last executing test programs: 3m35.010041747s ago: executing program 32 (id=70): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync(0xffffff9c, &(0x7f00000000c0), 0x4580, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0xfeff}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 3m29.257224999s ago: executing program 33 (id=116): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x9, 0x20280) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) close(r2) ioctl$UFFDIO_POISON(r2, 0xc020aa08, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0xfc, 0x0, 0x6}]}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x1261, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000240)=""/64) sync_file_range(r0, 0xb0, 0xff, 0xa) 2m0.804702167s ago: executing program 5 (id=1569): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0x8, 0x59455247, 0x4, 0xfffffffe, 0x0, 0xc, 0x1, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x7, 0x8, r4, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r4}]) 2m0.631738113s ago: executing program 5 (id=1572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29}]}}}}}, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0xfffffffffffffffd}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1, 0x3100}, [@RTA_DPORT={0x6, 0x1d, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000881}, 0x24040014) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x800080, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000000)=0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r5, 0x40044103, &(0x7f0000000440)) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='trylock none'], 0xd) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x34, r8, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x4004000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m0.548377641s ago: executing program 5 (id=1575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x3, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b0, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x10000, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x4}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x6, 0x6}, {0x3, 0xf7b, 0x5, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1f, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x10003, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x5, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x5d, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 2m0.42869089s ago: executing program 5 (id=1577): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1790) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x50000, &(0x7f0000000380)=ANY=[@ANYRES32=r0]) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000002000010000000000fbdbdf270a00000008000000000000000c001400", @ANYRES64=r0, @ANYRES32=r3, @ANYBLOB="781281bd0abb87ae5ff4909cf1a0cf981287e03f38af74cd22a2b0a08efc9c4230601a61fca7018d4bc0d3feb97d154324d43af9a5919d8143d46c90eaa6e96bdb50ea61eca40a72308c13e916549335a3c623f4d439d1d99a6bed88b7cc3e3f1e7113d45fe10a505f6652942ecb112e2e8b2af5876af843885286"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) mount$nfs(&(0x7f0000000240)='-+\x00', &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), 0x400, &(0x7f0000000500)=ANY=[@ANYBLOB="3970002c73797a002c8c8421242c852d2128242e7b202c002c61707072616973655f747970653d696d617369672c736d61636b6673726f6f743d2f6465762f736e642f70636d4323442363002c6f626a5f726f6c653d2f6465762f736e642f70636d4323442363002c686173682c6e6f6c617a7974696d652c736d61636b66736465663d5c2a5c2621232c666f776e65723e", @ANYRESDEC=r1, @ANYBLOB=',func=FILE_\x00HECK,contextysadm_u,subj_role=GPL\x00,\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x800, 0x0, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e22}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/../file0\x00', 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r5], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) getdents64(r7, &(0x7f0000000080)=""/147, 0x93) chdir(&(0x7f0000000300)='./file0\x00') r9 = creat(0x0, 0x4) write$qrtrtun(r9, 0x0, 0xfffffffffffffe4a) r10 = open(&(0x7f00000001c0)='./file0\x00', 0x1802, 0x40) write$UHID_CREATE2(r10, 0x0, 0x2030) 2m0.335132147s ago: executing program 5 (id=1580): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00'], 0x34}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mincore(&(0x7f0000009000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/68) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) unshare(0x22020400) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0/file0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000007340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58, 0x4000}}], 0x1, 0x801) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) io_uring_enter(r4, 0x3516, 0x4, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) sendmsg$IEEE802154_LIST_IFACE(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB="23100010", @ANYRES16=r11, @ANYBLOB="01002bbd7000fcdbdf251f0000000a0001007770616e34000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) 2m0.055552087s ago: executing program 5 (id=1586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x3, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b0, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x10000, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x4}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x6, 0x6}, {0x3, 0xf7b, 0x5, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x20, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x10003, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x5, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x5d, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1m59.945731742s ago: executing program 34 (id=1586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x3, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b0, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x10000, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x4}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x6, 0x6}, {0x3, 0xf7b, 0x5, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x20, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x10003, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x5, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x5d, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1m52.295405747s ago: executing program 0 (id=1762): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="040100001f0001"], 0x104}}, 0xc000) 1m52.294501795s ago: executing program 0 (id=1765): r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000140)=@v2={0x3, 0x2, 0x12, 0x800ab2, 0x5, "ca85282a51"}, 0xe, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xd74df2fd, 0x380000, 0xfffffffc, 0x200, 0x7ff}) socket$nl_route(0x10, 0x3, 0x0) (async) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000140)=@v2={0x3, 0x2, 0x12, 0x800ab2, 0x5, "ca85282a51"}, 0xe, 0x2) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xd74df2fd, 0x380000, 0xfffffffc, 0x200, 0x7ff}) (async) 1m52.221611783s ago: executing program 0 (id=1766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x40) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000140)={0x2, [0x4c, 0x7ff, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000039c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x18, 0x3, "1b24a33fa97d1dc9503311d8f52f40d23affcdca"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) 1m52.220794534s ago: executing program 0 (id=1768): r0 = socket$netlink(0x10, 0x3, 0x0) (async) getgroups(0x3, &(0x7f0000000c80)=[0xee01, 0xee00, 0xffffffffffffffff]) setresgid(r1, r1, r1) (async, rerun: 32) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2}, 0x18, 0x0) (rerun: 32) read$FUSE(r2, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x78, 0x10, 0x503, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1244c}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}, @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa0100fe}, @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x2d616b45}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xe}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}]]}}}]}, 0x78}}, 0x0) 1m52.145946389s ago: executing program 0 (id=1770): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x2000c00c) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x1, 0xffffffffffffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) r4 = open(&(0x7f0000000000)='.\x00', 0x820100, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x80) 1m52.144229802s ago: executing program 0 (id=1772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000001c0), 0x121000, 0x0) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000140)=@default_ap_ssid, 0x6, 0x1) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000180)=ANY=[@ANYBLOB="80000000ffffffffffff0802110000003cf2aea2a6ccf4e2b420a3d100000000000000000000640001000006020202020202010882848b960c121824"], 0x36) r3 = syz_io_uring_setup(0x463d, &(0x7f0000000480)={0x0, 0xb6c6, 0x800, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x1000000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000240)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}) r7 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) ioctl$LOOP_SET_FD(r7, 0x80044df9, 0xffffffffffffffff) io_uring_enter(r3, 0x47bc, 0x0, 0x21, 0x0, 0x0) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f000000b000)={[{0x0}]}, 0x1}, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r9) sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x800) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f00000004c0)={&(0x7f0000004000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000100)={0x0, r3, 0x34, {0x1, 0x7f}, 0x8}, 0x1) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x67682, 0x0) r12 = dup(r11) fallocate(r12, 0x80, 0x5, 0x967) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc0}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x400c810) 1m36.034450198s ago: executing program 35 (id=1772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000001c0), 0x121000, 0x0) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000140)=@default_ap_ssid, 0x6, 0x1) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000180)=ANY=[@ANYBLOB="80000000ffffffffffff0802110000003cf2aea2a6ccf4e2b420a3d100000000000000000000640001000006020202020202010882848b960c121824"], 0x36) r3 = syz_io_uring_setup(0x463d, &(0x7f0000000480)={0x0, 0xb6c6, 0x800, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x1000000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000240)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}) r7 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) ioctl$LOOP_SET_FD(r7, 0x80044df9, 0xffffffffffffffff) io_uring_enter(r3, 0x47bc, 0x0, 0x21, 0x0, 0x0) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f000000b000)={[{0x0}]}, 0x1}, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r9) sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x800) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f00000004c0)={&(0x7f0000004000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000100)={0x0, r3, 0x34, {0x1, 0x7f}, 0x8}, 0x1) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x67682, 0x0) r12 = dup(r11) fallocate(r12, 0x80, 0x5, 0x967) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc0}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x400c810) 1m27.226871584s ago: executing program 2 (id=2216): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x15, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x0, 0x6, 0x0, 0x0, 0x8}, @generic={0x8, 0x8, 0x9, 0x101, 0x9}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000000}, @call={0x85, 0x0, 0x0, 0x7e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) 1m27.2252948s ago: executing program 2 (id=2217): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0xffffffffffffffff, 0x102, 0x101, 0x804, 0x4, 0xc000, 0xfffffffc, r3, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x4, 0xffffffffb3aada3c, 0xe00, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0xfac1}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa0, 0x0, 0x16, {{0x4, 0x0, 0x0, 0x9, 0xfffffffc, 0x6, {0x3, 0xa8, 0x6, 0x3, 0x3, 0x1, 0xfff, 0xffffff61, 0x1c, 0x8000, 0x0, r3, r4, 0xff7ffff9, 0x4}}, {0x0, 0x10}}}, 0x0, 0x0}) 1m23.874032271s ago: executing program 2 (id=2250): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x42, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=virtio,aname=-']) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0xd, @vbi}) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 1m23.782610146s ago: executing program 2 (id=2252): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002000000000000006b1a96d3a38f33cdf6ac2f12d70dfb2c0d6eade97fe6fa40ba7c00abb0", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x10000, 0xd1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r2, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = syz_clone(0x80000100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x5, r4, &(0x7f0000000400), 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 1m23.709027699s ago: executing program 2 (id=2256): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x591, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x509) close(r3) syslog(0x2, &(0x7f0000000000)=""/7, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000100)=@can={{0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "5a57094adddbccf0"}, 0x10}}, 0x44001) recvmmsg(r1, &(0x7f0000000cc0), 0x2f, 0x2001, 0x0) read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x2020) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000240)={r0, 0x6, {0x0, 0x0, 0x0, 0x47fe, 0x7fffffff, 0x0, 0xc, 0xc, 0x1d, "363409758960d0ca0594e32e1a8dfa944b0f05feb8001c66d166296ed646f538e3f9a3d57957af3c39b14740fe54b48db7362917fe26d0ee4d6d2e651d5637da", "562d435c83f08ed75ad2bb9087d8ed15b6a303e25ae6e478d64c3a6bcaae070802b423b620f6a2ff5cadea3e77059578859b31c71bd88e7aff2b43db2aeb9b63", "01f28888706dd200418f3b8ae92390aa623104b0c3384f828828745ae2c9d437", [0x5, 0x10000]}}) 1m23.41993639s ago: executing program 2 (id=2259): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x4, 0xfffff000, 0x1, {0x3, @vbi={0x7fff, 0x1, 0x8, 0x32314d4e, [0x1c], [0xe, 0x7], 0x2}}, 0x8}) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000140)={0x4, 0x6}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000300)={0x520, 0x24, 0x2, 0x70bd2d, 0x25dfdbfc, {0x11}, [@generic="748e9bf64c7dfd4e2470595594d773cbcf88c67a6f795178c734c56212d769ac8eda693701922e0d04a37d9ca01f84d513eea1d9db6eaa35ef123ab28593664803", @generic="b6ac6ec497b9e97b9c044c2e08b540552264f0a4974e155eab42fc514ce9889b3d1eb63049b62c4cfa6d26d89e55a1049128ed8148795656a71b4c96a7448b3edaf6005a0fdb5ed36ec706f0a72ec691fa995170708d2998ed76d3e944a2a2b23fa40e6d4705b151a67e574d4886a437316e1b25628f845e063b92ef56a9ec72b9529ada47e9004a5a480538b96b", @typed={0x8, 0x10, 0x0, 0x0, @uid=r1}, @typed={0xc, 0xd, 0x0, 0x0, @binary="eb88a3bd73c59237"}, @generic="528cb458d9bcff5728d1bbdb7144102ebb3e54b0b250f050c139da2cf8faae43ed1a54f303407e674f84412c9cf538e35ea3a0c8e6a8d319d1145c6df5bca71cadd6188534b4b72ee253ad953ba83647553d73ed4e6367903f0e45d1de168f7d6b1eddde044d98c28a8c0dc5303956ab2019783327f79a7dc4312b1e2d8ca31088b9260e21ca295a08b7bbde972b2ad3795858aef979600616872bc20de935637474a3bd95fb0a192098f93c390af5d0704f70ffeb7add229b866e7795c23956ba78e4f69754c7811f8386e9552ec25fc5e4694303dbab4cdd62e5", @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0xd2, 0x1c, 0x0, 0x1, [@generic="07dc74794d465089d3b0152debee9eff5126c2238fbb5c62783dc39dce4383d31385f9b22669b33e8effa8f9679f6a747e37397ee4fb16bdac948be519185c75cd10774810a63c65b0dbb6cbc6e07baf851f3d00ae6a4b4313fa5416d458251184762b20610b30fdc1c5b6c56515972cf251e5af7d6df0f9b46cb00beb09f1155e2bab929b4328f784fb882369160ad43049c592673101cf9f3f6595d3b98313d5a4bb070ca0e06a289cbd495290c77565c2ca281359d2bdfeb2925aeedfb137651b061f14d7", @typed={0x8, 0x114, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}]}, @typed={0x8c, 0xa, 0x0, 0x0, @binary="f1bf7ebbb47469d5e5cad8b97f9adc13b4e125a93c2524a45d11a231c36aad3876f5c844b4cd9cb2250e180668a3f03cfc8d02af0733d89f49ac6fc75c482797525bd9c03767f0fd64ef39cf2f2bf66e2d8a3db4f698330e7e47baa14c53222a43f60f64a39c525d78a72d73ba4f5e236e9b645a893aa50de68544be9a28459ed0c8522ed2d4af4d"}, @nested={0xea, 0x10e, 0x0, 0x1, [@nested={0x4, 0x148}, @generic="130960b34c6a70409aa0584888d427869b25c36ecb3c30dbe98db7ba4e0f4daea6b7c599498ae76666823af7af42e735a89b890bacb9200684ab94a83ea3d73edbdc9097a886a23cc373e136596b8380b04d369e551ab1b865a461ce47b04e8f7dbba290af790038dd106be2b804d0d6e14a6d7734147a805c118ce6a2b4fe5187589fbba5473e453d564ddb3cb83a1e87e6f4b4bf91f038389385aec9a1f9aab5e0839a04cfb4f723d095c4f51fa8ec7cbc9edd9ce3b4ce5f4986900aa02d98f0c8591bd3e9a49e3258bddbc7e092e6846d857b72d1635a3aec207aba0a", @nested={0x4, 0x80}]}, @generic="8abedb9366217155a7c3d2dbf1780518b0c7ebe40fdd0980cae4919f4b62d9bfe95d729fee7acca8df3e5112e969efc439d76252f18a4e46ebb6fb268d66259a5261a8facd99f26e9b6cdc92a39b02e03fa8fb5e60ef2044e513586a5a11162f9c8caa8be77ca0999c01686f067d798262087c39709fb560efe2022b36c8ff4880eecfe3517549338cd6dd98177882986ff9729e93c007fb8adf422639a0407572fd0319b28d9b567ea461437661b39c4f0f20ff4474e8b3c6697bda4d92eccf658e3f23c5d44034f509856d5d6fc252a79aabfa77525105b999983803052ae7b4e27a15729640f88e02afd48a8145751808dc4db13949"]}, 0x520}, 0x1, 0x0, 0x0, 0x48004}, 0x4010) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f00000008c0)=0x6) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000900)={0x48, 0x9, 0x0, 0x0, 0x6}) r3 = open(&(0x7f0000000980)='./file0\x00', 0x40000, 0x105) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000009c0)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x0, 0x1}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000a40)={0x2f, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}, 0x10) ioctl$BSG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000a80)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000ac0)={0x10002, 0x1, 0x8080000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = fsopen(&(0x7f0000000b00)='cifs\x00', 0x1) splice(r4, &(0x7f0000000b40)=0x7ff, r3, &(0x7f0000000b80)=0xe5, 0x5, 0x2) r5 = dup2(r4, r2) syz_usb_connect(0x0, 0x3c5, &(0x7f0000000bc0)={{0x12, 0x1, 0x250, 0x20, 0x6c, 0x44, 0xff, 0x19d2, 0x1149, 0x8d53, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b3, 0x4, 0x4, 0x5, 0x50, 0x2, [{{0x9, 0x4, 0x2a, 0xd, 0xc, 0xff, 0xff, 0xff, 0x39, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x2}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x6, 0x8, "7ce514"}]}, @hid_hid={0x9, 0x21, 0xfffd, 0x9, 0x1, {0x22, 0x2cf}}], [{{0x9, 0x5, 0xde53d2be1905fa94, 0x0, 0x10, 0x6, 0xd5, 0x6b}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xff, 0xd1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7b, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xba, 0x7d, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf, 0x1}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x9, 0x9, 0x2}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x2, 0xf8, 0x5}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0xf1, 0x2, 0x5}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x5, 0x98, 0x8, [@generic={0xc7, 0x22, "8fead69ad978e425ae76594cd99b4a139d10c61a48a5b504c1ce7476d03a3e6c305123ab1b30c2e927aeb490386918f5f862cfe6e0bc6aae11945a2d6dd9e108d13b3756ed283dca7df7d3ebcfc44336582e42ce7161faf8233c7bfa2097d2b852a2aa00369f0c5c0876cf7affd10648baaa019e3de1899f2b9a808aec0b3ecdd58490beb19f40fdc428eb73f176d4f066f3d9675b8fa9c51dbce156435278bc71b07a5181ee09fff9f0d5b1ee285e2f2004a24a768846f3a3ed12303e90bdbddf81cda31e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0x4}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x6, 0x9, 0x34, [@generic={0x45, 0x4, "7fa3353a36011bf05301cb7816a524643ca50edb7476f95f2848f13f8ed65e16be8c4344c69f6d0269b8e408b2755575e54dea247fd32cd69e880f6341bc53964668e4"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x7, 0x3, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x7}, @generic={0x9, 0xb, "5ca17cf15bd819"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x2, 0x0, 0x5, [@generic={0x4d, 0x10, "f164625b438e65b4681a26161107dbcfcb9d7c28415a45e6aa562d7dc6d071d6a7e272248f3b875081814ad8d311999cb6044112cdb18674bc0adc55c8bf9d0441edebbaf5e4d08ffe57f4"}]}}, {{0x9, 0x5, 0xd, 0x2edc62dde3f7b83e, 0x20, 0x1, 0x4, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x81}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x71, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x3}]}}]}}, {{0x9, 0x4, 0xe3, 0x3d, 0x4, 0x22, 0xf6, 0x63, 0x40, [], [{{0x9, 0x5, 0x95a3747fb7987192, 0x3, 0x10, 0x1, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x81, 0x1}, @generic={0x41, 0x3, "aaee2753c1c1e0ae7320df7dc426ffdc107e86cd851cb9effb691450737e940e6292e29ac2bcdeeaa015e30e2389769e1b6523e3e41244d6b869d20e3fab2c"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0xff, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x91, 0x8}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x5, 0x3, 0xfc, [@generic={0x7b, 0x22, "3704e6311c55b8b3d3ab49dc940448430e4a4bdd273621b7e4e95d2f3534362d073098d173f8448e057695a039ff4aa1f6db43254c0a743d7e382e223f6b68c299c14870737d55bc5eb1f6e9c73b5e43375b85f9acf498552f416abd08bfe6f4aab3f4409e21b2ff75ed580e878f899a6c077f349ecc0d4f1f"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x2, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xca, 0x3}]}}]}}, {{0x9, 0x4, 0x8, 0x4, 0x0, 0x7, 0xa9, 0x1c, 0x8, [@hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x6cb}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x9, 0x8}, {0x6, 0x24, 0x1a, 0x1}, [@country_functional={0xe, 0x24, 0x7, 0x67, 0x84, [0xfff9, 0x8, 0xfffb, 0x6]}]}]}}, {{0x9, 0x4, 0x10, 0x5, 0x0, 0xff, 0x45, 0xd, 0x2, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x7, 0x9, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x6, 0x6, "7e93e0f10a03"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xcc, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x800, 0x7dba, 0x22}, @as_header={0x7, 0x24, 0x1, 0x5, 0x5, 0x1001}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x25, 0x0, 0x1}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x3, 0x3, 0x8, "1b2f7e1d4ab05e"}]}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x300, 0xff, 0xd3, 0x7, 0x10, 0x1}, 0xf6, &(0x7f0000001000)={0x5, 0xf, 0xf6, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "4972e55eda76d46850eac5dcb942bc77"}, @generic={0xdd, 0x10, 0xa, "39cc346211b937534cc7a1b8a24156c659703ae81debf516bcbb49ba9b42dd936b069e7932de4882720bda19e2cd504c6eadf1d6df7377f93b061371564438d4a919b93168a0d1e396f2c11d7d07c9692bf963a17337bdfdf54dcd89866e6683e40028cef6b08d842b8239635f8c2ab4d61dbb7afa8741a452854e3b48eb648cd872e5c8c9b63f23baa054f0f71316a52866afd9a164f8c7e57b3ae4bcdbea3e85c483abe83b651aa56c765838ee163b8d74c35ff2f3dac79034fc367a9e330f1475a9f70b35399ecd2f907f3aa420588196ba2124a3a6ad9ae3"}]}, 0x1, [{0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x1c0a}}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001180)={0x0, 0x3}, &(0x7f00000011c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000012c0)={r6, 0xa0, &(0x7f0000001200)=[@in6={0xa, 0x4e22, 0x5, @mcast1, 0x8}, @in6={0xa, 0x4e20, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffff0b0}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000001300)=0x10) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x20) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r7, 0x4068aea3, &(0x7f0000001340)) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/bsg/2:0:0:0\x00', 0x4001, 0x0) ioctl$BSG_SET_TIMEOUT(r8, 0x2201, &(0x7f0000001400)=0x7d6) r9 = getpgid(0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001640)=0x0) r11 = syz_clone(0x20000000, &(0x7f0000001680)="2691da27cf11e1e00e954c2f8eeaffe95619536ea317466a03b0828fd06a7cc8dcfbd9e64cda41c8d1fccfa8740bb2d9bc2e4b82612a8f0fe3fec68dd1faa280ca3f0892190a26d0b3dd0e7a5c19065e3b885bbe218d25e733e46ba905c851e37a969dbaf7503ded83628cf5f9caf29063ffa574705d1cc66efe1aad34e5866895d1b5569234959921954bc84fc4587a4f43bd9132392c8e795d3f5bb7a654f2989c4e4f0a46116ea72fc8158fcfd68f95c6d0015234a984aad72dca55c896ae22e7fe", 0xc3, &(0x7f0000001780), &(0x7f00000017c0), &(0x7f0000001800)="aa69005a2431dff90fad9e2803a6d930fee93655d8160c53eb48673abdb8ac81818a936cd1d69834") syz_clone3(&(0x7f0000001d80)={0x39001800, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0), {0x16}, &(0x7f0000001500)=""/16, 0x10, &(0x7f0000001540)=""/233, &(0x7f0000001d40)=[r9, r10, r11, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r3}}, 0x58) 1m23.375407433s ago: executing program 36 (id=2259): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x4, 0xfffff000, 0x1, {0x3, @vbi={0x7fff, 0x1, 0x8, 0x32314d4e, [0x1c], [0xe, 0x7], 0x2}}, 0x8}) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000140)={0x4, 0x6}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000300)={0x520, 0x24, 0x2, 0x70bd2d, 0x25dfdbfc, {0x11}, [@generic="748e9bf64c7dfd4e2470595594d773cbcf88c67a6f795178c734c56212d769ac8eda693701922e0d04a37d9ca01f84d513eea1d9db6eaa35ef123ab28593664803", @generic="b6ac6ec497b9e97b9c044c2e08b540552264f0a4974e155eab42fc514ce9889b3d1eb63049b62c4cfa6d26d89e55a1049128ed8148795656a71b4c96a7448b3edaf6005a0fdb5ed36ec706f0a72ec691fa995170708d2998ed76d3e944a2a2b23fa40e6d4705b151a67e574d4886a437316e1b25628f845e063b92ef56a9ec72b9529ada47e9004a5a480538b96b", @typed={0x8, 0x10, 0x0, 0x0, @uid=r1}, @typed={0xc, 0xd, 0x0, 0x0, @binary="eb88a3bd73c59237"}, @generic="528cb458d9bcff5728d1bbdb7144102ebb3e54b0b250f050c139da2cf8faae43ed1a54f303407e674f84412c9cf538e35ea3a0c8e6a8d319d1145c6df5bca71cadd6188534b4b72ee253ad953ba83647553d73ed4e6367903f0e45d1de168f7d6b1eddde044d98c28a8c0dc5303956ab2019783327f79a7dc4312b1e2d8ca31088b9260e21ca295a08b7bbde972b2ad3795858aef979600616872bc20de935637474a3bd95fb0a192098f93c390af5d0704f70ffeb7add229b866e7795c23956ba78e4f69754c7811f8386e9552ec25fc5e4694303dbab4cdd62e5", @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0xd2, 0x1c, 0x0, 0x1, [@generic="07dc74794d465089d3b0152debee9eff5126c2238fbb5c62783dc39dce4383d31385f9b22669b33e8effa8f9679f6a747e37397ee4fb16bdac948be519185c75cd10774810a63c65b0dbb6cbc6e07baf851f3d00ae6a4b4313fa5416d458251184762b20610b30fdc1c5b6c56515972cf251e5af7d6df0f9b46cb00beb09f1155e2bab929b4328f784fb882369160ad43049c592673101cf9f3f6595d3b98313d5a4bb070ca0e06a289cbd495290c77565c2ca281359d2bdfeb2925aeedfb137651b061f14d7", @typed={0x8, 0x114, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}]}, @typed={0x8c, 0xa, 0x0, 0x0, @binary="f1bf7ebbb47469d5e5cad8b97f9adc13b4e125a93c2524a45d11a231c36aad3876f5c844b4cd9cb2250e180668a3f03cfc8d02af0733d89f49ac6fc75c482797525bd9c03767f0fd64ef39cf2f2bf66e2d8a3db4f698330e7e47baa14c53222a43f60f64a39c525d78a72d73ba4f5e236e9b645a893aa50de68544be9a28459ed0c8522ed2d4af4d"}, @nested={0xea, 0x10e, 0x0, 0x1, [@nested={0x4, 0x148}, @generic="130960b34c6a70409aa0584888d427869b25c36ecb3c30dbe98db7ba4e0f4daea6b7c599498ae76666823af7af42e735a89b890bacb9200684ab94a83ea3d73edbdc9097a886a23cc373e136596b8380b04d369e551ab1b865a461ce47b04e8f7dbba290af790038dd106be2b804d0d6e14a6d7734147a805c118ce6a2b4fe5187589fbba5473e453d564ddb3cb83a1e87e6f4b4bf91f038389385aec9a1f9aab5e0839a04cfb4f723d095c4f51fa8ec7cbc9edd9ce3b4ce5f4986900aa02d98f0c8591bd3e9a49e3258bddbc7e092e6846d857b72d1635a3aec207aba0a", @nested={0x4, 0x80}]}, @generic="8abedb9366217155a7c3d2dbf1780518b0c7ebe40fdd0980cae4919f4b62d9bfe95d729fee7acca8df3e5112e969efc439d76252f18a4e46ebb6fb268d66259a5261a8facd99f26e9b6cdc92a39b02e03fa8fb5e60ef2044e513586a5a11162f9c8caa8be77ca0999c01686f067d798262087c39709fb560efe2022b36c8ff4880eecfe3517549338cd6dd98177882986ff9729e93c007fb8adf422639a0407572fd0319b28d9b567ea461437661b39c4f0f20ff4474e8b3c6697bda4d92eccf658e3f23c5d44034f509856d5d6fc252a79aabfa77525105b999983803052ae7b4e27a15729640f88e02afd48a8145751808dc4db13949"]}, 0x520}, 0x1, 0x0, 0x0, 0x48004}, 0x4010) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f00000008c0)=0x6) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000900)={0x48, 0x9, 0x0, 0x0, 0x6}) r3 = open(&(0x7f0000000980)='./file0\x00', 0x40000, 0x105) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000009c0)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x0, 0x1}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000a40)={0x2f, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}, 0x10) ioctl$BSG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000a80)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000ac0)={0x10002, 0x1, 0x8080000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = fsopen(&(0x7f0000000b00)='cifs\x00', 0x1) splice(r4, &(0x7f0000000b40)=0x7ff, r3, &(0x7f0000000b80)=0xe5, 0x5, 0x2) r5 = dup2(r4, r2) syz_usb_connect(0x0, 0x3c5, &(0x7f0000000bc0)={{0x12, 0x1, 0x250, 0x20, 0x6c, 0x44, 0xff, 0x19d2, 0x1149, 0x8d53, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b3, 0x4, 0x4, 0x5, 0x50, 0x2, [{{0x9, 0x4, 0x2a, 0xd, 0xc, 0xff, 0xff, 0xff, 0x39, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x2}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x6, 0x8, "7ce514"}]}, @hid_hid={0x9, 0x21, 0xfffd, 0x9, 0x1, {0x22, 0x2cf}}], [{{0x9, 0x5, 0xde53d2be1905fa94, 0x0, 0x10, 0x6, 0xd5, 0x6b}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xff, 0xd1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7b, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xba, 0x7d, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf, 0x1}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x9, 0x9, 0x2}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x2, 0xf8, 0x5}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0xf1, 0x2, 0x5}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x5, 0x98, 0x8, [@generic={0xc7, 0x22, "8fead69ad978e425ae76594cd99b4a139d10c61a48a5b504c1ce7476d03a3e6c305123ab1b30c2e927aeb490386918f5f862cfe6e0bc6aae11945a2d6dd9e108d13b3756ed283dca7df7d3ebcfc44336582e42ce7161faf8233c7bfa2097d2b852a2aa00369f0c5c0876cf7affd10648baaa019e3de1899f2b9a808aec0b3ecdd58490beb19f40fdc428eb73f176d4f066f3d9675b8fa9c51dbce156435278bc71b07a5181ee09fff9f0d5b1ee285e2f2004a24a768846f3a3ed12303e90bdbddf81cda31e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0x4}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x6, 0x9, 0x34, [@generic={0x45, 0x4, "7fa3353a36011bf05301cb7816a524643ca50edb7476f95f2848f13f8ed65e16be8c4344c69f6d0269b8e408b2755575e54dea247fd32cd69e880f6341bc53964668e4"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x7, 0x3, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x7}, @generic={0x9, 0xb, "5ca17cf15bd819"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x2, 0x0, 0x5, [@generic={0x4d, 0x10, "f164625b438e65b4681a26161107dbcfcb9d7c28415a45e6aa562d7dc6d071d6a7e272248f3b875081814ad8d311999cb6044112cdb18674bc0adc55c8bf9d0441edebbaf5e4d08ffe57f4"}]}}, {{0x9, 0x5, 0xd, 0x2edc62dde3f7b83e, 0x20, 0x1, 0x4, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x81}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x71, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x3}]}}]}}, {{0x9, 0x4, 0xe3, 0x3d, 0x4, 0x22, 0xf6, 0x63, 0x40, [], [{{0x9, 0x5, 0x95a3747fb7987192, 0x3, 0x10, 0x1, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x81, 0x1}, @generic={0x41, 0x3, "aaee2753c1c1e0ae7320df7dc426ffdc107e86cd851cb9effb691450737e940e6292e29ac2bcdeeaa015e30e2389769e1b6523e3e41244d6b869d20e3fab2c"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0xff, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x91, 0x8}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x5, 0x3, 0xfc, [@generic={0x7b, 0x22, "3704e6311c55b8b3d3ab49dc940448430e4a4bdd273621b7e4e95d2f3534362d073098d173f8448e057695a039ff4aa1f6db43254c0a743d7e382e223f6b68c299c14870737d55bc5eb1f6e9c73b5e43375b85f9acf498552f416abd08bfe6f4aab3f4409e21b2ff75ed580e878f899a6c077f349ecc0d4f1f"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x2, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xca, 0x3}]}}]}}, {{0x9, 0x4, 0x8, 0x4, 0x0, 0x7, 0xa9, 0x1c, 0x8, [@hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x6cb}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x9, 0x8}, {0x6, 0x24, 0x1a, 0x1}, [@country_functional={0xe, 0x24, 0x7, 0x67, 0x84, [0xfff9, 0x8, 0xfffb, 0x6]}]}]}}, {{0x9, 0x4, 0x10, 0x5, 0x0, 0xff, 0x45, 0xd, 0x2, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x7, 0x9, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x6, 0x6, "7e93e0f10a03"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xcc, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x800, 0x7dba, 0x22}, @as_header={0x7, 0x24, 0x1, 0x5, 0x5, 0x1001}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x25, 0x0, 0x1}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x3, 0x3, 0x8, "1b2f7e1d4ab05e"}]}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x300, 0xff, 0xd3, 0x7, 0x10, 0x1}, 0xf6, &(0x7f0000001000)={0x5, 0xf, 0xf6, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "4972e55eda76d46850eac5dcb942bc77"}, @generic={0xdd, 0x10, 0xa, "39cc346211b937534cc7a1b8a24156c659703ae81debf516bcbb49ba9b42dd936b069e7932de4882720bda19e2cd504c6eadf1d6df7377f93b061371564438d4a919b93168a0d1e396f2c11d7d07c9692bf963a17337bdfdf54dcd89866e6683e40028cef6b08d842b8239635f8c2ab4d61dbb7afa8741a452854e3b48eb648cd872e5c8c9b63f23baa054f0f71316a52866afd9a164f8c7e57b3ae4bcdbea3e85c483abe83b651aa56c765838ee163b8d74c35ff2f3dac79034fc367a9e330f1475a9f70b35399ecd2f907f3aa420588196ba2124a3a6ad9ae3"}]}, 0x1, [{0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x1c0a}}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001180)={0x0, 0x3}, &(0x7f00000011c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000012c0)={r6, 0xa0, &(0x7f0000001200)=[@in6={0xa, 0x4e22, 0x5, @mcast1, 0x8}, @in6={0xa, 0x4e20, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffff0b0}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000001300)=0x10) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x20) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r7, 0x4068aea3, &(0x7f0000001340)) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/bsg/2:0:0:0\x00', 0x4001, 0x0) ioctl$BSG_SET_TIMEOUT(r8, 0x2201, &(0x7f0000001400)=0x7d6) r9 = getpgid(0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001640)=0x0) r11 = syz_clone(0x20000000, &(0x7f0000001680)="2691da27cf11e1e00e954c2f8eeaffe95619536ea317466a03b0828fd06a7cc8dcfbd9e64cda41c8d1fccfa8740bb2d9bc2e4b82612a8f0fe3fec68dd1faa280ca3f0892190a26d0b3dd0e7a5c19065e3b885bbe218d25e733e46ba905c851e37a969dbaf7503ded83628cf5f9caf29063ffa574705d1cc66efe1aad34e5866895d1b5569234959921954bc84fc4587a4f43bd9132392c8e795d3f5bb7a654f2989c4e4f0a46116ea72fc8158fcfd68f95c6d0015234a984aad72dca55c896ae22e7fe", 0xc3, &(0x7f0000001780), &(0x7f00000017c0), &(0x7f0000001800)="aa69005a2431dff90fad9e2803a6d930fee93655d8160c53eb48673abdb8ac81818a936cd1d69834") syz_clone3(&(0x7f0000001d80)={0x39001800, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0), {0x16}, &(0x7f0000001500)=""/16, 0x10, &(0x7f0000001540)=""/233, &(0x7f0000001d40)=[r9, r10, r11, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r3}}, 0x58) 1m13.766159824s ago: executing program 6 (id=2361): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x200303, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000001c0)) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r6}, 0x18) r7 = userfaultfd(0x801) close(r7) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) (async) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4008085}, 0x4000000) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/mcfilter\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) read$FUSE(r2, &(0x7f0000000580)={0x2020}, 0x2020) 1m13.638763574s ago: executing program 6 (id=2362): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f0000000540)) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) 1m13.455446115s ago: executing program 6 (id=2363): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/205, 0xcd, 0x1, &(0x7f0000000100)=""/101, 0x65}, &(0x7f00000001c0)=0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x4, 0x10}, &(0x7f0000000240)=0xc) r3 = signalfd4(r1, &(0x7f0000000280)={[0xcc3b]}, 0x8, 0x80800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x40, 0x10, 0x3, 0x1, {{0x2a, 0x4, 0x1, 0x3e, 0xa8, 0x68, 0x0, 0x8, 0x29, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x2c, 0x3, 0x3, [{@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp={0x44, 0x20, 0xda, 0x0, 0x6, [0xf, 0xb1, 0x8001, 0x6f, 0x5, 0x6, 0x7f]}, @cipso={0x86, 0x41, 0x3, [{0x5, 0xb, "a65d4db9465df588ba"}, {0x7, 0x9, "8788f4e77c9db5"}, {0x7, 0xc, "e63742deae171a2181b7"}, {0x2, 0x12, "e589c834b9122df781144d37691c7a65"}, {0x1, 0x9, "b7d6eae78d9eb2"}]}, @generic={0x83, 0x2}, @cipso={0x86, 0x16, 0x3, [{0x0, 0x10, "2fc3e1517980458c8ee3885d2e8c"}]}, @noop]}}}}}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={r4, @empty, @empty}, 0xc) fcntl$notify(r1, 0x402, 0x80000004) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000440)={0x0, 0x8, 0xe, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x80, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x40000) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000980)=0x7, 0x4) preadv(r0, &(0x7f0000000dc0)=[{&(0x7f00000009c0)=""/240, 0xf0}, {&(0x7f0000000ac0)=""/183, 0xb7}, {&(0x7f0000000b80)=""/230, 0xe6}, {&(0x7f0000000c80)=""/58, 0x3a}, {&(0x7f0000000cc0)=""/149, 0x95}, {&(0x7f0000000d80)=""/37, 0x25}], 0x6, 0x40, 0x800) renameat2(r3, &(0x7f0000000e40)='./file0\x00', r3, &(0x7f0000000e80)='./file0\x00', 0x2) mmap$qrtrtun(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001440)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001400)={&(0x7f0000000f00)=@newtclass={0x4d0, 0x28, 0x1, 0x40, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x5, 0xffff}, {0xb, 0x8}, {0x7, 0x10}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x5e, 0x81}}, @tclass_kind_options=@c_htb={{0x8}, {0x10, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x7}]}}, @tclass_kind_options=@c_htb={{0x8}, {0x440, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x1, 0x9, 0x9, 0x7fff, 0x8, 0x100, 0x598f67c7, 0x7, 0x10, 0x6, 0xc, 0x8, 0x5, 0x3a, 0x200, 0x176e4e5f, 0x890, 0x101, 0x6c9, 0xffffff6f, 0xfffffff7, 0x3, 0x8, 0x7, 0xfffffffe, 0xffffffff, 0x8, 0x7d, 0x6, 0x0, 0x5, 0x9, 0xfba, 0x2d9e, 0x5, 0x7f, 0x0, 0xd, 0x6, 0x401, 0x9, 0x7, 0x4, 0x101, 0x7, 0x5, 0x2, 0xf07, 0x40, 0x5, 0x7fff, 0x7fff, 0x0, 0x6, 0x535, 0x1, 0x1, 0x81, 0x50c, 0x9, 0x10001, 0x7fff, 0x5, 0x8, 0x2, 0xf, 0x1, 0x40, 0xb, 0x2, 0x85eb, 0x8, 0xffffff87, 0x9, 0x3, 0x0, 0x2, 0x4b, 0x6, 0x4, 0x9, 0x36, 0xa823, 0x2, 0x401, 0x4, 0x1, 0x800, 0x1ff, 0xb, 0x5db58624, 0x6, 0x3, 0x1ff, 0x80000000, 0x40, 0x6, 0x6b, 0xffffffff, 0x9, 0x6, 0xba, 0x1, 0x2, 0xfcac, 0x8, 0x2, 0xa345, 0x10, 0x4, 0x3, 0x0, 0x7, 0x7c9, 0x1c00000, 0x9, 0x5, 0x1, 0x6, 0x7fff, 0x6, 0x4, 0x7fff, 0x1, 0x9, 0x3, 0x80000001, 0x4, 0x6, 0x1, 0x2b333ed1, 0x8, 0xc5b0, 0x3, 0x401, 0x6, 0x9, 0x3ff, 0x2, 0x2, 0x2, 0x9, 0x0, 0x8, 0x6, 0x6, 0x81, 0xe, 0x7, 0x3, 0xfffff1cb, 0x101, 0x2, 0xf, 0x4, 0xbdf5ce2f, 0xb, 0x8, 0x1, 0xff, 0x8, 0x50, 0x8, 0x0, 0x2, 0x1, 0x4, 0x7, 0x8, 0x9, 0x1000, 0x8, 0x827, 0x2, 0x0, 0x6, 0x95, 0x0, 0x9, 0x9, 0x4, 0x1, 0x1000, 0x7, 0x696, 0x1db, 0x9, 0x65a, 0x3, 0x42, 0x5cc, 0x3, 0x400, 0xc, 0xffff2728, 0x1, 0xc, 0x3e, 0x400, 0x9, 0x6, 0x2, 0x10, 0x80, 0x2, 0x800, 0x3, 0x2, 0x6, 0x7, 0x1, 0x400, 0x0, 0x1, 0x4, 0x9, 0x0, 0xc0c, 0x3, 0x7ff, 0x6, 0xdbe7, 0x1000, 0x5, 0x84d300, 0x2, 0x4, 0x2400, 0x960fd55e, 0x0, 0xb21, 0x10001, 0x2, 0xffffffff, 0x2, 0x13, 0x3, 0xfffffffc, 0xfffffffa, 0x4, 0xfb7b, 0x45e, 0x5, 0x0, 0x6, 0x0, 0x280000, 0x78ec, 0x3, 0x2, 0xb55, 0x109a, 0x3, 0x4, 0x5]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0xdf, 0x800, 0x7f, 0xffff}, {0x6, 0x1, 0xfff8, 0x7, 0x73a, 0x8}, 0x1, 0x800, 0x7, 0x7fff}}, @TCA_HTB_OFFLOAD={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xfa}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x6}}]}, 0x4d0}, 0x1, 0x0, 0x0, 0x4008030}, 0x24040880) sendmmsg(r6, &(0x7f0000001a00)=[{{&(0x7f0000001480)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001500)="281df83af2ee77bec1e3f6d1367e126be3fa962fbcc337cfc020844d2e010d1de2e6312948d621b8e3a0c6c42fc1ce6e44e2d5bda4f4d878288b662246748671", 0x40}, {&(0x7f0000001540)="f3b7a86c59d6f057bf97c9db097bc214035113456993de061c79f58f6dfb871b10addd6207b0d6956e", 0x29}, {&(0x7f0000001580)="8f89823c3b8abdf2af912f342d36e1b58e8f20775e6e1c0472af2443ba7b0a11648f91aa74b92c002eae95b53f524e7cc09790c207eda02f6f760ca61629e8efe285cdb392097452d2b137b5b96eedd89ab25278a0b013d90c4de1e420d1487a0fed399516a632b4f291d53bc3ec59949ee33695c8452608fa54d50475cf5c59cc822b4b17ff280ed1b3b14c623bc00a21c1d6960f6ccfcb1a3750d90a46ed34dcdcb9045670014e2e3f5eb3a429cb9603", 0xb1}, {&(0x7f0000001640)="afd51267b2aa33a63839fefe56093fcb6771845f780c99e72928cbfdec6b5287d36028d69647ec690842715af5e9d5691222d49d15b431de427e8864c884c3ed14b48d3b96ddcede8c3eb5a2f9059936e4fc1ca2071087789038e4adfbee1a78e58dd1117f04ac012c4743660e9f5412990d59e4a8f500cff9383965b5418a9a4ae8513200a8cc885fde9c214aff8feac553cf8a92d77e1e2404dbd7c986c59c1670257b73856ca5de28", 0xaa}, {&(0x7f0000001700)="6b57e3b295863f9e1904bc26dfd6bf52389a93b7abd071eea0ef8403f2e095f39e0ac6e1f17c93b93f80047df2611728e3e70a4bf47f7c91fc676d5772ec66ce2aa7f8ee69a30903ab1fd0e8b7387ed138c38c286df4669339a9643db9387bb40093df9470400fa12927396892ca2f04699b700648", 0x75}, {&(0x7f0000001780)="e0eb1ccac2e523f1131b4fe8b491f0d885d613956e5fb18312e2105c0199935ff8aa0314c190f348c21bf3aad8ec5dfcb7611b0c8d4cd385e037c37eba1ed485a8d74ca7520752f2dec4d81cda664a390b6bcf47a1ceb5728ac947c9417ab2ba984cc066c21343e178558eeb5e2ebbc6deafe801546d091cd11ba097a2b5d73b686ced6042", 0x85}, {&(0x7f0000001840)="4cc20027d463d50da2ba99dcc0de55eb96e3b652ce9af9efc25dbf3730f13a4ee3e20f4de4abff1f84562ed7526ea02c836011b48120ec09c6e6962e65e1449cf6977914bf46522dc9b120dc444a871920a248a80143af57e58f40a23031486b0b", 0x61}, {&(0x7f00000018c0)="5a22e7f768756d50974dd65eeb965c25bb783b63762d9c08c5eb97b12fb5b2702e56d82e362d4e578bcc07e5c7a92abbb880", 0x32}], 0x8, &(0x7f0000001980)=[{0x70, 0x29, 0x1, "4fc8d3bdac4f2de05894e0966ccac8bc3f9f072f5d99550a8ba2ddc4ab9f34021a96e11f8f0074734ff3be4565983845b0fc9126747312b8fcc39e48f4db6a9ede9067ec778f3eee26dbc8a4666a43799ac59894bc3b27b7f7670eb508ff"}], 0x70}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000001a40)={r2, 0x6}, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r7, &(0x7f0000001a80)=""/167, 0xa7, 0x2000, &(0x7f0000001b40)={0xa, 0x0, 0x0, @initdev}, 0x20) setsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f0000001b80)="b9d89a6f9049a3a0c0f2710455de2f41e1c95ca2b61f78ef8480069f868503cc1187e6ec785f302d417568b2774da14f327be47baa8f6adc137b98", 0x3b) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000001bc0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x30001, 0x0, 0x0, 0x317fb9, 0x33d52f}) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$selinux_load(r8, &(0x7f0000001c80)={0xf97cff8c, 0x8, 'SE Linux', "da944e4cc936"}, 0x16) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001dc0)={@map=r3, 0x24, 0x0, 0x2, &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000001d00)=[0x0], &(0x7f0000001d40)=[0x0, 0x0], &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000001e40), 0x88100, 0x0) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001ec0)=@o_path={&(0x7f0000001e80)='./file0\x00', 0x0, 0x0, r5}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001e00)={@cgroup=r10, r3, 0x22, 0x2, r3, @void, @value=r11, @void, @void, r9}, 0x20) 1m13.455211845s ago: executing program 6 (id=2364): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x5, 0x10000, 0x1}}, 0x30) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r0}, 0x0) landlock_restrict_self(r3, 0x0) syz_emit_ethernet(0x77, &(0x7f0000000740)=ANY=[@ANYBLOB="bbbbbbbbbbfb0000000000000011027e7fb58d2fb76e49cb4147b184c4faa70fed3287650b37833275ff1400780c909112f7c76db023514b9ecd94c6b4dfc5557447c2bbff087134271f4eaef598deacd3aa5b9dd342bce28377a4e8cb133a9b62cb16785b8799c995fe498b8992637279e81f359029a0"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, 0x0, 0x60}}], 0x1, 0x2004c944) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) fanotify_init(0xf00, 0x0) (async) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) (async) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x5, 0x10000, 0x1}}, 0x30) (async) landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r0}, 0x0) (async) landlock_restrict_self(r3, 0x0) (async) syz_emit_ethernet(0x77, &(0x7f0000000740)=ANY=[@ANYBLOB="bbbbbbbbbbfb0000000000000011027e7fb58d2fb76e49cb4147b184c4faa70fed3287650b37833275ff1400780c909112f7c76db023514b9ecd94c6b4dfc5557447c2bbff087134271f4eaef598deacd3aa5b9dd342bce28377a4e8cb133a9b62cb16785b8799c995fe498b8992637279e81f359029a0"], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, 0x0, 0x60}}], 0x1, 0x2004c944) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') (async) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) 1m13.370690633s ago: executing program 6 (id=2365): bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) (async, rerun: 64) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (rerun: 64) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x10005) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async) close(r1) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x28) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000bc0)={0x0, 0x0, 0x9}) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1m12.994788761s ago: executing program 6 (id=2373): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='debugfs\x00', 0x10, &(0x7f0000000100)='barrier') r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x20, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000ae7ed72f6703a123300000c0017000201aaaaaa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) linkat(r0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x4081, 0x40) move_mount(r0, &(0x7f00000000c0)='./cgroup\x00', r2, &(0x7f0000000180)='./cgroup\x00', 0x3) 1m12.902606416s ago: executing program 37 (id=2373): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='debugfs\x00', 0x10, &(0x7f0000000100)='barrier') r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x20, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000ae7ed72f6703a123300000c0017000201aaaaaa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) linkat(r0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x4081, 0x40) move_mount(r0, &(0x7f00000000c0)='./cgroup\x00', r2, &(0x7f0000000180)='./cgroup\x00', 0x3) 1m5.684064427s ago: executing program 4 (id=2454): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x6c, 0x2b, 0x1, 0xffffffff, 0x25dfdbff, "", [@nested={0x59, 0x0, 0x0, 0x1, [@typed={0xc, 0x4, 0x0, 0x0, @u64}, @generic="097a23f5e2f8d1389317a9a5741ef4da8899b857aaa214bfd06b99fa26e94bf6e6fd61b558ca40b911ac362975dbfa5c35b61d4bf4", @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@remote}]}]}, 0x6c}], 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x2000c014) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1m5.645065288s ago: executing program 4 (id=2456): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c000000030301080000000000000000050000020c000200ffffff040000000000000000fffffffb0000099e0c000200fffffffd0000007f0c000200fffffffd000086000c000200fffffffc000004000c000200ffffffff000000030c000200fffffffb0000000b08000340000000080c01020000000000000000058c9f132094bf7715e076ee644d5c071177f2484dc6c200e5e72fa6cf5cd329868c05c677fae1a5a88c6c8d75dd371d3a06f01197ac48eae9aafea0efc468870124f0b4658bf34bce1fdbe472"], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x8031, 0xffffffffffffffff, 0x7e024000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {0x0, 0xea60}, {0x4, 0x2, 0x8, 0x6, 0x29, 0x9, "0adb3fb8"}, 0x5}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000580)={0x5e, @multicast2, 0x4e20, 0x4, 'wlc\x00', 0x34, 0x8000, 0x2b}, 0x2c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0xfffffe40, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x130}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400000, 0x1, 0x18}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) renameat2(r5, &(0x7f0000000080)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00', 0x1) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004aab67504f4b3bd925b43e1ead214b40a02b37d868e25d976309c4c0775cb0259a00f565c50fd5442324330b20d3aff4127868e0666ee833044dd2ccd460a9b2bbef8db5cbb90fdeffd49c8740a7b627e53f5110938bef639b39f9ff4f46f861ae677bc57a2f1e4d33da214bd334c6ddec8074bf925c811ea5b40e710e1d06a049cdecb419bdcb12b82ab057f509c7cf4688aef9f9b5869f62c548d161237b44c3b97fc99341f34746b1881a753835a01b5707dd6e160d475b99246eda78676856d3ecf29a43610bb9e9cadfa4500b76f1c25ec7b81b09f9ef834711a40c0c5683", @ANYRES32=0x0, @ANYBLOB="000000000092040014001280090001007663616e000000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) 1m5.031622403s ago: executing program 4 (id=2472): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x123f82, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x20000, 0x1000, 0xd}}) 1m5.030698764s ago: executing program 4 (id=2473): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r2) close(r3) close(r1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x6}, 0x8) 1m4.893360281s ago: executing program 4 (id=2474): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x10800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0xffffffe7, 0x83}}, './file0\x00'}) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0045543, &(0x7f0000000040)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x8ea341) syz_clone3(&(0x7f0000000400)={0x10008400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x2d}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000280)=""/231, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c800360032"], 0x3b) socket$kcm(0x10, 0x2, 0x0) semget(0x2, 0x2, 0x1) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a3c0)="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", 0x2000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r7, &(0x7f0000000300)) socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000540)={0x2, 0x2, 0x80, 0x7ca, r5}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x9dc34fabb67348eb, 0x0) close_range(r4, r1, 0x0) 1m4.785925848s ago: executing program 4 (id=2475): mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) 48.865822018s ago: executing program 38 (id=2475): mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) 14.647310401s ago: executing program 3 (id=3166): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/147, 0x93) sendmsg$AUDIT_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3e8, 0x400, 0x70bd25, 0x25dfdbfc, "", ["", "", ""]}, 0x10}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) timer_create(0x0, &(0x7f0000000000)={0x0, 0x6, 0x4e8bac73cc433b76, @thr={&(0x7f0000000380)="60a66cdb90a27d871efbcf1e560e823b6e0054eff8b940df21c0f3d48ffea030a31fc83fe43c6f5a1b10bc9737dbed708a4cc8f2c2e7c6ecc29f111a77c2c43f45a097b591e3774328fbfc0dd8594e1a68844c9af12992f4b9e54aa3d9f2c831a0ea968c36fc954cb7566919ec721a3ccbb431df98b3ea2d4a2ea70ea1852af262a75831", &(0x7f0000000440)="bdc8ed5d2e640a96fdf70db3b5c82079265eae893fcf45f492e6273da67c7fee629823f68055f16c70bcc23c4ed5474c5f18453ace4fcc6b4d726fb620affe93d02aceb6654bf4cf1ab2270171bda9a5bcea15670e37257efc8799665eeb3996f19b424496975e4c7e5549589faf35e315f20070a8a2aed80b6c0385080abe570140acb2d164c4963f2481fea233c9789a0d0801e2915dee4564312601ca9783d2eb9c170d2e6cbb2dbd553888ee985d2f15aebbe36f95e71898d72078fe8fa982ecc3ad001e581d3a3e631d53293a596f82bec63ef2"}}, &(0x7f0000000080)=0x0) timer_settime(r2, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000040)={0xc, 0x20008}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500000000000800124000000001050004000000000011000300686173683a6970"], 0x60}}, 0x0) 14.647094744s ago: executing program 3 (id=3167): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000100)) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000000000f14000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2105bd901128c7e0ec82770c8204a1deeed415561752f708ccfbd80b2bd6c72652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec865e160000000000004c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed425454b9a70cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200"/2759], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1c0}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000b, 0x810, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x5, 0x1, 0x10000009, 0x803, 0x7, 0x7fc, 0x200, 0x3, 0x2006, 0xfffc, 0x3, 0xf8}}, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x13f}}, 0x20) fcntl$getown(r4, 0x9) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000d00)={'erspan0\x00', {0x2, 0x4e24, @empty}}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) 14.056326582s ago: executing program 3 (id=3177): ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x200, 0x1, 0x4, 0x800, 0x1bb, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x3, 0x7f, 0x5e, "fc768500"}, 0x32, 0x4, {0xffffffffffffffff}, 0x767, 0x0, 0xffffffffffffffff}) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "cfb7c00df6c1c71948af2c7f102a3a68"}) r2 = memfd_secret(0x80000) symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000140)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000180)) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000600)={0xf000000, 0x6, 0x5, r1, 0x0, &(0x7f00000005c0)={0x990a77, 0x10, '\x00', @p_u16=&(0x7f0000000580)=0x6}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000680)={0x3, &(0x7f0000000640)=[{0x4, 0x0, 0x40, 0x4}, {0xa0a, 0x81, 0x8, 0x5}, {0x2, 0x0, 0xd6, 0x3}]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000700)={0x2, 0x3821, 0x2, 0xd512, 0x8, 0x0, [{0x3, 0xd4, 0x8000000000000001, '\x00', 0x1}, {0x8, 0xd226, 0x3, '\x00', 0x80}, {0x7, 0xb42, 0x1, '\x00', 0xa01}, {0x0, 0xd5bf, 0x9, '\x00', 0x3180}, {0xd, 0x1, 0x8}, {0x17e, 0x0, 0x100000000, '\x00', 0x1}, {0x0, 0x1, 0x8, '\x00', 0x100}, {0x7, 0xbc5d, 0x6, '\x00', 0x400}]}) r5 = accept4$netrom(r3, 0x0, &(0x7f0000000900), 0x800) getsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000940)=0x3, &(0x7f0000000980)=0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r6, 0x40047211, &(0x7f00000009c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000a00)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000a80)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000000ac0)={0x51, "278a255b55908e6f080650d59b71b39abe27150189994b36c24dd50e13009768c1628a584775b953d536a03bbb74a7a400e0aab2ece750a633c15cd5b22073f253d0f4fe25235dcb89f26f148c2dfd00d3e52bac1a5ee5904cac03caf147d0ff2a4cc4965023c054565d40349e657443c8d3b9a81b269b940bc126b72a2b9ba7"}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000b80)) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000c00), 0x44000, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000cc0)={'macvlan1\x00', &(0x7f0000000c40)=@ethtool_eeprom={0xb, 0xed89, 0x2, 0x4b, "c90a9933621b12f5e53043ce501f7699df33aa4f41069f0e7107e8e258d043bce57cac2b1374a2269161d3f48b15fd00a33d26d3f2a38d0522d019a97c10f3cf07990117dd5f3ea93fdd62"}}) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000d00), 0x4) ioctl$KVM_CAP_PTP_KVM(r4, 0x4068aea3, &(0x7f0000000d40)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r8, 0x28, 0x2, &(0x7f0000000dc0)=0x9, 0x8) r9 = syz_socket_connect_nvme_tcp() ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000e40)={'vxcan0\x00', 0x0}) recvfrom$inet_nvme(r9, &(0x7f0000000e00)=""/7, 0x7, 0x2000, &(0x7f0000000e80)=@can={0x1d, r10}, 0x80) close_range(r1, r9, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f40), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x30, r11, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xf7ca71c2358f0237}, 0x4040000) 14.055968719s ago: executing program 3 (id=3178): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x9, 0x6, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x20, 0xc9, 0xa296}}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0x5}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r6, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x6b, 0x7, 0x0, @private2, @local, 0x700, 0x8, 0x4, 0x7}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=@deltfilter={0x604, 0x2d, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x7}, {0x3, 0x7}, {0xffff, 0x3}}, [@f_rsvp6={{0xa}, {0x474, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0xd}}, @TCA_RSVP_POLICE={0x454, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x10000000, 0x7, 0x40, 0x100, {0x5, 0x2, 0x8587, 0x8001, 0x0, 0x2df5dea1}, {0xdf, 0x0, 0x5, 0xb1b4, 0x2, 0x6a}, 0x4, 0x0, 0x6}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x80000000, 0xfffffffe, 0x80, 0x8001, 0x9, 0x4, 0x7, 0x0, 0x3, 0x101, 0x10001, 0x6, 0x5, 0x10001, 0x5, 0xffff, 0x6, 0x6, 0xcbb8, 0x8, 0x1a9b, 0x9, 0xffffffff, 0x2, 0x0, 0x80, 0x2, 0xffff, 0x5, 0xfff, 0xabcf9ec, 0x1000, 0x4, 0xffff31a3, 0x3ff, 0x80000001, 0x2, 0x1, 0x53c01bbd, 0x80000000, 0xffffffff, 0x0, 0x3ff, 0x80000000, 0x3, 0x10000, 0x3, 0x7, 0x5, 0x400, 0x400, 0xa22, 0x7, 0x2e3, 0x9, 0x7fff, 0x6, 0xe, 0xfffeffff, 0x7, 0x7, 0x9, 0x80, 0x947, 0x80000001, 0x9, 0x101, 0x2, 0x74f, 0x90000, 0x8, 0x5, 0x100, 0x3, 0xd8e, 0x214, 0x8, 0x7, 0x4, 0x3, 0x7ff, 0xe, 0x6, 0x1ff, 0x4, 0x10000, 0x8, 0x1, 0x1a6f, 0x2a4f, 0x500c, 0xffffffff, 0x8, 0x733, 0x9, 0x80000001, 0x2, 0x794fbb7e, 0x3ff, 0x2, 0x1000, 0x34d8, 0x0, 0x9, 0x6e, 0x2, 0x5, 0x19fb, 0x800, 0x0, 0xfff, 0xbf5, 0x1, 0x6, 0x7fff, 0xa9, 0x2, 0x200, 0x2, 0x3688, 0x10001, 0x1995f0e2, 0x2, 0x9d, 0x81, 0x5, 0xafb, 0x10000, 0x9, 0x3, 0x9, 0x3, 0x7, 0x5, 0x1, 0x1, 0xb1dd, 0x7, 0x2, 0x3ff, 0x3a7, 0xc58, 0x2, 0x4, 0x4, 0x3, 0x101, 0x8, 0x401, 0x7, 0x8, 0x3, 0xfffffffc, 0x7f, 0x8000, 0xfffffffb, 0xc, 0x28, 0x7, 0x5, 0xe, 0x5, 0x8, 0x5, 0x5, 0x1, 0xc, 0x2, 0x5, 0x8, 0x1f, 0xb, 0x9, 0x7, 0x5, 0x2, 0x401, 0x2c, 0xffff6bed, 0x5, 0x8, 0xffff7155, 0x6, 0x3ff, 0x200, 0x93, 0x8, 0x0, 0x5618, 0x5, 0x8, 0x5, 0x9, 0x1, 0x3ff80000, 0x1000, 0x3, 0x3d, 0x0, 0x10000, 0x7, 0x9, 0x1000, 0x6, 0x3265, 0x1f9, 0x3f, 0x2, 0x10000, 0x1, 0x3f800000, 0xb7a8, 0x81, 0xc6, 0x20e0, 0x7, 0x4, 0x5, 0x5, 0x3ff, 0x5, 0x7, 0xfb, 0x6, 0x6, 0x6, 0x6, 0x3, 0x3, 0x7, 0xfffffff7, 0x4, 0xa, 0x7ff, 0x3, 0x0, 0x3, 0xbe, 0x6, 0xaf, 0x0, 0x0, 0xc, 0x3, 0x7ff, 0x2, 0x81, 0x3, 0x101, 0x8, 0x8, 0x8000, 0x8, 0x2, 0x3]}]}, @TCA_RSVP_SRC={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}}, @f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0xa}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0x8}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast1}]}}, @f_rsvp6={{0xa}, {0x58, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x4, 0xa}, {0x3, 0x10, 0xffffffff}, 0x88, 0x5, 0x3}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x10001, 0x80000001}, {0x5b, 0x1000, 0x5}, 0xe4, 0x4, 0x2}}, @TCA_RSVP_SRC={0x14, 0x3, @private0}]}}, @f_tcindex={{0xc}, {0xb8, 0x2, [@TCA_TCINDEX_ACT={0xa4, 0x7, [@m_mirred={0xa0, 0xb, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80000000, 0x4, 0x4, 0x1}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x6, 0x20000000, 0x81}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0x8, 0xfffffff1, 0xac2}, 0x2, r7}}]}, {0x13, 0x6, "3d0356eccd22137988e9f2e34be053"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x7}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x9}]}}]}, 0x604}, 0x1, 0x0, 0x0, 0x4010}, 0x20008000) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) chmod(&(0x7f0000000000)='./file0\x00', 0x5) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0/../file0/file0\x00', 0x0) 13.949946929s ago: executing program 3 (id=3180): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a3000000000090002"], 0x104}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe33) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b", 0x26}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/36, 0x24}], 0x1}, 0xc3}], 0x1, 0x2003, 0x0) 13.69573655s ago: executing program 3 (id=3187): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x29ab, &(0x7f0000000380)={0x0, 0x5888, 0x10000, 0x1, 0x1c1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) unshare(0x22020600) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='xprtrdma_err_chunk\x00', r4, 0x0, 0xffffeffffffffff8}, 0x18) r6 = syz_clone3(&(0x7f0000006440)={0x2004000, &(0x7f0000000080), &(0x7f0000000300), &(0x7f0000000400), {0x1b}, &(0x7f0000006380)=""/99, 0x63, &(0x7f0000000440)=""/43, &(0x7f0000006400)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) prlimit64(r6, 0x2, &(0x7f00000064c0)={0x0, 0x4}, &(0x7f0000006500)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) setsockopt$inet6_opts(r7, 0x29, 0x39, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r8, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000001200)={0x50, 0x0, r9, {0x7, 0x27, 0xffffffff, 0x500000}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r10}, 0x10) r11 = fsmount(r4, 0x0, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r12, &(0x7f0000000480)={0x2020}, 0x2020) r13 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r13, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x4, @value=0x9}) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3519, 0xc2de, 0x8, 0x0, 0x0) 13.668698348s ago: executing program 39 (id=3187): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x29ab, &(0x7f0000000380)={0x0, 0x5888, 0x10000, 0x1, 0x1c1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) unshare(0x22020600) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='xprtrdma_err_chunk\x00', r4, 0x0, 0xffffeffffffffff8}, 0x18) r6 = syz_clone3(&(0x7f0000006440)={0x2004000, &(0x7f0000000080), &(0x7f0000000300), &(0x7f0000000400), {0x1b}, &(0x7f0000006380)=""/99, 0x63, &(0x7f0000000440)=""/43, &(0x7f0000006400)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) prlimit64(r6, 0x2, &(0x7f00000064c0)={0x0, 0x4}, &(0x7f0000006500)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) setsockopt$inet6_opts(r7, 0x29, 0x39, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r8, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000001200)={0x50, 0x0, r9, {0x7, 0x27, 0xffffffff, 0x500000}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r10}, 0x10) r11 = fsmount(r4, 0x0, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r12, &(0x7f0000000480)={0x2020}, 0x2020) r13 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r13, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x4, @value=0x9}) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3519, 0xc2de, 0x8, 0x0, 0x0) 5.837536233s ago: executing program 8 (id=3301): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) close(r0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x800, 0xc, 0xf8, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) 5.772129962s ago: executing program 8 (id=3302): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4"], 0x125) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r6, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) (async) r7 = socket$kcm(0x10, 0x400000002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000180)={[{@nr_blocks={'nr_blocks', 0x3d, [0x36, 0x31]}}]}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x8, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x5}}]}}]}, 0x40}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x101, '\x00', r3, r5, 0x0, 0x80005, 0x3}, 0x50) (async) write$FUSE_DIRENT(r1, &(0x7f00000000c0)={0x68, 0x0, 0x0, [{0x5, 0x0, 0x1, 0x6, '%'}, {0x2, 0x8, 0x3, 0x5, ',\\.'}, {0x5, 0x5, 0x0, 0x4}]}, 0x68) (async) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.77193005s ago: executing program 8 (id=3303): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c0005800500194003"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) (async) ioctl$int_in(r1, 0x5452, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1}) (async) r5 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x1, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x24, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x1}) (rerun: 64) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) write(r0, &(0x7f0000000080)="0c0191d577e47ef5faeed89739c7e7c9bdbd4a0f46b4a4f42aa7ae000eb1fc7257715fcf83b50ddcd1b4112954f073d0945eb843412f11d8906b40822f87980932f47ca62697d71e402f020dff2f3358fe85aa74ee9ad528", 0x58) (async, rerun: 32) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000140)) (async, rerun: 32) r8 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="100100002d0001002abd7000fdffffffff00008008000200", @ANYRES32=r0, @ANYBLOB="140004000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde155e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c00"], 0x110}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5.688766802s ago: executing program 8 (id=3304): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdc02, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000002580)={0xa, 0x4e24, 0x9, @empty, 0x2}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xa2}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.687408075s ago: executing program 8 (id=3305): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$char_usb(r1, &(0x7f0000000000)='-0', 0x2) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f00000001c0)={@host, 0x4}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@host, 0x3}) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000140)={{@local, 0x5}, 0x0, 0x2, 0x8}) flock(r2, 0x1) flock(r2, 0x1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f00000000c0)={0x10000}) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000080)={0xfffffffffffffffd, 0x91b, 0x3, 0x7b}) prctl$PR_SET_PDEATHSIG(0x1, 0xe) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) 5.624579033s ago: executing program 8 (id=3306): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x105042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000002c0)=0x1, 0x4) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000002c0)=0x1, 0x4) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f00000000c0)='ceph\x00', 0x2804070, &(0x7f0000000380)='acl') 1.20825477s ago: executing program 9 (id=3357): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xc, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f47a3b6e947d8444ef8a51116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1.207668186s ago: executing program 9 (id=3358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x24103, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x2}, {0x0, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x10) mount$afs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f0000000140)={[{@flock_write}], [{@smackfsdef={'smackfsdef', 0x3d, 'veth0_virt_wifi\x00'}}, {@appraise}, {@subj_type={'subj_type', 0x3d, '!{!&'}}]}) 1.091157427s ago: executing program 7 (id=3359): set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x7}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002980), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f00000029c0)={0x9, 0xa5a, {0x52, 0x676, 0x5, {0xcb5, 0xc0c}, {0x9, 0x3}, @ramp={0x8, 0x7a, {0x7f5a, 0x752b, 0x0, 0x8}}}, {0x55, 0x4, 0x1551, {0x0, 0x7}, {0x1000, 0xcbf}, @const={0x171, {0xfff8, 0xa, 0x7624, 0x4}}}}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) 1.090747609s ago: executing program 1 (id=3360): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) (async) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @ssrr={0x89, 0x3, 0xd8}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.089882602s ago: executing program 1 (id=3361): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0xc, 0x0, 0x4}]}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x80000000}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x668002, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000680)=[@wrmsr={0x1e, 0x20, {0x2b0, 0x2}}, @code={0xa, 0x49, {"470f01d166b8bc000f00d0660f08410f350fc77e002e0f01c5660fc7347d00700000420f01c866baf80cb8c2b33b8def66bafc0cec400f35"}}, @uexit={0x0, 0x18, 0xce76}, @wr_crn={0x46, 0x20, {0x3, 0x8000}}, @rdmsr={0x32, 0x18, {0x28}}, @rdmsr={0x32, 0x18, {0xb67}}, @wrmsr={0x1e, 0x20, {0xa2d, 0x8380}}, @rdmsr={0x32, 0x18, {0x8c3}}, @code={0xa, 0x51, {"0fc72ec744240066000000c7442402c039d898ff1c2466440f50c4b9240200000f322e643626f30fc775082666470f59d0f30f0943245f0f1c043c8f09889b0e"}}, @code={0xa, 0x57, {"6664460f30b9cb0a0000b897250000ba000000000f30360f01c366b835000f00d0c4a2359264e30dc461d5fdb0000000000f79daf2660f017a00c4c19d60fe0faeb03c27945d"}}, @code={0xa, 0x70, {"66b8a3000f00d0b9b7020000b83688e872ba000000000f303e660f3824b4a704000000460f07c7442400f4000000c7442402d6b1afc3ff1c24400f017abb430f0766b83e018ee8420f38f6ab7a00000066baf80cb831ac0b8fef66bafc0cec"}}, @wr_crn={0x46, 0x20, {0x4, 0x3}}, @code={0xa, 0x41, {"450f01cf66b852000f00d80f00120f00db66450f3880310f076447a58f49589a21f3430f01b1b300000066b856008ec8"}}, @uexit={0x0, 0x18, 0x10000}], 0x29a}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f00007eb000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="f30fc7b56c1300000f01cf660f6e6a000f2357c4c3a96f8c050058000052b9720a0000b8658a0000ba000000000f302e650f09b9f30900000f32b943020000b87e27eaccba9c6fa55c0f300f297800", 0x4f}], 0x1, 0xb, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x0, 0xfffffffffff7}, @cr0={0x0, 0x5}], 0x2) gettid() 1.015880658s ago: executing program 1 (id=3362): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) r0 = socket(0x2a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @empty, 0x6}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r0) listen(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x3c, r5, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x44, r5, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x44800) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1) 949.107686ms ago: executing program 9 (id=3363): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000700), 0x8000, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)={0xfffeffff}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000340)={0x7, 0x1, &(0x7f0000000240)=[0x0], &(0x7f0000000280), &(0x7f00000002c0), 0x0}) add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000001000), &(0x7f0000001000)="2e98", 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300012c9dff7f8cd913e90007"], 0x14}], 0x1}, 0x0) 948.18028ms ago: executing program 9 (id=3364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x80802, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xcc, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x1, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="14010000270001000000000000000000030100800c0000000000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x890}, 0x20000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f20e06635800000000f22e066b9f508000066b882730000d1dc66b8d0a700000f23c00f21f8663501000d000f23f83e0fb082ff000f8401dfbaf80cf30fc7708fbafc0ced66b97e02000066b88a46723166ba8794bd590f300f01c50fff3cf466b80b00000066ef", 0x68}], 0x1, 0x49, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000280)={0x6, 0x7ff, 0x5, 0x4d1, 0x1, 0x0, [{0x4, 0x2, 0xce, '\x00', 0x1000}]}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2, 0x8, 0x9, 0x0, 0x1f, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_ident={0x2, 0xa, 0x7f, 0x0, 0x5}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}, @sadb_ident={0x2, 0xb, 0x8000, 0x0, 0x2}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2d, 0x3504}, @sadb_x_filter={0x5, 0x1a, @in6=@local, @in6=@mcast1, 0x2a, 0x18, 0x4}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1f}}, @in6={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x4}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x3a, 0x80, 0x33, 0x1}, @sadb_x_sec_ctx={0x4, 0x18, 0x8, 0xe9, 0x18, "47b6918a9760dbaebb5140fec74eca17de3a8aa308adda67"}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2b, 0x3502}]}, 0xf8}}, 0x20000000) sendmsg$nl_xfrm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@getpolicy={0x58, 0x15, 0x1, 0x30bd28, 0x25dfdbfc, {{@in=@multicast1, @in=@remote, 0x4e23, 0x0, 0x4e21, 0x9, 0x2, 0x20, 0xa0, 0x6c}, 0x6e6bb5}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000100)={@desc={0x1, 0x0, @desc1}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 513.958785ms ago: executing program 1 (id=3365): socket$netlink(0x10, 0x3, 0xc) (async) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ee4000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x4) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x4) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 513.798227ms ago: executing program 1 (id=3366): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x48) 384.218634ms ago: executing program 1 (id=3367): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r1, 0x16) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x7, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x857}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 139.290883ms ago: executing program 7 (id=3368): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x98, 0xa, 0x5, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x700, 0x700, 0x0, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x7ff, 0x22, {{0x50, 0x4, 0x3, 0x16, 0x140, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x4e, 0x1, [{0x0, 0x10, "c4504c61283d79bf89a93cc62f63"}, {0x1, 0x11, "0de8a4665243c2687c918fbb945d1b"}, {0x1, 0xd, "1deec481a29d8892466fd9"}, {0x5, 0xc, "60ecb85707cf81e696ef"}, {0x6, 0x8, "355086880000"}, {0x7, 0x6, "bc8925aa"}]}, @timestamp_addr={0x44, 0x2c, 0xa1, 0x1, 0x8, [{@multicast1, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x9}, {@private=0xa010102, 0x200}, {@remote, 0x6}, {@rand_addr=0x64010100, 0x4}]}, @ssrr={0x89, 0xf, 0xc0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1]}, @cipso={0x86, 0x6c, 0x85cc9904c83f4880, [{0x1, 0x4, 'nH'}, {0x6, 0xd, "855e7d56ad1352a3fa687c"}, {0x2, 0xd, "976f0eb1e6d8e5842240f2"}, {0x5, 0x7, "945255e70a"}, {0x7, 0xc, "c51487b070cbdb205a71"}, {0x0, 0x2}, {0x7, 0xe, "d8a857f1db2989ad9049e5db"}, {0x5, 0xd, "df6b34abf9aea051280136"}, {0x1, 0x6, "cd1bb81b"}, {0x7, 0x12, "072b8283bf49d27fc5e3d9747107b1a5"}]}, @timestamp={0x44, 0x2c, 0xc6, 0x0, 0xe, [0x10001, 0x8, 0x5ef0, 0xa, 0xddc, 0xd8, 0x7, 0x1000, 0x9, 0x7]}, @timestamp={0x44, 0x8, 0x13, 0x0, 0x5, [0x3]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@mpls_newroute={0x4c, 0x18, 0x100, 0x70bd28, 0x25dfdbff, {0x1c, 0x20, 0x20, 0x9, 0xff, 0x4, 0xfe, 0x2, 0x1b00}, [@RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x9, "e6b0e4b95dc1d1bd95b4117dd47f"}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_MULTIPATH={0xc, 0x9, {0xf4fb, 0x8, 0x5, r2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3, @none}, 0xe) 139.056549ms ago: executing program 9 (id=3369): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000500), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x328}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 138.792723ms ago: executing program 7 (id=3370): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000440)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x104, &(0x7f0000000180)=0x7fff, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c00000010000305000000120000000000000000", @ANYRES32=0x0, @ANYBLOB="c088010000000000240012800c0001006d6163766c616e00140002800800010010000000080003000000000008000500", @ANYRES32=r2, @ANYBLOB="1057f4f8f7f02c7195f79cfa5e6f92ca9758281977c2a1254d4eaef43c45ffbdad6486cc208c2dee340be2a9d41f01e0352d72d5a129eda5989614fa2d5173f71460617d"], 0x4c}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000240), 0x4) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000080)={0x400, 0x6, 0x9, 0x4, 0x100, 0x4, "ab2a0f8a9e3e3372314f3caa8b917221", 0x20, 0x8, 0x6, 0x20, 0x8, 0xd, 0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000540)) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x40800, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_type(r8, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r9, &(0x7f00000000c0), 0x9) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="70006ded", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x70}, 0x1, 0x0, 0x0, 0xbd698377aeec17cc}, 0x40800) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x29, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x5, 0x9, "789607671442eb"}, {0x0, 0x2}, {0x0, 0x8, "e706d30bd224"}, {0x0, 0x2}, {0x7, 0x2}]}]}}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0xc, 0x0, 0x4}]}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 138.640512ms ago: executing program 9 (id=3371): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x5}, 0x48) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x2}, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b03, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f0000000040), 0x0}, 0x20) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) accept4$unix(r5, 0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2, 0x0, 0x40020000, 0xfffffffc}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000030801d79d44a7d000000000000000062b1a42cc00000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x8, r9, 0x0, r7}, 0x10) 75.167449ms ago: executing program 7 (id=3372): ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000080)={r0, 0x3}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x1e0, 0x1000, 0x618, 0x280, 0xffff, 0x6, 0x8, 0x1, {0xfffffff1, 0x0, 0x1}, {0x7, 0x5}, {0x7fff, 0x1, 0x1}, {0x5, 0x28ae, 0x1}, 0x2, 0x10, 0x0, 0x11b6b26d, 0x0, 0x2, 0x4f272cca, 0x2, 0x4, 0x2, 0x0, 0x2, 0x10, 0x100, 0x0, 0x7}) flock(r1, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x80080, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000016c0)={0xc8, 0x0, &(0x7f0000001580)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/183, 0xb7, 0x0, 0x19}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}, 0x1040}, @release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @decrefs={0x40046307, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/194, 0xc2, 0x2, 0x23}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2c}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000001540)={0x0, 0x28, 0x50}}}, @exit_looper, @decrefs, @enter_looper, @acquire, @increfs={0x40046304, 0x3}], 0x6, 0x0, &(0x7f0000001680)="323a03d036fd"}) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000001700)) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000001740)={0x1, 0xff}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001840)={r1, 0x20, &(0x7f0000001800)={&(0x7f0000001780)=""/23, 0x17, 0x0, &(0x7f00000017c0)=""/62, 0x3e}}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001880), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000001900)={0x18, 0x0, {0x3, @remote, 'veth0_to_bond\x00'}}) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001980)={&(0x7f0000001940)='svcrdma_decode_rseg\x00', r1, 0x0, 0x9}, 0x18) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000001a80)={0xa8, &(0x7f00000019c0)="bb8028fd81c79660915f1e1a69e7ec851d1161d02817ca758ad25107f416914d8c0496abb15dd96209f63b55233c8c14de23400310edf1fee59276038111be57d0feb15dafb5083a02f4e267931609f260f3d7b08180f51caa4a3782be5ae00971c344362b7fb899fe645295e56b28a20ccf1137f7aaa698278f3dea33b59aa121997a57fa7af5dbbf50830c0e90e433e25aa3cc76dc0269fde344b996635ad974279d8d6c78477c"}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)="5ce5d765baa5a41c4d6c678afde5b619bdbb71a78f1b4e98bc68dc756f303eb2d06b1a36c2e624121e92f7cf56317b8e46c9f9170abc", 0x36}, {&(0x7f0000001b00)="3db212c284e9c21bedde16abedb645765974a56e63f3bb5823e35c488c1f6ab58ea9377f892ac0e231121a47939eb8a19588c5ec09deb63a91da0797709d63528532df331d4b8b3527d32fab47ae8cbf709bb3fe78a1619678c1a793d1fd04d45f47f85c72028ba824a5f68840be00b86faaa5b198eb2a0b5ba350e2072582a22ae8912b164b7d3ae34fc6bb1065fe16ba52", 0x92}], 0x2, &(0x7f0000001c00)=[@dstopts={{0x28, 0x29, 0x37, {0x2b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0xf1}, @pad1]}}}], 0x28}}], 0x1, 0x4040001) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c80)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup(r6, &(0x7f0000001cc0)='syz1\x00', 0x200002, 0x0) r7 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000001d00)={0x0, r7}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001d40)) ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, &(0x7f0000001dc0)={0x5, 0x8}) 74.969068ms ago: executing program 7 (id=3373): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 7 (id=3374): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 64) fchdir(r0) (rerun: 64) acct(&(0x7f00000005c0)='./cgroup\x00') kernel console output (not intermixed with test programs): tch: netlink: Flow get message rejected, Key attribute missing. [ 218.868567][T14849] ALSA: mixer_oss: invalid OSS volume ';' [ 218.891187][ T10] usb 13-1: usb_control_msg returned -32 [ 218.893336][ T10] usbtmc 13-1:16.0: can't read capabilities [ 218.909557][T14854] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2638'. [ 219.266978][T14865] usbtmc 13-1:16.0: usb_control_msg returned -32 [ 219.281306][T14868] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2643'. [ 219.281966][ T2302] usb 13-1: USB disconnect, device number 6 [ 219.327076][T14873] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2644'. [ 219.355956][ T40] audit: type=1400 audit(1758082261.332:781): avc: denied { read } for pid=14874 comm="syz.7.2645" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 219.364091][ T40] audit: type=1400 audit(1758082261.332:782): avc: denied { open } for pid=14874 comm="syz.7.2645" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 219.366244][T14875] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.376594][ T40] audit: type=1400 audit(1758082261.351:783): avc: denied { map } for pid=14874 comm="syz.7.2645" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 219.847179][T14880] usb usb8: usbfs: process 14880 (syz.8.2647) did not claim interface 0 before use [ 219.945712][ T2302] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 220.021105][ T40] audit: type=1400 audit(1758082261.959:784): avc: denied { setattr } for pid=14887 comm="syz.8.2650" name="audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 220.116691][ T2302] usb 12-1: Using ep0 maxpacket: 8 [ 220.120420][ T2302] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 220.124801][ T2302] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 220.128322][ T2302] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 220.133732][ T2302] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.137651][ T2302] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.141503][ T2302] usb 12-1: Product: Ж [ 220.143285][ T2302] usb 12-1: Manufacturer: 늱욽溊ゅ뺂擏ꮩ檵ⰼ⊈햩䌬퍱酅㒸ࣚ␅荴ಶච诬楩╏Ⴀ쇴䛯縡㓧伂ᄰ䞤ᨍ疔ᧈ牟뵓ᱶ㛧옃鰈愣ڣ咸ᕮඌ᩶嗠奰윆⣲釘뒊ꓵ㰽 [ 220.151152][ T2302] usb 12-1: SerialNumber: ㄁ὅ썂౅ꆇ嬈䗥區㇑ꩉ౫鶧粎욦䅨ᰶ莊愾ṁ緣綛麛퇂びƀ玢۰醓⎣빈鞎焿ꯐ䅕䐖䜄㺉눪旙읷쇜營㹧멚㏙ﯪ瘻ᄕﾲ䤵︌㿘ӊ孩㽣 [ 220.402215][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2646'. [ 220.514902][T14912] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2656'. [ 220.918615][T11482] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 221.121768][T11482] usb 14-1: Using ep0 maxpacket: 8 [ 221.126544][T11482] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 221.129830][T11482] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.133089][T11482] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.136234][T11482] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.139308][T11482] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.145885][T11482] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 221.149032][T11482] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.381104][T11482] usb 14-1: GET_CAPABILITIES returned 0 [ 221.382862][T11482] usbtmc 14-1:16.0: can't read capabilities [ 221.597109][T11482] usb 14-1: USB disconnect, device number 3 [ 222.473200][T14923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.504740][T14923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=69 sclass=netlink_route_socket pid=14923 comm=syz.9.2660 [ 222.990460][ T2302] cdc_ncm 12-1:1.0: bind() failure [ 222.998806][T14944] overlayfs: failed to resolve './file1': -2 [ 223.000594][ T2302] cdc_ncm 12-1:1.1: CDC Union missing and no IAD found [ 223.016076][ T2302] cdc_ncm 12-1:1.1: bind() failure [ 223.021067][ T2302] usb 12-1: USB disconnect, device number 7 [ 223.091019][T14948] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2668'. [ 223.097123][T14948] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 223.216528][T14961] nbd: couldn't find a device at index 0 [ 223.275547][T14961] kvm: pic: non byte write [ 223.499689][T11474] hid (null): report_id 48470 is invalid [ 223.502425][T11474] hid (null): unknown global tag 0xd [ 223.504679][T11474] hid (null): unknown global tag 0xe [ 223.508153][T11474] hid (null): unknown global tag 0xd [ 223.510421][T11474] hid (null): invalid report_count -573388545 [ 223.513007][T11474] hid (null): global environment stack underflow [ 223.515787][T11474] hid (null): global environment stack underflow [ 223.522378][T11474] hid (null): unknown global tag 0xd [ 223.538100][T11474] hid-generic 0005:0002:0200.000B: unknown main item tag 0x0 [ 223.541431][T11474] hid-generic 0005:0002:0200.000B: unknown main item tag 0x7 [ 223.544590][T11474] hid-generic 0005:0002:0200.000B: report_id 48470 is invalid [ 223.547763][T11474] hid-generic 0005:0002:0200.000B: item 0 2 1 8 parsing failed [ 223.552230][T11474] hid-generic 0005:0002:0200.000B: probe with driver hid-generic failed with error -22 [ 224.016736][T14975] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2675'. [ 224.028785][T14975] mkiss: ax0: crc mode is auto. [ 224.095134][T14980] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.2677'. [ 224.170500][ T40] audit: type=1400 audit(1758082265.841:785): avc: denied { setopt } for pid=14981 comm="syz.7.2678" lport=51599 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 224.320091][T14994] loop4: detected capacity change from 0 to 2560 [ 224.328239][T14994] buffer_io_error: 11 callbacks suppressed [ 224.328256][T14994] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 224.334551][T14994] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 224.337240][T14994] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 224.341287][T14994] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 224.343917][T14994] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 224.346702][T14994] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 224.349291][T14994] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 224.352598][T14994] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 224.355639][T14994] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 224.358447][T14994] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 224.399910][T14996] openvswitch: netlink: IP tunnel dst address not specified [ 224.469362][T15001] netlink: 'syz.9.2687': attribute type 5 has an invalid length. [ 224.565435][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2691'. [ 224.643005][T15029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2697'. [ 224.656368][T15029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2697'. [ 224.966146][T15057] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2705'. [ 225.086104][T15065] binder: 15064:15065 ioctl c0306201 200000000040 returned -14 [ 225.193324][T15071] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 225.278084][ T5332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.284487][ T5332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.288070][ T5332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.292278][ T5332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.295764][ T5332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.397181][T15074] chnl_net:caif_netlink_parms(): no params data found [ 225.492950][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.525683][T15074] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.528179][T15074] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.531101][T15074] bridge_slave_0: entered allmulticast mode [ 225.534145][T15074] bridge_slave_0: entered promiscuous mode [ 225.538526][T15074] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.539060][ T40] audit: type=1400 audit(1758082267.122:786): avc: denied { write } for pid=15082 comm="syz.9.2711" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 225.540381][T15083] sg_write: data in/out 10438218/1 bytes for SCSI command 0x6b-- guessing data in; [ 225.540381][T15083] program syz.9.2711 not setting count and/or reply_len properly [ 225.540931][T15074] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.548662][ T40] audit: type=1400 audit(1758082267.122:787): avc: denied { open } for pid=15082 comm="syz.9.2711" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 225.553885][T15074] bridge_slave_1: entered allmulticast mode [ 225.567004][T15074] bridge_slave_1: entered promiscuous mode [ 225.602048][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.624336][T15074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.629061][T15074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.674524][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.683379][T15074] team0: Port device team_slave_0 added [ 225.689199][T15074] team0: Port device team_slave_1 added [ 225.692270][ T40] audit: type=1400 audit(1758082267.263:788): avc: denied { accept } for pid=15096 comm="syz.9.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 225.693473][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2715'. [ 225.717716][T15097] bridge0: entered promiscuous mode [ 225.720426][T15097] bridge0: port 1(macvlan3) entered blocking state [ 225.722963][T15097] bridge0: port 1(macvlan3) entered disabled state [ 225.725370][T15097] macvlan3: entered allmulticast mode [ 225.727675][T15097] bridge0: entered allmulticast mode [ 225.733816][T15097] macvlan3: left allmulticast mode [ 225.736246][T15097] bridge0: left allmulticast mode [ 225.741004][T15097] bridge0: left promiscuous mode [ 225.796094][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.806218][T15074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.808601][T15074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.816842][T15074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.821628][T15074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.823949][T15074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.832149][T15074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.836318][T15102] netlink: 'syz.9.2717': attribute type 4 has an invalid length. [ 225.839933][T15102] netlink: 17 bytes leftover after parsing attributes in process `syz.9.2717'. [ 225.876686][T15074] hsr_slave_0: entered promiscuous mode [ 225.879285][T15074] hsr_slave_1: entered promiscuous mode [ 225.881957][T15074] debugfs: 'hsr0' already exists in 'hsr' [ 225.884285][T15074] Cannot create hsr debugfs directory [ 225.981880][T15107] netlink: 'syz.7.2719': attribute type 21 has an invalid length. [ 225.984510][T15107] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2719'. [ 226.003176][ T68] bridge_slave_1: left allmulticast mode [ 226.005051][ T68] bridge_slave_1: left promiscuous mode [ 226.006985][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.012450][ T68] bridge_slave_0: left allmulticast mode [ 226.014896][ T68] bridge_slave_0: left promiscuous mode [ 226.017549][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.052378][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2721'. [ 226.403440][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.408407][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.413540][ T68] bond0 (unregistering): Released all slaves [ 226.716750][T15127] overlayfs: missing 'workdir' [ 226.803718][ T68] hsr_slave_0: left promiscuous mode [ 226.806448][ T68] hsr_slave_1: left promiscuous mode [ 226.808783][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.811861][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.814956][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.817999][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.859133][ T68] veth1_macvtap: left promiscuous mode [ 226.861509][ T68] veth0_macvtap: left promiscuous mode [ 226.864463][ T68] veth1_vlan: left promiscuous mode [ 226.866162][ T68] veth0_vlan: left promiscuous mode [ 227.123808][ T40] audit: type=1400 audit(1758082268.591:789): avc: denied { connect } for pid=15143 comm="syz.7.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.286491][T15151] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 227.290712][T15154] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2734'. [ 227.290929][T15151] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2734'. [ 227.496819][ T5332] Bluetooth: hci0: command tx timeout [ 227.720901][ T68] team0 (unregistering): Port device team_slave_1 removed [ 227.812978][ T68] team0 (unregistering): Port device team_slave_0 removed [ 228.535475][T15160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.540709][T15166] openvswitch: netlink: IP tunnel dst address not specified [ 228.591597][T15170] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2742'. [ 228.592611][ T40] audit: type=1400 audit(1758082269.966:790): avc: denied { read } for pid=15173 comm="syz.7.2744" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 228.594682][T15174] ata1.00: invalid cdb length 6 [ 228.605240][ T40] audit: type=1400 audit(1758082269.975:791): avc: denied { ioctl } for pid=15173 comm="syz.7.2744" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 228.613498][ T40] audit: type=1400 audit(1758082269.975:792): avc: denied { write } for pid=15173 comm="syz.7.2744" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 228.678169][ T40] audit: type=1400 audit(1758082270.050:793): avc: denied { name_bind } for pid=15176 comm="syz.7.2745" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 228.794019][T15074] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.808704][T15074] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 228.818190][T15074] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 228.824278][T15074] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.867913][T15074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.881068][T15074] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.890155][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.893096][ T6785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.901354][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.904369][ T6785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.918572][ T40] audit: type=1400 audit(1758082270.275:794): avc: denied { append } for pid=15201 comm="syz.8.2751" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 229.007945][T15209] usb usb8: usbfs: process 15209 (syz.8.2752) did not claim interface 0 before use [ 229.029542][T15074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.048512][T15074] veth0_vlan: entered promiscuous mode [ 229.054260][T15074] veth1_vlan: entered promiscuous mode [ 229.067320][T15074] veth0_macvtap: entered promiscuous mode [ 229.072555][T15074] veth1_macvtap: entered promiscuous mode [ 229.081037][T15074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.087315][T15074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.092594][ T6693] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.095421][ T6693] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.099671][ T6693] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.102491][ T6693] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.138573][ T6693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.141582][ T6693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.160419][ T6693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.163411][ T6693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.684113][T15218] FAULT_INJECTION: forcing a failure. [ 229.684113][T15218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.688655][T15218] CPU: 1 UID: 0 PID: 15218 Comm: syz.9.2755 Not tainted syzkaller #0 PREEMPT(full) [ 229.688671][T15218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.688678][T15218] Call Trace: [ 229.688682][T15218] [ 229.688686][T15218] dump_stack_lvl+0x16c/0x1f0 [ 229.688730][T15218] should_fail_ex+0x512/0x640 [ 229.688755][T15218] _copy_to_user+0x32/0xd0 [ 229.688772][T15218] simple_read_from_buffer+0xcb/0x170 [ 229.688786][T15218] proc_fail_nth_read+0x197/0x240 [ 229.688804][T15218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.688819][T15218] ? rw_verify_area+0xcf/0x6c0 [ 229.688836][T15218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.688849][T15218] vfs_read+0x1e4/0xcf0 [ 229.688861][T15218] ? __pfx___mutex_lock+0x10/0x10 [ 229.688883][T15218] ? __pfx_vfs_read+0x10/0x10 [ 229.688897][T15218] ? __fget_files+0x20e/0x3c0 [ 229.688913][T15218] ksys_read+0x12a/0x250 [ 229.688924][T15218] ? __pfx_ksys_read+0x10/0x10 [ 229.688935][T15218] ? fput+0x9b/0xd0 [ 229.688952][T15218] do_syscall_64+0xcd/0x4e0 [ 229.688967][T15218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.688979][T15218] RIP: 0033:0x7f0cd978d5bc [ 229.688988][T15218] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 229.688998][T15218] RSP: 002b:00007f0cda693030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.689009][T15218] RAX: ffffffffffffffda RBX: 00007f0cd99d5fa0 RCX: 00007f0cd978d5bc [ 229.689016][T15218] RDX: 000000000000000f RSI: 00007f0cda6930a0 RDI: 0000000000000004 [ 229.689023][T15218] RBP: 00007f0cda693090 R08: 0000000000000000 R09: 0000000000000000 [ 229.689029][T15218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.689036][T15218] R13: 00007f0cd99d6038 R14: 00007f0cd99d5fa0 R15: 00007ffe2c60c1d8 [ 229.689049][T15218] [ 229.706409][ T5332] Bluetooth: hci0: command tx timeout [ 229.845044][T15228] usb usb8: usbfs: process 15228 (syz.9.2758) did not claim interface 0 before use [ 229.896079][ T40] audit: type=1400 audit(1758082271.191:795): avc: denied { module_load } for pid=15229 comm="syz.8.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 229.896128][T15230] Invalid ELF header type: 0 != 1 [ 229.974928][ T40] audit: type=1400 audit(1758082271.266:796): avc: denied { getopt } for pid=15237 comm="syz.8.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 229.982753][ T6705] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.985825][ T6705] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.989430][ T6705] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.993043][ T6705] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.141404][T15245] usb usb8: usbfs: process 15245 (syz.3.2765) did not claim interface 0 before use [ 230.144985][T15245] FAULT_INJECTION: forcing a failure. [ 230.144985][T15245] name failslab, interval 1, probability 0, space 0, times 0 [ 230.149181][T15245] CPU: 3 UID: 0 PID: 15245 Comm: syz.3.2765 Not tainted syzkaller #0 PREEMPT(full) [ 230.149196][T15245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.149207][T15245] Call Trace: [ 230.149211][T15245] [ 230.149215][T15245] dump_stack_lvl+0x16c/0x1f0 [ 230.149233][T15245] should_fail_ex+0x512/0x640 [ 230.149248][T15245] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 230.149263][T15245] should_failslab+0xc2/0x120 [ 230.149276][T15245] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 230.149289][T15245] ? kstrdup_const+0x63/0x80 [ 230.149303][T15245] kstrdup+0x53/0x100 [ 230.149314][T15245] kstrdup_const+0x63/0x80 [ 230.149325][T15245] __kernfs_new_node+0x9b/0x8e0 [ 230.149342][T15245] ? __pfx___kernfs_new_node+0x10/0x10 [ 230.149361][T15245] ? find_held_lock+0x2b/0x80 [ 230.149375][T15245] ? kernfs_root+0xee/0x2a0 [ 230.149392][T15245] kernfs_new_node+0x13c/0x1e0 [ 230.149412][T15245] kernfs_create_link+0xcc/0x240 [ 230.149425][T15245] sysfs_do_create_link_sd+0x90/0x140 [ 230.149440][T15245] sysfs_create_link+0x61/0xc0 [ 230.149455][T15245] driver_sysfs_add+0x91/0x2d0 [ 230.149467][T15245] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 230.149481][T15245] device_bind_driver+0x16/0x70 [ 230.149495][T15245] usb_driver_claim_interface+0x228/0x400 [ 230.149514][T15245] claimintf+0x181/0x240 [ 230.149525][T15245] checkintf+0x161/0x1d0 [ 230.149536][T15245] parse_usbdevfs_streams+0x309/0x510 [ 230.149553][T15245] usbdev_ioctl+0x291f/0x4070 [ 230.149567][T15245] ? __pfx_usbdev_ioctl+0x10/0x10 [ 230.149582][T15245] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 230.149596][T15245] ? do_vfs_ioctl+0x128/0x14f0 [ 230.149614][T15245] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 230.149630][T15245] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 230.149652][T15245] ? hook_file_ioctl_common+0x145/0x410 [ 230.149667][T15245] ? selinux_file_ioctl+0x180/0x270 [ 230.149683][T15245] ? selinux_file_ioctl+0xb4/0x270 [ 230.149699][T15245] ? __pfx_usbdev_ioctl+0x10/0x10 [ 230.149712][T15245] __x64_sys_ioctl+0x18b/0x210 [ 230.149730][T15245] do_syscall_64+0xcd/0x4e0 [ 230.149746][T15245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.149757][T15245] RIP: 0033:0x7fd14238eba9 [ 230.149766][T15245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.149777][T15245] RSP: 002b:00007fd143148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.149787][T15245] RAX: ffffffffffffffda RBX: 00007fd1425d5fa0 RCX: 00007fd14238eba9 [ 230.149794][T15245] RDX: 0000200000000000 RSI: 000000008008551c RDI: 0000000000000003 [ 230.149800][T15245] RBP: 00007fd143148090 R08: 0000000000000000 R09: 0000000000000000 [ 230.149807][T15245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.149813][T15245] R13: 00007fd1425d6038 R14: 00007fd1425d5fa0 R15: 00007ffcfed8b518 [ 230.149826][T15245] [ 230.155469][T11473] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 230.212772][ T40] audit: type=1400 audit(1758082271.491:797): avc: denied { setopt } for pid=15248 comm="syz.3.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 230.390640][T11473] usb 14-1: Using ep0 maxpacket: 8 [ 230.390710][ T6057] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 230.400962][T11473] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 230.403616][T11473] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.406873][T11473] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.410341][T11473] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.415749][T11473] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.420171][T11473] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 230.425967][T11473] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.475060][T15270] usb usb8: usbfs: process 15270 (syz.3.2774) did not claim interface 0 before use [ 230.478542][T15270] FAULT_INJECTION: forcing a failure. [ 230.478542][T15270] name failslab, interval 1, probability 0, space 0, times 0 [ 230.482452][T15270] CPU: 1 UID: 0 PID: 15270 Comm: syz.3.2774 Not tainted syzkaller #0 PREEMPT(full) [ 230.482466][T15270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.482473][T15270] Call Trace: [ 230.482477][T15270] [ 230.482481][T15270] dump_stack_lvl+0x16c/0x1f0 [ 230.482499][T15270] should_fail_ex+0x512/0x640 [ 230.482513][T15270] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 230.482527][T15270] should_failslab+0xc2/0x120 [ 230.482540][T15270] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 230.482551][T15270] ? __kernfs_new_node+0xd2/0x8e0 [ 230.482568][T15270] __kernfs_new_node+0xd2/0x8e0 [ 230.482585][T15270] ? __pfx___kernfs_new_node+0x10/0x10 [ 230.482603][T15270] ? find_held_lock+0x2b/0x80 [ 230.482617][T15270] ? kernfs_root+0xee/0x2a0 [ 230.482635][T15270] kernfs_new_node+0x13c/0x1e0 [ 230.482654][T15270] kernfs_create_link+0xcc/0x240 [ 230.482668][T15270] sysfs_do_create_link_sd+0x90/0x140 [ 230.482684][T15270] sysfs_create_link+0x61/0xc0 [ 230.482698][T15270] driver_sysfs_add+0x91/0x2d0 [ 230.482711][T15270] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 230.482726][T15270] device_bind_driver+0x16/0x70 [ 230.482739][T15270] usb_driver_claim_interface+0x228/0x400 [ 230.482777][T15270] claimintf+0x181/0x240 [ 230.482791][T15270] checkintf+0x161/0x1d0 [ 230.482802][T15270] parse_usbdevfs_streams+0x309/0x510 [ 230.482819][T15270] usbdev_ioctl+0x291f/0x4070 [ 230.482833][T15270] ? __pfx_usbdev_ioctl+0x10/0x10 [ 230.482849][T15270] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 230.482863][T15270] ? do_vfs_ioctl+0x128/0x14f0 [ 230.482881][T15270] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 230.482898][T15270] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 230.482919][T15270] ? hook_file_ioctl_common+0x145/0x410 [ 230.482935][T15270] ? selinux_file_ioctl+0x180/0x270 [ 230.482950][T15270] ? selinux_file_ioctl+0xb4/0x270 [ 230.482967][T15270] ? __pfx_usbdev_ioctl+0x10/0x10 [ 230.482980][T15270] __x64_sys_ioctl+0x18b/0x210 [ 230.482997][T15270] do_syscall_64+0xcd/0x4e0 [ 230.483014][T15270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.483025][T15270] RIP: 0033:0x7fd14238eba9 [ 230.483034][T15270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.483045][T15270] RSP: 002b:00007fd143148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.483055][T15270] RAX: ffffffffffffffda RBX: 00007fd1425d5fa0 RCX: 00007fd14238eba9 [ 230.483063][T15270] RDX: 0000200000000000 RSI: 000000008008551c RDI: 0000000000000003 [ 230.483069][T15270] RBP: 00007fd143148090 R08: 0000000000000000 R09: 0000000000000000 [ 230.483075][T15270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.483082][T15270] R13: 00007fd1425d6038 R14: 00007fd1425d5fa0 R15: 00007ffcfed8b518 [ 230.483095][T15270] [ 230.593639][ T6057] usb 13-1: Using ep0 maxpacket: 8 [ 230.598588][ T6057] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 230.601494][ T6057] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.604634][ T6057] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.607777][ T6057] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.611383][ T6057] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.618097][ T6057] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 230.621081][ T6057] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.658520][T11473] usb 14-1: usb_control_msg returned -32 [ 230.660346][T11473] usbtmc 14-1:16.0: can't read capabilities [ 230.841245][ T6057] usb 13-1: usb_control_msg returned -32 [ 230.842656][T15243] usbtmc 14-1:16.0: INITIATE_ABORT_BULK_OUT returned 2 [ 230.843344][ T6057] usbtmc 13-1:16.0: can't read capabilities [ 230.852912][ T6057] usb 13-1: USB disconnect, device number 7 [ 231.033980][T15280] FAULT_INJECTION: forcing a failure. [ 231.033980][T15280] name failslab, interval 1, probability 0, space 0, times 0 [ 231.038092][T15280] CPU: 2 UID: 0 PID: 15280 Comm: syz.9.2761 Not tainted syzkaller #0 PREEMPT(full) [ 231.038113][T15280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 231.038128][T15280] Call Trace: [ 231.038134][T15280] [ 231.038141][T15280] dump_stack_lvl+0x16c/0x1f0 [ 231.038161][T15280] should_fail_ex+0x512/0x640 [ 231.038177][T15280] ? fs_reclaim_acquire+0xae/0x150 [ 231.038193][T15280] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 231.038210][T15280] should_failslab+0xc2/0x120 [ 231.038223][T15280] __kmalloc_noprof+0xd2/0x510 [ 231.038237][T15280] tomoyo_realpath_from_path+0xc2/0x6e0 [ 231.038255][T15280] ? tomoyo_profile+0x47/0x60 [ 231.038267][T15280] tomoyo_path_number_perm+0x245/0x580 [ 231.038281][T15280] ? tomoyo_path_number_perm+0x237/0x580 [ 231.038297][T15280] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 231.038312][T15280] ? find_held_lock+0x2b/0x80 [ 231.038337][T15280] ? find_held_lock+0x2b/0x80 [ 231.038350][T15280] ? hook_file_ioctl_common+0x145/0x410 [ 231.038365][T15280] ? __fget_files+0x20e/0x3c0 [ 231.038381][T15280] security_file_ioctl+0x9b/0x240 [ 231.038398][T15280] __x64_sys_ioctl+0xb7/0x210 [ 231.038416][T15280] do_syscall_64+0xcd/0x4e0 [ 231.038432][T15280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.038443][T15280] RIP: 0033:0x7f0cd978eba9 [ 231.038453][T15280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.038463][T15280] RSP: 002b:00007f0cda672038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.038474][T15280] RAX: ffffffffffffffda RBX: 00007f0cd99d6090 RCX: 00007f0cd978eba9 [ 231.038481][T15280] RDX: 0000000000000000 RSI: 0000000000005b03 RDI: 0000000000000006 [ 231.038487][T15280] RBP: 00007f0cda672090 R08: 0000000000000000 R09: 0000000000000000 [ 231.038493][T15280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.038500][T15280] R13: 00007f0cd99d6128 R14: 00007f0cd99d6090 R15: 00007ffe2c60c1d8 [ 231.038513][T15280] [ 231.038518][T15280] ERROR: Out of memory at tomoyo_realpath_from_path. [ 231.551878][T15295] usb usb8: usbfs: process 15295 (syz.8.2783) did not claim interface 0 before use [ 231.584269][ T5332] Bluetooth: hci2: unexpected event for opcode 0x040d [ 231.601971][T15290] __nla_validate_parse: 3 callbacks suppressed [ 231.601982][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2780'. [ 231.929878][ T5332] Bluetooth: hci0: command tx timeout [ 232.014047][T15305] ALSA: mixer_oss: invalid OSS volume '' [ 232.954103][T15339] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2794'. [ 232.957570][T15339] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2794'. [ 233.037247][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2797'. [ 233.040244][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2797'. [ 233.337537][T15372] overlay: ./file0 is not a directory [ 233.341169][ T61] usb 13-1: new full-speed USB device number 8 using dummy_hcd [ 233.354583][ T40] audit: type=1400 audit(1758082274.428:798): avc: denied { listen } for pid=15373 comm="syz.3.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 233.360561][ T40] audit: type=1400 audit(1758082274.428:799): avc: denied { accept } for pid=15373 comm="syz.3.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 233.509006][T15353] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 233.516009][T15353] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 233.518178][T15353] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 233.520640][T15353] vhci_hcd vhci_hcd.0: Device attached [ 233.524687][T15376] vhci_hcd: cannot find the pending unlink 4294966785 [ 233.800876][T11473] usb 54-1: SetAddress Request (2) to port 0 [ 233.803240][T11473] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd [ 234.153613][ T5332] Bluetooth: hci0: command tx timeout [ 234.183220][T15380] raw_sendmsg: syz.7.2806 forgot to set AF_INET. Fix it! [ 234.211114][T15382] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2807'. [ 234.299676][T15388] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 234.301772][T15388] syzkaller0: linktype set to 778 [ 234.414688][T15394] QAT: Device 9 not found [ 234.417105][T15393] QAT: Device 9 not found [ 234.418824][T15394] QAT: Invalid ioctl -1006595045 [ 234.457721][T15397] tipc: Enabling of bearer rejected, failed to enable media [ 234.460862][T15398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=15398 comm=syz.3.2814 [ 234.463828][T15401] binder: 15399:15401 ioctl c0306201 200000000640 returned -22 [ 234.498788][ T40] audit: type=1400 audit(1758082275.494:800): avc: denied { lock } for pid=15402 comm="syz.7.2815" path="socket:[57621]" dev="sockfs" ino=57621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 234.515180][T15404] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 234.517335][T15404] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 234.520565][T15404] vhci_hcd vhci_hcd.0: Device attached [ 234.524778][T15405] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2816'. [ 234.528339][T15405] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 234.742732][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2818'. [ 234.774665][T11474] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 234.777933][T11482] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 234.872294][T15418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2821'. [ 234.878228][T15418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=15418 comm=syz.3.2821 [ 234.933964][T11474] usb 12-1: Using ep0 maxpacket: 16 [ 234.938965][T11474] usb 12-1: config index 0 descriptor too short (expected 8192, got 36) [ 234.941601][T15419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2821'. [ 234.942182][T11474] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.942199][T11474] usb 12-1: config 0 has no interfaces? [ 234.942224][T11474] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 234.945310][T15419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=15419 comm=syz.3.2821 [ 234.948953][T11474] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.964207][T11474] usb 12-1: config 0 descriptor?? [ 235.184000][T15406] vhci_hcd: connection closed [ 235.184437][ T6704] vhci_hcd: stop threads [ 235.184872][T11474] usb 12-1: USB disconnect, device number 8 [ 235.186334][ T6704] vhci_hcd: release socket [ 235.194846][ T6704] vhci_hcd: disconnect device [ 235.254957][T11482] vhci_hcd: vhci_device speed not set [ 235.815385][T15430] dlm: no locking on control device [ 235.817730][T15429] ALSA: mixer_oss: invalid OSS volume ';' [ 235.846739][T15436] Bluetooth: MGMT ver 1.23 [ 235.864796][T15437] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 235.876705][ T5332] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 235.879407][ T5332] Bluetooth: hci2: Injecting HCI hardware error event [ 235.883836][ T5332] Bluetooth: hci2: hardware error 0x00 [ 235.893405][ T40] audit: type=1400 audit(1758082276.794:801): avc: denied { setopt } for pid=15438 comm="syz.3.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 235.900863][ T40] audit: type=1400 audit(1758082276.794:802): avc: denied { setattr } for pid=15438 comm="syz.3.2828" name="NFC_LLCP" dev="sockfs" ino=60474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 236.287581][T15376] vhci_hcd: connection reset by peer [ 236.292137][ T61] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 236.292210][ T6704] vhci_hcd: stop threads [ 236.294594][ T61] usb 13-1: can't read configurations, error -71 [ 236.295905][ T6704] vhci_hcd: release socket [ 236.295954][ T6704] vhci_hcd: disconnect device [ 236.325532][T15449] can: request_module (can-proto-5) failed. [ 236.370493][T15452] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 236.386301][ T40] audit: type=1400 audit(1758082277.262:803): avc: denied { link } for pid=15451 comm="syz.8.2832" name="file1" dev="overlay" ino=71827831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.393319][ T40] audit: type=1400 audit(1758082277.262:804): avc: denied { write open } for pid=15451 comm="syz.8.2832" path=2F202864656C6574656429 dev="tmpfs" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.400889][ T40] audit: type=1400 audit(1758082277.262:805): avc: denied { setattr } for pid=15451 comm="syz.8.2832" name="#874" dev="tmpfs" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.408079][ T40] audit: type=1400 audit(1758082277.271:806): avc: denied { remount } for pid=15451 comm="syz.8.2832" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 236.417848][ T40] audit: type=1400 audit(1758082277.290:807): avc: denied { unlink } for pid=13548 comm="syz-executor" name="file0" dev="tmpfs" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.463960][T15280] usbtmc 14-1:16.0: usb_control_msg returned -110 [ 236.476212][T11482] usb 14-1: USB disconnect, device number 4 [ 236.540115][T15462] netlink: 'syz.8.2836': attribute type 12 has an invalid length. [ 236.543871][T15462] netlink: 'syz.8.2836': attribute type 12 has an invalid length. [ 236.668350][T15473] fuse: Unknown parameter '0x0000000000000004Ddi +qxTٿ^d}J@v"7 '@`%M' [ 236.674998][T15473] sctp: [Deprecated]: syz.8.2839 (pid 15473) Use of int in maxseg socket option. [ 236.674998][T15473] Use struct sctp_assoc_value instead [ 236.721759][T15475] netlink: 'syz.8.2840': attribute type 21 has an invalid length. [ 236.724503][T15475] netlink: 'syz.8.2840': attribute type 6 has an invalid length. [ 236.822646][ T40] audit: type=1400 audit(1758082277.664:808): avc: denied { accept } for pid=15482 comm="syz.8.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 236.937371][T15496] usb usb8: usbfs: process 15496 (syz.3.2849) did not claim interface 0 before use [ 236.980191][T15501] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 236.984751][T15501] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15501 comm=syz.3.2851 [ 237.075922][T15520] __nla_validate_parse: 7 callbacks suppressed [ 237.075938][T15520] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2858'. [ 237.116718][T15528] netlink: 10 bytes leftover after parsing attributes in process `syz.8.2860'. [ 237.119788][T15529] netlink: 10 bytes leftover after parsing attributes in process `syz.8.2860'. [ 237.719756][T15542] kvm: kvm [15540]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 238.086656][ T40] audit: type=1400 audit(1758082278.852:809): avc: denied { audit_write } for pid=15549 comm="syz.9.2866" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 238.087883][ T5332] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 238.188433][T15559] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 238.247502][T15562] netlink: 'syz.8.2870': attribute type 13 has an invalid length. [ 238.250450][T15562] netlink: 'syz.8.2870': attribute type 17 has an invalid length. [ 238.253028][T15562] lo: left promiscuous mode [ 238.254502][T15562] lo: left allmulticast mode [ 238.257477][T15562] tunl0: left promiscuous mode [ 238.259107][T15562] tunl0: left allmulticast mode [ 238.261512][T15562] gre0: left promiscuous mode [ 238.263022][T15562] gre0: left allmulticast mode [ 238.266951][T15562] gretap0: left promiscuous mode [ 238.268666][T15562] gretap0: left allmulticast mode [ 238.277482][T15562] erspan0: left promiscuous mode [ 238.279324][T15562] erspan0: left allmulticast mode [ 238.288967][T15562] ip_vti0: left promiscuous mode [ 238.290624][T15562] ip_vti0: left allmulticast mode [ 238.294545][T15562] ip6_vti0: left promiscuous mode [ 238.296191][T15562] ip6_vti0: left allmulticast mode [ 238.298596][T15562] sit0: left promiscuous mode [ 238.300118][T15562] sit0: left allmulticast mode [ 238.305549][T15562] ip6tnl0: left promiscuous mode [ 238.307192][T15562] ip6tnl0: left allmulticast mode [ 238.310234][T15562] ip6gre0: left promiscuous mode [ 238.312131][T15562] ip6gre0: left allmulticast mode [ 238.315035][T15562] syz_tun: left promiscuous mode [ 238.316696][T15562] syz_tun: left allmulticast mode [ 238.323364][T15562] ip6gretap0: left promiscuous mode [ 238.325243][T15562] ip6gretap0: left allmulticast mode [ 238.331080][T15562] bridge0: left promiscuous mode [ 238.332724][T15562] bridge0: left allmulticast mode [ 238.335248][T15562] vcan0: left promiscuous mode [ 238.336889][T15562] vcan0: left allmulticast mode [ 238.339431][T15562] team0: left promiscuous mode [ 238.340996][T15562] bond0: left promiscuous mode [ 238.342631][T15562] team0: left allmulticast mode [ 238.345257][T15562] bond0: left allmulticast mode [ 238.347213][T15562] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.349887][T15562] dummy0: left promiscuous mode [ 238.351450][T15562] dummy0: left allmulticast mode [ 238.357522][T15562] nlmon0: left promiscuous mode [ 238.359548][T15562] nlmon0: left allmulticast mode [ 238.362584][T15562] caif0: left promiscuous mode [ 238.364353][T15562] caif0: left allmulticast mode [ 238.366142][T15562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.381450][T15565] sp0: Synchronizing with TNC [ 238.388239][T15568] sp0: Found TNC [ 238.696806][T15580] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2875'. [ 238.822919][ T40] audit: type=1400 audit(1758082279.535:810): avc: denied { mounton } for pid=15584 comm="syz.3.2877" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 238.826287][T15585] Can't find a SQUASHFS superblock on nullb0 [ 239.100341][T15592] netlink: 'syz.8.2879': attribute type 1 has an invalid length. [ 239.110033][T15593] bond4 (unregistering): Released all slaves [ 239.134508][T15592] netlink: 'syz.8.2879': attribute type 1 has an invalid length. [ 239.137211][T15592] netlink: 'syz.8.2879': attribute type 1 has an invalid length. [ 239.139594][T15592] netlink: 'syz.8.2879': attribute type 1 has an invalid length. [ 239.159479][T15597] policy can only be matched on NF_INET_PRE_ROUTING [ 239.159491][T15597] unable to load match [ 239.196719][T15593] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.200492][T11473] usb 54-1: device descriptor read/8, error -110 [ 239.203731][T15593] bond4: (slave bond5): making interface the new active one [ 239.206627][T15593] bond4: (slave bond5): Enslaving as an active interface with an up link [ 239.227680][T15593] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.232023][T15593] bond4: (slave bond6): Enslaving as a backup interface with an up link [ 239.246216][T15593] 8021q: adding VLAN 0 to HW filter on device bond7 [ 239.250008][T15593] bond4: (slave bond7): Enslaving as a backup interface with an up link [ 239.270217][T15593] 8021q: adding VLAN 0 to HW filter on device bond8 [ 239.274737][T15593] bond4: (slave bond8): Enslaving as a backup interface with an up link [ 239.291656][T15606] nfs4: Bad value for 'source' [ 239.291896][T15593] 8021q: adding VLAN 0 to HW filter on device bond9 [ 239.297119][T15593] bond4: (slave bond9): Enslaving as a backup interface with an up link [ 239.310261][T15593] 8021q: adding VLAN 0 to HW filter on device bond10 [ 239.313208][T15593] bond4: (slave bond10): Enslaving as a backup interface with an up link [ 239.324453][T15593] 8021q: adding VLAN 0 to HW filter on device bond11 [ 239.329794][T15593] bond4: (slave bond11): Enslaving as a backup interface with an up link [ 239.352371][T15593] 8021q: adding VLAN 0 to HW filter on device bond12 [ 239.355445][T15593] bond4: (slave bond12): Enslaving as a backup interface with an up link [ 239.383364][T15593] 8021q: adding VLAN 0 to HW filter on device bond13 [ 239.386734][T15593] bond4: (slave bond13): Enslaving as a backup interface with an up link [ 239.393332][T15619] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2885'. [ 239.400706][T15593] 8021q: adding VLAN 0 to HW filter on device bond14 [ 239.406000][T15593] bond4: (slave bond14): Enslaving as a backup interface with an up link [ 239.417617][T15593] 8021q: adding VLAN 0 to HW filter on device bond15 [ 239.420596][T15593] bond4: (slave bond15): Enslaving as a backup interface with an up link [ 239.432631][T15593] 8021q: adding VLAN 0 to HW filter on device bond16 [ 239.435985][T15593] bond4: (slave bond16): Enslaving as a backup interface with an up link [ 239.447711][T15593] 8021q: adding VLAN 0 to HW filter on device bond17 [ 239.450707][T15593] bond4: (slave bond17): Enslaving as a backup interface with an up link [ 239.464241][T15593] 8021q: adding VLAN 0 to HW filter on device bond18 [ 239.468180][T15593] bond4: (slave bond18): Enslaving as a backup interface with an up link [ 239.498350][T15593] 8021q: adding VLAN 0 to HW filter on device bond19 [ 239.502560][T15593] bond4: (slave bond19): Enslaving as a backup interface with an up link [ 239.514323][T15593] 8021q: adding VLAN 0 to HW filter on device bond20 [ 239.517557][T15593] bond4: (slave bond20): Enslaving as a backup interface with an up link [ 239.530333][T15593] 8021q: adding VLAN 0 to HW filter on device bond21 [ 239.534793][T15593] bond4: (slave bond21): Enslaving as a backup interface with an up link [ 239.548298][T15593] 8021q: adding VLAN 0 to HW filter on device bond22 [ 239.551380][T15593] bond4: (slave bond22): Enslaving as a backup interface with an up link [ 239.572624][T15593] 8021q: adding VLAN 0 to HW filter on device bond23 [ 239.578920][T15593] bond4: (slave bond23): Enslaving as a backup interface with an up link [ 239.592050][T15593] 8021q: adding VLAN 0 to HW filter on device bond24 [ 239.595243][T15593] bond4: (slave bond24): Enslaving as a backup interface with an up link [ 239.608994][T15593] 8021q: adding VLAN 0 to HW filter on device bond25 [ 239.611973][T15593] bond4: (slave bond25): Enslaving as a backup interface with an up link [ 239.624998][T15593] 8021q: adding VLAN 0 to HW filter on device bond26 [ 239.628168][T11473] usb usb54-port1: attempt power cycle [ 239.628404][T15593] bond4: (slave bond26): Enslaving as a backup interface with an up link [ 239.641358][T15593] 8021q: adding VLAN 0 to HW filter on device bond27 [ 239.645952][T15593] bond4: (slave bond27): Enslaving as a backup interface with an up link [ 239.659191][T15593] 8021q: adding VLAN 0 to HW filter on device bond28 [ 239.662207][T15593] bond4: (slave bond28): Enslaving as a backup interface with an up link [ 239.686890][T15593] 8021q: adding VLAN 0 to HW filter on device bond29 [ 239.689892][T15593] bond4: (slave bond29): Enslaving as a backup interface with an up link [ 239.702016][T15593] 8021q: adding VLAN 0 to HW filter on device bond30 [ 239.705065][T15593] bond4: (slave bond30): Enslaving as a backup interface with an up link [ 239.716814][T15593] 8021q: adding VLAN 0 to HW filter on device bond31 [ 239.720173][T15593] bond4: (slave bond31): Enslaving as a backup interface with an up link [ 239.731638][T15593] 8021q: adding VLAN 0 to HW filter on device bond32 [ 239.735631][T15593] bond4: (slave bond32): Enslaving as a backup interface with an up link [ 239.747811][T15676] binder: 15675:15676 ioctl c0306201 2000000004c0 returned -22 [ 239.748316][T15593] 8021q: adding VLAN 0 to HW filter on device bond33 [ 239.753285][T15593] bond4: (slave bond33): Enslaving as a backup interface with an up link [ 239.770216][T15593] 8021q: adding VLAN 0 to HW filter on device bond34 [ 239.773227][T15593] bond4: (slave bond34): Enslaving as a backup interface with an up link [ 239.776985][T15679] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2896'. [ 239.791627][T15593] 8021q: adding VLAN 0 to HW filter on device bond35 [ 239.800077][T15593] bond4: (slave bond35): Enslaving as a backup interface with an up link [ 239.822086][T15593] 8021q: adding VLAN 0 to HW filter on device bond36 [ 239.825247][T15593] bond4: (slave bond36): Enslaving as a backup interface with an up link [ 240.140421][T15710] XFS (nullb0): Invalid superblock magic number [ 240.236916][T11473] usb usb54-port1: unable to enumerate USB device [ 240.304139][ T5332] Bluetooth: hci1: unexpected event for opcode 0x2043 [ 240.337857][T15722] blkio.reset_stats is deprecated [ 240.632037][ T61] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 240.813812][ T61] usb 12-1: Using ep0 maxpacket: 8 [ 240.816811][ T61] usb 12-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config [ 240.820098][ T61] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.823166][ T61] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.827375][ T61] usb 12-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 240.831522][ T61] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 240.834329][ T61] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.839986][ T61] usbtmc 12-1:16.0: bulk endpoints not found [ 241.064524][T15751] ieee802154 phy1 wpan1: encryption failed: -22 [ 241.067513][T15751] binder: 15750:15751 ioctl c0306201 200000000080 returned -22 [ 241.075842][T15753] SELinux: failed to load policy [ 241.424199][ T5332] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 241.427210][ T5332] Bluetooth: hci0: Injecting HCI hardware error event [ 241.430500][ T5332] Bluetooth: hci0: hardware error 0x00 [ 241.498210][T11474] usb 13-1: new full-speed USB device number 10 using dummy_hcd [ 241.681093][T11474] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.684029][T11474] usb 13-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 241.687446][T11474] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.690761][T11474] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 241.695810][T11474] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.698925][T11474] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.701857][T11474] usb 13-1: Product: syz [ 241.703505][T11474] usb 13-1: Manufacturer: syz [ 241.710178][T11474] cdc_wdm 13-1:1.0: skipping garbage [ 241.712765][T11474] cdc_wdm 13-1:1.0: skipping garbage [ 241.718865][T11474] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 241.720769][T11474] cdc_wdm 13-1:1.0: Unknown control protocol [ 241.927871][ T6140] usb 13-1: USB disconnect, device number 10 [ 242.151313][T15774] gtp0: entered promiscuous mode [ 242.180183][T15777] xt_time: unknown flags 0xf4 [ 242.510564][T15799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2932'. [ 242.601200][T15802] binder: 15800:15802 ioctl c0306201 200000000640 returned -22 [ 242.688879][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 242.688896][ T40] audit: type=1400 audit(1758082283.155:814): avc: denied { write } for pid=15811 comm="syz.9.2936" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 242.694364][T15814] validate_nla: 30 callbacks suppressed [ 242.694375][T15814] netlink: 'syz.8.2937': attribute type 4 has an invalid length. [ 242.812233][T15828] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.2942'. [ 243.297707][T15854] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 243.300321][T15854] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.303808][T15854] vhci_hcd vhci_hcd.0: Device attached [ 243.308682][T15855] usbip_core: unknown command [ 243.310784][T15855] vhci_hcd: unknown pdu 0 [ 243.312355][T15855] usbip_core: unknown command [ 243.314425][ T6705] vhci_hcd: stop threads [ 243.316254][ T6705] vhci_hcd: release socket [ 243.317444][ T2302] libceph: connect (1)[c::]:6789 error -101 [ 243.319948][ T6705] vhci_hcd: disconnect device [ 243.320582][ T2302] libceph: mon0 (1)[c::]:6789 connect error [ 243.587649][ T6140] usb 12-1: USB disconnect, device number 9 [ 243.604543][ T2302] libceph: connect (1)[c::]:6789 error -101 [ 243.605677][T15866] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2950'. [ 243.609108][ T2302] libceph: mon0 (1)[c::]:6789 connect error [ 243.657597][ T5332] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 243.760944][T15874] overlayfs: missing 'lowerdir' [ 244.019605][T15885] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2956'. [ 244.096152][T15888] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 244.099126][T15888] block device autoloading is deprecated and will be removed. [ 244.149935][ T2302] libceph: connect (1)[c::]:6789 error -101 [ 244.151995][ T2302] libceph: mon0 (1)[c::]:6789 connect error [ 244.722960][T15854] ceph: No mds server is up or the cluster is laggy [ 244.766308][T15892] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2958'. [ 245.025254][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2961'. [ 245.061639][T15918] netlink: 'syz.9.2966': attribute type 21 has an invalid length. [ 245.065006][T15918] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2966'. [ 245.108179][T15923] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2969'. [ 245.135777][T15926] program syz.3.2970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.157665][T15926] ntfs3(sr0): Primary boot signature is not NTFS. [ 245.160397][T15926] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 245.168049][T15928] netlink: 'syz.9.2968': attribute type 1 has an invalid length. [ 245.185403][T15928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.199296][T15928] bond1: (slave erspan1): making interface the new active one [ 245.203217][T15928] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 245.210382][T15931] netlink: 'syz.3.2971': attribute type 1 has an invalid length. [ 245.212075][T15932] netlink: 'syz.9.2968': attribute type 1 has an invalid length. [ 245.213476][T15931] netlink: 'syz.3.2971': attribute type 1 has an invalid length. [ 245.213492][T15931] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2971'. [ 245.213986][T15931] openvswitch: netlink: Tunnel attr 0 has unexpected len 11 expected 8 [ 245.228428][T15931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2971'. [ 245.283534][ T40] audit: type=1400 audit(1758084863.590:815): avc: denied { listen } for pid=15939 comm="syz.3.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.345653][T15938] bond2: entered allmulticast mode [ 245.347736][T15938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.430494][T15950] macvtap1: entered promiscuous mode [ 245.433397][T15950] team0: Device macvtap1 is already an upper device of the team interface [ 245.756405][T15959] netlink: 'syz.9.2980': attribute type 2 has an invalid length. [ 246.116311][T11474] usb 13-1: new low-speed USB device number 11 using dummy_hcd [ 246.298079][T11474] usb 13-1: Invalid ep0 maxpacket: 64 [ 246.436978][T11474] usb 13-1: new low-speed USB device number 12 using dummy_hcd [ 246.597430][T11474] usb 13-1: Invalid ep0 maxpacket: 64 [ 246.597491][ T6140] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 246.599400][T11474] usb usb13-port1: attempt power cycle [ 246.646651][T15986] afs: Unknown parameter 'dynv/net/tun' [ 246.783060][ T6140] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.786251][ T6140] usb 14-1: config 0 has no interfaces? [ 246.789923][ T6140] usb 14-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 246.792763][ T6140] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.795302][ T6140] usb 14-1: Product: syz [ 246.796656][ T6140] usb 14-1: Manufacturer: syz [ 246.798212][ T6140] usb 14-1: SerialNumber: syz [ 246.803161][ T6140] usb 14-1: config 0 descriptor?? [ 246.890207][T16001] ip6erspan0: entered promiscuous mode [ 246.919545][ T40] audit: type=1400 audit(1758084865.114:816): avc: denied { write } for pid=16002 comm="syz.3.2995" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.971765][T11474] usb 13-1: new low-speed USB device number 13 using dummy_hcd [ 246.993791][T11474] usb 13-1: Invalid ep0 maxpacket: 64 [ 247.074129][ T2302] usb 14-1: USB disconnect, device number 5 [ 247.131887][T11474] usb 13-1: new low-speed USB device number 14 using dummy_hcd [ 247.154095][T11474] usb 13-1: Invalid ep0 maxpacket: 64 [ 247.156718][T11474] usb usb13-port1: unable to enumerate USB device [ 247.815411][T16034] sp0: Synchronizing with TNC [ 247.883613][T16033] [U] ` [ 247.895789][T16036] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 248.021033][T16050] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 248.026082][T16051] nbd_handle_cmd: 2 callbacks suppressed [ 248.026095][T16051] block nbd9: Attempted send on invalid socket [ 248.027407][T16050] netlink: 'syz.9.3008': attribute type 16 has an invalid length. [ 248.028255][T16051] blk_print_req_error: 2 callbacks suppressed [ 248.028264][T16051] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.030517][T16050] __nla_validate_parse: 1 callbacks suppressed [ 248.030525][T16050] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.3008'. [ 248.033152][T16051] exFAT-fs (nbd9): unable to read boot sector [ 248.044698][T16051] exFAT-fs (nbd9): failed to read boot sector [ 248.046615][T16051] exFAT-fs (nbd9): failed to recognize exfat type [ 248.121399][ T40] audit: type=1400 audit(1758084866.237:817): avc: denied { name_bind 0x1000000 } for pid=16061 comm="syz.9.3012" path="socket:[58206]" dev="sockfs" ino=58206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.186816][ T40] audit: type=1400 audit(1758084866.302:818): avc: denied { getopt } for pid=16070 comm="syz.9.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 248.253081][T16084] netlink: 'syz.9.3019': attribute type 10 has an invalid length. [ 248.253633][T16073] loop6: detected capacity change from 0 to 2560 [ 248.259515][T11114] buffer_io_error: 310 callbacks suppressed [ 248.259523][T11114] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.262198][T16084] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 248.263960][T11114] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.271316][T11114] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.274064][T11114] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.276752][T11114] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.279376][T11114] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.285153][T11114] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.289147][T11114] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.292338][T11114] ldm_validate_partition_table(): Disk read failed. [ 248.295000][T11114] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.298547][T11114] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.302089][T11114] Dev loop6: unable to read RDB block 0 [ 248.305988][T11114] loop6: unable to read partition table [ 248.312353][T16073] ldm_validate_partition_table(): Disk read failed. [ 248.315403][T16073] Dev loop6: unable to read RDB block 0 [ 248.318174][T16073] loop6: unable to read partition table [ 248.320289][T16073] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 248.331927][ T5381] ldm_validate_partition_table(): Disk read failed. [ 248.334317][ T5381] Dev loop6: unable to read RDB block 0 [ 248.336406][ T5381] loop6: unable to read partition table [ 248.367619][T16097] fuse: Bad value for 'user_id' [ 248.369218][T16097] fuse: Bad value for 'user_id' [ 248.371343][T16097] overlayfs: failed to resolve './file0/file0': -2 [ 248.387170][T16099] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:65534 [ 248.446346][ T6693] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 248.984172][T16124] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3031'. [ 249.081360][T16126] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3032'. [ 249.082190][T16131] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 249.088133][T16131] qnx6: wrong signature (magic) in superblock #1. [ 249.091681][T16131] qnx6: unable to read the first superblock [ 249.118694][T16126] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3032'. [ 249.123192][T16126] nbd: device at index 64 is going down [ 249.151777][T16139] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3035'. [ 249.194618][T14058] udevd[14058]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 249.204060][T11114] udevd[11114]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 249.304063][T16157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.360678][T16163] loop2: detected capacity change from 0 to 7 [ 249.365886][T16164] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3045'. [ 249.367688][T16163] Dev loop2: unable to read RDB block 7 [ 249.369699][T16108] ceph: No mds server is up or the cluster is laggy [ 249.370668][T16163] loop2: AHDI p1 p2 p3 [ 249.372970][T16166] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3046'. [ 249.374066][T16163] loop2: partition table partially beyond EOD, [ 249.376987][T16166] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3046'. [ 249.381182][T16163] truncated [ 249.383714][T16163] loop2: p1 start 1601398130 is beyond EOD, truncated [ 249.385959][T16163] loop2: p2 start 1702059890 is beyond EOD, truncated [ 249.519455][T16173] netlink: 'syz.8.3046': attribute type 7 has an invalid length. [ 250.323321][T16170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.326062][T16170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 250.329086][T16170] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 250.341569][T16170] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 250.380368][T16196] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 250.383750][T16196] qnx6: wrong signature (magic) in superblock #1. [ 250.385721][T16196] qnx6: unable to read the first superblock [ 250.430430][T16200] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 250.518325][T16166] syz.8.3046: vmalloc error: size 136314880, failed to allocated page array size 266240, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 250.526172][T16166] CPU: 3 UID: 0 PID: 16166 Comm: syz.8.3046 Not tainted syzkaller #0 PREEMPT(full) [ 250.526193][T16166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.526204][T16166] Call Trace: [ 250.526211][T16166] [ 250.526217][T16166] dump_stack_lvl+0x16c/0x1f0 [ 250.526244][T16166] warn_alloc+0x248/0x3a0 [ 250.526265][T16166] ? __pfx_warn_alloc+0x10/0x10 [ 250.526291][T16166] ? hash_netport4_resize+0x1d8/0x1c50 [ 250.526310][T16166] ? __vmalloc_node_noprof+0xad/0xf0 [ 250.526339][T16166] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 250.526372][T16166] ? hash_netport4_resize+0x1d8/0x1c50 [ 250.526396][T16166] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 250.526424][T16166] ? ___kmalloc_large_node+0xed/0x160 [ 250.526452][T16166] __kvmalloc_node_noprof+0x30a/0x620 [ 250.526470][T16166] ? hash_netport4_resize+0x1d8/0x1c50 [ 250.526486][T16166] ? __kmalloc_noprof+0x242/0x510 [ 250.526503][T16166] ? hash_netport4_resize+0x1d8/0x1c50 [ 250.526523][T16166] ? hash_netport4_resize+0x1d8/0x1c50 [ 250.526539][T16166] hash_netport4_resize+0x1d8/0x1c50 [ 250.526556][T16166] ? __pfx_hash_netport4_add+0x10/0x10 [ 250.526595][T16166] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 250.526620][T16166] ? __pfx___mutex_lock+0x10/0x10 [ 250.526653][T16166] ? __pfx_hash_netport4_resize+0x10/0x10 [ 250.526676][T16166] call_ad.constprop.0+0x36d/0x940 [ 250.526705][T16166] ? __pfx_hash_netport4_resize+0x10/0x10 [ 250.526725][T16166] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 250.526751][T16166] ? __pfx___nla_validate_parse+0x10/0x10 [ 250.526789][T16166] ? __nla_parse+0x40/0x60 [ 250.526817][T16166] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 250.526840][T16166] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 250.526861][T16166] ? call_rcu_tasks_generic+0x402/0x920 [ 250.526907][T16166] ? find_held_lock+0x2b/0x80 [ 250.526936][T16166] nfnetlink_rcv_msg+0x9fc/0x1200 [ 250.526962][T16166] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 250.526983][T16166] ? __lock_acquire+0x62e/0x1ce0 [ 250.527033][T16166] ? avc_has_perm_noaudit+0x149/0x3b0 [ 250.527060][T16166] netlink_rcv_skb+0x158/0x420 [ 250.527084][T16166] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 250.527101][T16166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.527135][T16166] ? ns_capable+0xd7/0x110 [ 250.527160][T16166] nfnetlink_rcv+0x1b3/0x430 [ 250.527177][T16166] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 250.527192][T16166] ? netlink_deliver_tap+0x1ae/0xd30 [ 250.527217][T16166] netlink_unicast+0x5a7/0x870 [ 250.527241][T16166] ? __pfx_netlink_unicast+0x10/0x10 [ 250.527262][T16166] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 250.527289][T16166] netlink_sendmsg+0x8d1/0xdd0 [ 250.527317][T16166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.527349][T16166] ____sys_sendmsg+0xa95/0xc70 [ 250.527374][T16166] ? copy_msghdr_from_user+0x10a/0x160 [ 250.527394][T16166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.527435][T16166] ___sys_sendmsg+0x134/0x1d0 [ 250.527460][T16166] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.527512][T16166] __sys_sendmsg+0x16d/0x220 [ 250.527538][T16166] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.527559][T16166] ? __x64_sys_futex+0x1e0/0x4c0 [ 250.527589][T16166] do_syscall_64+0xcd/0x4e0 [ 250.527613][T16166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.527628][T16166] RIP: 0033:0x7f5005f8eba9 [ 250.527641][T16166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.527658][T16166] RSP: 002b:00007f5006e3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.527672][T16166] RAX: ffffffffffffffda RBX: 00007f50061d5fa0 RCX: 00007f5005f8eba9 [ 250.527682][T16166] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 250.527691][T16166] RBP: 00007f5006011e19 R08: 0000000000000000 R09: 0000000000000000 [ 250.527699][T16166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.527708][T16166] R13: 00007f50061d6038 R14: 00007f50061d5fa0 R15: 00007ffc4d674608 [ 250.527729][T16166] [ 250.527734][T16166] Mem-Info: [ 250.561881][T16221] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3064'. [ 250.562249][T16166] active_anon:23232 inactive_anon:6 isolated_anon:0 [ 250.562249][T16166] active_file:16100 inactive_file:4162 isolated_file:0 [ 250.562249][T16166] unevictable:18150 dirty:47 writeback:0 [ 250.562249][T16166] slab_reclaimable:9096 slab_unreclaimable:101202 [ 250.562249][T16166] mapped:25617 shmem:14370 pagetables:1249 [ 250.562249][T16166] sec_pagetables:321 bounce:0 [ 250.562249][T16166] kernel_misc_reclaimable:0 [ 250.562249][T16166] free:400965 free_pcp:12507 free_cma:0 [ 250.687158][T16166] Node 0 active_anon:104544kB inactive_anon:24kB active_file:64008kB inactive_file:16512kB unevictable:46556kB isolated(anon):0kB isolated(file):0kB mapped:114456kB dirty:188kB writeback:0kB shmem:65312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:17808kB pagetables:4756kB sec_pagetables:1276kB all_unreclaimable? yes Balloon:0kB [ 250.697415][T16166] Node 1 active_anon:192kB inactive_anon:0kB active_file:392kB inactive_file:136kB unevictable:26044kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:0kB writeback:0kB shmem:3572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:260kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB [ 250.707126][T16166] Node 0 DMA free:6100kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:2064kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.716689][T16166] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 250.718762][T16166] Node 0 DMA32 free:129148kB boost:10240kB min:37756kB low:44632kB high:51508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104492kB inactive_anon:24kB active_file:64008kB inactive_file:16512kB unevictable:44492kB writepending:188kB present:2080628kB managed:1263424kB mlocked:0kB bounce:0kB free_pcp:4640kB local_pcp:0kB free_cma:0kB [ 250.725381][T16229] netlink: 'syz.3.3067': attribute type 8 has an invalid length. [ 250.731735][T16166] lowmem_reserve[]: 0 0 0 0 0 [ 250.736141][T16166] Node 1 Normal free:1499932kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:192kB inactive_anon:0kB active_file:392kB inactive_file:136kB unevictable:26044kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.745913][T16166] lowmem_reserve[]: 0 0 0 0 0 [ 250.747498][T16166] Node 0 DMA: 19*4kB (U) 7*8kB (U) 11*16kB (UE) 7*32kB (U) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6100kB [ 250.752397][T16166] Node 0 DMA32: 7*4kB (UME) 758*8kB (ME) 114*16kB (UME) 637*32kB (UME) 286*64kB (UME) 211*128kB (UME) 99*256kB (UM) 31*512kB (UM) 11*1024kB (U) 0*2048kB 0*4096kB = 126092kB [ 250.758537][T16166] Node 1 Normal: 119*4kB (UME) 119*8kB (UME) 127*16kB (UME) 193*32kB (UME) 98*64kB (UME) 50*128kB (UME) 26*256kB (UM) 25*512kB (UME) 14*1024kB (UM) 11*2048kB (UM) 347*4096kB (UM) = 1499940kB [ 250.764725][T16166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.768067][T16166] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.771600][T16166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.779688][T16166] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.783522][T16166] 55319 total pagecache pages [ 250.785563][T16166] 0 pages in swap cache [ 250.787357][T16166] Free swap = 124996kB [ 250.789587][T16166] Total swap = 124996kB [ 250.791344][T16166] 1048443 pages RAM [ 250.792936][T16166] 0 pages HighMem/MovableOnly [ 250.794904][T16166] 283274 pages reserved [ 250.796671][T16166] 0 pages cma reserved [ 250.928354][T16256] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 251.036889][ T40] audit: type=1400 audit(1758084868.968:819): avc: denied { append } for pid=16263 comm="syz.7.3077" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 251.127874][ T40] audit: type=1400 audit(1758084869.052:820): avc: denied { read } for pid=16269 comm="syz.7.3078" path="socket:[61777]" dev="sockfs" ino=61777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 251.505919][ T40] audit: type=1400 audit(1758084869.408:821): avc: denied { module_load } for pid=16276 comm="syz.9.3080" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 251.548579][ T40] audit: type=1400 audit(1758084869.445:822): avc: denied { accept } for pid=16281 comm="syz.9.3081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 251.686111][ T5332] Bluetooth: hci1: command 0x0c1a tx timeout [ 251.801381][T16306] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3087'. [ 252.051414][T16326] block nbd9: Attempted send on invalid socket [ 252.054385][T16326] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 252.062954][T16326] EXT4-fs (nbd9): unable to read superblock [ 252.153566][ T40] audit: type=1400 audit(1758084870.006:823): avc: denied { ioctl } for pid=16329 comm="syz.9.3094" path="socket:[63868]" dev="sockfs" ino=63868 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 252.217806][T16335] fuse: Bad value for 'group_id' [ 252.219430][T16335] fuse: Bad value for 'group_id' [ 252.545538][ T5332] Bluetooth: hci3: command 0x0419 tx timeout [ 252.793797][T16342] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 252.805962][T16342] cramfs: wrong magic [ 252.933155][ T40] audit: type=1400 audit(1758084870.736:824): avc: denied { unmount } for pid=15074 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 253.049313][T16354] overlayfs: missing 'lowerdir' [ 253.065428][T16354] qnx4: no qnx4 filesystem (no root dir). [ 253.072089][T16354] netlink: 'syz.3.3103': attribute type 30 has an invalid length. [ 253.143688][T16357] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 253.336110][ T6704] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.341016][ T6704] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.345338][ T6704] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.350701][ T6704] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.453074][T16406] netlink: 'syz.7.3118': attribute type 1 has an invalid length. [ 253.464230][T16408] nbd: must specify at least one socket [ 253.524626][ T40] audit: type=1400 audit(1758084871.288:825): avc: denied { read } for pid=16413 comm="syz.9.3122" path="socket:[62849]" dev="sockfs" ino=62849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 253.546720][T16415] __nla_validate_parse: 6 callbacks suppressed [ 253.546734][T16415] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3120'. [ 253.551257][T16415] openvswitch: netlink: Flow key attr not present in new flow. [ 254.765453][ T5332] Bluetooth: hci3: command 0x0419 tx timeout [ 255.351000][T16425] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 255.354353][ T2302] IPVS: starting estimator thread 0... [ 255.449350][T16427] IPVS: using max 47 ests per chain, 112800 per kthread [ 255.453634][T16429] CIFS mount error: No usable UNC path provided in device string! [ 255.453634][T16429] [ 255.456974][T16429] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 255.481448][T16431] openvswitch: netlink: IP tunnel TTL not specified. [ 255.655966][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3128'. [ 255.659130][T16438] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3128'. [ 255.763974][ T40] audit: type=1400 audit(1758084873.393:826): avc: denied { setattr } for pid=16444 comm="syz.8.3131" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.970123][T16458] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 256.597009][T16467] No source specified [ 256.598702][T16467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3139'. [ 256.686658][T16475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3139'. [ 256.749929][T16480] kAFS: No cell specified [ 256.848153][ T40] audit: type=1400 audit(1758084874.403:827): avc: denied { create } for pid=16491 comm="syz.3.3148" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 256.869923][T16494] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3144'. [ 256.934079][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3149'. [ 256.939050][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3149'. [ 256.990826][ T5332] Bluetooth: hci3: command 0x0419 tx timeout [ 257.065231][T16504] (syz.9.3152,16504,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 257.068604][T16504] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 257.089242][T16502] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 257.111506][T16510] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 257.113766][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3154'. [ 257.124341][T16512] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 257.370740][ T40] audit: type=1326 audit(1758084874.889:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16536 comm="syz.3.3161" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd14238eba9 code=0x0 [ 258.228046][T16543] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.261825][T16548] netlink: 'syz.8.3163': attribute type 4 has an invalid length. [ 258.270529][T16548] netlink: 'syz.8.3163': attribute type 4 has an invalid length. [ 258.308152][T16550] binder: 16549:16550 ioctl c018620c 200000000240 returned -22 [ 258.489020][ T6693] Bluetooth: (null): Invalid header checksum [ 258.491140][ T6693] Bluetooth: (null): Invalid header checksum [ 258.581817][ T2302] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 258.608842][ T6705] Bluetooth: (null): Invalid header checksum [ 258.731560][ T6693] Bluetooth: (null): Invalid header checksum [ 258.743452][ T2302] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.747882][ T2302] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 258.751661][ T2302] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.755577][ T2302] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.762084][T16552] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 258.768178][ T2302] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 258.849499][ T1250] Bluetooth: (null): Invalid header checksum [ 258.967000][ T6693] Bluetooth: (null): Invalid header checksum [ 259.084557][ T6701] Bluetooth: (null): Invalid header checksum [ 259.655995][ T2302] usb 13-1: USB disconnect, device number 15 [ 259.683811][T16562] sock: sock_set_timeout: `syz.9.3169' (pid 16562) tries to set negative timeout [ 259.722235][T16577] netlink: 'syz.9.3172': attribute type 6 has an invalid length. [ 259.725175][T16577] netlink: 'syz.9.3172': attribute type 6 has an invalid length. [ 259.736657][ T40] audit: type=1400 audit(1758084877.097:829): avc: denied { unlink } for pid=16576 comm="syz.9.3172" name="file0" dev="9p" ino=71827923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 259.760719][ T40] audit: type=1400 audit(1758084877.125:830): avc: denied { getopt } for pid=16584 comm="syz.8.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 259.760809][T16585] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3174'. [ 259.920240][T16602] cgroup2: Unknown parameter 'mvPR' [ 260.010024][ T40] audit: type=1400 audit(1758084877.359:831): avc: denied { ioctl } for pid=16606 comm="syz.8.3181" path="socket:[62024]" dev="sockfs" ino=62024 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 260.010395][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3181'. [ 260.045926][T16611] batman_adv: batadv0: Adding interface: dummy0 [ 260.048644][T16611] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.056695][T16611] batman_adv: batadv0: Interface activated: dummy0 [ 260.064563][T16613] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (288 ns). Using initial count to start timer. [ 260.066687][T16611] batadv0: mtu less than device minimum [ 260.073748][T16611] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 260.077503][T16611] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 260.081240][T16611] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 260.084976][T16611] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 260.088587][T16611] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 260.092357][T16611] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 260.096036][T16611] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 260.099814][T16611] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 260.139303][T16617] netlink: 124 bytes leftover after parsing attributes in process `syz.8.3184'. [ 260.183830][T16622] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 260.187135][T16623] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 260.305813][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3189'. [ 260.362253][ T40] audit: type=1804 audit(1758084877.686:832): pid=16628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.3189" name="/newroot/252/file0" dev="tmpfs" ino=1372 res=1 errno=0 [ 260.370373][ T40] audit: type=1800 audit(1758084877.686:833): pid=16628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3189" name="file0" dev="tmpfs" ino=1372 res=0 errno=0 [ 260.414271][ T5971] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.417913][ T5971] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.421795][ T61] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 260.422710][ T5971] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.427641][ T5971] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.430228][ T5971] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.467374][ C0] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 260.470622][ C0] sr 2:0:0:0: [sr0] tag#0 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 260.475991][ T40] audit: type=1400 audit(1758084877.798:834): avc: denied { watch_with_perm } for pid=16635 comm="syz.9.3192" path="/233/bus" dev="tmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 260.591879][ T61] usb 13-1: Using ep0 maxpacket: 8 [ 260.595488][ T61] usb 13-1: config 0 interface 0 has no altsetting 0 [ 260.597662][ T61] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 260.600548][ T61] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.604475][ T61] usb 13-1: config 0 descriptor?? [ 261.040251][ T61] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 261.255404][T16619] loop2: detected capacity change from 0 to 7 [ 261.258432][T16619] Dev loop2: unable to read RDB block 7 [ 261.260183][T16619] loop2: AHDI p1 p2 [ 261.261406][T16619] loop2: partition table partially beyond EOD, truncated [ 261.263698][T16619] loop2: p1 start 1835360114 is beyond EOD, truncated [ 261.267773][ T2302] usb 13-1: USB disconnect, device number 16 [ 261.359602][T16636] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.361831][T16636] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.364856][T16636] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.369639][T16636] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 261.373061][T16636] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 261.420066][T16646] random: crng reseeded on system resumption [ 261.426112][T16646] Restarting kernel threads ... [ 261.429468][T16646] Done restarting kernel threads. [ 261.456521][T16631] chnl_net:caif_netlink_parms(): no params data found [ 261.474745][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3196'. [ 261.498354][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3196'. [ 261.508298][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3196'. [ 261.513059][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3196'. [ 261.520871][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3196'. [ 261.524677][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3196'. [ 261.583357][T16631] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.586859][T16631] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.589458][T16631] bridge_slave_0: entered allmulticast mode [ 261.593099][T16631] bridge_slave_0: entered promiscuous mode [ 261.597177][T16631] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.599533][T16631] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.601894][T16631] bridge_slave_1: entered allmulticast mode [ 261.604548][T16631] bridge_slave_1: entered promiscuous mode [ 261.654331][T16631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.663461][T16631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.695669][T16658] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 261.705231][T16631] team0: Port device team_slave_0 added [ 261.709698][T16631] team0: Port device team_slave_1 added [ 261.761744][T16631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.764720][T16631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.777769][T16631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.782533][T16631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.784690][T16631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.792720][T16631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.854197][T16631] hsr_slave_0: entered promiscuous mode [ 261.857023][T16631] hsr_slave_1: entered promiscuous mode [ 261.859169][T16631] debugfs: 'hsr0' already exists in 'hsr' [ 261.860962][T16631] Cannot create hsr debugfs directory [ 261.959530][ T40] audit: type=1400 audit(1758084879.183:835): avc: denied { connect } for pid=16668 comm="syz.8.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 262.018709][T16671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16671 comm=syz.8.3203 [ 262.018739][T16672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16672 comm=syz.8.3203 [ 262.024088][ T61] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 262.196184][ T61] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 262.198996][ T61] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 262.202157][ T61] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 262.205001][ T61] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 262.208570][ T61] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 262.213229][ T61] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.216168][ T61] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.219787][ T61] usb 14-1: Product: syz [ 262.221819][ T61] usb 14-1: Manufacturer: syz [ 262.229770][ T61] cdc_wdm 14-1:1.0: skipping garbage [ 262.231583][ T61] cdc_wdm 14-1:1.0: skipping garbage [ 262.234333][ T61] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 262.236344][ T61] cdc_wdm 14-1:1.0: Unknown control protocol [ 262.328276][T16684] Bluetooth: MGMT ver 1.23 [ 262.329735][T16684] Bluetooth: hci0: unsupported parameter 2459 [ 262.331682][T16684] Bluetooth: hci0: unsupported parameter 2459 [ 262.362948][T16631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.379669][T16631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.383734][T16631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.390901][T16631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.407017][T16631] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.409344][T16631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.411756][T16631] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.414305][T16631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.449610][T16631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.465199][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.469439][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.491136][T16631] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.503196][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.505861][ T6701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.514044][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.517252][ T6705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.651538][T16631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.679728][T16631] veth0_vlan: entered promiscuous mode [ 262.684860][T16631] veth1_vlan: entered promiscuous mode [ 262.699421][T16631] veth0_macvtap: entered promiscuous mode [ 262.704574][T16631] veth1_macvtap: entered promiscuous mode [ 262.714307][T16631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.720777][T16631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.726287][ T6705] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.729154][ T6705] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.732095][ T5332] Bluetooth: hci1: command 0x0c1a tx timeout [ 262.735671][ T6705] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.738441][ T6705] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.779841][ T6701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.782372][ T6701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.797845][ T6693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.800543][ T6693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.847873][T16698] veth0_to_team: entered promiscuous mode [ 262.957581][ T40] audit: type=1400 audit(1758084880.118:836): avc: denied { execute } for pid=16697 comm="syz.1.3188" path="/selinux/avc/cache_stats" dev="selinuxfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 262.958173][T16699] CUSE: unknown device info "" [ 262.967263][T16699] CUSE: zero length info key specified [ 263.137888][T16712] batadv1: entered promiscuous mode [ 263.548048][T16739] overlay: Unknown parameter '/' [ 263.552073][T16739] overlayfs: missing 'lowerdir' [ 263.569014][T16741] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 263.574124][ T5332] Bluetooth: hci0: command 0x041b tx timeout [ 263.576159][ T5971] Bluetooth: hci3: command 0x0419 tx timeout [ 263.595067][ T40] audit: type=1107 audit(1758084880.707:837): pid=16742 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 263.620975][ T5971] Bluetooth: hci0: Malformed LE Event: 0x1b [ 263.638147][T16748] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 263.664726][ T40] audit: type=1400 audit(1758084880.782:838): avc: denied { relabelto } for pid=16747 comm="syz.8.3224" name="cgroup.procs" dev="cgroup" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 263.738759][T16753] input: syz1 as /devices/virtual/input/input36 [ 263.750130][T16755] fuse: Unknown parameter '000000000000000000350x0000000000000006' [ 264.086900][T16791] program syz.1.3231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.165615][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.168535][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.170890][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.175067][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.177524][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.179891][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.182252][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.185118][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.187458][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.189756][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.192093][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.194619][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.197063][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.199749][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.202129][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.204578][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.207283][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.209694][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.212444][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.217984][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.220785][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.223718][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.226814][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.234966][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.237419][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.239956][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.242424][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.244718][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.246967][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.249349][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.251606][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.254043][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.256443][T16799] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.312848][T16803] netlink: 'syz.1.3234': attribute type 6 has an invalid length. [ 264.664669][ T61] usb 13-1: new low-speed USB device number 17 using dummy_hcd [ 264.778205][T16821] block nbd7: Attempted send on invalid socket [ 264.780363][T16821] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.783498][T16821] (syz.7.3240,16821,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 264.786342][T16821] (syz.7.3240,16821,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 264.792383][T16821] (syz.7.3240,16821,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 264.795311][T16821] (syz.7.3240,16821,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 264.824942][ T61] usb 13-1: Invalid ep0 maxpacket: 64 [ 264.974638][ T61] usb 13-1: new low-speed USB device number 18 using dummy_hcd [ 265.070199][ T6057] usb 14-1: USB disconnect, device number 6 [ 265.156556][ T61] usb 13-1: Invalid ep0 maxpacket: 64 [ 265.166034][ T61] usb usb13-port1: attempt power cycle [ 265.369231][T16870] __nla_validate_parse: 40 callbacks suppressed [ 265.369247][T16870] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3255'. [ 265.373115][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.379562][T16870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21008 sclass=netlink_route_socket pid=16870 comm=syz.9.3255 [ 265.404825][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 265.408043][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 265.410916][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 265.414295][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 265.417816][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 265.420772][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 265.424134][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 265.427247][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 265.430453][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 265.506487][T16883] tipc: Enabled bearer , priority 0 [ 265.510710][T16883] syzkaller0: entered promiscuous mode [ 265.512432][T16883] syzkaller0: entered allmulticast mode [ 265.530777][ T61] usb 13-1: new low-speed USB device number 19 using dummy_hcd [ 265.533020][T16883] tipc: Resetting bearer [ 265.540450][T16882] tipc: Resetting bearer [ 265.552614][ T61] usb 13-1: Invalid ep0 maxpacket: 64 [ 265.556421][T16882] tipc: Disabling bearer [ 265.701823][ T61] usb 13-1: new low-speed USB device number 20 using dummy_hcd [ 265.735885][ T61] usb 13-1: Invalid ep0 maxpacket: 64 [ 265.738493][ T61] usb usb13-port1: unable to enumerate USB device [ 265.740889][T16897] unknown channel width for channel at 909000KHz? [ 265.792389][ C0] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 265.796069][ C0] sr 2:0:0:0: [sr0] tag#1 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 265.798218][ T5971] Bluetooth: hci0: command 0x041b tx timeout [ 265.848901][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 265.848917][ T40] audit: type=1400 audit(1758084882.821:841): avc: denied { audit_control } for pid=16901 comm="syz.9.3267" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 265.950398][T16915] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 266.162475][ T6057] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 266.269422][T16933] binder: 16932:16933 ioctl 4018620d 0 returned -22 [ 266.321820][ T6057] usb 14-1: Using ep0 maxpacket: 8 [ 266.325519][ T6057] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 266.328903][ T6057] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.333211][ T6057] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.336551][ T6057] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.340480][ T6057] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.346063][ T6057] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 266.349670][ T6057] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.574369][ T6057] usb 14-1: usb_control_msg returned -32 [ 266.576310][ T6057] usbtmc 14-1:16.0: can't read capabilities [ 266.961966][T16941] usbtmc 14-1:16.0: INITIATE_ABORT_BULK_OUT returned 2 [ 267.088408][T16943] dummy0: entered allmulticast mode [ 267.245732][ T6009] usb 14-1: USB disconnect, device number 7 [ 267.410921][T16957] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 267.482555][ T5971] Bluetooth: hci1: unexpected cc 0x2003 length: 5 < 9 [ 267.490912][ T5971] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 267.542215][T16969] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 267.651371][ T6705] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xd0 [ 267.666472][ T40] audit: type=1400 audit(1758084884.514:842): avc: denied { getopt } for pid=16985 comm="syz.1.3291" lport=60900 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 267.677707][T16986] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=16986 comm=syz.1.3291 [ 267.685840][T16988] ubi: mtd0 is already attached to ubi31 [ 267.694295][ T40] audit: type=1400 audit(1758084884.552:843): avc: denied { read } for pid=16987 comm="syz.8.3292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 267.724970][T16993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.728641][T16993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.755371][T16996] warn_alloc: 1 callbacks suppressed [ 267.755387][T16996] syz.8.3295: vmalloc error: size 2764800, failed to allocated page array size 5400, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 267.774126][T16996] CPU: 3 UID: 0 PID: 16996 Comm: syz.8.3295 Not tainted syzkaller #0 PREEMPT(full) [ 267.774149][T16996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.774158][T16996] Call Trace: [ 267.774164][T16996] [ 267.774170][T16996] dump_stack_lvl+0x16c/0x1f0 [ 267.774226][T16996] warn_alloc+0x248/0x3a0 [ 267.774256][T16996] ? __pfx_warn_alloc+0x10/0x10 [ 267.774281][T16996] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 267.774305][T16996] ? __vmalloc_node_noprof+0xad/0xf0 [ 267.774332][T16996] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 267.774362][T16996] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 267.774392][T16996] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 267.774445][T16996] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 267.774469][T16996] vmalloc_user_noprof+0x9e/0xe0 [ 267.774491][T16996] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 267.774516][T16996] vb2_vmalloc_alloc+0x135/0x3f0 [ 267.774541][T16996] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 267.774566][T16996] __vb2_queue_alloc+0x8c9/0x1280 [ 267.774600][T16996] vb2_core_reqbufs+0xa90/0xfe0 [ 267.774629][T16996] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 267.774653][T16996] ? __pfx___might_resched+0x10/0x10 [ 267.774679][T16996] ? __mutex_lock+0x1c5/0x1060 [ 267.774707][T16996] ? avc_has_extended_perms+0x47c/0x1090 [ 267.774744][T16996] vb2_reqbufs+0x1a3/0x1f0 [ 267.774764][T16996] ? __pfx_vb2_reqbufs+0x10/0x10 [ 267.774783][T16996] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 267.774801][T16996] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 267.774822][T16996] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 267.774846][T16996] v4l_reqbufs+0x152/0x1e0 [ 267.774865][T16996] __video_do_ioctl+0xb40/0xfc0 [ 267.774892][T16996] ? __might_fault+0xe3/0x190 [ 267.774909][T16996] ? __pfx___video_do_ioctl+0x10/0x10 [ 267.774936][T16996] video_usercopy+0x4d0/0x1720 [ 267.774958][T16996] ? __pfx___video_do_ioctl+0x10/0x10 [ 267.774976][T16996] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 267.775001][T16996] ? __pfx_video_usercopy+0x10/0x10 [ 267.775036][T16996] v4l2_ioctl+0x1bd/0x250 [ 267.775053][T16996] ? __pfx_v4l2_ioctl+0x10/0x10 [ 267.775072][T16996] __x64_sys_ioctl+0x18b/0x210 [ 267.775099][T16996] do_syscall_64+0xcd/0x4e0 [ 267.775122][T16996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.775138][T16996] RIP: 0033:0x7f5005f8eba9 [ 267.775152][T16996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.775167][T16996] RSP: 002b:00007f5006e3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.775182][T16996] RAX: ffffffffffffffda RBX: 00007f50061d5fa0 RCX: 00007f5005f8eba9 [ 267.775193][T16996] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 267.775203][T16996] RBP: 00007f5006011e19 R08: 0000000000000000 R09: 0000000000000000 [ 267.775214][T16996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.775223][T16996] R13: 00007f50061d6038 R14: 00007f50061d5fa0 R15: 00007ffc4d674608 [ 267.775247][T16996] [ 267.775282][T16996] Mem-Info: [ 267.835061][T17005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.836525][T16996] active_anon:31809 inactive_anon:6 isolated_anon:0 [ 267.836525][T16996] active_file:17201 inactive_file:4167 isolated_file:0 [ 267.836525][T16996] unevictable:18150 dirty:105 writeback:0 [ 267.836525][T16996] slab_reclaimable:9192 slab_unreclaimable:98753 [ 267.836525][T16996] mapped:25619 shmem:22898 pagetables:1246 [ 267.836525][T16996] sec_pagetables:322 bounce:0 [ 267.836525][T16996] kernel_misc_reclaimable:0 [ 267.836525][T16996] free:397071 free_pcp:9394 free_cma:0 [ 267.912280][T16996] Node 0 active_anon:127044kB inactive_anon:24kB active_file:68412kB inactive_file:16532kB unevictable:46556kB isolated(anon):0kB isolated(file):0kB mapped:102348kB dirty:416kB writeback:0kB shmem:88020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:18160kB pagetables:4724kB sec_pagetables:1280kB all_unreclaimable? no Balloon:0kB [ 267.925911][T16996] Node 1 active_anon:192kB inactive_anon:0kB active_file:392kB inactive_file:136kB unevictable:26044kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:4kB writeback:0kB shmem:3572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:260kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB [ 267.937199][T16996] Node 0 DMA free:6100kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:2064kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.942814][ T1250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.947938][T16996] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 267.951913][ T1250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.952863][T16996] Node 0 DMA32 free:95932kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:127044kB inactive_anon:24kB active_file:68412kB inactive_file:16532kB unevictable:44492kB writepending:416kB present:2080628kB managed:1263424kB mlocked:0kB bounce:0kB free_pcp:29276kB local_pcp:1972kB free_cma:0kB [ 267.966994][T16996] lowmem_reserve[]: 0 0 0 0 0 [ 267.968678][T16996] Node 1 Normal free:1485748kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:192kB inactive_anon:0kB active_file:392kB inactive_file:136kB unevictable:26044kB writepending:4kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:8516kB local_pcp:0kB free_cma:0kB [ 267.981203][T16996] lowmem_reserve[]: 0 0 0 0 0 [ 267.982886][T16996] Node 0 DMA: 19*4kB (U) 7*8kB (U) 11*16kB (UE) 7*32kB (U) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6100kB [ 267.988750][T16996] Node 0 DMA32: 2*4kB (UE) 74*8kB (E) 42*16kB (UME) 85*32kB (UME) 54*64kB (UME) 76*128kB (UME) 83*256kB (UM) 42*512kB (UM) 15*1024kB (UM) 4*2048kB (UM) 3*4096kB (UM) = 95768kB [ 267.989419][ T838] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 267.995216][T16996] Node 1 Normal: 115*4kB (UME) 119*8kB (UME) 127*16kB (UME) 192*32kB (UME) 95*64kB (UME) 47*128kB (UME) 23*256kB (UM) 22*512kB (UME) 17*1024kB (UM) 10*2048kB (UM) 344*4096kB (UM) = 1485748kB [ 267.995318][T16996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 267.995328][T16996] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 267.995338][T16996] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.012381][T17013] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 268.014770][T16996] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.021369][T16996] 60645 total pagecache pages [ 268.021428][ T5971] Bluetooth: hci0: command 0x041b tx timeout [ 268.023059][T16996] 0 pages in swap cache [ 268.023066][T16996] Free swap = 124996kB [ 268.028924][T16996] Total swap = 124996kB [ 268.030254][T16996] 1048443 pages RAM [ 268.031699][T16996] 0 pages HighMem/MovableOnly [ 268.033480][T16996] 283274 pages reserved [ 268.034903][T16996] 0 pages cma reserved [ 268.271019][ T53] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 268.288071][ T40] audit: type=1326 audit(1758084885.094:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17032 comm="syz.8.3306" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5005f8eba9 code=0x0 [ 268.438450][ T53] usb 14-1: Using ep0 maxpacket: 16 [ 268.444199][ T53] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.449836][ T53] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.454023][ T53] usb 14-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 268.457859][ T53] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.464116][ T53] usb 14-1: config 0 descriptor?? [ 268.681663][T17057] net_ratelimit: 11 callbacks suppressed [ 268.681679][T17057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.812479][ T838] usb 6-1: device descriptor read/64, error -71 [ 268.919988][ T40] audit: type=1400 audit(1758084885.702:845): avc: denied { shutdown } for pid=17012 comm="syz.9.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 268.993063][ T40] audit: type=1400 audit(1758084885.759:846): avc: denied { execute } for pid=17012 comm="syz.9.3299" path="/dev/audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 269.069219][ T838] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 269.235911][T17076] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 269.240636][ T838] usb 6-1: Using ep0 maxpacket: 8 [ 269.242053][T17076] SELinux: failed to load policy [ 269.244317][ T838] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.248458][ T838] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 269.254089][ T838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 269.258475][ T838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 269.262637][ T838] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 269.265634][ T838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.275418][ T838] hub 6-1:1.0: bad descriptor, ignoring hub [ 269.277465][ T838] hub 6-1:1.0: probe with driver hub failed with error -5 [ 269.280009][ T838] cdc_wdm 6-1:1.0: skipping garbage [ 269.282113][ T838] cdc_wdm 6-1:1.0: skipping garbage [ 269.286596][ T838] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 269.288948][ T838] cdc_wdm 6-1:1.0: Unknown control protocol [ 269.756986][ T40] audit: type=1400 audit(1758084886.479:847): avc: denied { ioctl } for pid=17046 comm="syz.1.3310" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3373 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 269.860307][ T61] usb 6-1: USB disconnect, device number 4 [ 269.939719][T17105] pty pty35: ldisc open failed (-12), clearing slot 35 [ 270.245019][ T5971] Bluetooth: hci0: command 0x041b tx timeout [ 270.672811][ T61] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 270.844195][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 270.848870][ T61] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 270.852182][ T61] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.856400][ T61] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.860298][ T61] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.864310][ T61] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.869917][ T61] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 270.873820][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.106065][ T61] usb 6-1: usb_control_msg returned -32 [ 271.108343][ T61] usbtmc 6-1:16.0: can't read capabilities [ 271.246333][ T53] usbhid 14-1:0.0: can't add hid device: -71 [ 271.248821][ T53] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 271.252465][ T53] usb 14-1: USB disconnect, device number 8 [ 271.262012][T17124] __nla_validate_parse: 64 callbacks suppressed [ 271.262022][T17124] netlink: 344 bytes leftover after parsing attributes in process `syz.9.3332'. [ 271.330690][ T40] audit: type=1400 audit(1758084887.947:848): avc: denied { accept } for pid=17128 comm="syz.9.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 271.482236][T17144] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_OUT returned 2 [ 271.587267][T17150] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 271.696958][T11473] usb 6-1: USB disconnect, device number 5 [ 271.731119][T11474] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 271.793292][T17154] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3344'. [ 271.892874][T11474] usb 14-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 271.896138][T11474] usb 14-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 271.899008][T11474] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 271.901891][T11474] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.129869][ T53] usb 14-1: USB disconnect, device number 9 [ 272.262928][T17156] netlink: 'syz.1.3345': attribute type 13 has an invalid length. [ 272.269096][T17156] ALSA: mixer_oss: invalid OSS volume '00000000000000000005' [ 272.386054][T17162] bond0: entered promiscuous mode [ 272.388293][T17162] bond_slave_0: entered promiscuous mode [ 272.390852][T17162] bond_slave_1: entered promiscuous mode [ 272.395651][T17162] batadv0: entered promiscuous mode [ 272.399505][T17162] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 272.407781][T17162] bond0: left promiscuous mode [ 272.409952][T17162] bond_slave_0: left promiscuous mode [ 272.412459][T17162] bond_slave_1: left promiscuous mode [ 272.415675][T17162] batadv0: left promiscuous mode [ 272.446685][T17164] netlink: 'syz.1.3347': attribute type 10 has an invalid length. [ 272.449863][T17164] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 272.453689][T17164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.480212][ T5971] Bluetooth: hci0: command 0x041b tx timeout [ 272.534265][T17170] netlink: 360 bytes leftover after parsing attributes in process `syz.1.3350'. [ 272.609577][ T40] audit: type=1400 audit(1758084889.145:849): avc: granted { setsecparam } for pid=17178 comm="syz.7.3354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 272.693825][T17190] xt_l2tp: unknown flags: 51 [ 272.720739][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3358'. [ 272.933286][T17203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.040887][T17210] netlink: 'syz.9.3364': attribute type 1 has an invalid length. [ 273.047245][T17210] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3364'. [ 273.087382][T17203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.164563][T17203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.252296][T17203] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.340931][ T6785] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.350853][ T6705] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.358689][ T6705] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.366201][ T6705] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.733839][T17196] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.736330][T17196] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.738281][T17196] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 273.770976][T17226] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 273.796924][T17228] veth0_to_team: entered promiscuous mode [ 273.924732][T17238] page: refcount:515 mapcount:0 mapping:ffff88802c31f180 index:0x0 pfn:0x41800 [ 273.928606][T17238] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 273.931266][T17238] aops:hugetlbfs_aops ino:10eb5 dentry name(?):"anon_hugepage" [ 273.933570][T17238] flags: 0xfff000000000c1(locked|waiters|head|node=0|zone=1|lastcpupid=0x7ff) [ 273.936183][T17238] page_type: f4(hugetlb) [ 273.937482][T17238] raw: 00fff000000000c1 ffffea0001078008 ffffc900062ffd68 ffff88802c31f180 [ 273.940222][T17238] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 273.942719][T17238] head: 00fff000000000c1 ffffea0001078008 ffffc900062ffd68 ffff88802c31f180 [ 273.945270][T17238] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 273.948155][T17238] head: 00fff00000000009 ffffea0001060001 0000000000000000 0000000000000000 [ 273.950869][T17238] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 273.953525][T17238] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 273.955772][T17238] page_owner tracks the page as allocated [ 273.958682][T17238] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 17081, tgid 17080 (syz.7.3321), ts 269299254315, free_ts 258123025440 [ 273.965249][T17238] post_alloc_hook+0x1c0/0x230 [ 273.966820][T17238] get_page_from_freelist+0x132b/0x38e0 [ 273.968672][T17238] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 273.970585][T17238] alloc_surplus_hugetlb_folio+0x1ad/0x4a0 [ 273.972521][T17238] alloc_hugetlb_folio+0xed4/0x1560 [ 273.974246][T17238] hugetlb_fault+0x1bce/0x2f40 [ 273.975845][T17238] handle_mm_fault+0xbfa/0xd10 [ 273.977442][T17238] __get_user_pages+0x551/0x34a0 [ 273.979131][T17238] populate_vma_page_range+0x267/0x3f0 [ 273.980831][T17238] __mm_populate+0x1d8/0x380 [ 273.982379][T17238] vm_mmap_pgoff+0x37f/0x470 [ 273.983853][T17238] ksys_mmap_pgoff+0x1c8/0x5c0 [ 273.985337][T17238] __x64_sys_mmap+0x125/0x190 [ 273.986936][T17238] do_syscall_64+0xcd/0x4e0 [ 273.988375][T17238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.990285][T17238] page last free pid 16543 tgid 16542 stack trace: [ 273.992390][T17238] __free_pages_ok+0x720/0xfc0 [ 273.993991][T17238] pfifo_fast_destroy+0x4f/0xa0 [ 273.995582][T17238] __qdisc_destroy+0x109/0x4d0 [ 273.997187][T17238] qdisc_put+0xab/0xe0 [ 273.998595][T17238] dev_shutdown+0x1d0/0x430 [ 274.000065][T17238] unregister_netdevice_many_notify+0xb2c/0x24c0 [ 274.002115][T17238] rtnl_dellink+0x3cb/0xa80 [ 274.003653][T17238] rtnetlink_rcv_msg+0x95b/0xe90 [ 274.005292][T17238] netlink_rcv_skb+0x158/0x420 [ 274.006883][T17238] netlink_unicast+0x5a7/0x870 [ 274.008491][T17238] netlink_sendmsg+0x8d1/0xdd0 [ 274.010048][T17238] ____sys_sendmsg+0xa95/0xc70 [ 274.011658][T17238] ___sys_sendmsg+0x134/0x1d0 [ 274.013215][T17238] __sys_sendmsg+0x16d/0x220 [ 274.014810][T17238] do_syscall_64+0xcd/0x4e0 [ 274.016306][T17238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.018326][T17238] ------------[ cut here ]------------ [ 274.020075][T17238] kernel BUG at mm/filemap.c:154! [ 274.021725][T17238] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 274.024454][T17238] CPU: 2 UID: 0 PID: 17238 Comm: syz.7.3374 Not tainted syzkaller #0 PREEMPT(full) [ 274.028863][T17238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.032666][T17238] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 274.034701][T17238] Code: 07 20 c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 3a 1b c9 ff 85 ed 7e 17 e8 f1 1f c9 ff 48 c7 c6 c0 1f b9 8b 48 89 df e8 c2 cf 11 00 90 <0f> 0b e8 da 1f c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 274.041147][T17238] RSP: 0018:ffffc9000655f310 EFLAGS: 00010093 [ 274.043106][T17238] RAX: 0000000000000000 RBX: ffffea0001060000 RCX: ffffc9000655f1f4 [ 274.045749][T17238] RDX: ffff8880329fa440 RSI: ffffffff81f27d5e RDI: ffff8880329fa884 [ 274.048397][T17238] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 274.051011][T17238] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c31f180 [ 274.053572][T17238] R13: ffffea0001060030 R14: 0000000000000000 R15: ffffea0001060000 [ 274.056126][T17238] FS: 00007fce7ddf66c0(0000) GS:ffff8880d68b2000(0000) knlGS:0000000000000000 [ 274.059051][T17238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.061213][T17238] CR2: 00007fce7ddf5f98 CR3: 000000004542d000 CR4: 0000000000352ef0 [ 274.063794][T17238] Call Trace: [ 274.064901][T17238] [ 274.065881][T17238] filemap_remove_folio+0xf1/0x250 [ 274.067517][T17238] remove_inode_hugepages+0x74a/0xed0 [ 274.069289][T17238] ? bpf_ksym_find+0x127/0x1c0 [ 274.070832][T17238] ? kernel_text_address+0x8d/0x100 [ 274.072489][T17238] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 274.074295][T17238] ? up_write+0x1b2/0x520 [ 274.075691][T17238] hugetlbfs_fallocate+0xf3f/0x12e0 [ 274.077360][T17238] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 274.079255][T17238] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 274.080950][T17238] ? vfs_fallocate+0x5b1/0x10e0 [ 274.082566][T17238] vfs_fallocate+0x5b1/0x10e0 [ 274.084078][T17238] ? __pfx_vfs_fallocate+0x10/0x10 [ 274.085735][T17238] ? madvise_vma_behavior+0x2b20/0x2d60 [ 274.087511][T17238] madvise_vma_behavior+0x2ad7/0x2d60 [ 274.089266][T17238] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 274.091157][T17238] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 274.092947][T17238] ? __pfx_mas_prev+0x10/0x10 [ 274.094493][T17238] ? find_vma_prev+0xda/0x160 [ 274.096011][T17238] ? __pfx_find_vma_prev+0x10/0x10 [ 274.097661][T17238] ? page_table_check_set+0x627/0x750 [ 274.099414][T17238] madvise_walk_vmas+0x31f/0x9c0 [ 274.100993][T17238] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 274.102735][T17238] madvise_do_behavior+0x1e2/0x530 [ 274.104379][T17238] ? __pfx_madvise_do_behavior+0x10/0x10 [ 274.106178][T17238] ? down_read+0x13d/0x480 [ 274.107641][T17238] ? __lock_acquire+0x62e/0x1ce0 [ 274.109254][T17238] do_madvise+0x176/0x240 [ 274.110617][T17238] ? __pfx_do_madvise+0x10/0x10 [ 274.112141][T17238] ? handle_mm_fault+0x2ab/0xd10 [ 274.113768][T17238] ? do_user_addr_fault+0x843/0x1370 [ 274.115392][T17238] __x64_sys_madvise+0xa9/0x110 [ 274.116970][T17238] ? lockdep_hardirqs_on+0x7c/0x110 [ 274.118648][T17238] do_syscall_64+0xcd/0x4e0 [ 274.120083][T17238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.121937][T17238] RIP: 0033:0x7fce7fb8eba9 [ 274.123347][T17238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.129498][T17238] RSP: 002b:00007fce7ddf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 274.132082][T17238] RAX: ffffffffffffffda RBX: 00007fce7fdd6180 RCX: 00007fce7fb8eba9 [ 274.134723][T17238] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 274.137166][T17238] RBP: 00007fce7fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 274.139720][T17238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.142231][T17238] R13: 00007fce7fdd6218 R14: 00007fce7fdd6180 R15: 00007fff2ad74578 [ 274.144645][T17238] [ 274.145621][T17238] Modules linked in: [ 274.146886][T17238] ---[ end trace 0000000000000000 ]--- [ 274.148789][T17238] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 274.150836][T17238] Code: 07 20 c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 3a 1b c9 ff 85 ed 7e 17 e8 f1 1f c9 ff 48 c7 c6 c0 1f b9 8b 48 89 df e8 c2 cf 11 00 90 <0f> 0b e8 da 1f c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 274.156797][T17238] RSP: 0018:ffffc9000655f310 EFLAGS: 00010093 [ 274.158715][T17238] RAX: 0000000000000000 RBX: ffffea0001060000 RCX: ffffc9000655f1f4 [ 274.161162][T17238] RDX: ffff8880329fa440 RSI: ffffffff81f27d5e RDI: ffff8880329fa884 [ 274.163753][T17238] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 274.166276][T17238] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c31f180 [ 274.168858][T17238] R13: ffffea0001060030 R14: 0000000000000000 R15: ffffea0001060000 [ 274.171419][T17238] FS: 00007fce7ddf66c0(0000) GS:ffff8880d68b2000(0000) knlGS:0000000000000000 [ 274.174478][T17238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.176629][T17238] CR2: 00007fce7ddf5f98 CR3: 000000004542d000 CR4: 0000000000352ef0 [ 274.179244][T17238] Kernel panic - not syncing: Fatal exception [ 274.181880][T17238] Kernel Offset: disabled [ 274.183227][T17238] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:46:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a63fe80 RCX=ffffffff81af9d91 RDX=ffff8880329fc880 RSI=ffffffff81af9d6b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900062ff428 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4c7fd1 R14=0000000000000001 R15=0000000000000002 RIP=ffffffff81af9d6d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fce809416c0 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fce80940f98 CR3=000000004542d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2ad74a86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2ad74a86 00007fff2ad74a8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fc12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fc12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fc12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fc12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fc12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fc12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fda74a8 00007fce7fda74a0 00007fce7fda7498 00007fce7fda7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce8090d100 00007fce7fda7460 00007fce7fda7478 00007fce7fda74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fda74b8 00007fce7fda74b0 00007fce7fda74a8 00007fce7fda74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000023a004 RBX=0000000000000001 RCX=ffffffff8b94bb49 RDX=ffffed100d4a6656 RSI=ffffffff8c163280 RDI=ffffffff81914111 RBP=ffffed1003c53488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801e29a440 R14=ffffffff90ab7290 R15=0000000000000000 RIP=ffffffff8b94a68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f25a7349f98 CR3=000000002bf25000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055559081eb64 000055559081e9d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055559082af18 000055559082ab50 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c080100000040c01 41ce000200070004 0004080001800401 c7100008004ba000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0680808010000004 0c0140f800020007 00100001080026a0 e210000410000ffa ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8084100000040601 40be018002000704 10000010000fffff ffffffff04021000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0117800402013a00 70756f7267632f2e 01ffffffffffffff ffed081780030100 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000806020105b6 0180000007121000 0680808410000004 060140be01800200 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 070410000010000f ffffffffffff0402 1000068080801000 00040c0140f80002 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007001000010800 26a0e21000041000 0ffac08010000004 0c0141ce00020007 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040009ec030a0400 09e8030210b88084 0009e6030010b080 840009e6030401e0 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564b815 RDI=ffffffff9b1180e0 RBP=ffffffff9b1180a0 RSP=ffffc9000655ec38 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b1180a0 R15=ffffffff8564b7b0 RIP=ffffffff8564b83f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fce7ddf66c0 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fce7ddf5f98 CR3=000000004542d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2ad74a86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2ad74a86 00007fff2ad74a8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fc12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fc12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fc12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fc12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fc12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fc12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fda74a8 00007fce7fda74a0 00007fce7fda7498 00007fce7fda7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce8090d100 00007fce7fda7460 00007fce7fda7478 00007fce7fda74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce7fda74b8 00007fce7fda74b0 00007fce7fda74a8 00007fce7fda74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a641ec0 RCX=ffffffff81af9d91 RDX=ffff888031f14880 RSI=ffffffff81af9d6b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006a5f880 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4c83d9 R14=0000000000000001 R15=0000000000000002 RIP=ffffffff81bb9da6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c35b454 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc470acef6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc470acef6 00007ffc470acefc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a6612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a6612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a6612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a6612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a6612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a6612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a67a74a8 00007f25a67a74a0 00007f25a67a7498 00007f25a67a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a730d100 00007f25a67a7460 00007f25a67a0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a67a74b8 00007f25a67a74b0 00007f25a67a74a8 00007f25a67a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000