m23.261159908s ago: executing program 5 (id=1730): socket$nl_route(0x10, 0x3, 0x0) 1m23.197151189s ago: executing program 36 (id=1730): socket$nl_route(0x10, 0x3, 0x0) 1m14.819922508s ago: executing program 6 (id=1871): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000010000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 1m14.816431465s ago: executing program 6 (id=1872): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x240002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xbc, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0xaa, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"]}]}, 0xbc}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) 1m14.740774661s ago: executing program 6 (id=1873): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) listen(r0, 0x5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce1925", 0x5a}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f70", 0x12}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)="353a35d6094e4e", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="252caf3a209539dd4482324da34840047e322d094abd47ba796c5909ccd4e0046bb1cecbad790873c1e322ec988526e2dde59e7ff8a900c525297eea9df0d0bf652b6c78f435436a6ea7fef2d9effe14ba9d43db9cc558c50b7957a51d7e5bdec3a04a8df3113927462bd0027d86c1cc9fa13a3092e8bb88406aba1359947e1e77921c434c5046", 0x87}], 0x1}}], 0x3, 0x0) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) 1m13.920257837s ago: executing program 6 (id=1879): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x24004052) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x2, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2c4041, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendfile(r2, r3, 0x0, 0x20fffe82) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) syz_clone(0xb000, &(0x7f0000000140)="7ad445bab8606c683b0f9254f025ba606bf5c67f333a3d06b1228e8112d0116438cb4808ccafc6b9fdac61c10d564559047ed1c3df3774d039002231316dc2e9b6f51cc14c1fa7734842c1a8591a1f6a3b8e1429057a7b1628d0e909550dc2c0bff1b5fd74d447c750608573e80a1e526ab330df14adebdc3eaf", 0x7a, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="5278abfa099a8cf33671bdded577e39feadd903499baf8456d") r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x20) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r9 = accept4(r8, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9) r10 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000440)=r6, 0x12) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="000428bd7000fddbdf2513e60000080003009e174c47c1fa8f36807696b107f60c86a066ff87863de8820d4833ad65d437c375a0e0ddb604ea064e95745bf02d0f5d925adcc1e50bca1e4922c2bc4d3bb711ac92880078669f54871f397179", @ANYRES32=r4, @ANYRESHEX=r6, @ANYRES8=r7, @ANYBLOB="0e00060003000000030000000c000600030000000300000009001d00", @ANYRES32=r5, @ANYRESHEX=r1, @ANYRESOCT=r8, @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="13f8c55bde84eef483eafb6a849e7a9c6de36e7dc54b31315175304b555b9451dbd8bb131ffdb61fdae377bc8fbe1f063a52c099dbf66756772e5a0daa7aea9f0f7cf9c3f9d869d2bb99760006f8fa4adb72732fee0625aa408a4a3d20b6d342341efda55d2d1c93d05228911fa4f7a4153432105c85c9f392960afd825cff1c96f32a9d25d21ec576899ac913c71923cc7809077caaf695291d64b5e9ed9c765ba539871521a0f6a568dc3dc4000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc008000}, 0x10040000) socket$nl_netfilter(0x10, 0x3, 0xc) 1m13.750350495s ago: executing program 6 (id=1880): clock_gettime(0x9, &(0x7f0000000280)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x29ab, &(0x7f0000000380)={0x0, 0x5888, 0x10000, 0x1, 0x1c1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x20, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040890) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getuid() fstat(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x90004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @random="28afd1759d63"}, 0x14) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r3) fstat(0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="ef9fee729da82e1912ff799cef35b81f0b52a046df9cfd317b878d19be16f0d8acea086b63087d653304f3bef8ef925195ca675ecfc3c6407a2313083e3d5d402ecb34d178dabd134f77e9dc42c9992067af5ae64d4dbb4209df30b9be7d7f2d449b859e127ad39d61e2347d1f1c95abd466289884f5c0108c442fe41c84738fd2914bc6856046483413ea577e24023d49db0be5900c8c84d0f66903b28647c516a03afe68f65de6c4c382b3ed0c0a8c1e5be0949df14f4091ed8e857115", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf25060000002d00070073797374656d5f753a6f626a6563745f723a61646d696e5f7061737377645f657865635f743a73300000000008000500ac1e00011400060062617461647630000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20048804}, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078ac1e00cca21414aa0b009078030000004500000000000000002f0000ac14140ae0000001040086dd0000ffff"], 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x0, 0x7, 0x300000000000, 0x8000000000000001, 0x80000001, 0x4, 0x200, 0x1, 0x1006, 0xfffffffffffffffe, 0xffb, 0x9, 0x4000009], 0x0, 0x80402}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6, 0xa, 0x0, 0x0, 0x1ff, 0xd3, 0x3, 0x7, 0x1, 0x81, 0x8, 0xf7, 0x0, 0xb66b, 0x5, 0xd, 0x3, 0x5, 0x48, '\x00', 0xf9, 0xd4fd}) 1m13.559663096s ago: executing program 6 (id=1882): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0) renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) (async) setresgid(0xee00, 0xee01, 0x0) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (async) lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') setuid(0xee00) (async) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0701fe80070200002e0100000000010041010000ff7f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/288], 0x120) 1m13.471061951s ago: executing program 37 (id=1882): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0) renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) (async) setresgid(0xee00, 0xee01, 0x0) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (async) lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') setuid(0xee00) (async) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0701fe80070200002e0100000000010041010000ff7f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/288], 0x120) 1m13.199864724s ago: executing program 0 (id=1889): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x82) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@can_newroute={0x13c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0xfffffffffffffffc, 0x2, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0xfd, 0x0, 0xff, 0x0, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x13c}}, 0x0) 1m13.140746643s ago: executing program 0 (id=1890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) pipe2$9p(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r1, &(0x7f0000001080)={0x7, 0x7b, 0x1}, 0x7) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x9, 0x1, 0x10000, 0x4, 0x5, 0xcc7, 0x0, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0xf4, 0x0, 0x1a44b, 0x3, 0x40000003, 0x89, 0xcaa7, 0x4000, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0x5, 0x2000]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x101, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0x8, 0x100000000, 0x1, 0x40000000009, 0x408000000000005, 0x800040068], 0x1000, 0x80}) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0xf800, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m12.997979058s ago: executing program 0 (id=1892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0xff, r1, 0x80000}) (async, rerun: 32) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001200)=[@text32={0x20, &(0x7f0000000140)="f3ab660f221766b802008ed0b8da0000000f23d80f21f835c00000f00f23f8f30fc7b06000000066b818018ed80f20e035000040000f22e02e0ffe823b06000067360f01cfb8090000000f23d00f21f835300000060f23f8", 0x58}], 0x1, 0x20, 0x0, 0x0) (rerun: 32) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000100)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/warn_count', 0x88000, 0x1) read$alg(r7, &(0x7f0000000e00)=""/59, 0x3b) r8 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x11, r8, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x81, 0x3) (async) r9 = dup(r6) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000001c0)=0x68) 1m12.860567013s ago: executing program 0 (id=1897): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x6223, 0x1000, 0x3, 0x188}, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x26) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002001e0000000c00000006000100fe0f00000600050088a8000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x60}}, 0x8000) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c81, 0xffffffffffffffb6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x4800003e, r7, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, &(0x7f00000000c0)=0x1fe1, 0x4) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000080)) 1m12.698323427s ago: executing program 0 (id=1899): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f", 0x1f) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYRESDEC]) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x10, &(0x7f0000000400)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m12.449483767s ago: executing program 0 (id=1903): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c}]}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) read$dsp(r0, &(0x7f0000000080)=""/203, 0xcb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x5}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}]}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 1m12.36103517s ago: executing program 38 (id=1903): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c}]}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) read$dsp(r0, &(0x7f0000000080)=""/203, 0xcb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x5}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}]}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d010000000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8cc658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ad539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c97888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5a444a41bac326ddea7d7b9c90d44f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2a4d39b43878b6ef26ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee92ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93b71db0a2366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00000000000000000000009a8329eb97567787ff28dd96c8e0f9e3c84394afc8f83dc6c6c813fafed61cdd6117092562837a3fa3fc388ab57429a9ecc4fddb0f0a7e4a1415d82d8bac999696d9130e36fc86df796a72559c523fae90d0b742d09cd2edf652c67aa62742e9ce0ff5283f627b622a83576f57d0899e0da8483f9dc296"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 16.889015502s ago: executing program 9 (id=2381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x553042, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c020000000900010073797a3000000000090003006c797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, 0x0, &(0x7f00000000c0)) r3 = landlock_create_ruleset(&(0x7f0000000000)={0xc00}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x260) landlock_restrict_self(r3, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14}}, 0x6c}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 16.748821194s ago: executing program 9 (id=2383): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x9}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x201, 0xbf42, 0x81, 0x5, 0xae, 0x1, 0x0}, &(0x7f0000000080)=0x20) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) flock(r0, 0x1) r2 = inotify_init1(0x80800) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) io_setup(0x3, &(0x7f0000000140)) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x5, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ftruncate(r3, 0xd729804) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000200)) ioctl$I2C_TENBIT(r0, 0x704, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000240)={0xd, 0xe5b00000, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x6, 0x81}) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, r6, &(0x7f0000000280)) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000002c0)={0x2, 0x2, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000300)={0x26, 0x18, 0x2, 0x4, 0x1, 0x5, 0x3, 0x70}) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000340)={0x5, 0x200}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000380)={0xd5, 0x0, 0x48}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000400)=0x2) close(r7) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x8, &(0x7f0000000440)=[{0x7f, 0x8, 0xf, 0x1}, {0x8, 0x81, 0x9, 0x1}, {0xfffa, 0x81, 0x6, 0x3}, {0x7, 0xa7, 0x2, 0x401}, {0x2, 0x5, 0x1, 0x1000}, {0x0, 0x8, 0x2, 0x9}, {0x8, 0x40, 0x9, 0x400}, {0x807c, 0x4, 0x1, 0x7}]}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000004c0)={r1, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000580)=0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000005c0)={r8, 0x5}, &(0x7f0000000600)=0x8) r9 = accept$netrom(r3, 0x0, &(0x7f0000000640)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000680)={r9}, 0x1) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2880}, 0x15) 16.610281069s ago: executing program 9 (id=2387): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0x13}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x28090}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002100000000000000ac05000000000000000009000700000000a0000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000400)={0x4}) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d17, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0x1}, {0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000100)={0x50, 0x0, r10, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r12, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r11, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r11, r9, 0x0) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f00000001c0)={0x9, 0x8, 0x101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r4, 0x0, 0xf69}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffe0, 0x7}, {0xffff, 0xfff3}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16.250117418s ago: executing program 9 (id=2389): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f0000000040)='./file1\x00', 0x0, 0xee00) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x10401, 0x160, 0x1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32=0xffffffffffffffff], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x42401, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRES16=r3, @ANYRESHEX=r0]) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002380)={0x0, 0x18, 0xfa00, {0x200000003, &(0x7f0000002400)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000023c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000180), r4, 0x0, 0x2, 0x4}}, 0x20) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002500)={0x7, 0x0, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HIDIOCSREPORT(r6, 0xc018480b, &(0x7f0000000080)={0x2, 0xffffffff}) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 14.639347363s ago: executing program 9 (id=2401): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000000c0)={{0xf000, 0x8000000, 0x8, 0x1, 0x40, 0x1, 0xde, 0x2, 0x3, 0x7f, 0xfc, 0x97}, {0xeeef0000, 0xeeef0000, 0xc, 0x0, 0x1, 0x9, 0x5, 0xa, 0x15, 0x81, 0x6, 0x2}, {0x1000, 0x10000, 0x0, 0x9, 0x4, 0x71, 0x4d, 0x6, 0x9, 0x3, 0x2, 0x6}, {0xeeee0000, 0xf000, 0xe, 0x7, 0xb, 0x5, 0xf2, 0xd, 0x0, 0x2, 0x6, 0x10}, {0xffff1000, 0x7000, 0x10, 0xfb, 0x0, 0x0, 0x5, 0xb1, 0x40, 0x1, 0x0, 0xe}, {0x8000000, 0x3000, 0xa, 0xf7, 0x80, 0x0, 0x3, 0x44, 0x1, 0x2, 0x4, 0x40}, {0x8000000, 0x6000, 0x19, 0x5, 0x5, 0xb, 0x40, 0x0, 0x7, 0x8, 0x8, 0x6}, {0xeeee8000, 0xdddd0000, 0xc, 0xb7, 0x0, 0x2, 0x5, 0xa4, 0x5, 0x2, 0x4, 0x1}, {0xd000, 0xfff7}, {0x1000, 0x9}, 0x20040028, 0x0, 0x2, 0x20, 0xc, 0xa401, 0x9ab031c6876db24e, [0x5, 0x6, 0x45, 0x4]}) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x400000b4, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r4, &(0x7f0000000000)='./file1\x00', 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.388420863s ago: executing program 9 (id=2415): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x6}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r1, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r2}, 0x20) recvmmsg(r2, &(0x7f000000ab40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/31, 0x1f}], 0x1}, 0x3}], 0x1, 0x10042, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) 12.344472386s ago: executing program 39 (id=2415): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x6}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r1, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r2}, 0x20) recvmmsg(r2, &(0x7f000000ab40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/31, 0x1f}], 0x1}, 0x3}], 0x1, 0x10042, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) 2.778731567s ago: executing program 2 (id=2552): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x620001, 0x22) r1 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x42000, 0x104) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0x9) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) poll(&(0x7f0000000180)=[{r2, 0x500}, {r0, 0x200}, {r3, 0x8}, {r1, 0x1e0}, {r1, 0x1006}, {r0, 0x102}, {r0, 0x8000}, {r0, 0x1}, {r1, 0x1338}], 0x9, 0x6) close(r1) r4 = syz_open_dev$hidraw(&(0x7f0000000200), 0x2, 0x1) sendfile(r0, r4, 0x0, 0x5) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x810, 0xffffffffffffffff, 0x28dbd000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)=0x8) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x7f) ioctl$FBIOPAN_DISPLAY(r7, 0x4606, &(0x7f0000000300)={0x300, 0x350, 0x356, 0x320, 0x3, 0x0, 0x20, 0x2, {0xfffffffd, 0xb57}, {0x0, 0x1ff, 0x1}, {0x7, 0xf043}, {0x7, 0x4, 0x1}, 0x2, 0x0, 0x3, 0xd, 0x0, 0x0, 0x7, 0x2, 0x1ff, 0x10, 0x8, 0x2, 0x10, 0x200, 0x2, 0x6}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x5, 0x2, {{0x6, 0x4, 0x0, 0x7, 0x18, 0x65, 0x0, 0xe, 0x4, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000009c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000680)={0x2c4, r8, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_LINKMODES_OURS={0x1c4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x20, 0x2, '/proc/sys/net/ipv4/tcp_wmem\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.(@:@%$--A\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$)\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x110}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4ca}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.log\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']['}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xce, 0x5, "bc2fb48f2d3c31cdee86f6ba3ae93bfd50400d827aaeb1d30a1c2cb688bc3dce2f715b0c6ecb581761448382102667623f20ce41e43b3090538ee5d50d44862775f6c913fe4098766a2e75458abd325278c0bc532f2513bb3f546c93d43441935a97f123b3d30f0e6f8e4182549d67ab2a5dd15c5686d181522a0e87d7a290c1c0282d6152f8a6ada864e63ef6876b5625f43356b05d7f2ade1deda058a29c468e574b8c7ec2223e8db9f5873203b0a517838e1e6c2d88b51290d2d60885c75111a488ed4cfd782eef17"}, @ETHTOOL_A_BITSET_MASK={0xd, 0x5, "166290fffaa11d8171"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_LINKMODES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfd}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xffffffff}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x840}, 0x20048041) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000a00)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a40)={0x0}, &(0x7f0000000a80)=0xc) fcntl$lock(r7, 0x7, &(0x7f0000000ac0)={0x2, 0x4a08e041c4949974, 0x9, 0x6c, r15}) write$snddsp(r5, &(0x7f0000000b00)="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", 0x1000) 2.699631236s ago: executing program 2 (id=2553): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) geteuid() sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x12, 0xff, 0x0, @empty}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0xdfc, r3, 0x204, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x150, 0x8, 0x0, 0x1, [{0x14c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PEERS={0x350, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2d}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3d}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6c3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe4f}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x81, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, {0x13c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x81}, @WGPEER_A_ALLOWEDIPS={0x108, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}]}]}, @WGDEVICE_A_PEERS={0x8b0, 0x8, 0x0, 0x1, [{0x6c4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x17c, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffff, @private1, 0xfffffbff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dfc3d59dd7c638e4545f22e037bd8d0050c9d5332a241de0f947d7d99833d036"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, @WGPEER_A_ALLOWEDIPS={0x4bc, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0xd}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}]}, {0x4}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x164, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "36a628307f05ad24fa5ec9a4bc0b96c2238223a557b26a33d0d8b76d862408d3"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}]}]}]}, 0xdfc}, 0x1, 0x0, 0x0, 0x20000801}, 0x10) 2.688749303s ago: executing program 2 (id=2556): getgroups(0x4, &(0x7f0000000000)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000002d, &(0x7f0000000200)=0xb1e0, 0x4) sendto$inet6(r2, &(0x7f0000000380)="0a2551d07bf39be06f9b4ee1d29a1b73ab21dcda0e5a6094bdbd279032b83b294b22963cca86d7e8abebb6ef15c4d80b368e4deb273f31f6974b41efd052ae07e769a01d71b87211771f5107400d1db069e58d7d7471cbc7e0dbee2058ed2905474f04b00c075fe79399a8a3380d6ba7d10b55965769e2ec7f275e360251abb1e8d7093f7580a732a9fb47608d72382f0889ad55782b146e72f70a1d25f7bd1c0485e64b155289d64cad1d6d3425f8664e0c53faddfe300216c9b50b5523972c8b8674a4252b068b57a05ce7517cf97603bb0e14f570913929e8b381b7b53a9e45ff14bd4168f992bac06290", 0xec, 0x4, &(0x7f0000000080)={0xa, 0x4e22, 0xf910, @mcast1, 0x1}, 0x1c) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x44) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x20048010) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_INGRESS_BLOCK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) setregid(r0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r6, &(0x7f0000000140)=""/170, 0xaa, 0x20000000000004) 2.619347238s ago: executing program 2 (id=2557): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="0f66e20f22929a131000002f00b805000000b955ee00000f01c10f50c50fad11c744240006000000c74424020199c054c7442406000000000f011c24f0826e00983a058400000065f30f32", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$CDROMMULTISESSION(r4, 0x5310, &(0x7f0000000140)={@lba=0x6, 0x1, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x8008af83, &(0x7f0000000000)={0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x36, 0xe, 0x9, 0xc, 0x2, 0xd, 0x5}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r7, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x24}}, 0x80) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r4, 0x0, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x94) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x40000000000002, 0x7, 0xeab, 0x180, 0x0, 0x0, 0xf2, 0x9, 0x8, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4], 0x1, 0x3c4212}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.343058002s ago: executing program 2 (id=2564): r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x1) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000240)=0x1d4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ufs\x00', 0x200000, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x40078, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000010000104000000ddffffffffffffff00", @ANYRES32=r3, @ANYRESHEX=r3], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8012) 2.129828846s ago: executing program 2 (id=2567): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04fa0103102089"], 0x7) (async) syz_clone(0x84800400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpgrp(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="2c00000000000000000000000000009500cb30dca86e4e00"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x17, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) r0 = gettid() (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async) close(r1) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) (async) r3 = syz_io_uring_setup(0x4099, &(0x7f0000000340)={0x0, 0x6b6d, 0x20000, 0x3, 0x25c}, &(0x7f00000003c0), &(0x7f0000000400)) r4 = syz_io_uring_setup(0x51ee, &(0x7f0000000100)={0x0, 0x2cac, 0x1, 0x0, 0x2b2, 0x0, r3}, &(0x7f0000000440), &(0x7f00000002c0)) io_uring_enter(r4, 0x39d8, 0x7e90, 0x20, &(0x7f0000000300), 0x8) (async) tkill(r0, 0x16) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r5, 0xf44a8000) pivot_root(0x0, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002400010026bd700001dbdf251cf9ffff060003"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4048010) 1.018926252s ago: executing program 8 (id=2592): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e40)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0xb4}, 0x1, 0x0, 0x0, 0x4000820}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) 910.360041ms ago: executing program 8 (id=2593): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000700af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 887.205148ms ago: executing program 8 (id=2594): r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0xe000, 0x20) r3 = fsopen(&(0x7f0000000340)='befs\x00', 0x1) mount$9p_rdma(&(0x7f0000000580), &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x2}}, {@sq={'sq', 0x3d, 0xd129}}, {@timeout={'timeout', 0x3d, 0x4}}]}}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, 0x0, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32], 0x74}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#X\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x4e21}, {@in=@empty, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8}, {}, {}, 0x0, 0x3502, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd25, 0x70bd25, 0x70bd27, 0xcc}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x158}}, 0x1000) open_tree(r2, &(0x7f0000000140)='./file0\x00', 0x801) r7 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x810) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd0000000800040001000100"], 0x58}}, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="b0db06561458330a7ff5012adb70a8d2ed907e7c500312355cec145c0820a3e7e15280b53ebc4f08799ad56b823006bf4f06794afe88728c5563142bcb9416c888d70903c7b643083b383d411b4ce4e530e8c08ea5617dc523a1addb66db5dd8a14721bdce4ecba169ac29b6bfd257da2e7ae0be63dc00fb63e9ef047de24b74da8e0026"], 0x4) write$binfmt_elf64(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r7) execveat$binfmt(r2, r0, 0x0, 0x0, 0x800) 818.873568ms ago: executing program 3 (id=2595): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'i'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 679.527624ms ago: executing program 7 (id=2597): creat(&(0x7f00000000c0)='./file0\x00', 0x48) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0xb0ae, 0xd91, 0x6, 0x9, 0x7, 0x9, 0x7, 0x3ff, 0x377e, 0xff, 0x3, 0x8, 0x100000001, 0x7, 0x9, 0x83], 0x5000, 0x28010}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 679.058807ms ago: executing program 3 (id=2598): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000040)=""/92, 0x5c}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x3e9a02, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x9, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4040001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x54}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b3728facabc7"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) recvfrom$rose(r1, &(0x7f0000000440)=""/58, 0x3a, 0x143, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, r4, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}]}, 0x70}, 0x1, 0x0, 0x0, 0x40025}, 0x40800) sendto(r0, &(0x7f0000000600)="7a9efb1bc2ce5e71add4cbcb100e5b4b62f71252b7517eed0d6ab6a6090da29689d33349baad76369a0bc30380f26a56405da760da0a702da32c8ff894961361e65bfc15cb7e599a1f3c", 0x4a, 0x20000000, &(0x7f0000000680)=@sco={0x1f, @none}, 0x80) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000740)={0x800, 0x18, [0x2, 0x7ff, 0xf, 0x3], &(0x7f0000000700)=[0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000780)={0x0, 0x4}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000800)={0x7, 0x200, 0x2, 0xb29, 0x3, 0xffff, 0x3, 0x6, r6}, &(0x7f0000000840)=0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4010) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) write$selinux_create(r9, &(0x7f0000000a00)=@objname={'system_u:object_r:cron_spool_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xffb, 0x20, './file0\x00'}, 0x4f) pwrite64(r9, &(0x7f0000000a80)="8d08972f332bbade0840c178bf4e9f70690c540f67c72e1ebe7d490fc32ddee86dd8901a60b64b5466f45064bd8ca84cda2820eb0991b8aceecd9b6322c399c37d1739678f1722528dc729caaf8b9e496dc5ffd7ce1800d35e07d17f68e331a60c2adc2efb622362af0d1957a99b30e84c4c58b2db150c1e7a601cbb0d4abbde8afef0ecda604a57b6223efd14822cd1e3384af4acd84790176f1bf1a864514f1180cc", 0xa3, 0x5f) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x4}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1aa2}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044891}, 0x800) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80400480}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, r12, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz1\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4050) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x8}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x50) getsockopt$inet6_int(r9, 0x29, 0xcb, &(0x7f0000000f00), &(0x7f0000000f40)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000f80)=[@in6={0xa, 0x4e20, 0xa, @local, 0xfc9}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xffff}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x6f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}], 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000001040)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001080)={r7, 0x1c1, 0x1}, &(0x7f00000010c0)=0x8) 615.294174ms ago: executing program 3 (id=2599): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="01002dbd7000000000001b000000180001801400020064756d6d7930"], 0x2c}}, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x5c, 0xa, 0x0, "b75cbb1844038d2cd97c94fc49f31638b5f9623a74002a5b00", 0x31303553}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=0x1, @ANYBLOB="366e0000000000000000000000000000000000b1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000200"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000002000000000000005ad823"], 0x0, 0x1a, 0x0, 0x0, 0xe, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[], 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x30, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001500)="000200000000", 0x6}], 0x1}, 0x20000000) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [], 0xa, "315403360756bc96e52583213a0832a31783b7e9f14e904f975b4fe3252afc5150bcfa35e301360c65be43e4ee488911c24112356a0ecc28ee8bf466fb9f5e45f6efb1d02db6d78949903bbd329b3e406f195542225d65fe6c942c300565441feec6d370d4b39097a6eedf031faf46a583cc3769ee6c91a8d9067267a23001ad81eb3d53919edf0546c97c5d572360e089770d43f9206a569895b9a12511797e954de353692c496aed59b6c41646160220e42ea48b0e92e1b50300b23baa8df5de"}, 0x10b2) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_async', 0x20101, 0x4) getsockname$packet(r0, &(0x7f00000014c0), &(0x7f0000001440)=0x3) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x8000000000000, 0x12) fcntl$addseals(r8, 0x409, 0x6) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x15, 0x2, 0x1, "110100005c000000463300", 0x41495043}) setsockopt$RXRPC_SECURITY_KEYRING(r7, 0x110, 0x2, &(0x7f0000000040), 0x0) 615.090837ms ago: executing program 3 (id=2600): r0 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r4 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2400, 0x4002}, 0x90) 607.28582ms ago: executing program 7 (id=2601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, r2, 0x0, 0x0, 0x5, 0x2, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, r2, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 490.334777ms ago: executing program 3 (id=2602): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000001200af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 488.256442ms ago: executing program 3 (id=2603): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/42, 0x2a) 488.045099ms ago: executing program 7 (id=2604): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84834}}], 0x7b, 0x404c040) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x4, './file0/file1\x00'}}) 418.227797ms ago: executing program 7 (id=2605): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz0\x00', 0x1c}) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x100, 0x7}) ioctl$SNDCTL_SEQ_THRESHOLD(r2, 0x4004510d, &(0x7f00000000c0)=0x7) 417.999582ms ago: executing program 8 (id=2606): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x70bd2c, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @in=@initdev={0xac, 0x1e, 0xfa, 0x0}, @in=@broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_lifetime={0x4, 0x3, 0x2f}]}, 0xc0}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x149882, 0x8) write$sysctl(r2, &(0x7f0000000040)='1\x00', 0x2) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2600000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd25, 0x25dfdbfd, {0x80, 0x80, 0x80, 0x9, 0x0, 0x3, 0xfe, 0x5, 0x400}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20004000) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x70bd2c, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @in=@initdev={0xac, 0x1e, 0xfa, 0x0}, @in=@broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_lifetime={0x4, 0x3, 0x2f}]}, 0xc0}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x149882, 0x8) (async) write$sysctl(r2, &(0x7f0000000040)='1\x00', 0x2) (async) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2600000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd25, 0x25dfdbfd, {0x80, 0x80, 0x80, 0x9, 0x0, 0x3, 0xfe, 0x5, 0x400}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20004000) (async) 350.056828ms ago: executing program 8 (id=2607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x800000}, 0x1c) write(r4, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 349.606822ms ago: executing program 7 (id=2608): socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "026b"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x20000051) r5 = memfd_create(&(0x7f0000000700)='e\xf4E\x88-\x04', 0x0) pwritev(r5, &(0x7f00000006c0)=[{&(0x7f00000003c0)="9a6b6fdabda1a348c0fabb42beea39e6538c6d0a84cbdea1dcd189a5cd22714df2428242c4339d33f09e1e0adce936bb95cd220a8e088e81fca9763d130710d52b34fca90ca199630c11e84e93af2cd530abbd1d3afa850f2af80edd27a9f3aeb579deb86858041ea5f0ab810c3245e932c5a12e3aa9fa4767c9ff5ccca715a03aba55f072f90ae896a1daf48967dbfc3648563dfe9efcab413cf2bc72bfe56042263a35dc748f0b29966a751145bb478fda7cf4a6babdc3ed64f9eec42a7a8a082c3a5c6f845a037efef30b8c931e5fe50cfd214a6af12c", 0xd8}, {&(0x7f00000004c0)="d018007cc307223cbb3109eea0832eaf50a9e0f17f694a1e3d28ba2b212c36746b2f1228487d405cbbf617289fa950eee2d4aa2f04be12de762361672678fdc5798956d7a12b3fea4583bd4887f9f6d2d67b3d2e734d8b08162b1df7cff1deb2389611bdcbd0a04ae8cdc97eeeb957002f309e3cec5134017dad51d3a50c0ac5d15dcc41ce285f3f217a0a61a9d68cec61f95c8b5bf82d804301ec55e3af3b0c94732b0427cbbdb48d8887bb22e97ddd9419610fcc700773f16da77ed8fe937a9b65aa94c220ef55f6c7b0c23d00eaa1374c99ac93925f68e23b35d40d0fcc406de4715f384238", 0xe7}, {&(0x7f0000000200)="46a4c4b08e108762566b712738a057ab0a6602fce4d70a010b0adad0e3236b1b5eaa893e0bc8afdce7f0411d3bc3d9aceb973dc36801665baf24393394", 0x3d}, {&(0x7f00000005c0)="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", 0xff}], 0x4, 0x4000001, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2400, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000240)={'rose0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}) mmap(&(0x7f0000236000/0x3000)=nil, 0x3000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x85ae2000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xffffffffffbffffe, 0xb, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000180)={0x1f, 0x1c4c, @any, 0xb9, 0x1}, 0xe) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000280)=""/240, &(0x7f0000000380)=0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfe00}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x1000000, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 210.118845ms ago: executing program 8 (id=2609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000005c0)) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0xa0044d07, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x7, 0x5, 0xde}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18f) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000580), 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {0x2}}}, 0x24}}, 0x0) 0s ago: executing program 7 (id=2610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) fadvise64(r2, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40022040}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6612}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) socket(0x1e, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000200)={0xfffffffffffffd29, 0x5, 0x0, {0x0, 0x2, 0x2}}, 0x30) r6 = syz_io_uring_setup(0xd2, &(0x7f00000002c0)={0x0, 0xbd84, 0x0, 0x1, 0x30a}, &(0x7f0000000340)=0x0, &(0x7f0000000640)) r8 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BLKRRPART(r8, 0x125f, 0x0) readv(r8, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) ioctl$NBD_SET_SOCK(r8, 0xab00, r2) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0x7fffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) (async) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r9, 0xc0585609, &(0x7f0000000300)=@overlay={0x0, 0x2, 0x4, 0x100000, 0x2, {}, {0x1, 0x2, 0x8a, 0x40, 0xb, 0x3, "c2ca11ed"}, 0x4819, 0x3, {}, 0x80000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) io_uring_enter(r6, 0x22d2, 0x20, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r5, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x5b}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3a}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}]}, 0x40}}, 0x0) (async, rerun: 32) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) (async, rerun: 32) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) setfsuid(r11) (async) setreuid(r10, r11) kernel console output (not intermixed with test programs): ed [ 256.750424][T12292] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 256.789591][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1805'. [ 256.790594][T10176] udevd[10176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 256.792723][T12294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.803441][ T40] audit: type=1400 audit(2000000005.820:7612): avc: denied { connect } for pid=12297 comm="syz.8.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 256.806217][T12299] Bluetooth: MGMT ver 1.23 [ 256.814856][ T40] audit: type=1400 audit(2000000005.820:7613): avc: denied { bind } for pid=12297 comm="syz.8.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 256.921279][T12315] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1810'. [ 256.940268][T12315] tmpfs: Unknown parameter '0x000000000000000b' [ 256.944876][T12318] tmpfs: Unknown parameter '0x000000000000000b' [ 257.017974][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 257.213551][T12338] loop9: detected capacity change from 0 to 7 [ 257.217833][T12338] Dev loop9: unable to read RDB block 7 [ 257.220370][T12338] loop9: AHDI p1 p2 [ 257.222593][T12338] loop9: partition table partially beyond EOD, truncated [ 257.225978][T12338] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 257.278516][T10176] udevd[10176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 257.294609][T12342] block nbd8: Attempted send on invalid socket [ 257.296689][T12342] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.299665][T12342] block nbd8: Attempted send on invalid socket [ 257.301996][T12342] I/O error, dev nbd8, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.305058][T12342] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 257.308807][T12342] block nbd8: Attempted send on invalid socket [ 257.311171][T12342] I/O error, dev nbd8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.314142][T12342] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 257.317749][T12342] block nbd8: Attempted send on invalid socket [ 257.319776][T12342] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.323954][T12342] block nbd8: Attempted send on invalid socket [ 257.325964][T12342] I/O error, dev nbd8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.328850][T12342] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 257.331737][T12342] block nbd8: Attempted send on invalid socket [ 257.333514][T12342] I/O error, dev nbd8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.336062][T12342] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 257.340002][T12342] block nbd8: Attempted send on invalid socket [ 257.343612][T12342] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.347675][T12342] block nbd8: Attempted send on invalid socket [ 257.350264][T12342] I/O error, dev nbd8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.354401][T12342] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 257.358422][T12342] block nbd8: Attempted send on invalid socket [ 257.361480][T12342] I/O error, dev nbd8, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.365432][T12342] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 257.369718][T12342] block nbd8: Attempted send on invalid socket [ 257.372431][T12342] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.376405][T12342] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 257.380501][T12342] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 257.386112][T12342] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 257.497388][T12365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.519092][T12368] random: crng reseeded on system resumption [ 257.589428][T12372] netlink: 'syz.8.1825': attribute type 1 has an invalid length. [ 257.653685][T12376] fuse: Unknown parameter '' [ 257.753075][ T40] audit: type=1400 audit(2000000006.780:7614): avc: denied { connect } for pid=12383 comm="syz.0.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 257.804954][ T40] audit: type=1400 audit(2000000006.830:7615): avc: denied { name_connect } for pid=12383 comm="syz.0.1828" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 257.849696][T12392] SELinux: policydb magic number 0x85 does not match expected magic number 0xf97cff8c [ 257.850819][ T5975] Bluetooth: hci0: command tx timeout [ 257.854173][T12392] SELinux: failed to load policy [ 257.929555][T12394] fuse: Bad value for 'group_id' [ 257.931712][T12394] fuse: Bad value for 'group_id' [ 258.010900][ T40] audit: type=1400 audit(2000000007.030:7616): avc: denied { accept } for pid=12396 comm="syz.0.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 258.135479][T12404] QAT: Device 2 not found [ 258.205732][ T40] audit: type=1400 audit(2000000007.230:7617): avc: denied { append } for pid=12407 comm="syz.7.1837" name="pfkey" dev="proc" ino=4026533325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 258.720566][T12439] dlm: no local IP address has been set [ 258.731461][T12439] dlm: cannot start dlm midcomms -107 [ 258.761177][T12439] program syz.8.1848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.887151][T12446] loop9: detected capacity change from 0 to 7 [ 258.891910][T12446] Dev loop9: unable to read RDB block 7 [ 258.894083][T12446] loop9: AHDI p1 p2 [ 258.895396][T12446] loop9: partition table partially beyond EOD, truncated [ 258.898032][T12446] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 258.957536][T10176] udevd[10176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 259.203049][T12480] loop9: detected capacity change from 0 to 7 [ 259.205695][T12480] Dev loop9: unable to read RDB block 7 [ 259.207565][T12480] loop9: AHDI p1 p2 [ 259.208835][T12480] loop9: partition table partially beyond EOD, truncated [ 259.211246][T12480] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 259.246696][T10176] udevd[10176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 259.776993][T12517] loop9: detected capacity change from 0 to 7 [ 259.781046][T12517] Dev loop9: unable to read RDB block 7 [ 259.783381][T12517] loop9: AHDI p1 p2 [ 259.785126][T12517] loop9: partition table partially beyond EOD, truncated [ 259.788592][T12517] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 259.822324][T10176] udevd[10176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 259.862785][ T40] audit: type=1400 audit(2000000008.890:7618): avc: denied { write } for pid=12520 comm="syz.6.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 260.644824][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.680796][T12533] overlayfs: failed to resolve './file0': -2 [ 260.683897][T12533] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 260.709420][T12533] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 260.771922][T12539] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 261.042029][T12543] loop9: detected capacity change from 0 to 7 [ 261.044833][T12543] Dev loop9: unable to read RDB block 7 [ 261.046689][T12543] loop9: AHDI p1 p2 [ 261.047960][T12543] loop9: partition table partially beyond EOD, truncated [ 261.050565][T12543] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 261.095803][T10176] udevd[10176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 261.138505][T12545] lo speed is unknown, defaulting to 1000 [ 261.143167][T12545] xfrm0 speed is unknown, defaulting to 1000 [ 261.184652][T12550] netlink: 'syz.8.1885': attribute type 1 has an invalid length. [ 261.335090][ T5978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.339974][ T5978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.344000][ T5978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.347318][ T5978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.357409][ T5978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.404658][T12558] lo speed is unknown, defaulting to 1000 [ 261.407872][T12558] xfrm0 speed is unknown, defaulting to 1000 [ 261.592411][T12558] chnl_net:caif_netlink_parms(): no params data found [ 261.646961][T12582] loop9: detected capacity change from 0 to 7 [ 261.652997][T10176] Dev loop9: unable to read RDB block 7 [ 261.655422][T10176] loop9: AHDI p1 p2 [ 261.657204][T10176] loop9: partition table partially beyond EOD, truncated [ 261.660555][T10176] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 261.676272][T12582] Dev loop9: unable to read RDB block 7 [ 261.678073][T12582] loop9: AHDI p1 p2 [ 261.679760][T12582] loop9: partition table partially beyond EOD, truncated [ 261.683142][T12582] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 261.706013][T10176] udevd[10176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 261.743322][T10176] udevd[10176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 261.743968][T12558] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.749774][T12558] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.752941][T12558] bridge_slave_0: entered allmulticast mode [ 261.755924][T12558] bridge_slave_0: entered promiscuous mode [ 261.758953][T12558] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.762044][T12558] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.764982][T12558] bridge_slave_1: entered allmulticast mode [ 261.768087][T12558] bridge_slave_1: entered promiscuous mode [ 261.804655][T12596] deleting an unspecified loop device is not supported. [ 261.854271][T12558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.859321][T12558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.875045][T12598] MINIX-fs: blocksize too small for device [ 261.916338][T12558] team0: Port device team_slave_0 added [ 261.925417][T12558] team0: Port device team_slave_1 added [ 261.951793][ T9310] syz_tun (unregistering): left allmulticast mode [ 262.010995][T12606] batadv_slave_0: entered promiscuous mode [ 262.015580][T12606] batadv_slave_0: left promiscuous mode [ 262.021857][T12558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.024695][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.035127][T12558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.041229][T12558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.044103][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.054657][T12558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.119485][T12558] hsr_slave_0: entered promiscuous mode [ 262.122516][T12558] hsr_slave_1: entered promiscuous mode [ 262.124943][T12558] debugfs: 'hsr0' already exists in 'hsr' [ 262.126739][T12558] Cannot create hsr debugfs directory [ 262.299558][T12617] loop9: detected capacity change from 0 to 7 [ 262.303027][T12617] Dev loop9: unable to read RDB block 7 [ 262.305065][T12617] loop9: AHDI p1 p2 [ 262.306401][T12617] loop9: partition table partially beyond EOD, truncated [ 262.308812][T12617] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 262.323321][T12558] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 262.355571][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 262.355587][ T40] audit: type=1400 audit(2000000011.380:7621): avc: denied { getopt } for pid=12618 comm="syz.8.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 262.361306][T10176] udevd[10176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 262.391294][T12558] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 262.400609][T12558] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 262.404260][T12623] __nla_validate_parse: 40 callbacks suppressed [ 262.404270][T12623] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.1909'. [ 262.409753][T12558] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 262.439818][ T5978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.444767][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.449528][ T5978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.452731][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.457073][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.474151][T12558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.488364][T12630] lo speed is unknown, defaulting to 1000 [ 262.489281][T12558] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.493350][T12630] xfrm0 speed is unknown, defaulting to 1000 [ 262.503044][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.505344][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.527373][T12636] fuse: Bad value for 'fd' [ 262.532929][ T7680] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.535150][ T7680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.582629][ T40] audit: type=1400 audit(2000000011.610:7622): avc: denied { ioctl } for pid=12634 comm="syz.7.1910" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 262.665301][T12630] chnl_net:caif_netlink_parms(): no params data found [ 262.704708][ T40] audit: type=1400 audit(2000000011.730:7623): avc: denied { map } for pid=12634 comm="syz.7.1910" path="socket:[60409]" dev="sockfs" ino=60409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 262.766432][T12630] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.770460][T12630] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.773691][T12630] bridge_slave_0: entered allmulticast mode [ 262.777535][T12630] bridge_slave_0: entered promiscuous mode [ 262.784719][T12630] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.788424][T12630] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.792951][T12630] bridge_slave_1: entered allmulticast mode [ 262.799995][T12630] bridge_slave_1: entered promiscuous mode [ 262.811927][T12660] loop9: detected capacity change from 0 to 7 [ 262.815677][T12660] Dev loop9: unable to read RDB block 7 [ 262.817957][T12660] loop9: AHDI p1 p2 [ 262.820747][T12660] loop9: partition table partially beyond EOD, truncated [ 262.824326][T12660] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 262.849079][T12630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.854374][T12630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.860496][T10176] udevd[10176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 262.907694][T12630] team0: Port device team_slave_0 added [ 262.920485][T12630] team0: Port device team_slave_1 added [ 262.927984][T12662] netlink: 'syz.8.1915': attribute type 15 has an invalid length. [ 263.011121][T12630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.013458][T12630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.022249][T12630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.027146][T12630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.029428][T12630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.039014][T12630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.045806][T12558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.057288][T12667] IPVS: set_ctl: invalid protocol: 22 172.30.0.8:20002 [ 263.129627][T12630] hsr_slave_0: entered promiscuous mode [ 263.133998][T12630] hsr_slave_1: entered promiscuous mode [ 263.137633][T12630] debugfs: 'hsr0' already exists in 'hsr' [ 263.139586][T12630] Cannot create hsr debugfs directory [ 263.209909][T12685] loop9: detected capacity change from 0 to 7 [ 263.210824][ T5975] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 263.214816][T10176] Dev loop9: unable to read RDB block 7 [ 263.219913][ T5975] Bluetooth: hci0: Injecting HCI hardware error event [ 263.224092][T10176] loop9: AHDI p1 p2 [ 263.224616][ T5975] Bluetooth: hci0: hardware error 0x00 [ 263.225776][T10176] loop9: partition table partially beyond EOD, truncated [ 263.231319][T10176] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 263.243000][T12685] Dev loop9: unable to read RDB block 7 [ 263.245454][T12685] loop9: AHDI p1 p2 [ 263.247154][T12685] loop9: partition table partially beyond EOD, truncated [ 263.250979][T12685] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 263.297272][T10176] udevd[10176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 263.315154][T10176] udevd[10176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 263.343406][T12696] fuse: Unknown parameter '' [ 263.413834][T12699] : entered promiscuous mode [ 263.417467][T12699] : left promiscuous mode [ 263.430360][T12558] veth0_vlan: entered promiscuous mode [ 263.437984][T12558] veth1_vlan: entered promiscuous mode [ 263.450797][ T5978] Bluetooth: hci1: command tx timeout [ 263.459121][T12558] veth0_macvtap: entered promiscuous mode [ 263.465458][T12558] veth1_macvtap: entered promiscuous mode [ 263.469378][ T40] audit: type=1400 audit(2000000012.490:7624): avc: denied { setopt } for pid=12698 comm="syz.7.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 263.477142][T12558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.486821][T12558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.541073][ T1145] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.544768][ T1145] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.554328][ T1146] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.557179][ T1146] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.587173][ T40] audit: type=1326 audit(2000000012.610:7625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.7.1928" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe569b8ec29 code=0x0 [ 263.626916][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.629427][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.646539][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.649129][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.851077][ T7555] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 263.897742][T12630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.905404][T12630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.912554][T12630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.918191][T12630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.928839][T12719] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1932'. [ 263.931985][T12719] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1932'. [ 263.971546][T12719] block device autoloading is deprecated and will be removed. [ 263.996381][T12630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.009946][T12630] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.012410][ T7555] usb 13-1: Using ep0 maxpacket: 8 [ 264.016893][ T7555] usb 13-1: config 1 has an invalid interface number: 169 but max is 0 [ 264.021674][ T7555] usb 13-1: config 1 has no interface number 0 [ 264.024287][ T7555] usb 13-1: config 1 interface 169 has no altsetting 0 [ 264.027898][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.030064][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.031438][T12733] /dev/nullb0: Can't lookup blockdev [ 264.036444][ T7555] usb 13-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=f4.76 [ 264.038093][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.039276][ T7555] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.042233][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.045084][ T7555] usb 13-1: Product: syz [ 264.048933][ T7555] usb 13-1: Manufacturer: syz [ 264.050378][ T7555] usb 13-1: SerialNumber: syz [ 264.109884][T12729] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1933'. [ 264.188103][ T40] audit: type=1400 audit(2000000013.210:7626): avc: denied { read open } for pid=12741 comm="syz.7.1935" path="/" dev="configfs" ino=2107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 264.199128][T12630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.238242][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1936'. [ 264.242196][T12744] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1936'. [ 264.243754][T12630] veth0_vlan: entered promiscuous mode [ 264.252419][T12744] geneve3: entered promiscuous mode [ 264.254108][T12744] geneve3: entered allmulticast mode [ 264.261110][T12630] veth1_vlan: entered promiscuous mode [ 264.276088][ T7555] em28xx 13-1:1.169: New device syz syz @ 480 Mbps (2304:021a, interface 169, class 169) [ 264.279772][ T7555] em28xx 13-1:1.169: Video interface 169 found: [ 264.280002][T12630] veth0_macvtap: entered promiscuous mode [ 264.289140][T12630] veth1_macvtap: entered promiscuous mode [ 264.307039][T12630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.314756][T12630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.322750][ T1145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.326348][ T1145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.331481][ T1145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.335798][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.351099][ T7555] em28xx 13-1:1.169: unknown em28xx chip ID (0) [ 264.390455][ T7680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.393622][ T7680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.414848][ T7680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.417094][ T7555] em28xx 13-1:1.169: reading from i2c device at 0xa0 failed (error=-5) [ 264.418717][ T7680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.424098][ T7555] em28xx 13-1:1.169: board has no eeprom [ 264.481008][ T5978] Bluetooth: hci2: command tx timeout [ 264.482064][ T7555] em28xx 13-1:1.169: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 264.492005][ T7555] em28xx 13-1:1.169: analog set to bulk mode. [ 264.494855][ T24] em28xx 13-1:1.169: Registering V4L2 extension [ 264.496226][T12753] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 264.505249][ T7555] usb 13-1: USB disconnect, device number 2 [ 264.508726][ T7555] em28xx 13-1:1.169: Disconnecting em28xx [ 264.534253][ T24] em28xx 13-1:1.169: Config register raw data: 0xffffffed [ 264.537983][ T24] em28xx 13-1:1.169: AC97 chip type couldn't be determined [ 264.541924][ T24] em28xx 13-1:1.169: No AC97 audio processor [ 264.548714][ T24] usb 13-1: Decoder not found [ 264.550309][ T24] em28xx 13-1:1.169: failed to create media graph [ 264.554581][ T24] em28xx 13-1:1.169: V4L2 device video103 deregistered [ 264.563833][ T24] em28xx 13-1:1.169: Remote control support is not available for this card. [ 264.569169][ T7555] em28xx 13-1:1.169: Closing input extension [ 264.577403][T12762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1941'. [ 264.588388][ T7555] em28xx 13-1:1.169: Freeing device [ 264.613159][T12768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.883677][T12777] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 265.095710][T12787] 9pnet_fd: Insufficient options for proto=fd [ 265.131518][ T9] usb 14-1: new full-speed USB device number 2 using dummy_hcd [ 265.177159][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1954'. [ 265.180163][T12799] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 265.237235][T12801] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3919364976 (501678716928 ns) > initial count (201147751424 ns). Using initial count to start timer. [ 265.304378][ T9] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 265.308086][ T9] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.314856][ T9] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.319858][ T9] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.372193][ T5975] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 265.395264][T12820] netlink: 'syz.3.1959': attribute type 1 has an invalid length. [ 265.400885][ T7555] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 265.419950][ T40] audit: type=1400 audit(2000000014.440:7627): avc: denied { read } for pid=12816 comm="syz.7.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 265.468554][T12824] 9pnet_fd: Insufficient options for proto=fd [ 265.520894][ T5975] Bluetooth: hci1: command tx timeout [ 265.537783][ T9] usb 14-1: usb_control_msg returned -32 [ 265.540279][ T9] usbtmc 14-1:16.0: can't read capabilities [ 265.570737][ T7555] usb 13-1: Using ep0 maxpacket: 8 [ 265.573559][ T7555] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 265.576125][ T7555] usb 13-1: config 0 has no interface number 0 [ 265.578072][ T7555] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 265.581780][ T7555] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 265.585390][ T7555] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 265.589003][ T7555] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 265.593345][ T7555] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 265.593825][T12832] tipc: Started in network mode [ 265.596169][ T7555] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.598237][T12832] tipc: Node identity 5a2ea2d4f318, cluster identity 4711 [ 265.598386][T12832] tipc: Enabled bearer , priority 0 [ 265.604865][ T7555] usb 13-1: config 0 descriptor?? [ 265.610186][T12832] syzkaller0: entered promiscuous mode [ 265.613451][T12832] syzkaller0: entered allmulticast mode [ 265.615708][ T7555] ldusb 13-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 265.681257][T12833] tipc: Resetting bearer [ 265.697493][T12833] tipc: Disabling bearer [ 265.753799][T12843] kernel profiling enabled (shift: 34) [ 265.755944][T12843] profiling shift: 34 too large [ 265.778687][T12846] bridge1: entered promiscuous mode [ 265.780529][T12846] bridge1: entered allmulticast mode [ 265.806447][T12849] kAFS: No cell specified [ 265.806500][T12850] kAFS: No cell specified [ 265.815993][ T7555] usb 13-1: USB disconnect, device number 3 [ 265.826344][ T7555] ldusb 13-1:0.55: LD USB Device #1 now disconnected [ 265.826882][T12791] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 265.839752][T12852] loop9: detected capacity change from 0 to 7 [ 265.842745][T10176] Dev loop9: unable to read RDB block 7 [ 265.844681][T10176] loop9: AHDI p1 p2 [ 265.845935][T10176] loop9: partition table partially beyond EOD, truncated [ 265.848310][T10176] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 265.855283][T12852] Dev loop9: unable to read RDB block 7 [ 265.859226][T12852] loop9: AHDI p1 p2 [ 265.860590][T12852] loop9: partition table partially beyond EOD, truncated [ 265.864258][T12852] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 265.881818][T12791] picdev_write: 2 callbacks suppressed [ 265.881829][T12791] kvm: pic: non byte write [ 265.883897][T10176] udevd[10176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 265.897647][T10176] udevd[10176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 266.008019][ T40] audit: type=1400 audit(2000000015.030:7628): avc: denied { shutdown } for pid=12864 comm="syz.7.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 266.083344][T12875] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.096026][ T7821] usb 14-1: USB disconnect, device number 2 [ 266.248307][T12884] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1980'. [ 266.486985][T12891] netlink: 'syz.8.1981': attribute type 1 has an invalid length. [ 266.490264][T12891] netlink: 208 bytes leftover after parsing attributes in process `syz.8.1981'. [ 266.497378][ T40] audit: type=1800 audit(2000000015.520:7629): pid=12891 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1981" name="file0" dev="overlay" ino=343 res=0 errno=0 [ 266.501941][T12891] ip6erspan0: entered promiscuous mode [ 266.560862][ T5975] Bluetooth: hci2: command tx timeout [ 266.645999][T12896] veth1_macvtap: entered allmulticast mode [ 266.665378][T12899] usb usb8: usbfs: process 12899 (syz.8.1985) did not claim interface 12 before use [ 266.704621][T12906] tipc: MTU too low for tipc bearer [ 266.961428][ T7555] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 267.143100][ T7555] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.147328][ T7555] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.152944][ T7555] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.156665][ T7555] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.365151][ T7555] usb 14-1: usb_control_msg returned -32 [ 267.367006][ T7555] usbtmc 14-1:16.0: can't read capabilities [ 267.600795][ T5975] Bluetooth: hci1: command tx timeout [ 267.926987][T12906] nfs: Unknown parameter 'proc' [ 267.929929][ T29] usb 14-1: USB disconnect, device number 3 [ 268.650982][ T5975] Bluetooth: hci2: command tx timeout [ 269.681156][ T5975] Bluetooth: hci1: command tx timeout [ 270.720778][ T5975] Bluetooth: hci2: command tx timeout [ 280.128117][T12917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1988'. [ 280.131774][T12919] loop9: detected capacity change from 0 to 7 [ 280.134326][ T40] audit: type=1400 audit(2000000029.160:7630): avc: denied { setattr } for pid=12920 comm="syz.8.1990" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 280.140822][T12919] Dev loop9: unable to read RDB block 7 [ 280.144362][T12919] loop9: AHDI p1 p2 [ 280.146057][T12919] loop9: partition table partially beyond EOD, truncated [ 280.149166][T12919] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 280.190917][ T54] IPVS: starting estimator thread 0... [ 280.231207][T12923] udevd[12923]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 280.281719][T12931] IPVS: using max 42 ests per chain, 100800 per kthread [ 280.297888][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1998'. [ 280.303532][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'. [ 280.307776][T12947] netlink: 'syz.3.1998': attribute type 20 has an invalid length. [ 280.327624][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1998'. [ 280.331565][T12954] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 280.333949][ T9281] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.338927][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'. [ 280.343142][T12947] netlink: 'syz.3.1998': attribute type 20 has an invalid length. [ 280.343387][ T9281] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.349130][ T9281] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.352284][ T9281] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.354830][ T40] audit: type=1800 audit(2000000029.370:7631): pid=12952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.2001" name="nullb0" dev="devtmpfs" ino=3185 res=0 errno=0 [ 280.371680][T12957] loop9: detected capacity change from 0 to 7 [ 280.374170][T12957] Dev loop9: unable to read RDB block 7 [ 280.376460][T12957] loop9: AHDI p1 p2 [ 280.378062][T12957] loop9: partition table partially beyond EOD, truncated [ 280.381518][T12957] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 280.394829][T12961] netlink: 'syz.3.2004': attribute type 1 has an invalid length. [ 280.397296][T12961] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2004'. [ 280.400224][T12961] netlink: 'syz.3.2004': attribute type 1 has an invalid length. [ 280.405516][T12961] netlink: 'syz.3.2004': attribute type 2 has an invalid length. [ 280.431364][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 280.452508][T12971] binder: 12969:12971 ioctl c02064cc 2000000000c0 returned -22 [ 280.497126][T12983] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 280.542279][ T40] audit: type=1326 audit(2000000029.570:7632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12977 comm="syz.3.2010" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bcf8ec29 code=0x7fc00000 [ 280.557876][T12989] loop9: detected capacity change from 0 to 7 [ 280.564606][T12989] Dev loop9: unable to read RDB block 7 [ 280.566590][T12989] loop9: AHDI p1 p2 [ 280.567840][T12989] loop9: partition table partially beyond EOD, truncated [ 280.570279][T12989] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 280.587282][T12993] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2015'. [ 280.596606][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 280.624470][T12995] netlink: zone id is out of range [ 280.626264][T12995] netlink: zone id is out of range [ 280.631592][T12995] netlink: zone id is out of range [ 280.633257][T12995] netlink: zone id is out of range [ 280.634918][T12995] netlink: zone id is out of range [ 280.636598][T12995] netlink: zone id is out of range [ 280.638198][T12995] netlink: zone id is out of range [ 280.639884][T12995] netlink: zone id is out of range [ 280.642037][T12995] netlink: zone id is out of range [ 280.645001][T12995] netlink: zone id is out of range [ 280.705337][T13006] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 280.711931][ T40] audit: type=1400 audit(2000000029.730:7633): avc: denied { relabelto } for pid=12994 comm="syz.9.2017" name="cgroup.procs" dev="cgroup" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 280.720465][ T40] audit: type=1400 audit(2000000029.740:7634): avc: denied { associate } for pid=12994 comm="syz.9.2017" name="cgroup.procs" dev="cgroup" ino=816 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 280.853036][T13017] netlink: 'syz.9.2022': attribute type 2 has an invalid length. [ 280.855586][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2022'. [ 280.876890][T13020] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 280.881833][ T29] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 280.890071][T13023] loop9: detected capacity change from 0 to 7 [ 280.895392][T13023] Dev loop9: unable to read RDB block 7 [ 280.897353][T13023] loop9: AHDI p1 p2 [ 280.898648][T13023] loop9: partition table partially beyond EOD, truncated [ 280.901851][T13023] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 280.950036][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 281.042062][ T29] usb 13-1: Using ep0 maxpacket: 8 [ 281.044387][ T40] audit: type=1400 audit(2000000030.070:7635): avc: denied { watch watch_reads } for pid=13038 comm="syz.9.2029" path="/17/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 281.054748][ T40] audit: type=1400 audit(2000000030.070:7636): avc: denied { remount } for pid=13038 comm="syz.9.2029" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 281.064429][ T29] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 281.067941][ T29] usb 13-1: config 0 has no interface number 0 [ 281.071993][ T29] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 281.076693][ T29] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 281.082461][ T29] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.087013][ T29] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 281.092854][ T29] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 281.096591][ T29] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.100984][ T29] usb 13-1: config 0 descriptor?? [ 281.112144][ T29] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 281.112362][T13044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13044 comm=syz.7.2030 [ 281.273853][T13052] loop9: detected capacity change from 0 to 7 [ 281.276493][T13052] Dev loop9: unable to read RDB block 7 [ 281.278479][T13052] loop9: AHDI p1 p2 [ 281.279941][T13052] loop9: partition table partially beyond EOD, truncated [ 281.284241][T13052] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 281.317641][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 281.384789][ T7555] usb 13-1: USB disconnect, device number 4 [ 281.384952][ C1] ldusb 13-1:0.55: usb_submit_urb failed (-19) [ 281.395265][ T7555] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 281.584581][T13071] ./cgroup: Can't lookup blockdev [ 281.675922][T13079] loop9: detected capacity change from 0 to 7 [ 281.678606][T13079] Dev loop9: unable to read RDB block 7 [ 281.680484][T13079] loop9: AHDI p1 p2 [ 281.682767][T13079] loop9: partition table partially beyond EOD, truncated [ 281.686255][T13079] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 281.708527][T13080] vivid-004: disconnect [ 281.710597][T13080] vivid-004: reconnect [ 281.716226][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 281.741034][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'. [ 281.791416][T13084] netlink: 696 bytes leftover after parsing attributes in process `syz.9.2045'. [ 281.867334][T13082] hsr_slave_1 (unregistering): left promiscuous mode [ 281.944757][T13094] netlink: 'syz.8.2048': attribute type 2 has an invalid length. [ 281.952346][T13094] : entered promiscuous mode [ 281.958250][T13096] netlink: 'syz.3.2049': attribute type 13 has an invalid length. [ 281.968798][T13094] : left promiscuous mode [ 282.004446][T13098] IPv6: Can't replace route, no match found [ 282.029783][T13101] ieee802154 phy0 wpan0: encryption failed: -22 [ 282.153913][T13108] loop9: detected capacity change from 0 to 7 [ 282.156434][T13108] Dev loop9: unable to read RDB block 7 [ 282.158288][T13108] loop9: AHDI p1 p2 [ 282.159543][T13108] loop9: partition table partially beyond EOD, truncated [ 282.162433][T13108] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 282.184693][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 282.255612][T13116] mmap: syz.9.2056 (13116): VmData 37584896 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 282.257724][T13119] SELinux: security policydb version 17 (MLS) not backwards compatible [ 282.264736][T13119] SELinux: failed to load policy [ 282.316146][T13131] binder: BINDER_SET_CONTEXT_MGR already set [ 282.318152][T13131] binder: 13129:13131 ioctl 4018620d 2000000000c0 returned -16 [ 282.322071][T13130] binder: BINDER_SET_CONTEXT_MGR already set [ 282.324021][T13130] binder: 13129:13130 ioctl 4018620d 200000000040 returned -16 [ 282.353623][T13136] sctp: [Deprecated]: syz.7.2061 (pid 13136) Use of int in maxseg socket option. [ 282.353623][T13136] Use struct sctp_assoc_value instead [ 282.372401][T13140] netlink: 'syz.8.2062': attribute type 13 has an invalid length. [ 282.386469][T13142] overlay: ./file0 is not a directory [ 282.422192][T13147] loop9: detected capacity change from 0 to 7 [ 282.424689][T13147] Dev loop9: unable to read RDB block 7 [ 282.426448][T13147] loop9: AHDI p1 p2 [ 282.427726][T13147] loop9: partition table partially beyond EOD, truncated [ 282.430263][T13147] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 282.464145][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 282.530582][T13157] ip6gre1: entered allmulticast mode [ 282.575052][T13161] netlink: 'syz.3.2067': attribute type 1 has an invalid length. [ 282.611657][T13161] bond1: entered promiscuous mode [ 282.613550][T13161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.228453][ T40] audit: type=1400 audit(2000000032.250:7637): avc: denied { ioctl } for pid=13171 comm="syz.9.2072" path="socket:[63366]" dev="sockfs" ino=63366 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 283.319326][ T40] audit: type=1400 audit(2000000032.340:7638): avc: denied { listen } for pid=13177 comm="syz.9.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 283.446215][T13183] team0: Device hsr_slave_0 failed to register rx_handler [ 283.458565][ T40] audit: type=1400 audit(2000000032.480:7639): avc: denied { remount } for pid=13182 comm="syz.9.2076" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 283.469672][T13183] option changes via remount are deprecated (pid=13182 comm=syz.9.2076) [ 283.474952][T13185] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 283.477159][T13185] overlayfs: failed to set xattr on upper [ 283.478139][T13183] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 283.478928][T13185] overlayfs: ...falling back to redirect_dir=nofollow. [ 283.478945][T13185] overlayfs: ...falling back to metacopy=off. [ 283.483604][T13185] overlayfs: ...falling back to index=off. [ 283.483612][T13185] overlayfs: ...falling back to uuid=null. [ 283.611280][T13187] ieee802154 phy0 wpan0: encryption failed: -22 [ 283.850786][ T5330] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 284.006008][ T5330] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 284.009014][ T5330] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.011866][ T5330] usb 13-1: Product: syz [ 284.013296][ T5330] usb 13-1: Manufacturer: syz [ 284.014795][ T5330] usb 13-1: SerialNumber: syz [ 284.019075][ T5330] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 284.045921][T13208] loop9: detected capacity change from 0 to 7 [ 284.048502][T13208] Dev loop9: unable to read RDB block 7 [ 284.050370][T13208] loop9: AHDI p1 p2 [ 284.050385][ T5330] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 284.052052][T13208] loop9: partition table partially beyond EOD, truncated [ 284.056951][T13208] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 284.083306][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 284.120464][T13222] loop2: detected capacity change from 0 to 7 [ 284.127233][T13222] loop2: p1 [ 284.128384][T13222] loop2: partition table partially beyond EOD, truncated [ 284.133499][T13222] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 284.170909][T13231] program syz.7.2094 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.172041][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 284.198033][T13240] loop9: detected capacity change from 0 to 7 [ 284.201267][T12923] Dev loop9: unable to read RDB block 7 [ 284.203045][T12923] loop9: AHDI p1 p2 [ 284.204442][T12923] loop9: partition table partially beyond EOD, truncated [ 284.206887][T12923] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 284.213570][T13240] Dev loop9: unable to read RDB block 7 [ 284.215397][T13240] loop9: AHDI p1 p2 [ 284.216699][T13240] loop9: partition table partially beyond EOD, truncated [ 284.219010][T13240] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 284.280445][ T6056] usb 13-1: USB disconnect, device number 5 [ 284.340582][ T5975] Bluetooth: hci1: unexpected cc 0x203c length: 9 > 1 [ 284.522603][T13262] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 284.525219][T13262] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 284.527672][T13262] vhci_hcd vhci_hcd.0: Device attached [ 284.549557][T13264] vhci_hcd: connection closed [ 284.557274][ T9266] vhci_hcd: stop threads [ 284.561299][ T9266] vhci_hcd: release socket [ 284.563088][ T9266] vhci_hcd: disconnect device [ 284.575848][T13272] /dev/sg0: Can't lookup blockdev [ 284.820088][T13295] usb usb8: usbfs: process 13295 (syz.9.2113) did not claim interface 0 before use [ 284.910459][T13301] syzkaller0: entered promiscuous mode [ 284.913040][T13301] syzkaller0: entered allmulticast mode [ 285.120933][ T5330] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 285.123899][ T5330] ath9k_htc: Failed to initialize the device [ 285.130869][ T6056] usb 13-1: ath9k_htc: USB layer deinitialized [ 286.375360][T13329] validate_nla: 5 callbacks suppressed [ 286.375370][T13329] netlink: 'syz.7.2121': attribute type 1 has an invalid length. [ 286.433392][T13333] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 286.437817][T13333] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 286.564928][T13338] netlink: 'syz.9.2124': attribute type 13 has an invalid length. [ 286.566784][T13335] gretap2: entered promiscuous mode [ 286.567468][T13338] __nla_validate_parse: 74 callbacks suppressed [ 286.567482][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2124'. [ 286.571612][T13335] bond4: (slave gretap2): making interface the new active one [ 286.577781][T13335] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 286.637927][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.637927][T13343] [ 286.641778][T13343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 286.645022][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.645022][T13343] [ 286.648200][T13343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 286.651981][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.651981][T13343] [ 286.655552][T13343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 286.658445][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.658445][T13343] [ 286.662406][T13343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 286.665546][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.665546][T13343] [ 286.668744][T13343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 286.671955][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.671955][T13343] [ 286.675198][T13343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 286.678881][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.678881][T13343] [ 286.683049][T13343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 286.685930][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.685930][T13343] [ 286.686192][T13346] xt_socket: unknown flags 0xe4 [ 286.689241][T13343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 286.695052][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.695052][T13343] [ 286.699106][T13343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 286.703309][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.703309][T13343] [ 286.706951][T13343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 286.709808][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.709808][T13343] [ 286.714011][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.714011][T13343] [ 286.718328][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.718328][T13343] [ 286.723101][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.723101][T13343] [ 286.727337][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.727337][T13343] [ 286.732026][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.732026][T13343] [ 286.735896][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.735896][T13343] [ 286.739195][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.739195][T13343] [ 286.743292][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.743292][T13343] [ 286.746774][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.746774][T13343] [ 286.750967][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.750967][T13343] [ 286.754856][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.754856][T13343] [ 286.758241][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.758241][T13343] [ 286.762212][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.762212][T13343] [ 286.765581][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.765581][T13343] [ 286.769128][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.769128][T13343] [ 286.772971][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.772971][T13343] [ 286.776368][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.776368][T13343] [ 286.779714][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.779714][T13343] [ 286.783126][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.783126][T13343] [ 286.786426][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.786426][T13343] [ 286.789825][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.789825][T13343] [ 286.793416][T13343] CIFS mount error: No usable UNC path provided in device string! [ 286.793416][T13343] [ 286.899639][T13365] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13365 comm=syz.7.2132 [ 286.981399][T13370] netlink: 'syz.9.2133': attribute type 11 has an invalid length. [ 287.009629][T13372] loop9: detected capacity change from 0 to 7 [ 287.013528][T13372] Dev loop9: unable to read RDB block 7 [ 287.015779][T13372] loop9: AHDI p1 p2 [ 287.017374][T13372] loop9: partition table partially beyond EOD, truncated [ 287.019212][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 287.019222][ T40] audit: type=1400 audit(2000000036.040:7644): avc: denied { listen } for pid=13373 comm="syz.9.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 287.020872][T13372] loop9: p1 size 4227858431 extends beyond EOD, [ 287.023789][ T40] audit: type=1400 audit(2000000036.040:7645): avc: denied { write } for pid=13373 comm="syz.9.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 287.031088][T13372] truncated [ 287.077000][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 287.450478][T13398] loop9: detected capacity change from 0 to 7 [ 287.454894][T13398] Dev loop9: unable to read RDB block 7 [ 287.456705][T13398] loop9: AHDI p1 p2 [ 287.457957][T13398] loop9: partition table partially beyond EOD, truncated [ 287.460351][T13398] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 287.486786][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 287.503741][T13400] netlink: 'syz.3.2145': attribute type 13 has an invalid length. [ 287.506459][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 287.948187][T13431] loop9: detected capacity change from 0 to 7 [ 287.954599][T13431] Dev loop9: unable to read RDB block 7 [ 287.958363][T13431] loop9: AHDI p1 p2 [ 287.959014][T13433] netlink: 'syz.3.2155': attribute type 13 has an invalid length. [ 287.960038][T13431] loop9: partition table partially beyond EOD, [ 287.963074][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2155'. [ 287.968302][T13431] truncated [ 287.969469][T13431] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 287.990345][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 287.997390][ T40] audit: type=1400 audit(2000000037.020:7646): avc: denied { getopt } for pid=13434 comm="syz.3.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 288.116337][ T40] audit: type=1400 audit(2000000037.140:7647): avc: denied { getopt } for pid=13445 comm="syz.9.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 288.166475][ T40] audit: type=1400 audit(2000000037.190:7648): avc: denied { setattr } for pid=13440 comm="syz.7.2157" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 288.198078][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2161'. [ 288.327410][T13468] netlink: 'syz.8.2164': attribute type 13 has an invalid length. [ 288.330160][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2164'. [ 288.371566][T13470] loop9: detected capacity change from 0 to 7 [ 288.374890][T13470] Dev loop9: unable to read RDB block 7 [ 288.377138][T13470] loop9: AHDI p1 p2 [ 288.378828][T13470] loop9: partition table partially beyond EOD, truncated [ 288.386381][T13470] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 288.431512][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 288.680908][ T54] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 288.830830][ T54] usb 14-1: Using ep0 maxpacket: 8 [ 288.835370][ T54] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.840345][ T54] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 288.844417][ T54] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.851682][ T54] usb 14-1: config 0 descriptor?? [ 288.902711][T13482] netlink: 'syz.3.2169': attribute type 1 has an invalid length. [ 288.932196][T13482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=13482 comm=syz.3.2169 [ 289.056143][T13485] nfs: Unknown parameter 'fd' [ 289.058886][T13485] fuse: Unknown parameter 'rd' [ 289.059291][ T54] iowarrior 14-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 289.257454][T13496] i2c i2c-1: Invalid block write size 34 [ 289.263228][ T54] usb 14-1: USB disconnect, device number 4 [ 289.348058][T13499] loop9: detected capacity change from 0 to 7 [ 289.351182][T13499] Dev loop9: unable to read RDB block 7 [ 289.352975][T13499] loop9: AHDI p1 p2 [ 289.354231][T13499] loop9: partition table partially beyond EOD, truncated [ 289.356630][T13499] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 289.402728][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 289.417170][T13501] qnx6: unable to set blocksize [ 289.425804][T13501] IPVS: set_ctl: invalid protocol: 0 10.1.33.2:20003 [ 289.568789][ T40] audit: type=1400 audit(2000000038.590:7649): avc: granted { setsecparam } for pid=13506 comm="syz.8.2176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 289.575276][ T40] audit: type=1326 audit(2000000038.600:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13506 comm="syz.8.2176" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91f798ec29 code=0x0 [ 289.585278][T13509] netlink: 'syz.3.2178': attribute type 13 has an invalid length. [ 289.591562][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2178'. [ 289.599209][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2179'. [ 289.627424][ T40] audit: type=1326 audit(2000000038.650:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13506 comm="syz.8.2176" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91f798ec29 code=0x0 [ 289.684422][ T40] audit: type=1326 audit(2000000038.710:7652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13506 comm="syz.8.2176" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91f798ec29 code=0x0 [ 290.400829][ T6056] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 290.449715][T13572] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 290.590783][ T6056] usb 12-1: Using ep0 maxpacket: 16 [ 290.595457][ T6056] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.598945][ T6056] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.602199][ T40] audit: type=1400 audit(2000000039.620:7653): avc: denied { lock } for pid=13579 comm="syz.9.2199" path="socket:[67224]" dev="sockfs" ino=67224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 290.609616][ T6056] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 290.615068][ T6056] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 290.617981][ T6056] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.618364][T13582] trusted_key: encrypted_key: master key parameter 'trustd:syz' is invalid [ 290.629454][T13582] netlink: 'syz.8.2197': attribute type 2 has an invalid length. [ 290.632204][ T6056] usb 12-1: config 0 descriptor?? [ 290.633028][T13582] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2197'. [ 290.639171][T13582] loop2: detected capacity change from 0 to 7 [ 290.645038][T13582] Dev loop2: unable to read RDB block 7 [ 290.647442][T13582] loop2: unable to read partition table [ 290.650083][T13582] loop2: partition table beyond EOD, truncated [ 290.655056][T13582] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 290.666732][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2197'. [ 290.673061][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2197'. [ 291.044043][ T6056] hid_parser_main: 5 callbacks suppressed [ 291.044062][ T6056] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 291.050252][ T6056] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 291.054916][ T6056] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 291.057853][ T6056] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 291.061187][ T6056] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 291.068199][ T6056] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 291.113784][ T6056] shield 0003:0955:7214.0009: Registered Thunderstrike controller [ 291.117366][ T6056] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 291.227902][T13628] 9pnet: Could not find request transport: fD [ 291.431140][T13561] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.435111][T13561] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 291.451467][T13561] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 291.456597][T13561] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.458903][T13561] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 291.465096][T13561] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 291.710888][ T54] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 291.860731][ T54] usb 14-1: Using ep0 maxpacket: 8 [ 291.865998][ T54] usb 14-1: config 0 interface 0 has no altsetting 0 [ 291.868877][ T54] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 291.872633][ T54] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.877270][ T54] usb 14-1: config 0 descriptor?? [ 292.194200][ T54] usbhid 14-1:0.0: can't add hid device: -71 [ 292.196892][ T54] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 292.202697][ T54] usb 14-1: USB disconnect, device number 5 [ 292.212835][T13673] loop9: detected capacity change from 0 to 7 [ 292.215850][T13673] Dev loop9: unable to read RDB block 7 [ 292.218224][T13673] loop9: AHDI p1 p2 [ 292.219897][T13673] loop9: partition table partially beyond EOD, truncated [ 292.221010][ T7821] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 292.223109][T13673] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 292.229096][ T7821] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 292.234126][ T7821] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 292.237946][ T7821] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 292.254155][T13675] netlink: 'syz.8.2219': attribute type 178 has an invalid length. [ 292.269137][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 292.350841][ T6056] usb 12-1: reset high-speed USB device number 8 using dummy_hcd [ 292.352029][T13680] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=13680 comm=syz.8.2221 [ 292.364087][T13680] erofs (device nbd8): cannot find valid erofs superblock [ 292.382438][T13681] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 292.490914][ T6056] usb 12-1: device descriptor read/64, error -32 [ 292.540144][T13696] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 292.730972][ T6056] usb 12-1: reset high-speed USB device number 8 using dummy_hcd [ 292.861068][ T6056] usb 12-1: device descriptor read/64, error -32 [ 293.019136][T13722] loop9: detected capacity change from 0 to 7 [ 293.024831][T13722] Dev loop9: unable to read RDB block 7 [ 293.026711][T13722] loop9: AHDI p1 p2 [ 293.027991][T13722] loop9: partition table partially beyond EOD, truncated [ 293.030496][T13722] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 293.054279][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 293.080564][T13725] __nla_validate_parse: 1 callbacks suppressed [ 293.080576][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2230'. [ 293.102618][ T6056] usb 12-1: reset high-speed USB device number 8 using dummy_hcd [ 293.121654][ T6056] usb 12-1: device descriptor read/8, error -32 [ 293.285479][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 293.285496][ T40] audit: type=1400 audit(2000000042.310:7656): avc: denied { setattr } for pid=13736 comm="syz.7.2233" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 293.301209][ T40] audit: type=1400 audit(2000000042.320:7657): avc: denied { ioctl } for pid=13736 comm="syz.7.2233" path="/332/file0" dev="9p" ino=2 ioctlcmd=0x4540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 293.338759][ T40] audit: type=1400 audit(2000000042.360:7658): avc: denied { read } for pid=13741 comm="syz.9.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 293.360808][ T5975] Bluetooth: hci1: command 0x0c1a tx timeout [ 293.418296][T13747] usb usb8: usbfs: process 13747 (syz.7.2236) did not claim interface 0 before use [ 293.421511][T13747] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 293.443069][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2237'. [ 293.469950][T13751] loop9: detected capacity change from 0 to 7 [ 293.472514][T13751] Dev loop9: unable to read RDB block 7 [ 293.474722][T13751] loop9: AHDI p1 p2 [ 293.476058][T13751] loop9: partition table partially beyond EOD, truncated [ 293.478474][T13751] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 293.502496][T13753] netlink: 'syz.8.2239': attribute type 3 has an invalid length. [ 293.503635][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 293.520510][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2241'. [ 293.521923][ T5975] Bluetooth: hci2: command 0x0c1a tx timeout [ 293.595659][T13759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.597950][T13759] IPv6: NLM_F_CREATE should be set when creating new route [ 293.600146][T13759] IPv6: NLM_F_CREATE should be set when creating new route [ 293.602942][T13759] IPv6: NLM_F_CREATE should be set when creating new route [ 293.608260][T13759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.611789][T13759] xt_l2tp: unknown flags: 51 [ 293.719371][ T40] audit: type=1400 audit(2000000042.740:7659): avc: denied { setattr } for pid=13767 comm="syz.7.2245" name="NETLINK" dev="sockfs" ino=67526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 293.722879][T13770] tipc: Started in network mode [ 293.730489][T13770] tipc: Node identity 4, cluster identity 4711 [ 293.732455][T13770] tipc: Node number set to 4 [ 293.771925][T13775] tun0: tun_chr_ioctl cmd 1074025675 [ 293.773623][T13775] tun0: persist enabled [ 293.775221][T13775] tun0: tun_chr_ioctl cmd 1074025675 [ 293.776856][T13775] tun0: persist disabled [ 293.807406][T13772] netlink: 'syz.7.2247': attribute type 13 has an invalid length. [ 293.812114][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2247'. [ 294.001506][ T29] usb 12-1: USB disconnect, device number 8 [ 294.194050][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2253'. [ 294.344211][T13803] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 294.709592][T13812] netlink: 'syz.9.2258': attribute type 13 has an invalid length. [ 294.714159][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2258'. [ 294.920918][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2261'. [ 295.285062][T13827] /dev/sg0: Can't lookup blockdev [ 295.290906][T13830] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 295.294519][T13830] tipc: Enabled bearer , priority 10 [ 295.297070][T13830] netlink: 'syz.8.2265': attribute type 1 has an invalid length. [ 295.299596][T13830] netlink: 'syz.8.2265': attribute type 3 has an invalid length. [ 295.302668][T13830] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2265'. [ 295.305404][T13830] NCSI netlink: No device for ifindex 0 [ 295.415091][T13842] loop9: detected capacity change from 0 to 7 [ 295.418460][T12942] Dev loop9: unable to read RDB block 7 [ 295.420853][T12942] loop9: AHDI p1 p2 [ 295.422524][T12942] loop9: partition table partially beyond EOD, truncated [ 295.425663][T12942] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 295.433003][T13842] Dev loop9: unable to read RDB block 7 [ 295.435388][T13842] loop9: AHDI p1 p2 [ 295.437064][T13842] loop9: partition table partially beyond EOD, truncated [ 295.440178][T13842] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 295.450788][ T5975] Bluetooth: hci1: command 0x0c1a tx timeout [ 295.454690][ T40] audit: type=1400 audit(2000000044.480:7660): avc: denied { unmount } for pid=12063 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 295.471961][ T40] audit: type=1400 audit(2000000044.500:7661): avc: denied { append } for pid=13845 comm="syz.9.2270" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 295.487975][T13848] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 295.494067][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 295.510077][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 295.537957][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2273'. [ 295.546802][T13854] netlink: 'syz.9.2274': attribute type 13 has an invalid length. [ 295.555752][T13854] .: renamed from bond0 (while UP) [ 295.593075][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2274'. [ 295.596611][T13854] bridge_slave_1: left allmulticast mode [ 295.598864][T13854] bridge_slave_1: left promiscuous mode [ 295.601673][T13854] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.607148][T13854] bridge_slave_0: left allmulticast mode [ 295.608908][T13854] bridge_slave_0: left promiscuous mode [ 295.610822][ T5975] Bluetooth: hci2: command 0x0c1a tx timeout [ 295.611069][T13854] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.049393][T13885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.114222][T13896] netlink: 'syz.8.2286': attribute type 1 has an invalid length. [ 296.117483][T13896] netlink: 'syz.8.2286': attribute type 4 has an invalid length. [ 296.121181][T13896] netlink: 'syz.8.2286': attribute type 1 has an invalid length. [ 296.158771][T13896] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 296.252998][T13896] cdrom: dropping to single frame dma [ 296.475790][T13903] orangefs: client-core tried to read wrong size [ 296.487618][T13906] : entered promiscuous mode [ 296.574507][T13916] loop9: detected capacity change from 0 to 7 [ 296.576031][ T40] audit: type=1326 audit(2000000045.600:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13915 comm="syz.3.2293" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9bcf8ec29 code=0x0 [ 296.577732][T13916] Dev loop9: unable to read RDB block 7 [ 296.588971][T13916] loop9: AHDI p1 p2 [ 296.590758][T13916] loop9: partition table partially beyond EOD, truncated [ 296.594023][T13916] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 296.634666][T13924] veth0_macvtap: left promiscuous mode [ 296.638365][T12942] udevd[12942]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 297.521048][ T5975] Bluetooth: hci1: command 0x0c1a tx timeout [ 297.680758][ T5975] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.721846][ T9266] wlan0: Trigger new scan to find an IBSS to join [ 303.681051][ T9260] wlan0: Trigger new scan to find an IBSS to join [ 304.630928][ T9260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.489744][T13936] __nla_validate_parse: 5 callbacks suppressed [ 312.489760][T13936] netlink: 4388 bytes leftover after parsing attributes in process `syz.9.2299'. [ 312.602024][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2302'. [ 312.652911][T13956] loop9: detected capacity change from 0 to 7 [ 312.655808][T13940] Dev loop9: unable to read RDB block 7 [ 312.657975][T13940] loop9: AHDI p1 p2 [ 312.659467][T13940] loop9: partition table partially beyond EOD, truncated [ 312.662862][T13940] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 312.664351][T13952] validate_nla: 3 callbacks suppressed [ 312.664364][T13952] netlink: 'syz.7.2304': attribute type 13 has an invalid length. [ 312.671798][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2304'. [ 312.674355][T13956] Dev loop9: unable to read RDB block 7 [ 312.677085][T13956] loop9: AHDI p1 p2 [ 312.678664][T13956] loop9: partition table partially beyond EOD, truncated [ 312.682298][T13956] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 312.712344][T13940] udevd[13940]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 312.723387][T13940] udevd[13940]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 312.772665][T13960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.790747][ T5330] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 312.960864][ T5330] usb 14-1: Using ep0 maxpacket: 8 [ 312.963984][ T5330] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.967370][ T5330] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 312.970188][ T5330] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.974285][ T5330] usb 14-1: config 0 descriptor?? [ 313.099868][T13975] Unsupported ieee802154 address type: 0 [ 313.180974][ T5330] iowarrior 14-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 313.304402][T13981] netlink: 'syz.7.2314': attribute type 13 has an invalid length. [ 313.306915][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2314'. [ 313.382514][ T840] usb 14-1: USB disconnect, device number 6 [ 313.997933][T14009] loop9: detected capacity change from 0 to 7 [ 314.000501][T13940] Dev loop9: unable to read RDB block 7 [ 314.003444][T13940] loop9: AHDI p1 p2 [ 314.004708][T13940] loop9: partition table partially beyond EOD, truncated [ 314.007158][T13940] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 314.023500][T14009] Dev loop9: unable to read RDB block 7 [ 314.025422][T14009] loop9: AHDI p1 p2 [ 314.026703][T14009] loop9: partition table partially beyond EOD, truncated [ 314.029479][T14009] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 314.053740][T13940] udevd[13940]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 314.068336][T14011] netlink: 'syz.9.2323': attribute type 13 has an invalid length. [ 314.072324][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2323'. [ 314.072523][T13940] udevd[13940]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 314.163430][T14015] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2325'. [ 314.208292][T14018] batadv_slave_0: entered promiscuous mode [ 314.212668][T14018] batadv_slave_0: left promiscuous mode [ 314.258085][T14019] fuse: Unknown parameter '' [ 315.020388][ T40] audit: type=1400 audit(2000000064.040:7663): avc: denied { map } for pid=14027 comm="syz.8.2330" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 315.090754][ T7821] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 315.240995][ T7821] usb 12-1: Using ep0 maxpacket: 8 [ 315.244840][ T7821] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.249634][ T7821] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 315.254438][ T7821] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.261176][ T7821] usb 12-1: config 0 descriptor?? [ 315.284898][T14043] netlink: 'syz.8.2333': attribute type 13 has an invalid length. [ 315.287907][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2333'. [ 315.334789][T14045] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 315.337203][T14045] UDF-fs: Scanning with blocksize 2048 failed [ 315.342859][T14045] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 315.345335][T14045] UDF-fs: Scanning with blocksize 4096 failed [ 315.397946][T14051] geneve2: entered promiscuous mode [ 315.400174][T14051] geneve2: entered allmulticast mode [ 315.471164][ T7821] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 315.520313][T14054] loop9: detected capacity change from 0 to 7 [ 315.523109][T14054] Dev loop9: unable to read RDB block 7 [ 315.525158][T14054] loop9: AHDI p1 p2 [ 315.526607][T14054] loop9: partition table partially beyond EOD, truncated [ 315.529457][T14054] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 315.559899][T13940] udevd[13940]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 315.564958][T14058] net_ratelimit: 133 callbacks suppressed [ 315.564968][T14058] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 315.635966][ T40] audit: type=1400 audit(2000000064.660:7664): avc: denied { ioctl } for pid=14063 comm="syz.8.2343" path="socket:[70189]" dev="sockfs" ino=70189 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 315.645430][T14068] IPVS: length: 93 != 8 [ 315.648062][T14066] hpfs: hpfs_map_sector(): read error [ 315.673158][ T10] usb 12-1: USB disconnect, device number 9 [ 315.849636][T14082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26216 sclass=netlink_route_socket pid=14082 comm=syz.3.2347 [ 315.890889][T14088] loop9: detected capacity change from 0 to 7 [ 315.893934][T14072] Dev loop9: unable to read RDB block 7 [ 315.895772][T14072] loop9: AHDI p1 p2 [ 315.897071][T14072] loop9: partition table partially beyond EOD, truncated [ 315.899683][T14072] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 315.907862][T14088] Dev loop9: unable to read RDB block 7 [ 315.909634][T14088] loop9: AHDI p1 p2 [ 315.912397][T14088] loop9: partition table partially beyond EOD, truncated [ 315.914851][T14088] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 315.954936][ T40] audit: type=1400 audit(2000000064.980:7665): avc: denied { shutdown } for pid=14092 comm="syz.8.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 315.955465][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 315.992869][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 315.997115][T14095] bridge0: entered promiscuous mode [ 316.010770][T14095] macsec1: entered promiscuous mode [ 316.043175][T14098] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14098 comm=syz.3.2352 [ 316.058193][ T40] audit: type=1400 audit(2000000065.080:7666): avc: denied { listen } for pid=14096 comm="syz.3.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.074583][T14102] netlink: 'syz.8.2353': attribute type 10 has an invalid length. [ 316.077253][T14102] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2353'. [ 316.210489][T14105] tipc: Enabled bearer , priority 0 [ 316.214275][T14105] syzkaller0: entered promiscuous mode [ 316.216782][T14105] syzkaller0: entered allmulticast mode [ 316.224611][T14105] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 316.246011][T14105] tipc: Resetting bearer [ 316.252591][ T40] audit: type=1400 audit(2000000065.280:7667): avc: denied { setopt } for pid=14106 comm="syz.7.2355" lport=36552 faddr=fe88::108 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 316.285031][T14107] netlink: 'syz.7.2355': attribute type 4 has an invalid length. [ 316.324066][T14104] tipc: Resetting bearer [ 316.333195][T14104] tipc: Disabling bearer [ 316.366413][T14112] comedi: No check for data length of config insn id 3 is implemented [ 316.371352][T14112] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 316.375328][T14112] comedi: Assuming n=97 is correct [ 316.428789][T14114] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2358'. [ 316.492686][T14124] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 316.492686][T14124] program syz.8.2361 not setting count and/or reply_len properly [ 316.547604][T14129] netlink: 'syz.8.2362': attribute type 13 has an invalid length. [ 316.550456][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2362'. [ 316.622818][T14130] nfs: Unknown parameter 'ā߶חLsۻ19et#2w:԰-qhs1dϚ:72pd?`6`Pq^)#>L_qtp޳N)yZv' [ 316.651216][T14132] netlink: 'syz.7.2363': attribute type 13 has an invalid length. [ 316.655103][T14132] FAULT_INJECTION: forcing a failure. [ 316.655103][T14132] name failslab, interval 1, probability 0, space 0, times 0 [ 316.661696][T14132] CPU: 2 UID: 0 PID: 14132 Comm: syz.7.2363 Not tainted syzkaller #0 PREEMPT(full) [ 316.661713][T14132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 316.661720][T14132] Call Trace: [ 316.661725][T14132] [ 316.661729][T14132] dump_stack_lvl+0x16c/0x1f0 [ 316.661760][T14132] should_fail_ex+0x512/0x640 [ 316.661781][T14132] ? __kvmalloc_node_noprof+0x124/0x620 [ 316.661795][T14132] should_failslab+0xc2/0x120 [ 316.661809][T14132] __kvmalloc_node_noprof+0x137/0x620 [ 316.661820][T14132] ? __pfx___mutex_lock+0x10/0x10 [ 316.661836][T14132] ? traverse.part.0.constprop.0+0x392/0x640 [ 316.661852][T14132] ? traverse.part.0.constprop.0+0x392/0x640 [ 316.661864][T14132] traverse.part.0.constprop.0+0x392/0x640 [ 316.661876][T14132] ? _kstrtoull+0x145/0x200 [ 316.661888][T14132] ? __pfx__kstrtoull+0x10/0x10 [ 316.661902][T14132] seq_read_iter+0x932/0x12c0 [ 316.661920][T14132] seq_read+0x3a3/0x570 [ 316.661932][T14132] ? __pfx_seq_read+0x10/0x10 [ 316.661946][T14132] ? get_pid_task+0xfc/0x250 [ 316.661959][T14132] ? avc_policy_seqno+0x9/0x20 [ 316.661974][T14132] ? __pfx_seq_read+0x10/0x10 [ 316.661984][T14132] proc_reg_read+0x23d/0x330 [ 316.662001][T14132] ? __pfx_proc_reg_read+0x10/0x10 [ 316.662019][T14132] vfs_read+0x1e1/0xcf0 [ 316.662034][T14132] ? __pfx_vfs_read+0x10/0x10 [ 316.662044][T14132] ? find_held_lock+0x2b/0x80 [ 316.662059][T14132] ? __fget_files+0x204/0x3c0 [ 316.662079][T14132] ? __fget_files+0x20e/0x3c0 [ 316.662091][T14132] ? __fget_files+0x190/0x3c0 [ 316.662107][T14132] __x64_sys_pread64+0x1eb/0x250 [ 316.662120][T14132] ? __pfx___x64_sys_pread64+0x10/0x10 [ 316.662137][T14132] do_syscall_64+0xcd/0x4e0 [ 316.662155][T14132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.662167][T14132] RIP: 0033:0x7fe569b8ec29 [ 316.662176][T14132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.662188][T14132] RSP: 002b:00007fe56a98b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 316.662199][T14132] RAX: ffffffffffffffda RBX: 00007fe569dd5fa0 RCX: 00007fe569b8ec29 [ 316.662206][T14132] RDX: 00000000000000aa RSI: 0000200000000140 RDI: 0000000000000005 [ 316.662213][T14132] RBP: 00007fe56a98b090 R08: 0000000000000000 R09: 0000000000000000 [ 316.662220][T14132] R10: 0020000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 316.662227][T14132] R13: 00007fe569dd6038 R14: 00007fe569dd5fa0 R15: 00007ffc6d4ddf08 [ 316.662241][T14132] [ 316.693439][T14138] Bluetooth: MGMT ver 1.23 [ 316.803668][T14148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.806462][T14148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.060751][ T54] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 317.128596][T14157] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 317.141171][ T7682] Bluetooth: hci3: Frame reassembly failed (-84) [ 317.148262][T14157] input: syz0 as /devices/virtual/input/input14 [ 317.201044][ T54] usb 13-1: device descriptor read/64, error -71 [ 317.440873][ T54] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 317.442466][T14164] Attempt to restore checkpoint with obsolete wellknown handles [ 317.453805][T14166] netlink: 'syz.9.2375': attribute type 13 has an invalid length. [ 317.502381][T14167] __nla_validate_parse: 4 callbacks suppressed [ 317.502397][T14167] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2374'. [ 317.547985][T14170] loop9: detected capacity change from 0 to 7 [ 317.550601][T14170] Dev loop9: unable to read RDB block 7 [ 317.553057][T14170] loop9: AHDI p1 p2 [ 317.554340][T14170] loop9: partition table partially beyond EOD, truncated [ 317.556837][T14170] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 317.581006][ T54] usb 13-1: device descriptor read/64, error -71 [ 317.596591][ T40] audit: type=1400 audit(2000000066.620:7668): avc: denied { map } for pid=14171 comm="syz.9.2377" path="socket:[72110]" dev="sockfs" ino=72110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 317.596708][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 317.606763][ T40] audit: type=1400 audit(2000000066.620:7669): avc: denied { lock } for pid=14171 comm="syz.9.2377" path="socket:[72110]" dev="sockfs" ino=72110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 317.635545][T14176] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.642515][T14176] XFS (nbd9): no-recovery mounts must be read-only. [ 317.665172][T14178] : renamed from wg2 (while UP) [ 317.678193][T14180] netlink: 'syz.9.2380': attribute type 13 has an invalid length. [ 317.681957][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2380'. [ 317.710852][ T54] usb usb13-port1: attempt power cycle [ 317.804722][T14182] netlink: 27 bytes leftover after parsing attributes in process `syz.9.2381'. [ 317.848345][ T40] audit: type=1400 audit(2000000066.870:7670): avc: denied { setopt } for pid=14185 comm="syz.9.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 317.896180][T14188] SELinux: failed to load policy [ 317.927143][T14193] loop9: detected capacity change from 0 to 7 [ 317.930171][T14193] Dev loop9: unable to read RDB block 7 [ 317.932540][T14193] loop9: AHDI p1 p2 [ 317.934285][T14193] loop9: partition table partially beyond EOD, truncated [ 317.937907][T14193] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 317.970319][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 317.972677][ T40] audit: type=1400 audit(2000000067.000:7671): avc: denied { write } for pid=14194 comm="syz.3.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 318.020352][ T40] audit: type=1400 audit(2000000067.040:7672): avc: denied { getopt } for pid=14199 comm="syz.3.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 318.060769][ T54] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 318.082395][ T54] usb 13-1: device descriptor read/8, error -71 [ 318.349257][ T54] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 318.365641][T14205] netlink: 'syz.3.2390': attribute type 3 has an invalid length. [ 318.383445][ T54] usb 13-1: device descriptor read/8, error -71 [ 318.420155][T14211] dlm: no locking on control device [ 318.458363][T14213] trusted_key: encrypted_key: insufficient parameters specified [ 318.491112][ T54] usb usb13-port1: unable to enumerate USB device [ 318.499188][T14215] loop9: detected capacity change from 0 to 7 [ 318.503307][T14215] Dev loop9: unable to read RDB block 7 [ 318.505682][T14215] loop9: AHDI p1 p2 [ 318.507363][T14215] loop9: partition table partially beyond EOD, truncated [ 318.510728][T14215] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 318.533162][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 318.602273][ T9] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 318.754625][ T9] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.759077][ T9] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 318.762849][ T9] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 318.766530][ T9] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.772001][ T9] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.775752][ T9] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.780828][ T9] usb 14-1: config 0 descriptor?? [ 318.783725][T14203] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 318.933377][T14223] netlink: 'syz.3.2397': attribute type 13 has an invalid length. [ 318.936666][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2397'. [ 318.941346][T14223] fuse: Bad value for 'fd' [ 319.192909][ T9] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 319.200895][ T5975] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 319.202568][ T5978] Bluetooth: hci3: command 0x1003 tx timeout [ 319.214932][ T9] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 319.458288][ T54] usb 14-1: USB disconnect, device number 7 [ 319.521097][ T840] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 319.521416][ T5975] Bluetooth: hci1: command 0x0c1a tx timeout [ 319.524490][ T840] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 319.810622][T14234] Attempt to restore checkpoint with obsolete wellknown handles [ 319.817444][T14234] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2400'. [ 320.158538][T14249] loop9: detected capacity change from 0 to 7 [ 320.165177][T14072] Dev loop9: unable to read RDB block 7 [ 320.167198][T14072] loop9: AHDI p1 p2 [ 320.168501][T14072] loop9: partition table partially beyond EOD, truncated [ 320.170991][T14072] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 320.179725][T14249] Dev loop9: unable to read RDB block 7 [ 320.182836][T14249] loop9: AHDI p1 p2 [ 320.184563][T14249] loop9: partition table partially beyond EOD, truncated [ 320.187124][T14251] overlay: Bad value for 'uuid' [ 320.187882][T14249] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 320.193566][T14251] netlink: 'syz.3.2406': attribute type 13 has an invalid length. [ 320.196987][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2406'. [ 320.204599][T14251] fuse: Bad value for 'fd' [ 320.215862][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 320.242275][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 320.470802][ T9] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 320.621894][ T9] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 320.626684][ T9] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 320.629702][ T9] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.633374][ T9] usb 13-1: Product: syz [ 320.634820][ T9] usb 13-1: Manufacturer: syz [ 320.636330][ T9] usb 13-1: SerialNumber: syz [ 320.639095][ T9] usb 13-1: config 0 descriptor?? [ 321.049468][ T7555] usb 13-1: USB disconnect, device number 10 [ 321.600796][ T5975] Bluetooth: hci2: command 0x0c1a tx timeout [ 321.600890][ T840] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 321.605470][ T840] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 322.048676][T14267] Attempt to restore checkpoint with obsolete wellknown handles [ 322.086097][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.104805][T14272] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2411'. [ 322.279087][ T9261] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.303500][T14280] vivid-000: ================= START STATUS ================= [ 322.306192][T14280] vivid-000: Test Pattern: 75% Colorbar [ 322.308535][T14280] vivid-000: Fill Percentage of Frame: 5 [ 322.310300][T14280] vivid-000: Horizontal Movement: No Movement [ 322.313457][T14280] vivid-000: Vertical Movement: No Movement [ 322.315376][T14280] vivid-000: OSD Text Mode: All [ 322.317099][T14280] vivid-000: Show Border: true [ 322.318733][T14280] vivid-000: Show Square: false [ 322.321705][T14280] vivid-000: Sensor Flipped Horizontally: false [ 322.324203][T14280] vivid-000: Sensor Flipped Vertically: false [ 322.326626][T14280] vivid-000: Insert SAV Code in Image: false [ 322.328763][T14280] vivid-000: Insert EAV Code in Image: false [ 322.330537][T14280] vivid-000: Insert Video Guard Band: false [ 322.333393][T14280] vivid-000: Reduced Framerate: false [ 322.335063][T14280] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 322.337431][T14280] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 322.339891][T14280] vivid-000: Enable Capture Cropping: true [ 322.342123][T14280] vivid-000: Enable Capture Composing: true [ 322.343994][T14280] vivid-000: Enable Capture Scaler: true [ 322.345742][T14280] vivid-000: Timestamp Source: End of Frame [ 322.347895][T14280] vivid-000: Colorspace: Rec. 709 [ 322.349468][T14280] vivid-000: Transfer Function: Default [ 322.351554][T14280] vivid-000: Y'CbCr Encoding: Rec. 709 [ 322.353211][T14280] vivid-000: HSV Encoding: Hue 0-179 [ 322.354832][T14280] vivid-000: Quantization: Default [ 322.356452][T14280] vivid-000: Apply Alpha To Red Only: false [ 322.358396][T14280] vivid-000: Standard Aspect Ratio: 4x3 [ 322.360165][T14280] vivid-000: DV Timings Signal Mode: Current DV Timings [ 322.363043][T14280] vivid-000: DV Timings: 640x480p59 inactive [ 322.367187][T14280] vivid-000: DV Timings Aspect Ratio: 4x3 [ 322.369454][T14280] vivid-000: Maximum EDID Blocks: 2 [ 322.371209][T14280] vivid-000: Limited RGB Range (16-235): true [ 322.373220][T14280] vivid-000: Rx RGB Quantization Range: Automatic [ 322.375351][T14280] vivid-000: Power Present: 0x00000001 [ 322.377129][T14280] tpg source WxH: 1280x720 (Y'CbCr) [ 322.385834][T14280] tpg field: 1 [ 322.386962][T14280] tpg crop: (0,8)/64x16 [ 322.388306][T14280] tpg compose: (0,0)/16x16 [ 322.389425][T14286] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 322.393928][T14286] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 322.398165][T14280] tpg colorspace: 1 [ 322.399993][T14280] tpg transfer function: 6/1 [ 322.402198][T14280] tpg Y'CbCr encoding: 2/2 [ 322.404577][ T9261] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.406438][T14286] netlink: 'syz.8.2420': attribute type 39 has an invalid length. [ 322.411769][T14280] tpg quantization: 0/2 [ 322.413423][T14280] tpg RGB range: 0/1 [ 322.414892][T14280] vivid-000: ================== END STATUS ================== [ 322.450473][ T5978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.457350][ T5978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.462743][ T5978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.466177][ T5978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.472420][ T5978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.483459][ T5975] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.486703][ T5975] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.489486][ T5975] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.494134][ T5975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.497259][ T5975] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.514601][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2421'. [ 322.529085][ T9261] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.560025][T14290] lo speed is unknown, defaulting to 1000 [ 322.564863][T14290] xfrm0 speed is unknown, defaulting to 1000 [ 322.645285][ T9261] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.742523][T14290] chnl_net:caif_netlink_parms(): no params data found [ 322.822060][T14314] loop9: detected capacity change from 0 to 7 [ 322.824973][T14314] Dev loop9: unable to read RDB block 7 [ 322.827197][T14314] loop9: AHDI p1 p2 [ 322.828767][T14314] loop9: partition table partially beyond EOD, truncated [ 322.833461][T14314] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 322.857115][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 322.863996][T14290] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.866339][T14290] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.868809][T14290] bridge_slave_0: entered allmulticast mode [ 322.871921][T14290] bridge_slave_0: entered promiscuous mode [ 322.875323][T14290] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.878139][T14290] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.881440][T14290] bridge_slave_1: entered allmulticast mode [ 322.884594][T14290] bridge_slave_1: entered promiscuous mode [ 322.954411][T14321] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode [ 322.956796][T14321] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 322.963929][T14321] netlink: 'syz.3.2431': attribute type 10 has an invalid length. [ 322.971015][T14290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.992648][T14329] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2434'. [ 323.024100][T14321] mac80211_hwsim hwsim30 wlan1: left promiscuous mode [ 323.026996][T14321] mac80211_hwsim hwsim30 wlan1: left allmulticast mode [ 323.039272][T14321] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 323.045373][T14290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.062210][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2435'. [ 323.062782][T14329] netlink: 'syz.7.2434': attribute type 10 has an invalid length. [ 323.278721][T14339] loop9: detected capacity change from 0 to 7 [ 323.283402][T14339] Dev loop9: unable to read RDB block 7 [ 323.286718][T14339] loop9: AHDI p1 p2 [ 323.287985][T14339] loop9: partition table partially beyond EOD, truncated [ 323.292996][T14339] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 323.329236][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 323.426056][ T9261] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.464535][ T9261] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.512001][ T9261] . (unregistering): Released all slaves [ 323.518585][ T9261] bond1 (unregistering): Released all slaves [ 323.551065][T14290] team0: Port device team_slave_0 added [ 323.554860][T14290] team0: Port device team_slave_1 added [ 323.648278][T14290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.653002][T14290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.660953][T14290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.671535][T14290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.674546][T14290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.686742][T14290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.769482][T14290] hsr_slave_0: entered promiscuous mode [ 323.773052][T14290] hsr_slave_1: entered promiscuous mode [ 323.775140][T14290] debugfs: 'hsr0' already exists in 'hsr' [ 323.776933][T14290] Cannot create hsr debugfs directory [ 323.829365][T14353] lo speed is unknown, defaulting to 1000 [ 323.858836][T14353] xfrm0 speed is unknown, defaulting to 1000 [ 324.103874][T14365] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2444'. [ 324.143443][ T9261] hsr_slave_0: left promiscuous mode [ 324.146067][ T9261] hsr_slave_1: left promiscuous mode [ 324.148172][ T9261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.152276][ T9261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.156197][ T9261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.159092][ T9261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.192610][T14366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.206465][ T9261] veth1_vlan: left promiscuous mode [ 324.208949][ T9261] veth0_vlan: left promiscuous mode [ 324.565678][ T5978] Bluetooth: hci1: command tx timeout [ 324.710288][T14370] binder: 14369:14370 ioctl 4004ae86 200000000240 returned -22 [ 324.714356][T14370] binder: 14369:14370 ioctl 9000aea4 200000002040 returned -22 [ 324.751633][T14372] loop9: detected capacity change from 0 to 7 [ 324.755608][T14372] Dev loop9: unable to read RDB block 7 [ 324.757941][T14372] loop9: AHDI p1 p2 [ 324.759665][T14372] loop9: partition table partially beyond EOD, truncated [ 324.763339][T14372] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 324.791796][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 325.030918][ T9261] team0 (unregistering): Port device team_slave_1 removed [ 325.130118][ T9261] team0 (unregistering): Port device team_slave_0 removed [ 326.048291][T14382] hpfs: hpfs_map_sector(): read error [ 326.200427][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 326.200436][ T40] audit: type=1400 audit(2000000075.220:7674): avc: denied { create } for pid=14388 comm="syz.7.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 326.226967][T14385] @: renamed from vlan0 (while UP) [ 326.331780][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2454'. [ 326.369003][T14401] loop9: detected capacity change from 0 to 7 [ 326.372966][T14401] Dev loop9: unable to read RDB block 7 [ 326.377267][T14401] loop9: AHDI p1 p2 [ 326.378579][T14401] loop9: partition table partially beyond EOD, truncated [ 326.381150][T14401] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 326.407649][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 326.419333][T14405] netlink: 'syz.3.2459': attribute type 1 has an invalid length. [ 326.454364][T14405] 8021q: adding VLAN 0 to HW filter on device bond3 [ 326.496841][T14408] tmpfs: Unknown parameter 'grd7Ҳrp, priority 0 [ 330.823032][T14654] tipc: Resetting bearer [ 330.828205][T14653] tipc: Disabling bearer [ 330.857616][T14656] netlink: 'syz.2.2527': attribute type 13 has an invalid length. [ 330.995612][T14663] openvswitch: netlink: Message has 5 unknown bytes. [ 331.086348][ T29] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 331.103585][ T29] usb 12-1: device descriptor read/8, error -71 [ 331.340787][ T29] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 331.363262][ T29] usb 12-1: device descriptor read/8, error -71 [ 331.471052][ T29] usb usb12-port1: unable to enumerate USB device [ 331.483639][T14718] netlink: 'syz.3.2542': attribute type 13 has an invalid length. [ 331.574621][T14724] binder: 14723:14724 ioctl 3 2000000001c0 returned -22 [ 331.704767][T14732] overlayfs: failed to clone lowerpath [ 331.839508][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 331.839524][ T40] audit: type=1400 audit(2000000080.860:7686): avc: denied { setattr } for pid=14740 comm="syz.8.2550" path="socket:[74538]" dev="sockfs" ino=74538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 331.884370][ T40] audit: type=1400 audit(2000000080.870:7687): avc: denied { setattr } for pid=14740 comm="syz.8.2550" name="SCTPv6" dev="sockfs" ino=74542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 331.943859][T14755] netlink: 'syz.2.2556': attribute type 13 has an invalid length. [ 332.000796][T14765] fuse: Bad value for 'fd' [ 332.259392][T14784] loop9: detected capacity change from 0 to 7 [ 332.263025][T14072] Dev loop9: unable to read RDB block 7 [ 332.265187][T14072] loop9: AHDI p1 p2 [ 332.266627][T14072] loop9: partition table partially beyond EOD, truncated [ 332.269484][T14072] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 332.281570][T14784] Dev loop9: unable to read RDB block 7 [ 332.283378][T14784] loop9: AHDI p1 p2 [ 332.285015][T14784] loop9: partition table partially beyond EOD, truncated [ 332.287376][T14784] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 332.297612][T14786] /dev/nullb0: Can't lookup blockdev [ 332.309373][T14786] option changes via remount are deprecated (pid=14785 comm=syz.2.2564) [ 332.319841][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 332.325077][T14788] netlink: 'syz.8.2565': attribute type 13 has an invalid length. [ 332.344928][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 332.735696][T14805] overlayfs: failed to resolve './bus': -2 [ 332.858641][T14814] loop9: detected capacity change from 0 to 7 [ 332.862014][T13940] Dev loop9: unable to read RDB block 7 [ 332.863815][T13940] loop9: AHDI p1 p2 [ 332.865255][T13940] loop9: partition table partially beyond EOD, truncated [ 332.867648][T13940] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 332.878873][T14814] Dev loop9: unable to read RDB block 7 [ 332.882234][T14814] loop9: AHDI p1 p2 [ 332.883496][T14814] loop9: partition table partially beyond EOD, truncated [ 332.885895][T14814] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 332.916972][ T40] audit: type=1326 audit(2000000081.940:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14774 comm="syz.3.2561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bcf8ec29 code=0x7fc00000 [ 332.925677][ T40] audit: type=1326 audit(2000000081.940:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14774 comm="syz.3.2561" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9bcf8ec29 code=0x7fc00000 [ 332.927039][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 332.932410][ T40] audit: type=1326 audit(2000000081.940:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14774 comm="syz.3.2561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bcf8ec29 code=0x7fc00000 [ 332.957297][ T40] audit: type=1326 audit(2000000081.940:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14774 comm="syz.3.2561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bcf8ec29 code=0x7fc00000 [ 332.964512][ T40] audit: type=1326 audit(2000000081.940:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14774 comm="syz.3.2561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bcf8ec29 code=0x7fc00000 [ 332.972623][ T40] audit: type=1326 audit(2000000081.940:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14774 comm="syz.3.2561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bcf8ec29 code=0x7fc00000 [ 332.980113][ T40] audit: type=1326 audit(2000000081.940:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14774 comm="syz.3.2561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bcf8ec29 code=0x7fc00000 [ 332.980649][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 332.988350][ T40] audit: type=1326 audit(2000000081.940:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14774 comm="syz.3.2561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bcf8ec29 code=0x7fc00000 [ 333.132178][T14829] __nla_validate_parse: 19 callbacks suppressed [ 333.132190][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2576'. [ 333.142987][T14839] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 333.288930][T14853] netlink: 'syz.8.2586': attribute type 1 has an invalid length. [ 333.345938][T14860] cgroup: release_agent respecified [ 333.518292][T14867] o2cb: This node has not been configured. [ 333.521775][T14867] o2cb: Cluster check failed. Fix errors before retrying. [ 333.524137][T14867] (syz.8.2590,14867,2):user_dlm_register:674 ERROR: status = -22 [ 333.526605][T14867] (syz.8.2590,14867,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 333.531915][T14867] o2cb: This node has not been configured. [ 333.533866][T14867] o2cb: Cluster check failed. Fix errors before retrying. [ 333.536088][T14867] (syz.8.2590,14867,3):user_dlm_register:674 ERROR: status = -22 [ 333.538497][T14867] (syz.8.2590,14867,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "control" [ 333.544020][T14867] o2cb: This node has not been configured. [ 333.545854][T14867] o2cb: Cluster check failed. Fix errors before retrying. [ 333.548072][T14867] (syz.8.2590,14867,3):user_dlm_register:674 ERROR: status = -22 [ 333.550440][T14867] (syz.8.2590,14867,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 333.610258][ T9261] wlan1: Trigger new scan to find an IBSS to join [ 333.699501][T14873] loop9: detected capacity change from 0 to 7 [ 333.702609][T14873] Dev loop9: unable to read RDB block 7 [ 333.704513][T14873] loop9: AHDI p1 p2 [ 333.705830][T14873] loop9: partition table partially beyond EOD, truncated [ 333.708706][T14873] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 333.732630][T14072] udevd[14072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 333.755910][T14875] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2594'. [ 333.870987][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2594'. [ 333.876812][T14875] IPv6: sit1: Disabled Multicast RS [ 333.879317][T14875] sit1: entered allmulticast mode [ 333.938844][T14886] sp0: Synchronizing with TNC [ 334.183269][T14902] input: syz0 as /devices/virtual/input/input17 [ 334.401533][T14916] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 334.415127][T14916] afs: Unknown parameter 'dyns' [ 334.417119][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2609'. [ 334.521556][T14916] team0: Port device team_slave_0 removed [ 334.551041][ T7677] wlan1: Creating new IBSS network, BSSID 5e:0b:03:72:dc:f6 [ 334.644728][T14919] ------------[ cut here ]------------ [ 334.647063][T14919] WARNING: CPU: 1 PID: 14919 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 334.652177][T14919] Modules linked in: [ 334.654545][T14919] CPU: 1 UID: 0 PID: 14919 Comm: syz.7.2610 Not tainted syzkaller #0 PREEMPT(full) [ 334.659567][T14919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 334.664673][T14919] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 334.668106][T14919] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff ae 82 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 51 b4 7e 0e 00 75 0b c6 05 48 b4 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 334.676259][T14919] RSP: 0018:ffffc90003dbf800 EFLAGS: 00010246 [ 334.678821][T14919] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 334.682653][T14919] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 334.685978][T14919] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 334.689307][T14919] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 334.692871][T14919] R13: 1ffff920007b7f15 R14: ffffffff9ae82aa4 R15: 0000000000000015 [ 334.696268][T14919] FS: 00007fe56a98b6c0(0000) GS:ffff8880d67b2000(0000) knlGS:0000000000000000 [ 334.700010][T14919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.702859][T14919] CR2: 000020000000034c CR3: 000000004edef000 CR4: 0000000000352ef0 [ 334.706303][T14919] Call Trace: [ 334.707752][T14919] [ 334.709026][T14919] ? kernel_text_address+0x8d/0x100 [ 334.711653][T14919] ? __kernel_text_address+0xd/0x40 [ 334.713783][T14919] ? unwind_get_return_address+0x59/0xa0 [ 334.716102][T14919] ? arch_stack_walk+0xa6/0x100 [ 334.718109][T14919] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 334.720786][T14919] ? stack_trace_save+0x8e/0xc0 [ 334.722838][T14919] ? __pfx_stack_trace_save+0x10/0x10 [ 334.725146][T14919] ? f2fs_alloc_nid+0x365/0x8a0 [ 334.727083][T14919] ? __lock_acquire+0x62e/0x1ce0 [ 334.729227][T14919] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 334.731960][T14919] ? policy_nodemask+0xea/0x4e0 [ 334.733959][T14919] alloc_pages_mpol+0x1fb/0x550 [ 334.736060][T14919] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 334.737988][T14919] ? find_held_lock+0x2b/0x80 [ 334.740005][T14919] ? drm_syncobj_array_find+0x35/0x3c0 [ 334.742451][T14919] ___kmalloc_large_node+0xed/0x160 [ 334.744446][T14919] ? drm_syncobj_array_find+0x35/0x3c0 [ 334.746360][T14919] __kmalloc_large_node_noprof+0x1c/0x70 [ 334.748156][T14919] __kmalloc_noprof.cold+0xc/0x61 [ 334.749730][T14919] drm_syncobj_array_find+0x35/0x3c0 [ 334.751483][T14919] drm_syncobj_reset_ioctl+0x210/0x360 [ 334.753178][T14919] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 334.755035][T14919] ? drm_dev_exit+0x41/0x60 [ 334.756467][T14919] drm_ioctl_kernel+0x1f1/0x3e0 [ 334.757977][T14919] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 334.759785][T14919] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 334.761526][T14919] drm_ioctl+0x5c9/0xc30 [ 334.762831][T14919] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 334.764682][T14919] ? __pfx_drm_ioctl+0x10/0x10 [ 334.766202][T14919] ? selinux_file_ioctl+0x180/0x270 [ 334.767866][T14919] ? selinux_file_ioctl+0xb4/0x270 [ 334.769484][T14919] ? __pfx_drm_ioctl+0x10/0x10 [ 334.771208][T14919] __x64_sys_ioctl+0x18e/0x210 [ 334.772737][T14919] do_syscall_64+0xcd/0x4e0 [ 334.774166][T14919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.776023][T14919] RIP: 0033:0x7fe569b8ec29 [ 334.777423][T14919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.783450][T14919] RSP: 002b:00007fe56a98b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.786055][T14919] RAX: ffffffffffffffda RBX: 00007fe569dd5fa0 RCX: 00007fe569b8ec29 [ 334.788569][T14919] RDX: 0000200000000340 RSI: 00000000c01064c4 RDI: 0000000000000008 [ 334.791101][T14919] RBP: 00007fe569c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 334.793568][T14919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.796034][T14919] R13: 00007fe569dd6038 R14: 00007fe569dd5fa0 R15: 00007ffc6d4ddf08 [ 334.798523][T14919] [ 334.799511][T14919] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 334.801785][T14919] CPU: 1 UID: 0 PID: 14919 Comm: syz.7.2610 Not tainted syzkaller #0 PREEMPT(full) [ 334.804664][T14919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 334.807974][T14919] Call Trace: [ 334.809018][T14919] [ 334.809940][T14919] dump_stack_lvl+0x3d/0x1f0 [ 334.811397][T14919] vpanic+0x6e8/0x7a0 [ 334.812674][T14919] ? __pfx_vpanic+0x10/0x10 [ 334.814123][T14919] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 334.816049][T14919] panic+0xca/0xd0 [ 334.817252][T14919] ? __pfx_panic+0x10/0x10 [ 334.818678][T14919] ? check_panic_on_warn+0x1f/0xb0 [ 334.820293][T14919] check_panic_on_warn+0xab/0xb0 [ 334.821857][T14919] __warn+0xf6/0x3c0 [ 334.823099][T14919] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 334.825000][T14919] report_bug+0x3c3/0x580 [ 334.826368][T14919] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 334.828288][T14919] handle_bug+0x184/0x210 [ 334.829631][T14919] exc_invalid_op+0x17/0x50 [ 334.831035][T14919] asm_exc_invalid_op+0x1a/0x20 [ 334.832513][T14919] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 334.834530][T14919] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff ae 82 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 51 b4 7e 0e 00 75 0b c6 05 48 b4 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 334.840384][T14919] RSP: 0018:ffffc90003dbf800 EFLAGS: 00010246 [ 334.842260][T14919] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 334.844666][T14919] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 334.847075][T14919] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 334.849505][T14919] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 334.851893][T14919] R13: 1ffff920007b7f15 R14: ffffffff9ae82aa4 R15: 0000000000000015 [ 334.854354][T14919] ? kernel_text_address+0x8d/0x100 [ 334.856000][T14919] ? __kernel_text_address+0xd/0x40 [ 334.857623][T14919] ? unwind_get_return_address+0x59/0xa0 [ 334.859384][T14919] ? arch_stack_walk+0xa6/0x100 [ 334.860742][T14919] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 334.862634][T14919] ? stack_trace_save+0x8e/0xc0 [ 334.864166][T14919] ? __pfx_stack_trace_save+0x10/0x10 [ 334.865845][T14919] ? f2fs_alloc_nid+0x365/0x8a0 [ 334.867383][T14919] ? __lock_acquire+0x62e/0x1ce0 [ 334.868946][T14919] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 334.870788][T14919] ? policy_nodemask+0xea/0x4e0 [ 334.872332][T14919] alloc_pages_mpol+0x1fb/0x550 [ 334.873860][T14919] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 334.875548][T14919] ? find_held_lock+0x2b/0x80 [ 334.877019][T14919] ? drm_syncobj_array_find+0x35/0x3c0 [ 334.878715][T14919] ___kmalloc_large_node+0xed/0x160 [ 334.880348][T14919] ? drm_syncobj_array_find+0x35/0x3c0 [ 334.882044][T14919] __kmalloc_large_node_noprof+0x1c/0x70 [ 334.883801][T14919] __kmalloc_noprof.cold+0xc/0x61 [ 334.885380][T14919] drm_syncobj_array_find+0x35/0x3c0 [ 334.887027][T14919] drm_syncobj_reset_ioctl+0x210/0x360 [ 334.888739][T14919] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 334.890611][T14919] ? drm_dev_exit+0x41/0x60 [ 334.892060][T14919] drm_ioctl_kernel+0x1f1/0x3e0 [ 334.893694][T14919] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 334.895991][T14919] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 334.897675][T14919] drm_ioctl+0x5c9/0xc30 [ 334.899047][T14919] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 334.901113][T14919] ? __pfx_drm_ioctl+0x10/0x10 [ 334.902869][T14919] ? selinux_file_ioctl+0x180/0x270 [ 334.904521][T14919] ? selinux_file_ioctl+0xb4/0x270 [ 334.906117][T14919] ? __pfx_drm_ioctl+0x10/0x10 [ 334.907996][T14919] __x64_sys_ioctl+0x18e/0x210 [ 334.909580][T14919] do_syscall_64+0xcd/0x4e0 [ 334.911015][T14919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.912977][T14919] RIP: 0033:0x7fe569b8ec29 [ 334.914700][T14919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.920727][T14919] RSP: 002b:00007fe56a98b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.923376][T14919] RAX: ffffffffffffffda RBX: 00007fe569dd5fa0 RCX: 00007fe569b8ec29 [ 334.925824][T14919] RDX: 0000200000000340 RSI: 00000000c01064c4 RDI: 0000000000000008 [ 334.928315][T14919] RBP: 00007fe569c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 334.930771][T14919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.933239][T14919] R13: 00007fe569dd6038 R14: 00007fe569dd5fa0 R15: 00007ffc6d4ddf08 [ 334.935721][T14919] [ 334.937394][T14919] Kernel Offset: disabled [ 334.938789][T14919] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:31:14 Registers: info registers vcpu 0 CPU#0 RAX=00000000001ca9fd RBX=0000000000000000 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52d11 RDI=ffffffff8c163300 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7490 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000001e8000 CR3=00000000331db000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003000000100008 0000000000000004 000c001a00100000 0014010000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000080004 0020000e00000000 0000000000000000 0a2b000000200000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0097000000001fa6 6ac0000000180000 00200000000e0014 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4d8ffffffff8234 118cffffffff8160 b9f3ffffffff8160 b33effffffff8160 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b383ffffffff8160 b38fffffffff8160 ba45ffffffff8160 ba6effffffff8b94 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6144000000140300 0000000000090000 000cffffff220000 03e6000000080004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800080000 0014000000cc0000 00e4000001080000 0004000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff823da4eb ffffffff823d758d ffffffff823d7799 ffffffff823d75d3 ZMM25=401d0b33401d0b33 401d0b33401d0b33 401d0b33401d0b33 401d0b33401d0b33 401d0b33401d0b33 401d0b33401d0b33 401d0b33401d0b33 401d0b33401d0b33 ZMM26=c556b4acc556b4ac c556b4acc556b4ac c556b4acc556b4ac c556b4acc556b4ac c556b4acc556b4ac c556b4acc556b4ac c556b4acc556b4ac c556b4acc556b4ac ZMM27=872488a5872488a5 872488a5872488a5 872488a5872488a5 872488a5872488a5 872488a5872488a5 872488a5872488a5 872488a5872488a5 872488a5872488a5 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3f0c00003f0c0000 3f0c00003f0c0000 3f0c00003f0c0000 3f0c00003f0c0000 3f0c00003f0c0000 3f0c00003f0c0000 3f0c00003f0c0000 3f0c00003f0c0000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=ffffffff8d15e540 RCX=ffffffff8b9153b9 RDX=ffff888026588000 RSI=ffffffff8b9153c4 RDI=0000000000000001 RBP=ffffc90003dbf178 RSP=ffffc90003dbf0d0 R8 =0000000000000001 R9 =0000000000000025 R10=0000000000000025 R11=0000000000000000 R12=0000000000000025 R13=ffffffff8d15e540 R14=ffffc90003dbf1f8 R15=dffffc0000000000 RIP=ffffffff81bb9d97 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fe56a98b6c0 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000034c CR3=000000004edef000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000002fefce0 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6d4de416 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6d4de416 00007ffc6d4de41c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe569c12e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe569c12e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe569c12e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe569c12e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe569c12f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe569c12fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000001 RCX=00000000000128b7 RDX=00000000000079e3 RSI=00000000000a98a9 RDI=ffffffff92006a3c RBP=ffffc900062e6ee0 RSP=ffffc900062e6e28 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000003 R11=00000000000079e2 R12=ffffc900062e6ee8 R13=ffffc900062e6e98 R14=ffffc900062e6ecd R15=ffffffff8179e2f0 RIP=ffffffff816af70b RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055558213e500 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd9bdd056c0 CR3=00000000491fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa0a704f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa0a70676 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa0a70676 00007fffa0a7067c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd9bd012e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd9bd012e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd9bd012e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd9bd012e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd9bd012f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd9bd012fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffffffffffff RBX=00007f91f7bd5fa0 RCX=ffffffffffffffa8 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=00007f91f7a11e41 RSP=00007f91f873eff0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000246 R12=0000000000000000 R13=00007f91f7bd6038 R14=00007f91f7bd5fa0 R15=00007ffc6ee4ad08 RIP=00007f91f7854956 RFL=00000286 [--S--P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f91f873f6c0 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000039fcc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6ee4b216 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6ee4b216 00007ffc6ee4b21c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91f7a12e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91f7a12e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91f7a12e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91f7a12e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91f7a12f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91f7a12fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91f7ba74a8 00007f91f7ba74a0 00007f91f7ba7498 00007f91f7ba7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91f870d100 00007f91f7ba7460 00007f91f7ba7478 00007f91f7ba74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91f7ba74b8 00007f91f7ba74b0 00007f91f7ba74a8 00007f91f7ba74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000