last executing test programs: 2m37.766902294s ago: executing program 32 (id=913): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001845666900000000000000180000001800000002000000010000000100000300"/53], 0x0, 0x32}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d1a, &(0x7f0000000040)) 2m37.269873125s ago: executing program 2 (id=924): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x800) 2m37.269655285s ago: executing program 2 (id=925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_XDP={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x8044) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r4, &(0x7f0000000300)="e21bb75e165794c63d1b8ec8dd78752d2469ef19ad538364a4d9f8ba51483be8eea1eb38ea2199e668c1075ccda9fe8a5223", 0xfffffcf7) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000003008"]) 2m37.130456368s ago: executing program 2 (id=926): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0xbac00000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x10, 0x0, &(0x7f0000000540)=[@clear_death], 0x0, 0x0, 0x0}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0) 2m37.079328074s ago: executing program 2 (id=929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8640, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x18b500f, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000880) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0xd, 0xfff3}}}, 0x24}}, 0x4008000) 2m37.000679621s ago: executing program 2 (id=931): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x2d, &(0x7f0000000000)=0x4, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000005}) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) read(r3, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/181, 0xb5}], 0x1, 0x1ff, 0x8) 2m36.799112506s ago: executing program 2 (id=935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) 2m36.798821236s ago: executing program 33 (id=935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) 2m36.749466845s ago: executing program 4 (id=939): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x204d) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x149a82, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x60e0) r5 = socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x480c0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendfile(r1, r1, 0x0, 0x5) 2m36.600237663s ago: executing program 4 (id=940): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) sendfile(r2, r0, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000cf00)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r6, 0x0, 0x0) shutdown(r6, 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000011403002804000000dbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)={[{@nr_blocks={'nr_blocks', 0x3d, [0x38]}}]}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x58, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x50) 2m36.600041008s ago: executing program 4 (id=941): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/205, 0xcd}], 0x1}, 0x200}], 0x1, 0x40000040, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 2m36.490347629s ago: executing program 4 (id=942): ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = socket$inet(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040effff2820"], 0x7) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x3b487b6f, {0x3, 0x3, 0x0, {0x7c, 0x0, 0x46ae, 0x2, 0x3, 0x2, 0x1, 0x3966, 0x1, 0x8000, 0x8000f5f3, r3, r4, 0x3, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) dup2(r5, r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) 2m36.270611321s ago: executing program 4 (id=943): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000001180), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x2}, 0x1c) 2m34.640414492s ago: executing program 4 (id=950): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='(\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x28}}, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x1cd0c2, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x1, 0x1, {{0x1c, 0x4, 0x2, 0x28, 0x70, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0xf, 0x27, [@empty, @private=0xa010101, @rand_addr=0x64010101]}, @noop, @timestamp_prespec={0x44, 0xc, 0x95, 0x3, 0x4, [{@multicast1, 0xb83}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x10, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xaf5f]}, @generic={0x88, 0x12, "b9cf54b63ebe5605706fa6d1a20c0da6"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xf9, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000001c0)={@remote, r2}, 0x14) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) (async) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) 2m34.621303043s ago: executing program 34 (id=950): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='(\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x28}}, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x1cd0c2, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x1, 0x1, {{0x1c, 0x4, 0x2, 0x28, 0x70, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0xf, 0x27, [@empty, @private=0xa010101, @rand_addr=0x64010101]}, @noop, @timestamp_prespec={0x44, 0xc, 0x95, 0x3, 0x4, [{@multicast1, 0xb83}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x10, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xaf5f]}, @generic={0x88, 0x12, "b9cf54b63ebe5605706fa6d1a20c0da6"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xf9, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000001c0)={@remote, r2}, 0x14) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) (async) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) 2m20.979140961s ago: executing program 6 (id=1205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r2, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000001180)=',', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x2}, 0x1c) 2m20.882916552s ago: executing program 6 (id=1206): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) fstat(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fchown(0xffffffffffffffff, r6, r7) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r4, 0x2) r8 = syz_io_uring_setup(0x328, &(0x7f0000000000)={0x0, 0x6fa9, 0x800}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x2, 0x10a5, 0x3, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0x10122, 0x0) r12 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r13 = fcntl$dupfd(r12, 0x406, r12) write$binfmt_script(r13, &(0x7f0000000100), 0xfffffd9d) write$P9_RXATTRWALK(r13, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) write$UHID_CREATE2(r13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000900060000000400000099660000010000008636bf0d253d3d7c5a0605ebb16bb77d27ef56de60763bc7fb4ceb0f4b874b883e34a4ffae25d029f61d3c8965c5125a723dbe6252435e1fc6061511308fc5976711bd7dbf0dfd6edb9f81cc92cc96243f5816e7da2a4b935f9f2e27e253c43dae07c2212183ced1fd222b499e4048b086832e598dec0b2edfc0d33221f31de386c0bffd162ed9078463f87b55bf6a5313947b434f5dcf72d5f9a4009aac91a8de01fa4172ce74142899f4ba48b18b0ef913ff6c6cfa2c61707be7"], 0x11b) sendto$inet6(r11, &(0x7f0000001180)=',', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x2}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) 2m20.828926774s ago: executing program 6 (id=1208): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002001e0000000c00000006000100fe0f00000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x60}}, 0x8000) (async) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='f2fs\x00', 0x0, &(0x7f00000035c0)='quota') 2m20.720463174s ago: executing program 6 (id=1210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a00)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40041) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xe9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0xae) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) 2m20.678954567s ago: executing program 6 (id=1213): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x48}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r3, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000340)={r4}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000200)=0x8001100) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001c40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000280)=0x1, 0x4) (async) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x400000, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x1268, &(0x7f0000000080)={0xffffffffffffffff, 0x300, {0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "4874ef0904271a78949178fd825b775b5e55210c4037a557f88c97b6097ea4e9fdd1d167064e969100ff97aa6b42687995845c8c3ce42e76d6db19d5f4f5f283", "eba9d749fdc2dedff9641c2773c54efce1fa87820dae06070446988b8770438b12e6b80c265fdce83841f0f230d1f4fe7b5ba021316c17fb5112d7d0f278e48a", "993216b316a23f839af552fb85026e43c8ad3e80603200a6c188ec22bd7c4549"}}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000480)={{r1}, r7, 0x4, @inherit={0x78, &(0x7f0000000180)={0x0, 0x6, 0x4, 0x6, {0x24, 0x4, 0xfffffffffffffffc, 0x9f8d, 0x1}, [0x8, 0x2, 0x1a, 0x80000001, 0xffffffffffffffff, 0x9]}}, @devid}) (async) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) 2m20.500213727s ago: executing program 6 (id=1217): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000100)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000280)=[@decrefs, @request_death={0x400c6313}], 0x0, 0x0, 0x0}) sendto$inet6(r0, &(0x7f0000000000)="f9c072938a279d560098c431697e0bf1be5add5b8ade1d35a3529531bc9b309bca7e3e124a29eb11b921fdf46a113fc8bc02cb1d02c578fd5c1311d5cc1cfeb5ce56ea023a6b85a1d30c19a9964cd79d5704c4b8e7efd33ba8e06503358f9aafdf0d2414055cb3bca90b2555567a6efa2b950ee3f43a4f043d0f113e1d90e31816b4c667fe9149ab5138f78357b64ee1f3f3c06562431a17c06b482e6be481d57b2abfba4dfde8383071018a1e", 0xad, 0x40, &(0x7f0000002080)={0xa, 0x4e21, 0x8, @mcast1, 0xfffffffc}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x85494000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000001c0)={{0x0, 0xffff}, 'syz1\x00', 0x31}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="9e", 0x1, 0x800, &(0x7f0000000200)={0xa, 0x4e23, 0x20000, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)='d', 0x1}], 0x1}, 0xc844) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, 0x0, 0xfffffed9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) 2m20.500070291s ago: executing program 35 (id=1217): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000100)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000280)=[@decrefs, @request_death={0x400c6313}], 0x0, 0x0, 0x0}) sendto$inet6(r0, &(0x7f0000000000)="f9c072938a279d560098c431697e0bf1be5add5b8ade1d35a3529531bc9b309bca7e3e124a29eb11b921fdf46a113fc8bc02cb1d02c578fd5c1311d5cc1cfeb5ce56ea023a6b85a1d30c19a9964cd79d5704c4b8e7efd33ba8e06503358f9aafdf0d2414055cb3bca90b2555567a6efa2b950ee3f43a4f043d0f113e1d90e31816b4c667fe9149ab5138f78357b64ee1f3f3c06562431a17c06b482e6be481d57b2abfba4dfde8383071018a1e", 0xad, 0x40, &(0x7f0000002080)={0xa, 0x4e21, 0x8, @mcast1, 0xfffffffc}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x85494000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000001c0)={{0x0, 0xffff}, 'syz1\x00', 0x31}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="9e", 0x1, 0x800, &(0x7f0000000200)={0xa, 0x4e23, 0x20000, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)='d', 0x1}], 0x1}, 0xc844) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, 0x0, 0xfffffed9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) 2m20.299961818s ago: executing program 3 (id=1225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f00000000c0)=0x64, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000001180)=',', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x2}, 0x1c) 2m20.277934096s ago: executing program 3 (id=1227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x2f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2002c880}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000280)={0xa17, 0x7, 0x5, 0x5}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000340)={r0, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000004c0)={'tunl0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x10, 0x10, 0x29a, 0x12, {{0x2d, 0x4, 0x1, 0x37, 0xb4, 0x67, 0x0, 0x7c, 0x4, 0x0, @empty, @rand_addr=0x64010101, {[@end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4c, 0xe3, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0x4486}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xed}, {@broadcast, 0x1}, {@local, 0x1}, {@loopback, 0x3}, {@remote, 0x6}, {@remote, 0x8}]}, @noop, @timestamp_addr={0x44, 0x4c, 0x60, 0x1, 0x7, [{@remote, 0xb}, {@rand_addr=0x64010100, 0xe69a}, {@rand_addr=0x64010100, 0x8}, {@rand_addr=0x64010102, 0xfffffffb}, {@rand_addr=0x64010100, 0x6}, {@multicast1, 0x7}, {@remote, 0xa34}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x3}, {@multicast1, 0x7}]}]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9, 0x4}, {0x10, 0xfff2}, {0x3, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x1) (async) write(r0, &(0x7f00000005c0)="eceea1d3cd6dcb4bfd8d7bf2acc085bb087ea304047b17467e4a323c3587b0896c7148b34f024a6182cbbffce7bd6c4198a31e7e5838ee4818f7ce1d328c7cbceb8acbf812fe8ef3b6650cfb4ae42a56f5714f57caa3e02f2b9b55f92145", 0x5e) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@delqdisc={0x29c, 0x25, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x7, 0xe}, {0xfff2, 0x1}, {0xb, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0xd, 0xf5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_STAB={0xec, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x1, 0x0, 0x0, 0x8, 0x7ff, 0x4}}, {0xc, 0x2, [0x52, 0x5, 0x3, 0x9]}}, {{0x1c, 0x1, {0x3, 0x9, 0x3, 0x7, 0x0, 0x43, 0x1ff, 0x3}}, {0xa, 0x2, [0x4, 0x6, 0x5]}}, {{0x1c, 0x1, {0x9, 0x6, 0x9, 0x8, 0x1, 0x619c5522, 0x80000001, 0x3}}, {0xa, 0x2, [0x0, 0xd, 0x8b5]}}, {{0x1c, 0x1, {0xd, 0x45, 0x9, 0x7, 0x1, 0x2c5, 0x9, 0x4}}, {0xc, 0x2, [0x2, 0x1a, 0x0, 0xaf8]}}, {{0x1c, 0x1, {0x80, 0x6, 0x0, 0x5, 0x0, 0x3, 0x1, 0x1}}, {0x6, 0x2, [0xd7]}}, {{0x1c, 0x1, {0x1, 0x2, 0x1, 0x9, 0x1, 0x0, 0x7fffffff, 0x1}}, {0x6, 0x2, [0x3ff]}}]}, @TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x2, 0x3ff, 0x2, 0x10000000, 0x6, 0x7}}, {0x12, 0x2, [0x8, 0x2, 0xff0e, 0x5, 0x200, 0x6, 0x3dc1]}}, {{0x1c, 0x1, {0x2, 0x0, 0xc, 0x7, 0x2, 0x61e2, 0xfffffff7, 0x4}}, {0xc, 0x2, [0x6, 0x7cb9, 0x1, 0x7]}}, {{0x1c, 0x1, {0x1, 0x40, 0x931, 0x85, 0x0, 0xaee, 0x1, 0x6}}, {0x10, 0x2, [0xfff1, 0x7, 0x6, 0x7, 0x10, 0x4]}}, {{0x1c, 0x1, {0x2, 0xb, 0xe7, 0x10, 0x2, 0x3, 0x80, 0x2}}, {0x8, 0x2, [0x0, 0x400]}}, {{0x1c, 0x1, {0x6, 0x0, 0x2, 0x80, 0x2, 0x200, 0x3, 0x6}}, {0x10, 0x2, [0x6, 0x8, 0x0, 0xfff8, 0x5, 0x1ff]}}, {{0x1c, 0x1, {0x1, 0xff, 0xe5b1, 0x9, 0x1, 0x4, 0x8d, 0x1}}, {0x6, 0x2, [0xfff0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xbd}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xc, 0xd2, 0x3ff, 0x2, 0x100, 0x10, 0x9}}, {0x16, 0x2, [0x3, 0xb, 0xe, 0x60f0, 0x1000, 0xa, 0xb, 0x5, 0x2]}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x3, 0x1, 0x8, 0x2, 0x81, 0x5, 0x5}}, {0xe, 0x2, [0x4, 0xd, 0x10, 0x5, 0x1]}}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x800}, 0x14000000) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, r8, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8c3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff4c}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040010}, 0x100) (async) ioctl$CDROMRESUME(r5, 0x5302) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000bc0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000d40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xcc, r9, 0x114, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8080) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) getpid() sendmsg$nl_route_sched(r6, &(0x7f0000004940)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004900)={&(0x7f0000000dc0)=@newchain={0x3b14, 0x64, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x8, 0xfff1}, {0x3, 0xc}, {0x0, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pim6reg0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xc0f}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x8}}, @TCA_FW_INDEV={0x14, 0x3, 'team_slave_0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x2b}]}}, @TCA_CHAIN={0x8, 0xb, 0xa}, @TCA_RATE={0x6, 0x5, {0xf6, 0x5}}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5040}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc0}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_basic={{0xa}, {0x3a4c, 0x2, [@TCA_BASIC_ACT={0x3a48, 0x3, [@m_pedit={0x3a44, 0x1a, 0x0, 0x0, {{0xa}, {0x392c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x7fffffff, 0x6, 0xffffffffffffffff, 0x8, 0x7}, 0x3, 0xc8, [{0x0, 0x1, 0x59, 0x800, 0x3ff, 0x5}, {0x5, 0x5, 0x4, 0x4000000, 0x0, 0xd7}, {0x9, 0x2, 0x5, 0x6, 0x8, 0x451}]}, [{0x12, 0x6, 0xbd, 0x1, 0x1, 0xc}, {0xff, 0x6221, 0x101, 0xc8e4, 0x5, 0x62}, {0x8, 0x1a80000, 0x6, 0xba3, 0x5, 0x101}, {0x5, 0xc2d5, 0x8, 0xfffffe01, 0x7, 0x5}, {0x3, 0xfffffffa, 0x4, 0x0, 0x3, 0x24}, {0x5, 0x4, 0x2, 0x6, 0x80000000, 0x2}, {0x9, 0xbe8, 0x7fff, 0x7f, 0x5, 0xfffffff8}, {0x4, 0x1a, 0x7, 0x3293, 0xfffff801, 0x6}, {0x6, 0xa0, 0x7fff, 0x4, 0x3, 0x3}, {0x2, 0x928a, 0x6, 0x0, 0x1, 0x1}, {0x6, 0xfffff64e, 0x0, 0x8, 0x236, 0x4}, {0x9, 0x0, 0xc, 0xba, 0x7, 0x1}, {0x4, 0x6, 0x9, 0x7, 0xe, 0x9}, {0x8, 0xd, 0x0, 0x2, 0x10000, 0x10001}, {0x6, 0x7, 0x80000001, 0x200, 0x3, 0x1}, {0x363a, 0x1ff, 0x5, 0x0, 0x3, 0xa}, {0x5, 0xff8, 0x81, 0x7, 0xff, 0x2}, {0x4, 0x4c, 0x6, 0x1, 0x40, 0xfffffffa}, {0x7ff, 0x4, 0x3, 0xe, 0x9, 0x8}, {0x6, 0x3be, 0x7f, 0x5, 0x2, 0xa}, {0x1, 0x4, 0xffffff7f, 0x5, 0x11, 0x9}, {0xffffffff, 0x80000001, 0x42, 0x7fffffff, 0x9, 0xb3fc}, {0x8, 0xff, 0xac9b, 0x9, 0xc32}, {0x400, 0x800, 0x0, 0xf6, 0x8, 0x40}, {0x23, 0x2b, 0xc817, 0xa, 0xffff4b17, 0x1ff}, {0x3, 0x0, 0x1, 0x3ff, 0x1, 0xdf}, {0x4, 0x6, 0x3, 0x6, 0x9}, {0x5, 0x3, 0x0, 0x80000000, 0x9, 0xff}, {0x3, 0x80000001, 0x100, 0x8, 0x80000000, 0x400}, {0x0, 0x1, 0x6, 0x5, 0x4, 0x400}, {0xff, 0x7, 0x6, 0x0, 0x7, 0x4}, {0x9, 0x2, 0x6, 0x5c, 0x9, 0x1}, {0x1, 0x6, 0x7, 0xe3, 0x7fffffff}, {0x10, 0x6, 0x6, 0x3, 0x9, 0x9}, {0xa4, 0x10001, 0x4, 0x6, 0x2, 0x6}, {0x83d, 0x1, 0x6f2b, 0x7, 0x3, 0x9}, {0x10000, 0x0, 0x9, 0xe, 0x6, 0xbd5d}, {0x7, 0xbf, 0x1, 0x5, 0x5, 0xff}, {0x7, 0x2, 0x0, 0x80000001, 0x80000000, 0x2}, {0x8, 0x1f8, 0x100, 0x5, 0x3, 0x12000}, {0x1, 0xde, 0x7fff, 0x2, 0x5, 0x6}, {0x9, 0x2, 0x0, 0x4, 0x4, 0x6}, {0x4, 0x10000, 0x10000, 0xec, 0x9}, {0x6, 0x4, 0x5, 0x3, 0x4, 0x4541}, {0x0, 0xffffffff, 0x8, 0x7, 0x1, 0x80000000}, {0xfffffffc, 0x7fff, 0x0, 0x101, 0x67}, {0x3, 0x10000, 0x5, 0x7ff, 0x7, 0x9}, {0x89, 0x6, 0x32bd, 0xd6, 0x5, 0xc28}, {0x1000, 0x1000, 0x6, 0x5, 0xcb85, 0x1ff}, {0x9, 0x60, 0x1ff, 0xbc4d, 0xb0000, 0xffffffff}, {0x6d5e, 0x5, 0xfffffff7, 0x9, 0x7, 0x3}, {0x7ff80, 0x5c, 0x8, 0xb5, 0x4, 0x87d}, {0x401, 0x2c, 0xf, 0x0, 0xfb4, 0x7}, {0x21, 0x11902005, 0x200, 0x7c0, 0xfff, 0x3ff}, {0x9, 0xffff, 0x552a, 0x9, 0x0, 0x7}, {0xfffffff7, 0x4, 0xe, 0x0, 0x3}, {0x4, 0x10, 0x4, 0x1, 0x6, 0x1}, {0x96a, 0xb, 0x8c3, 0x80000001, 0x8001, 0xfffffffd}, {0x8, 0xe, 0x10001, 0x2, 0x100, 0xff}, {0x9, 0x5, 0xfffffffb, 0x3, 0x76a, 0xfffffffb}, {0x57a, 0x8, 0x0, 0x2f33, 0x1, 0x8}, {0x2000000, 0x401, 0x5, 0x4, 0xbbdc, 0x384}, {0x5, 0x8, 0xc3b, 0x401, 0x2, 0x5}, {0x3, 0x1000, 0x5, 0x8, 0xfffffffb, 0x6}, {0x0, 0x100, 0x8, 0xe8, 0x1, 0x6}, {0x4, 0x1, 0x6, 0x0, 0x8, 0xe630}, {0xffff, 0x6, 0x9, 0x3, 0x5}, {0x26, 0x1, 0x3, 0x7, 0xfffffffc, 0x10000}, {0x0, 0x5, 0x7, 0x6, 0x4, 0xefc4}, {0x1, 0x5, 0x1, 0x854d, 0x5, 0x77}, {0x4, 0x2, 0x4, 0x0, 0x1, 0x3ff}, {0x3, 0x8, 0x80000000, 0x5, 0xfffffff2, 0x5}, {0xb, 0xec25, 0x80, 0x6, 0x0, 0x7}, {0x9, 0x87c6, 0xe3bd, 0x5, 0x9, 0x8}, {0x8000, 0x10001, 0x3, 0x9, 0x8, 0x1}, {0x1000, 0x8, 0xdc, 0x8000, 0x50d, 0x3117}, {0x0, 0x9, 0x7, 0x1, 0x6}, {0x0, 0x200, 0x0, 0x9, 0x7, 0x1}, {0x0, 0x7fff, 0x2, 0x6, 0x7, 0x5}, {0x7, 0x81, 0x9, 0x3, 0x3, 0x1ff}, {0x2, 0x8d5, 0x4, 0x10001, 0x9, 0x4}, {0xfffffffe, 0x7, 0x8, 0x0, 0x48f, 0x5a11}, {0x3, 0x6, 0x9, 0x8d24, 0x8, 0x2}, {0x401, 0x8000, 0x9, 0x2, 0x45c, 0x9}, {0xfffffff8, 0x1000, 0x2, 0x5, 0xffff7fff}, {0x67a, 0x0, 0x7, 0x2, 0x2, 0x6}, {0x37, 0x3, 0x0, 0x4, 0xffffeb73, 0x6}, {0x3, 0x6, 0x1, 0x9, 0x1, 0xffffffff}, {0x5, 0xfffffff4, 0x6, 0xee2, 0x6, 0x3}, {0x0, 0x6, 0x5, 0x2, 0xb3}, {0x1, 0xfff, 0x9, 0x47, 0x451, 0x4}, {0xde, 0x209, 0x4, 0x100, 0xffff8000, 0x2}, {0x5, 0xfffffffc, 0x5, 0x71, 0x5, 0x4}, {0x1, 0xffffffe8, 0x5, 0x8, 0x80, 0xff}, {0x0, 0x9, 0x401, 0x8, 0x2}, {0xce, 0x8000, 0x10000, 0x9, 0x32e1, 0xfffffff7}, {0x480, 0xfffffff7, 0x8, 0xe2e1, 0xb354, 0x3}, {0x3, 0xdc, 0x2, 0x3, 0x10001, 0x8}, {0x5, 0x5, 0x7, 0xe, 0x1, 0x7fffffff}, {0xb2, 0xd8, 0x7d0, 0x6, 0x80, 0x4}, {0x6, 0xffffffff, 0x0, 0x333, 0x8, 0x3ff}, {0x1, 0xad19, 0xdfb, 0xe3, 0xfffffff7, 0x94}, {0x1000, 0x2, 0x0, 0x2, 0xfff, 0x6}, {0x5, 0x9, 0x800, 0x80000001, 0x9, 0xaf0}, {0x7, 0x5, 0x1, 0x5, 0x80000000, 0x400}, {0x9ec, 0x40000000, 0x0, 0x6, 0x4, 0x6}, {0x6, 0x9b9c, 0x0, 0x9, 0x101, 0x6}, {0x8, 0xffff, 0x8, 0x7ff, 0x4}, {0x1ff, 0x9, 0x6, 0x1, 0x7, 0x3}, {0xfffffffe, 0x7abbcfae, 0x7, 0x0, 0x3ef9, 0x2}, {0x0, 0xfffffffb, 0x10000, 0x401, 0x3, 0x8000}, {0x0, 0x7, 0x3, 0x4, 0x2, 0x2}, {0x6, 0x5, 0x10000, 0x9, 0x1, 0x2}, {0x9, 0x5, 0x6, 0x2, 0x4, 0xd6e}, {0x4, 0x800, 0x8, 0x3, 0x7, 0x80}, {0x4, 0x0, 0x4, 0x3, 0xeeb, 0x4}, {0x9, 0x0, 0x1, 0x80000001, 0x0, 0x7}, {0x7, 0x400, 0x7, 0x6, 0x6, 0x4}, {0x7, 0xd412, 0xf, 0x0, 0xf5, 0x39}, {0x7fffffff, 0xffff, 0x0, 0x7d27630d, 0x7, 0x5}, {0xe, 0x8, 0x40, 0xfffffff7, 0x0, 0xd8ef}, {0xbc8, 0x2, 0x8001, 0x6, 0x4, 0xffffffff}, {0x8, 0x3d0, 0x80, 0xa, 0x6, 0x4882}, {0x2, 0x4, 0xc897, 0x5, 0x7ff, 0x200}, {0x2, 0x1, 0x8, 0x7c, 0xff5, 0x5}, {0x10000, 0x6, 0xfff, 0x8, 0xbf, 0xfff}, {0x3ff, 0x0, 0x4c000000, 0xf, 0xf9, 0x7}, {0xfffff8ff, 0x9, 0x4, 0x8, 0xfffffffc}], [{0x3}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x1, 0x1}, {}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1}, {}, {0x3, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x4}, {0x5, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x3}, {0x6}, {0x7, 0x1}, {}, {}, {0x3}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {}, {0x2}, {0x6, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x7}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x3}, {0x3}, {0x4ccf340499e040bc}, {0x0, 0x1}, {0x5}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x4}, {}, {0x2}, {0x5}, {0x0, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {}, {0x4}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xd7, 0x7, 0x5, 0x6, 0x81}, 0x40, 0x2}, [{0x2, 0x7, 0x8969, 0x68f1, 0x5, 0x9}, {0x9, 0x8dc1, 0xfffffff7, 0x85, 0x5, 0x7534daff}, {0x2fd, 0x8, 0x3, 0x8, 0x799, 0x7}, {0x4, 0x81, 0x4, 0x7, 0x40, 0x7b5}, {0x4, 0x2, 0x8, 0xfffffffa, 0x0, 0x80000001}, {0x200, 0x80000000, 0xa, 0x25616a70, 0xffffffff, 0x5}, {0xe, 0x7ff, 0x400, 0x5, 0x7fff, 0x8}, {0x0, 0x7ff, 0x9, 0xffff, 0x7, 0x5}, {0x7, 0x7ff, 0x7, 0x0, 0xefd6, 0x7}, {0xffffffff, 0x1, 0x66, 0x50178156, 0x1ff, 0x29}, {0x5, 0x3, 0x4, 0xc, 0x5, 0xc}, {0x6, 0x40, 0x1c, 0x3, 0x5, 0x83}, {0x2ea7, 0xe, 0xffff, 0x3, 0x2915, 0x1}, {0x3, 0x3, 0x9, 0x2, 0x1, 0xffff}, {0x0, 0xa36, 0xc12, 0x48e, 0x3, 0x4}, {0x4, 0x6, 0x7, 0x80, 0x7, 0x9}, {0x2, 0x1, 0x6, 0x4, 0x3, 0x8000}, {0x2, 0x10000, 0x0, 0x62, 0x9041}, {0x6, 0xbb, 0x8, 0x9, 0x62569a92, 0x7}, {0xa32d369c, 0x1, 0x23, 0x4, 0xf, 0x1}, {0x89, 0x78c2, 0x0, 0x1800, 0x2, 0x3}, {0xffff42df, 0x5, 0x0, 0x10000, 0x3, 0xffffffff}, {0x98b, 0x3, 0x6, 0x4, 0x9, 0xf45}, {0x93ec, 0x2fb, 0x1, 0x81, 0x5, 0x80000000}, {0x1, 0x2, 0x20000000, 0xfffffffc, 0x8, 0x5}, {0x7, 0x100, 0x5, 0x0, 0x5cd828e3, 0x3}, {0x6, 0x0, 0x50, 0x1, 0x1, 0x80000001}, {0x7, 0x3, 0x900, 0x80, 0x6, 0x10001}, {0x1ff, 0xffff, 0x0, 0x80, 0x5, 0x4}, {0xfffffff8, 0x7fffffff, 0x1, 0xe26, 0x2, 0x1}, {0xffffffff, 0x53, 0x8, 0x2ff, 0xfffffe00, 0x80000000}, {0x200, 0x1000, 0x5c7d, 0x5, 0x9, 0x61b9}, {0xb, 0x9, 0x4b, 0x0, 0xb, 0x3ff}, {0x8, 0x1, 0xfffffff8, 0xc3, 0x8, 0x2}, {0x6, 0x8, 0x3ff, 0x400, 0x4, 0x6}, {0x3, 0xfffffffb, 0x4, 0x2a7, 0x8f6, 0xfffff001}, {0x6, 0x2, 0xffff, 0xd, 0x3, 0xf3}, {0x1ff, 0x3, 0x9, 0x1000, 0x5, 0x28}, {0x9, 0x9, 0x7f, 0x10001, 0x8, 0x5}, {0x1, 0x3808, 0x9, 0x9, 0x8001, 0xfd}, {0x0, 0x8, 0x80, 0x7fff, 0x5}, {0x800, 0x4b, 0xfffffffe, 0x2, 0xfffffffd, 0xfffffffd}, {0x3fd, 0xfef, 0x436, 0xfffffffa, 0x8, 0x6786ef22}, {0x7fffffff, 0xd, 0xe, 0x2, 0x6, 0x29}, {0xd, 0x8000, 0x9, 0x3, 0x1, 0xffffffff}, {0x7, 0x2, 0xff, 0x0, 0xe, 0x4d0}, {0x0, 0x884, 0x0, 0xba0, 0x0, 0x8}, {0x6, 0x8, 0x2, 0x5, 0x947, 0x7fffffff}, {0x4, 0xc, 0x2, 0x7fffffff, 0x2, 0xffffff2b}, {0x1000, 0x5, 0xfffffffb, 0x401, 0x7, 0x7ff}, {0x7, 0x6, 0x6, 0x1, 0x3, 0x5}, {0x1ff, 0x56d, 0x5, 0x6, 0x7fff, 0x8}, {0xedca, 0x923, 0x5, 0xafb, 0x80000001, 0x1}, {0x200, 0x0, 0x4, 0x0, 0x4, 0x7f20a9a7}, {0x2, 0x10001, 0x100, 0x4d4, 0x40a, 0xcce}, {0xfffffffc, 0x482, 0x7, 0x0, 0x7431, 0x3}, {0xfffffffa, 0x6, 0x3, 0x6, 0x8, 0x9}, {0x10000, 0x8, 0x6, 0x1, 0x8}, {0x0, 0x4, 0x8, 0xfff, 0x0, 0x6}, {0x9, 0x101, 0x4, 0x3, 0x9b0}, {0x7, 0x9, 0x1, 0xf0000000, 0x800, 0x85}, {0x6, 0x2, 0x0, 0x960c, 0xffffffff, 0xff}, {0x2, 0x0, 0x7, 0x42, 0x34f0, 0xfff}, {0x2, 0x5, 0x7, 0x7f, 0x10, 0xfe4f}, {0x5, 0x7, 0xc0000000, 0x3, 0x58, 0xfffffffe}, {0x3ff, 0x4000000, 0x6, 0x5, 0x3, 0x3}, {0x9, 0xfffffffe, 0x1, 0x2, 0x4, 0x9}, {0x8000, 0x5, 0x7, 0xa593, 0x35, 0x8}, {0x7, 0x7, 0x2, 0x9, 0x1ff, 0x8000000}, {0x3, 0x7, 0x1, 0x9, 0x3, 0xda}, {0x3, 0x90, 0x3, 0x400, 0x1567, 0x6f2}, {0x7, 0x10, 0x3ff, 0x8055, 0x1, 0x40}, {0x6, 0x2, 0x6, 0x1ff, 0x3, 0x200}, {0x8, 0x7, 0x5, 0x3, 0xf, 0x400}, {0x6, 0x10000, 0xdef, 0x9, 0x4, 0x5}, {0x2, 0x4, 0x10000, 0x7f, 0x8, 0x6}, {0x7, 0x0, 0x400, 0x9, 0x0, 0xfff}, {0x8, 0x7fff, 0x8f, 0x9d3, 0x1, 0xcf59}, {0x1, 0x9, 0x5, 0x7, 0x10000, 0x80000000}, {0xb94f, 0x6, 0xf, 0x2, 0x1, 0x369c}, {0x180000, 0x51d, 0x4, 0xffffffc3, 0x7, 0xd6c}, {0x679, 0x0, 0xffffff80, 0x0, 0x81, 0x40}, {0x10001, 0x2, 0x8, 0x5, 0x1}, {0x2, 0x400, 0xe, 0xfffffffc, 0xd810, 0x52a}, {0x8, 0x5, 0x3be, 0x1, 0x0, 0x3}, {0x3, 0xffff8001, 0x7fff, 0x3, 0x100, 0x7fff}, {0x1ff, 0x1, 0x4, 0x28, 0x4, 0x10000}, {0x7fffffff, 0x94ad, 0xfffffff7, 0x1, 0x3, 0x6}, {0x4, 0x9, 0x6, 0x1, 0xf, 0xfffffffe}, {0x8, 0x8039, 0x97fe, 0x800, 0xc, 0x1000}, {0x5, 0x7, 0xfff, 0x1, 0x6, 0x2}, {0x9, 0x570, 0x3, 0x0, 0xfffffffd, 0x81}, {0xeca, 0x1, 0x53fb, 0x4, 0x3, 0x9}, {0xcae, 0x4, 0x80000001, 0x844, 0x7fffffff, 0x1ff}, {0x0, 0x2, 0x9, 0x8, 0x380, 0x4}, {0x2, 0x8, 0x3, 0x0, 0x1, 0xa}, {0x10001, 0x1, 0x9, 0xa16a, 0xfffffff8, 0x5}, {0x2, 0xff, 0xc, 0xcc9, 0xfffffc01, 0x8}, {0x9, 0x401, 0x7, 0x5b292219, 0xd, 0x6}, {0x685, 0x8, 0x100, 0xd0d, 0x5, 0x2}, {0x1, 0x1, 0x3, 0x71, 0x4, 0x6a}, {0x7, 0x101, 0x0, 0x7, 0xfffffffb, 0x3}, {0x3ff, 0xae, 0x3, 0x3, 0x7ff, 0x4}, {0x3, 0x6, 0x9, 0x8, 0x4ce}, {0xf, 0x2, 0x2, 0x3, 0xc, 0x6}, {0x5, 0xdff, 0x539e, 0x6, 0xfffffcce, 0xfffffffd}, {0x9, 0x3000000, 0x6, 0x1, 0x5, 0x3}, {0x6, 0x2, 0x6, 0x400, 0xb, 0x5}, {0x0, 0x1, 0xffffff80, 0x40, 0xb732, 0x4fc}, {0xfffffffd, 0x2, 0x1, 0x9, 0x4e3496c3, 0x10001}, {0x72, 0x6, 0xb88, 0x4, 0x5, 0x9}, {0xcc7a, 0x1, 0x5, 0xfffffff9, 0x88, 0xfffffffa}, {0x8001, 0xf00, 0x2, 0x8, 0x6, 0x40}, {0x6, 0x2, 0x8, 0xac, 0x4, 0x6}, {0x1, 0x5, 0x7, 0x2, 0x0, 0xdd}, {0x6, 0xff, 0x9, 0x3, 0x100}, {0x6, 0x0, 0x2bf, 0x9, 0x0, 0x3}, {0x7f, 0x29, 0x7, 0x9, 0xe, 0x4}, {0x0, 0x37c, 0x0, 0x7, 0x8, 0x3}, {0xc, 0x1, 0x4, 0x1, 0x1, 0xc}, {0x8000, 0x2, 0x1ff, 0xfffffffd, 0x4, 0x2}, {0x8, 0x3, 0xfffffff9, 0x2, 0x2, 0x6}, {0x9, 0xd41, 0x6, 0x0, 0xf, 0xfffffc00}, {0x9, 0x8, 0x9, 0x0, 0xa01, 0xfff}, {0xffff, 0xfffffe01, 0xa, 0x9, 0x8, 0x1}, {0x2, 0xffff, 0xfffffffb, 0x2, 0xd5, 0x8}, {0x401, 0x9, 0x9, 0x401, 0x80000001, 0xa9a3}, {0x1, 0x5, 0xb, 0x5, 0xff, 0x3}], [{0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x3}, {0x3}, {0x2}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x6, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x4}, {0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x2}, {0x1}, {0x2}, {0x4}, {0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x3}, {0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x3}, {0x1}, {0x4}, {}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x3, 0x6791, 0x4, 0x1, 0x69}, 0x5, 0x7, [{0x9f, 0x8, 0x6a, 0x10001, 0x1, 0x2}, {0xffff, 0xc7, 0x4, 0x9, 0xffff8001, 0x8}, {0x3, 0x9, 0x10000, 0x6, 0x9, 0x12f6}]}, [{0x6, 0x9, 0xf, 0x8, 0x8, 0x40}, {0x6, 0x2, 0x3ff, 0x6, 0x1, 0x7fffffff}, {0x3, 0x8, 0xdd, 0x3, 0x1c4, 0x641e}, {0x9, 0x2, 0x10001, 0x2, 0x7, 0x6}, {0xffff, 0x1, 0xd, 0x3, 0xce, 0x48}, {0x1, 0x80200, 0x2, 0x100, 0x9, 0x8}, {0x1, 0x0, 0x5, 0x6, 0x4d1a}, {0x9, 0x9, 0xfffffffb, 0x577, 0x1, 0x7}, {0x4, 0x3ff, 0x1, 0x6, 0x3, 0x5}, {0x55c3, 0x40, 0x7, 0x10000, 0x3, 0x2b1}, {0x7fff, 0x77892098, 0x3, 0xb6d3, 0xd, 0x9}, {0x5, 0xff, 0x3, 0x6, 0xda, 0xfeb4ca58}, {0x400, 0x4, 0x0, 0x6, 0xf, 0xe}, {0x7, 0xc7, 0x3, 0x6, 0x8, 0x20d}, {0x9, 0xe, 0xfffffffd, 0xe00000, 0x4, 0x4}, {0x9, 0x200, 0x3, 0xf, 0xfffff53c, 0x7}, {0x34, 0xf58, 0x8, 0x3ff, 0x1, 0x101}, {0xa45d, 0x80000000, 0x9, 0xc1, 0x8, 0xfff}, {0x9, 0x4, 0x7fff, 0x5, 0x0, 0x7}, {0xfff, 0xa7b, 0x8, 0xfffffff7, 0x7, 0xfff}, {0x1, 0x7ff, 0x1, 0x7, 0xffffdb81, 0xa}, {0x5, 0x4, 0x701d, 0x6721, 0x0, 0x463}, {0x1a05, 0x80000000, 0x2, 0x40, 0x2, 0x4}, {0x10000, 0x5, 0xff, 0x6, 0x92, 0xf}, {0x8, 0x47, 0x7, 0x6, 0x4, 0x29dc71ac}, {0x3, 0x5, 0x5, 0x1, 0x1, 0x4}, {0x6, 0x7f, 0x672f, 0x3, 0xfffffffe}, {0x0, 0x8, 0xe6e, 0x1, 0x5, 0x3}, {0x6, 0x6, 0x2, 0x5c7, 0x6, 0x3}, {0x9, 0xb74, 0x6, 0xa, 0xf0000000, 0x983c}, {0x5, 0x7, 0x4, 0x3, 0x31e5, 0x1}, {0x1, 0x493, 0x9c3e, 0x8001, 0xfffff8be, 0x1ff}, {0x5, 0x3, 0xfffffc79, 0x5, 0x5a480, 0x3}, {0xe, 0x0, 0x1, 0x7ff, 0x3, 0x2}, {0x5, 0xfffffffe, 0x6, 0x1, 0x19a, 0x271a}, {0x9, 0x0, 0xb40e, 0x7, 0x1, 0x88800000}, {0x8, 0x6, 0x7f8, 0xfffffbff, 0x3, 0x2}, {0x5, 0xfffffbff, 0x8, 0x8, 0x7, 0x2}, {0x8000, 0x7, 0x1, 0x0, 0x6, 0x1a}, {0x7880, 0xfffffffa, 0x10000, 0xfff, 0x1, 0xfffffffa}, {0x9, 0x6, 0x24b5, 0x54, 0x8, 0x9}, {0x0, 0x6, 0xe820, 0x0, 0x4, 0x10001}, {0x3, 0x6, 0x7, 0x7f, 0x3ec3292d, 0x9}, {0x5, 0xb515, 0x81, 0x5, 0x400, 0x2}, {0x7fffffff, 0x7, 0x0, 0x7ff, 0x9, 0x400}, {0x8, 0xfffffffe, 0x4, 0x0, 0x9, 0x7}, {0x1, 0xd14c, 0x92a, 0xff, 0x1, 0x1}, {0x6, 0xffffffff, 0x6, 0xb, 0x6, 0x3e}, {0x7, 0x3, 0x7, 0xc6cf, 0x10, 0x4}, {0x81, 0xf069, 0x5ac21e13, 0x6, 0xea4, 0x2}, {0xeb54, 0x0, 0x7, 0x5, 0xfffffffa, 0x2}, {0x8, 0x2, 0x7fffffff, 0x4, 0x6, 0x9}, {0x1, 0x0, 0x8, 0x7, 0x7fffffff, 0xfffffff8}, {0x400, 0x2, 0xf2e7, 0x4, 0xfffffffc, 0x7}, {0x400, 0x8cc, 0x5, 0xfff, 0xffffff3c, 0x7}, {0x7e66d6d, 0x7f, 0x6, 0x2, 0xfffffff2, 0x9}, {0x81, 0x6, 0x6, 0x3, 0xab9b, 0x1}, {0x39, 0x8, 0x1000, 0x800, 0x8, 0xd68}, {0x4, 0x800, 0xc62c, 0x4, 0x0, 0xffff}, {0x7ff, 0x10001, 0x80000001, 0x1, 0x74100, 0x3}, {0xe1d, 0x5, 0x1627, 0x0, 0x9, 0x80000000}, {0xa7b7, 0x1925, 0x641, 0xc062, 0x2}, {0x40, 0x1, 0x0, 0x8, 0x6, 0x414}, {0x2, 0x52f, 0x6, 0x80000000, 0x6, 0x6}, {0x9, 0x3, 0x7, 0x10, 0x8f, 0x8001}, {0x4, 0x8000000, 0x40, 0x1, 0x3, 0xf}, {0x0, 0x402abe47, 0x5, 0x6, 0xb4cb}, {0x4, 0x4, 0x9, 0x8, 0x2, 0xfffffffd}, {0x7, 0x0, 0x8, 0x2, 0x8001, 0x6}, {0x4, 0x5, 0x9, 0x6, 0x5, 0xd2}, {0x4, 0x200, 0x0, 0xcb, 0x7fff, 0x7fff8000}, {0x4, 0x2, 0xffff, 0x6, 0x5, 0x8}, {0x1, 0x8, 0x0, 0x2, 0x4, 0x5}, {0x1, 0xffffffff, 0x5, 0x0, 0x1ff, 0x2}, {0xc1, 0x4, 0x40, 0x2, 0xe, 0x7}, {0x1, 0x1, 0x80000001, 0x7f, 0x49e}, {0x5, 0xf83, 0x5, 0x62, 0x9, 0x72d}, {0x4, 0x3, 0x6, 0x4, 0x7, 0x8}, {0xc, 0x10, 0x2, 0x6, 0x6, 0x8}, {0x4, 0x5, 0x7b, 0x0, 0x101, 0xd1}, {0x1, 0x87, 0x1, 0x8, 0x80000001, 0x5}, {0xff, 0xb900, 0x4d, 0x236, 0x2, 0x2}, {0x86, 0xf, 0x5, 0x8, 0x5, 0x8}, {0x4, 0x3, 0x5, 0xa49b, 0x6, 0xc}, {0x3, 0xffff, 0x5, 0xc8, 0xffff, 0x8}, {0x7f, 0x904, 0x8, 0xa4, 0x1, 0x8}, {0x7, 0x8001, 0x5, 0xb, 0x80000001}, {0x3, 0x8, 0x91, 0x4, 0x5, 0x4}, {0xb1, 0xfffffffa, 0x6, 0x6, 0x6, 0x4}, {0x7, 0x7, 0x3, 0x5, 0x3, 0xe08a}, {0x6, 0x10, 0xf, 0xd04a, 0xc, 0xf1}, {0xa, 0x9, 0x9, 0x2, 0x7, 0x1ff}, {0x1000, 0x92000000, 0x80000001, 0x0, 0x803d, 0x25}, {0xef, 0xe, 0x1ff, 0x8001, 0x9, 0x2}, {0x6, 0x7, 0xc, 0x6, 0x5, 0x1}, {0x8, 0x1, 0x1, 0xffffffff, 0x5, 0x54b08d54}, {0xb, 0x3, 0x8, 0x5, 0x9, 0x3bf1}, {0x1, 0x7, 0x4330, 0xd, 0x8, 0x2}, {0x8000, 0x0, 0xf, 0x101, 0x6eb47555, 0x6}, {0x8, 0x0, 0x0, 0x6, 0x1, 0x5}, {0xf4, 0x0, 0x2, 0xb46, 0x4, 0x3}, {0xc, 0x4, 0x1000, 0x70, 0xc, 0x2}, {0x6, 0x0, 0x1, 0xb, 0x7, 0x4}, {0x3, 0x9, 0x3, 0x0, 0x9, 0x8d}, {0x6, 0xa3, 0xf65, 0x10, 0x0, 0x7fffffff}, {0x200, 0x1, 0xf7c, 0xfffffffe}, {0xd1, 0x7, 0xfffffff5, 0x800, 0x2, 0x6}, {0xffff, 0xcd, 0x5, 0xffffffff, 0x974, 0x1}, {0x7, 0xfff, 0x9, 0x2, 0xcd53, 0x3}, {0x0, 0x3, 0x7, 0x3, 0x8, 0xffff}, {0x80, 0x4, 0xa73, 0x10d2, 0x401, 0x40}, {0x46b, 0x2, 0xa95, 0x2, 0x2, 0x101}, {0xff, 0x2, 0x10, 0x2790, 0x5, 0x6}, {0x3, 0x5, 0x1, 0x1ff, 0xa, 0xc9e}, {0x2, 0x1ff, 0x6, 0x1, 0x7fff, 0x8}, {0xd, 0x3, 0x4, 0x3, 0xffff5952, 0x6}, {0x400, 0x6, 0xd5, 0x5, 0x7, 0x4}, {0x5, 0x220c5914, 0x5, 0xfffffffd, 0x5, 0x6}, {0x5c2, 0xfffffff9, 0x8, 0x3, 0xe, 0xffffffff}, {0xc, 0xf69a, 0x100, 0xe, 0x8, 0x6feef490}, {0x4, 0x8, 0x8001, 0xa3, 0x1, 0x8}, {0xb, 0x9, 0x8001, 0x7f, 0xa, 0x7}, {0x7, 0x1, 0x3, 0x7d, 0x1ff, 0x2}, {0x2, 0x4, 0x1ff, 0x0, 0xd, 0x6}, {0x9, 0x5, 0xfb, 0x7, 0x7, 0x5}, {0xab, 0xd, 0x6, 0x6, 0x7, 0x1}, {0x0, 0x9, 0x5, 0x0, 0x0, 0x9}, {0x10, 0x1, 0x4, 0x2, 0x7, 0x401}], [{0xa}, {0x4}, {0x4, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x5}, {0x7, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x7}, {}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x3}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}]}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x1, 0x9, 0x10000000, 0x9, 0xfffffffd}, 0x5, 0xe, [{0xffffffff, 0x8000, 0x2a5b, 0x7, 0x4, 0x2}]}, [{0x3, 0x7, 0x4, 0x101, 0x5, 0x7}, {0x0, 0x52eb7e1d, 0x6, 0x1800000, 0x7}, {0x4, 0x101, 0x1, 0x0, 0x1, 0x6d0}, {0x3, 0x2, 0x81, 0x4, 0x5, 0x80}, {0xa2, 0x4, 0x7, 0x9, 0x4, 0x5}, {0x1, 0x5f1, 0xf15a713, 0xa9, 0x5, 0x100}, {0x7f, 0x8, 0x80, 0xe942, 0x1}, {0x7, 0x5, 0x1, 0x2, 0x9, 0xf1b}, {0x2, 0x8, 0x2, 0x4, 0x4, 0x1ff}, {0x1ff, 0x1, 0x1, 0x5, 0x7, 0xfff}, {0x5, 0xf61e, 0xf8f, 0x3, 0x7fff, 0x1}, {0x9, 0x5, 0x8, 0x10001, 0x29f3, 0x1ff}, {0x2, 0xe4, 0x0, 0x0, 0x8797, 0x1}, {0x401, 0xffffffff, 0x401, 0x2, 0x81, 0x9}, {0x8, 0x9, 0x0, 0x0, 0x800, 0x6a74}, {0x80000, 0xf, 0x5f16, 0x6, 0x1, 0x7}, {0xa, 0x9, 0xc7d, 0xa, 0x0, 0x9}, {0x3, 0x4, 0x800, 0x81a, 0x80000001, 0x80}, {0xffffffff, 0x3, 0x7, 0x3, 0x7fffffff, 0x4}, {0x4, 0x9, 0x1, 0x99e, 0xfff, 0x1}, {0x3, 0x8, 0xf0d9, 0x8, 0x400}, {0xd, 0x0, 0x0, 0x3, 0x1, 0x8}, {0x2, 0x1e0000, 0x4, 0x56, 0x9, 0x1aba}, {0x3, 0xbc07, 0x2, 0xffffffff, 0x9, 0xff}, {0xffffffff, 0xc, 0x3, 0x269, 0x7fff, 0x40}, {0x540, 0x8fd, 0x7, 0x8, 0x100, 0xb}, {0x3, 0x7f, 0x4b8, 0x6, 0x7fff, 0x4}, {0x9, 0x2, 0x7ff000, 0x5, 0xa, 0x1}, {0xffffffcd, 0x2, 0x2, 0xa93, 0x400, 0xffffffff}, {0x2, 0x9a, 0xd81, 0x7, 0x5, 0x2}, {0xeb0b, 0x5d, 0x10001, 0x5, 0x60, 0x4}, {0x2, 0x400, 0x773, 0x3, 0xffffffc0, 0x9}, {0x9a3, 0x3, 0x1, 0x1, 0x9e, 0x8}, {0x32, 0x2, 0x0, 0xd, 0x8, 0xcb}, {0x80000001, 0x3, 0x7ff, 0x6a, 0x7, 0x8}, {0x5, 0x8, 0xb, 0x4, 0x2, 0x400}, {0x6bd, 0x200, 0xfff, 0x4, 0x0, 0x100}, {0x5, 0x1, 0x7, 0x8001, 0x9, 0x1}, {0xfffffffa, 0x1000, 0xd, 0x40, 0x1, 0x5}, {0x4, 0x4, 0x70b0, 0x55f, 0xa64a, 0x1}, {0x5327, 0x6, 0x2, 0x200, 0xfff, 0x9}, {0x1, 0x1, 0x2, 0x3, 0x10000, 0xffffff01}, {0x8, 0x5, 0x5, 0x1, 0x7, 0x3}, {0x3, 0x3, 0x8, 0x7, 0x3, 0x6}, {0x10000, 0x0, 0x200, 0x2dd9, 0x6, 0x5}, {0x8000, 0xb083, 0x6, 0x7fff, 0xc, 0x8}, {0x5, 0x5, 0x3d, 0x1c, 0x80, 0xfffffc6d}, {0x3df9dba2, 0x3, 0x4, 0xa, 0x7, 0x20f2024f}, {0x1, 0x7fff, 0xcb5b, 0x3, 0xec5, 0x1}, {0x0, 0x4, 0x9, 0xfffffffd, 0xffffff69, 0x8}, {0x2, 0x101, 0xff, 0x5, 0x0, 0x1}, {0x80000000, 0xfffffffe, 0x8, 0x8, 0x2, 0x5}, {0xd, 0xff, 0x6, 0x8, 0x8, 0x6}, {0x7c6, 0x7, 0x6, 0x8001, 0x8, 0x1a4d}, {0x24ef67c7, 0x6, 0x9, 0x5, 0xfffffffe, 0x6}, {0x8, 0x7, 0x7, 0x9, 0xfff, 0x2}, {0x6, 0xe, 0x3, 0x44b2, 0xe6b, 0x9}, {0x6, 0x80000001, 0x0, 0x10, 0xfc6, 0x4}, {0x3, 0x10, 0x6, 0x800, 0x7, 0x6668b8cc}, {0xff, 0xc3, 0x9, 0x7, 0x4, 0x2}, {0x3, 0xfffffffd, 0x2, 0x9, 0x7, 0x3}, {0x4, 0xf60, 0x8b, 0x8001, 0x5, 0x1}, {0x5, 0x4, 0x19a, 0x4b7, 0x0, 0x4}, {0x9, 0xfffffffc, 0x1ff, 0x8001, 0x400, 0xad1}, {0x7298, 0x5479, 0x1, 0x5, 0x2, 0x2}, {0xa, 0x6, 0x1, 0x6, 0x2, 0xc46}, {0x6, 0x3, 0x5, 0x9, 0x5, 0x3f5f}, {0x2, 0x8000, 0x8, 0x6, 0xffff, 0x2}, {0x3, 0x3ff, 0x69c7, 0x7, 0xe2}, {0x8, 0x0, 0x1, 0x80000000, 0xa0000, 0x5}, {0x7fffffff, 0x362f6246, 0xfd1c, 0x2, 0x3, 0xccbf}, {0x800, 0x3, 0xe1f1, 0x8, 0x2, 0x2}, {0x2, 0x3, 0x9, 0x6, 0x5, 0x4}, {0x7, 0x6ff3, 0x96d, 0x8, 0x213a87bb, 0x1000}, {0x7, 0x200, 0x2, 0x2, 0x5, 0x5}, {0xffffff1c, 0xfff, 0x2, 0x4, 0x8, 0x4}, {0x6, 0x0, 0x0, 0x4, 0x6, 0x1}, {0x0, 0x8, 0x8, 0x4, 0x1ff, 0x7}, {0x0, 0xfffffffd, 0xd, 0xd, 0xac, 0x10a4}, {0x1000, 0x81, 0x81, 0x0, 0xfffffffb, 0xddb}, {0x0, 0x20, 0x186, 0x1, 0x0, 0x65d}, {0x788f25cd, 0x4, 0x80000000, 0xf4, 0x1, 0x969e}, {0xf, 0xe6, 0x3, 0x7, 0x7f, 0xe261}, {0x7, 0x5, 0x4, 0x4, 0x9, 0x6}, {0x4, 0x3, 0x2, 0x0, 0x200, 0x5}, {0xfff, 0x1, 0x0, 0x2, 0x100, 0x1}, {0x2, 0x4, 0x2, 0x3, 0x5}, {0xf, 0xffffffff, 0x3, 0x2, 0x9, 0x7}, {0x7fffffff, 0x6, 0x5, 0x401, 0x5, 0xffffffff}, {0x1, 0x36, 0x36, 0x3, 0x5, 0x1000}, {0x9, 0x0, 0x2, 0xfffffffb, 0x4, 0x1}, {0x800000, 0x9, 0xe, 0x7, 0x2, 0x9}, {0x80000000, 0x6, 0xfffffffb, 0x1, 0x7, 0x7}, {0x78cb, 0x1, 0x770, 0x10000, 0x1, 0x5}, {0x4646, 0x8000, 0x2, 0x3, 0x0, 0x9}, {0x4, 0x8, 0x0, 0x3, 0x32a, 0xaa5}, {0x7, 0xfe000000, 0x40, 0x5c42, 0x4, 0x5}, {0x3ff, 0x80000001, 0x7, 0x18, 0x1, 0x3e}, {0x8, 0x1, 0x4798, 0x0, 0x7, 0x1000}, {0x9, 0xa7a, 0xd7fa, 0x8, 0xff, 0xfff}, {0xfffffffe, 0x8, 0x7fffffff, 0x7, 0x4077, 0x9}, {0x9, 0x2, 0x3, 0x0, 0x7ff, 0x1}, {0x9, 0x6, 0x0, 0x10000, 0x3, 0x7fff}, {0xffffff45, 0xc, 0x8903, 0x8, 0x1, 0x40e}, {0x0, 0x0, 0x8, 0x7fff, 0xfffffffb, 0x7fffffff}, {0x401, 0x40, 0x5, 0x7ff, 0x8, 0x5}, {0x1, 0x3, 0xa, 0x3, 0x5, 0x4}, {0x3ff, 0x7, 0x6, 0x7fff, 0x6, 0xfffffff9}, {0x6, 0x76dd, 0xffffffff, 0x0, 0x9, 0xffffffff}, {0x0, 0x1000, 0x3, 0x3, 0x5, 0x1}, {0xa3dc, 0x9, 0x4, 0x1, 0x8, 0x5}, {0x0, 0x9, 0xa, 0x80000000, 0x2, 0x2}, {0x5, 0x8, 0x1, 0x8, 0x0, 0xf95}, {0xffffffff, 0x6, 0x9, 0x1, 0x5, 0x7f}, {0x9, 0xfffffff7, 0x1, 0x1df, 0xfffffff9, 0x7}, {0x1, 0x3, 0x602, 0x9, 0x8001, 0x2}, {0x4, 0x101, 0x3, 0x220f, 0x80, 0x5}, {0x8, 0x1, 0x9, 0xe3cb, 0x1, 0x3}, {0x200, 0x5, 0x89, 0x1, 0x6, 0x4}, {0x7, 0x8, 0x1, 0xa378, 0x9, 0x2}, {0x6, 0x3, 0x0, 0x1, 0xdf, 0xfffffffe}, {0x7f, 0x1, 0x6b580000, 0x7f2, 0x8, 0x8}, {0x8, 0x5, 0x1, 0x4fe, 0x3, 0x6}, {0x8, 0x5, 0x70fb, 0x7fcb, 0xa, 0x6}, {0x1, 0x4, 0x1, 0x7, 0x3, 0xd}, {0x3, 0x81, 0x0, 0x4, 0x7f, 0x7}, {0x3, 0xfff, 0xff, 0x2, 0x80000001, 0xc}, {0x8, 0xb, 0x242c, 0x10001, 0x6, 0xff}], [{0x5, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x2}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x5}, {0x2}, {}, {0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x3}, {0x2}, {}, {0x5}, {0x2}, {}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x7}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x0, 0x1}, {}, {0x7}, {0x3}, {0x3}, {0x1, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {}, {0x4}, {0x3, 0x1}, {0x2}, {0x4}, {0x4}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x1}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x3}, {0xbc301624a504323a, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}]}}]}, {0xef, 0x6, "ea35376c2215ac1e0b40cae8432f18692ad70f952878bfb88dc75962441f3f2ee1a92ea0bd10b075c73da0819490becd08a71a672688e072823829efd99602ceefd035a85ab45d56ed2c2253247ff39d8dcba50f88b2f9abe8caa8624201e20cb877e9a5650cfdda966191fefd5a10ff0c3c483197639b554e5fdc1c9d192d960d0c50272c06d77ab0760bf629388a1af75c04254720bd15e6b18025ccbce181ddc4a4c7d0205a4c1443ff2e778937d6f4841209e49fe4c381e5aa9cd3c7ded14216f0a8da11e4aa8bb1b677da884e01f6059d24fdaeae4317f7f66c53a8903c289ef2023af47747857f50"}, {0xc, 0x7, {0x0, 0x27fc7f7bfa2515e2}}, {0xc}}}]}]}}]}, 0x3b14}, 0x1, 0x0, 0x0, 0x40040}, 0x2004c080) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004980)) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r12, &(0x7f0000004c00)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004a00)={0x1c0, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x81}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x61}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}]}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6_vti0\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x84, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '\\\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'syzkaller1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x400}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0xc004) (async) r13 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_linger(r13, 0x1, 0xd, &(0x7f0000004c40), &(0x7f0000004c80)=0x8) (async) sendmsg$TIPC_NL_NET_GET(r11, &(0x7f0000004e80)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000004e40)={&(0x7f0000004d00)={0x128, r8, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf2d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9f87}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8962}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5e7}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x80c1}, 0x74) 2m20.219168155s ago: executing program 3 (id=1228): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) recvfrom$inet(r3, &(0x7f0000000100)=""/58, 0x3a, 0x2000, 0x0, 0x0) 2m20.218815299s ago: executing program 3 (id=1230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a00)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40041) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xe9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0xae) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) 2m20.111856779s ago: executing program 3 (id=1232): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2}, 0x50) syz_io_uring_setup(0x5e75, &(0x7f0000000400)={0x0, 0x20000, 0x40, 0x0, 0x2b1}, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000041000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESDEC=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r5, 0x4b45, 0x2) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0x1c, 0x14, 0x43, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd26, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x88e5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe5b7, 0x904, 0x5, 0x5e0, 0x2}, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) r7 = socket$kcm(0xa, 0x5, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000010140)={0x2020}, 0x2036) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1d00000019698312ecbb00000700000080040700", @ANYBLOB="0300000000", @ANYBLOB, @ANYBLOB], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="f6532abd7000fedbdf250200000008003f0007000000080069000800000036e511011d3434521acc822a72990ae77d06829137af7408551a87dd82730a048532f5437094ab553bd0348aa259283da63ffb458109bbff56bc3246d90d0e70ab125ccfab4425959c4610ee640e08af1a0a2600eec1b86e63ef1a7c5db52b254568a75e78f0908f530fa6f729bfc11fb181dfb725d994"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r10, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}}, 0x28}}, 0x0) 2m19.640443929s ago: executing program 3 (id=1237): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = accept4(r0, &(0x7f00000003c0)=@nfc, &(0x7f0000000180)=0x80, 0x800) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5001000010001304000000000c000000fe80000000000000000000000000009d20010000000000000000000000000000000000004e2400000a00002000000000", @ANYRESDEC=r2, @ANYRES32=0xee00, @ANYBLOB="ac1e000100000000000000000000000000000010320000006401010200000000000000000000000001000000000000000000000000000000000000e0ff0000000000000000000000ffffffffffffffff00000000000000000800000000020000fbff09ffffffffff00000000000000000800000000000000cc000000000000000500000000000000f6000000000000e64b23f61fb5bd347e76000000000000000000000000000200010100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000700000000000000000000000000000000000000000000009800000040"], 0x150}, 0x1, 0x0, 0x0, 0xc00}, 0x4000) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0xf) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, &(0x7f0000000040)) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000200)={'geneve1\x00'}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) 2m19.631145328s ago: executing program 36 (id=1237): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = accept4(r0, &(0x7f00000003c0)=@nfc, &(0x7f0000000180)=0x80, 0x800) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5001000010001304000000000c000000fe80000000000000000000000000009d20010000000000000000000000000000000000004e2400000a00002000000000", @ANYRESDEC=r2, @ANYRES32=0xee00, @ANYBLOB="ac1e000100000000000000000000000000000010320000006401010200000000000000000000000001000000000000000000000000000000000000e0ff0000000000000000000000ffffffffffffffff00000000000000000800000000020000fbff09ffffffffff00000000000000000800000000000000cc000000000000000500000000000000f6000000000000e64b23f61fb5bd347e76000000000000000000000000000200010100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000700000000000000000000000000000000000000000000009800000040"], 0x150}, 0x1, 0x0, 0x0, 0xc00}, 0x4000) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0xf) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, &(0x7f0000000040)) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000200)={'geneve1\x00'}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) 2m13.273794565s ago: executing program 0 (id=1367): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000240)={0x1, 0x1, 0x0, 0x10200000000008, r3}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x4000007fffffff}) fcntl$lock(r2, 0x25, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x6}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1000000000000073, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000580)={0x0, 0x0, 0x80800}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8, 0x7b0, 0x0, 0x81, {{0x32, 0x4, 0x1, 0x7, 0xc8, 0x64, 0x0, 0x1, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x2c, 0x87, 0x0, 0x0, [0x8000, 0x80000000, 0x10, 0x5, 0x2, 0x4, 0x0, 0x9d, 0x7f, 0x10001]}, @lsrr={0x83, 0x13, 0x4d, [@empty, @loopback, @rand_addr=0x64010100, @empty]}, @rr={0x7, 0x17, 0x2f, [@broadcast, @multicast1, @private=0xa010100, @rand_addr=0x64010102, @loopback]}, @generic={0x86, 0x6, "af427efd"}, @noop, @timestamp_addr={0x44, 0x24, 0xcf, 0x1, 0x2, [{@remote, 0x40}, {@remote, 0xb0}, {@loopback, 0xfffffe3c}, {@private=0xa010100, 0x59}]}, @timestamp_prespec={0x44, 0x2c, 0x58, 0x3, 0x6, [{@empty, 0x3f80}, {@private=0xa010102, 0x7f}, {@broadcast, 0x3000}, {@dev={0xac, 0x14, 0x14, 0x34}}, {@loopback, 0x7}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) sendto$packet(r1, &(0x7f0000000080)="6bb71c53a61d10fcbe8abe287d560d8ef74886bc80", 0x15, 0x0, &(0x7f0000000200)={0x11, 0xf5, r6, 0x1, 0x94, 0x6, @random="f7d92f35e799"}, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 2m13.273039271s ago: executing program 0 (id=1368): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(compress_null-generic),blake2s-224-arm)\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(compress_null-generic),blake2s-224-arm)\x00'}, 0x19) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400100001000010000000000fddbdf25fc0200000000000000000000000000000000000000000000000000000000000040000000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0xd43c2e9371f6a157) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(compress_null-generic),blake2s-224-arm)\x00'}, 0x58) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(compress_null-generic),blake2s-224-arm)\x00'}, 0x19) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400100001000010000000000fddbdf25fc0200000000000000000000000000000000000000000000000000000000000040000000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0xd43c2e9371f6a157) (async) 2m13.126448866s ago: executing program 0 (id=1371): mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x9, 0x0, 'client0\x00', 0x40000000, "a4fd67a089cdedb9", "1142ef216542d2fed9d92bd3c2cd9aa737b4868106127ce74a13802fea778e79", 0xfbc, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0xe, 0x77, 0x0, 0x0, @time={0x1, 0x3}, {0x0, 0x40}, {}, @ext={0x21, &(0x7f0000000140)="724131ea837488cc688543133d9fd980f5b0653313a7b2b4e5cd836e1b5e3f1c9b"}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sysfs$1(0x64, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c6173740000000004000280080003400000010514"], 0xe4}}, 0x20050800) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a3000000000090001007379"], 0xdc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipmr_delroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x800000, {0x80, 0x20, 0x0, 0x40, 0x0, 0x4, 0x0, 0x5, 0x2400}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x2e0, r4, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x130, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2102}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4eb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x4, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000380)="e8", 0xfffffffffffffe98, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000300)='htcp\x00', 0x5) shutdown(r6, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0) 2m12.984638911s ago: executing program 0 (id=1375): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85322, &(0x7f0000000100)={{0x0, 0xfa}}) tkill(0x0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES16=r1], 0x7c}}, 0x2400c001) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r5}, 0x3f) recvfrom(r5, &(0x7f00000004c0)=""/186, 0xba, 0x10021, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRES16=r2, @ANYRES16=r2, @ANYBLOB="a567fdbe43e5fd2cb4303b1180d265afa83be31c385e78f4489c6b2fcb5462f1ff22ef500ba85b58edb3bcf0f1e829394a3460896805e7331e624693ba3f0d23c06691c672adbec25a641bd81934f04cedd77b7bb1cce7c829d31d981038633497fd4212db45050c25d2d60af1f220a4bea344e03fb83e0b597cdfccb503e263e1d920ef36f2d05ef41ae159be491cc0bf44d55c89905b820a74d13a3909763db109aac8946c2599f3379e8cf48c32c5661041849a550696ee17a74264affaaffbffadfa5e186e115e38da3f70f3ec675a8d07a5cab06615665ac44afd", @ANYBLOB="04000300ac00028054070180080001000300000008000100060000000800010000000000080001000700000008000100080000000800010007000000080001000200000008000100020000000800010002000000080001000800000024000180080001000300000008000100020000000800010000000000080001000000000014000180080001000200000008000100030000001c000180080001000000000008000100140000000800010001000000040003003800028034fc0080080001000500000008000100050000000800010006000000d78101000800000008000100080000000800010002000000040003"], 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x4050) 2m12.158430637s ago: executing program 0 (id=1392): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0xfffffffffffffd19) (async) write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10}, 0x10) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000080)={'binder0\x00'}) dup3(r0, r0, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x31a5098, 0x0) (async, rerun: 64) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 2m11.069749073s ago: executing program 0 (id=1402): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x18c0}, 0x40055) 1m44.119990379s ago: executing program 37 (id=1402): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x18c0}, 0x40055) 13.036624388s ago: executing program 5 (id=2783): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000a1ffffffffffffff004500001c000000000001907800000000ffffffff2a00907800000000"], 0x0) syz_emit_ethernet(0x85, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@x25={0x805, {0xa32ab84708da414, 0xff, 0x27, "f64ea0e9b066e0e79fcd84596b574d7b31c43a634f6b70ebae013195f503e9a112d0b93fc123994f01a4ea1ce616753def4ccb6c78c10de7863286901bf27d45f5134334a203cbc613b129a938c8f9eea6145d98aa0024b362968b0dd942bd413bb517bea7de6c593adde79726f3a7b3dd3e03c8"}}}}, &(0x7f0000000000)={0x1, 0x3, [0xb31, 0xe5d, 0x2b9, 0x9c3]}) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x100, 0x498000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cc0000000000000012"]) 13.035985179s ago: executing program 5 (id=2785): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000004865030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 12.170653101s ago: executing program 5 (id=2792): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000009d00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000140)={0x0, "a164c2ff3a839d6225acc1c548a86660e2ce7077eb680232d934b62f7a7d1646bce0f7715f7ca40e6db4e75a8303b37f29e3cf2b510b5929147ab672a7a91837"}) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x408a1, 0x0) 12.170354728s ago: executing program 5 (id=2793): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x40, 0x21, 0x50}, 0x18) mkdirat(r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RREADDIR(r1, &(0x7f0000000140)={0xc9, 0x29, 0x1, {0x796, [{{0xe, 0x0, 0x4}, 0xe2, 0x2, 0x7, './file0'}, {{0x40, 0x1, 0x4}, 0x7bd0, 0x81, 0x7, './file1'}, {{0x20, 0x1, 0x4}, 0x6, 0x53, 0x7, './file0'}, {{0x20, 0x2, 0x3}, 0x6, 0x4, 0xd, './file0/file0'}, {{0x20, 0x4, 0x6}, 0x1, 0xff, 0x7, './file0'}, {{0x1, 0x1, 0x6}, 0x9, 0xf7, 0x5, './bus'}]}}, 0xc9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x40, 0x21, 0x50}, 0x18) (async) mkdirat(r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) pipe2$9p(&(0x7f0000000000), 0x4800) (async) write$P9_RREADDIR(r1, &(0x7f0000000140)={0xc9, 0x29, 0x1, {0x796, [{{0xe, 0x0, 0x4}, 0xe2, 0x2, 0x7, './file0'}, {{0x40, 0x1, 0x4}, 0x7bd0, 0x81, 0x7, './file1'}, {{0x20, 0x1, 0x4}, 0x6, 0x53, 0x7, './file0'}, {{0x20, 0x2, 0x3}, 0x6, 0x4, 0xd, './file0/file0'}, {{0x20, 0x4, 0x6}, 0x1, 0xff, 0x7, './file0'}, {{0x1, 0x1, 0x6}, 0x9, 0xf7, 0x5, './bus'}]}}, 0xc9) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) 12.120750442s ago: executing program 5 (id=2794): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async) r1 = socket$kcm(0x2d, 0x2, 0x0) (async, rerun: 32) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x2) (rerun: 32) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) (async, rerun: 64) close_range(r1, r0, 0x2) (async, rerun: 64) close(0x3) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r6, &(0x7f0000000000)="0a000000010021", 0x7) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x99fe681834aac99b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0xc, &(0x7f0000000000)=0x5402, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) mount(&(0x7f0000000280)=@rnullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='ufs\x00', 0x22, 0x0) 12.010207129s ago: executing program 5 (id=2795): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=@bridge_getneigh={0x20, 0x1e, 0x200, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0x31800, 0x101}}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 12.000945708s ago: executing program 38 (id=2795): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=@bridge_getneigh={0x20, 0x1e, 0x200, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0x31800, 0x101}}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 3.450197232s ago: executing program 8 (id=2977): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) syz_emit_ethernet(0x5a, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50ecffcd62b54836c69214cdfbca6a6314c992d77ddda5c4cd4fe71078ffb92ad3f6830800001e16f086fd401a000000"], 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000480)=0xffffffff, 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x38}}, 0x0) 3.44988198s ago: executing program 8 (id=2978): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0000}}, './file0\x00'}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x9, 0x0, 0xffffffff, 0x7fffffff}}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x4}, 0x8) (async) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x10000000}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x7f7}, &(0x7f0000000240)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="170a29bd7000fedbdf25100000001400018006000100020000000800050003"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) (async, rerun: 32) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, r8, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000380)={r5, @in={{0x2, 0x4e24, @broadcast}}, [0x0, 0x1, 0xfffffffffffffff8, 0x740, 0x100000000, 0x0, 0xe3c, 0x80000000, 0x4, 0xd, 0x38b, 0x3, 0xa, 0x400000000000000, 0xfffffffffffff5ba]}, &(0x7f0000000280)=0x100) (async) listen(r3, 0xfffffff8) (async) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (async, rerun: 64) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000480)={'lo\x00', {0x2, 0x4e21, @broadcast}}) (async, rerun: 64) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0xffffffffffffffff) setreuid(0x0, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x40078, 0x0) 3.449065877s ago: executing program 8 (id=2981): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x8, 0x80142) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) write(r2, &(0x7f0000000100)="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", 0x103) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f00000000c0)=0x7) 2.549873015s ago: executing program 8 (id=2988): r0 = mq_open(&(0x7f0000000100)='#.\x1e$@#\x00', 0x40, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x8000000000000001, &(0x7f0000ffd000/0x3000)=nil, 0x3) mq_notify(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1) 2.549683102s ago: executing program 8 (id=2989): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x7b}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x418002, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x4}, {0xb, 0x7}, {0x6, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40004) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r6, &(0x7f0000000000)=0xfe8e, 0x12) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) getresgid(&(0x7f0000000500)=0x0, &(0x7f0000000540), &(0x7f00000005c0)) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340), 0x100c800, &(0x7f0000000600)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}], [{@flag='sync'}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@dont_hash}]}}) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 2.483539039s ago: executing program 8 (id=2991): r0 = socket(0x1d, 0x2, 0x6) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc227, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xd0, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x0, 0x18, {0x9, 0x21, 0x5, 0xc, 0x1, {0x22, 0xf52}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9b, 0xfd, 0x7}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x6, 0x80, 0x40, 0xff, 0x7}, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f51200103100b"], 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x445}}, {0x20, &(0x7f00000003c0)=@string={0x20, 0x3, "d6b310983fd860a08225e3849975afd274ed95b443f8efa656dc5c5a8197"}}, {0x80, &(0x7f0000000400)=@string={0x80, 0x3, "8558d65ca15255e4a04e08356ddff7ddee806cd8eaaf9ab8b8bf6e2589fd2812f2ac7989a5575183702a7a084cdf7b1695f134873f0fbb1220a5c5ae248dff16b69c45b9b8f7f024e700d4753fce2e60358f79168cbafb971ebe13bb2e1c3ff81e87aba91918acca45cb667bfb912b3f39838d512bf09caca86d72243cbe"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2009}}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000540)={'syztnl1\x00', r1, 0x8, 0x40, 0x9, 0x7, {{0x33, 0x4, 0x0, 0x9, 0xcc, 0x64, 0x0, 0xff, 0x29, 0x0, @broadcast, @multicast2, {[@generic={0x86, 0x12, "e9efcc409760b496291ceea0727f272c"}, @timestamp_prespec={0x44, 0xc, 0x26, 0x3, 0x0, [{@loopback, 0xffffff1a}]}, @timestamp_prespec={0x44, 0x4c, 0x36, 0x3, 0x6, [{@loopback, 0x80000000}, {@multicast1, 0x10}, {@local, 0xbef9}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x2}, {@private=0x9a96842, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@local, 0x4}, {@private=0xa010102, 0x1}, {@empty, 0xbe}]}, @cipso={0x86, 0x26, 0x2, [{0x2, 0x12, "f0b29cebabb9cbe0bd2ecefa51ec196a"}, {0x6, 0xe, "a2d45e1d0f886ceeb07f44e3"}]}, @end, @end, @timestamp={0x44, 0x14, 0x18, 0x0, 0x8, [0x9, 0x1, 0x1, 0x6bcc]}, @rr={0x7, 0xf, 0x98, [@broadcast, @empty, @multicast1]}]}}}}}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x0, {}, 0x1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) socket$packet(0x11, 0x3, 0x300) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b98cb8f8ff07008e000000000b00", 0x0, 0x7fffffff, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) 1.389713379s ago: executing program 9 (id=3008): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7, @none, 0x73, 0x1}, 0xe) r1 = epoll_create1(0x80000) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) (async) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) epoll_wait(r1, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0xd2) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) (async) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) 1.160687952s ago: executing program 9 (id=3009): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x1000, 0x2, {0xa, 0x78, 0x0, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x1a}, @IFA_CACHEINFO={0x14, 0x6, {0x1000000, 0xfffff001}}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x48}}, 0x0) 1.100575922s ago: executing program 9 (id=3010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x29b63}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x10}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x2c044405, 0x0, 0x0) 1.020307499s ago: executing program 9 (id=3011): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="19d72514ea"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0x8, 0xc9100122, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}}, 0x4000010) (async) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}}, 0x4000010) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) pread64(r0, &(0x7f0000000080)=""/221, 0xdd, 0x7fffffffffffffff) r10 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002b000400000000000000000007000000030000000000000096f00ef208000200147c70f4f23fc586d36bb955b6490366712afb41388fa42a438c2d120ae1f4447edcb5fd3bf7dcf9147f37d9b1cf46ea879e1b34d45ba78f613e7e93a61eb3f3e33c95d46cedd2d88581f7340a99e8054c4bcadc199e0473f8a00a433aa1c8", @ANYRES32=r11, @ANYBLOB], 0x28}}, 0x0) write(r10, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 929.874596ms ago: executing program 9 (id=3012): keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x0}) (async) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x0}) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000240)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x5, '\x00', @p_u32=0x0}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) read$snapshot(r5, &(0x7f0000000000), 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r3, @ANYBLOB="000000000000000008000300", @ANYRES32], 0x28}, 0x1, 0x8}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r3, @ANYBLOB="000000000000000008000300", @ANYRES32], 0x28}, 0x1, 0x8}, 0x0) 549.17635ms ago: executing program 7 (id=3021): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000740)={0x8000, 0x2, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x3, r3, 0x10000000, 0x80000005, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x6, r3, 0xfbfbfbfb}) close_range(r0, 0xffffffffffffffff, 0x0) 479.069391ms ago: executing program 7 (id=3022): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x5452, 0x0) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)='io\x00') pread64(r1, &(0x7f00000001c0)=""/204, 0xcc, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200002, 0x40200003, 0x0, 0x6, 0x7}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') write$sysctl(r2, &(0x7f0000000140)='5\x00', 0x2) read$rfkill(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) close(r4) socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x119, 0x1b, 0x0, &(0x7f0000000200)) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 476.073934ms ago: executing program 7 (id=3025): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8910, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_addrs=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x50, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x24}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000011) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000a213180f9a1396f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000068e9eab5144520321bddec87d0685595a9e24aa765ede61fc54d00b9c08d3e95e620d394314febdf3658569cd803ed674f4e9c1d9d3f6c2e246297a889785d246878fbb98e8d2d21e72e49a209154080de0197ae9c77e9c00655cebfe253"], 0xb8}}, 0x4000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r8 = socket(0x2, 0x80805, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000040)={{r9}, 0x0, 0x8, 0x6}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r10, &(0x7f0000004180)={0x2020}, 0x2020) 475.930274ms ago: executing program 1 (id=3026): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) (async) r3 = syz_clone(0x1000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) rt_sigqueueinfo(r3, 0x1, &(0x7f0000001180)={0x2f, 0xe0, 0xffff0001}) (async) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async) unshare(0x22020600) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r8], 0x1c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 419.030402ms ago: executing program 7 (id=3027): r0 = fsopen(&(0x7f0000000040)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x2}, 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x168, 0x10, 0x713, 0x70bd28, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffd, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@multicast2, 0x4d5, 0x32}, @in=@initdev={0xac, 0x1e, 0x2, 0x0}, {0x2, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1c00000000000, 0x0, 0xd}, {0x11df, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x60, "00000000000000000000a1c31b3718243e97a18e6085921a4cf3f6e2bca135414f6bec0c"}}, @tfcpad={0x8, 0x16, 0x2b}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 415.935433ms ago: executing program 1 (id=3028): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000000)) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='btrfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') 415.104339ms ago: executing program 7 (id=3029): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000680)=ANY=[@ANYBLOB='LINE3 \'Master?Capture Switch\' 00000000000000000000\nDIGITAL3 \'CD\' 00000000000000000000\nALTPCM \'CD\' 00000000000000 Capture Switch\' 00000000000000000000\n'], 0xa6) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "623a05b9", "12772541f8eb02bb"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x3, 0x6, 0x1) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = accept$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockname$packet(r8, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r5, @ANYRES32=r9, @ANYRESDEC=r9], 0x3c}}, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="fe12ffff00"/20, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="010001000000000000000000000000000000000000000000000000281b5f6e8458bfb21d785cd766e9388dbb8d646203c6f6117f5d219fcc19f3c32e1ec13724c740cdd9770c192cf0ae2470b3aefbecc55e346abe32c67601658e81178d6a7e2886236fff16872da8a6f5aa5ee66cad191e6a2b07f7ed113ce6df562df4999873d0c14918fa5b36670faafaff3d0211f839122ceaea49c023703a830827cb739038963e2f55caf659eb1562ff769fd7fb637d6cb906fc7dca89f1f2a6ab381daff500e6c572237f1a03bd3e9f3a55bcff0700009ba50404000000000000000000"], 0x50) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) socket$inet6(0xa, 0x2, 0x0) 250.289427ms ago: executing program 1 (id=3030): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000709b06001c0012800e00010069703665727370616e000000080002800400120008000a00", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x105, 0x5000003a, r6, 0x0) creat(&(0x7f0000000200)='./file5\x00', 0x10) close_range(r5, 0xffffffffffffffff, 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x14084, &(0x7f0000000400)={[{@dyn}]}) 170.455206ms ago: executing program 7 (id=3031): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x64, 0x0, &(0x7f0000000080)=0x4f) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00', 0xffffffff}}}, &(0x7f0000000040)=0x84) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000014) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000340)=0x8, 0x4) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES64, @ANYRES8=0x0, @ANYRES16=r0, @ANYRES16=r0], 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/181, 0xb5}], 0x1, 0x1ff, 0x8) mprotect(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000002) 170.016865ms ago: executing program 1 (id=3032): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fstat(r1, &(0x7f00000003c0)) ioctl$COMEDI_CMDTEST(r1, 0x8050640a, &(0x7f00000002c0)={0x9fc791, 0xcc3f49c6059d095b, 0x10, 0xfffffffd, 0x80, 0x1, 0x80, 0x0, 0x80, 0x8001, 0x2, 0x400, &(0x7f0000000180)=[0x1, 0xf0, 0x6, 0x7, 0x0, 0xffff], 0x6, &(0x7f00000001c0)="46789a701ef81823a169c67d0e571b1872f14f5a6e2d90ca8a14a6f7812af17c8c03459b068537da2cc284091ae616a56282c9f735bad9e1e67916904a6773d61d7ae2993115e162ce5cba7ec39d1250eb1a14cc0a01245887f2a537bbd3a3c69b598ca5adeb15075cba203b905f5ebff374f5d5fb911001a665", 0x7a}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ff0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000040000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='module_request\x00', r5}, 0x18) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg$qrtr(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) 69.765445ms ago: executing program 9 (id=3033): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000486500030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 513.909µs ago: executing program 1 (id=3034): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x3, 0x1, 0x10}) (async, rerun: 32) write$selinux_access(r0, &(0x7f0000000080)={'system_u:object_r:systemd_passwd_var_run_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x2}, 0x5a) (async, rerun: 32) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000140)) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000180)={0x80, 0x2, 0x73, 0x0, 0x10, "77d6ebe7ddbbb95fbb97e24e2d4bd5e07a5357", 0x6d189805, 0xab0f}) (async) ioctl$BLKGETZONESZ(r1, 0x80041284, &(0x7f00000001c0)=0x3) (async) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) (async) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000240)={0x18, 0x0, {0x0, @local, 'vlan1\x00'}}) (async, rerun: 64) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/63, 0x3f}, {&(0x7f0000000340)=""/172, 0xac}, {&(0x7f0000000400)=""/95, 0x5f}, {&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000580)=""/243, 0xf3}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000780)=""/21, 0x15}], 0x9, 0xf9, 0x4) (rerun: 64) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0xc, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) close_range(r1, r0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000009c0), 0x200) close_range(r4, r5, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000a00)={0xcda, 0xe, 0x2, 0x5, 0x6}) (async) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000a40)) (async, rerun: 64) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a80), 0x600080, 0x0) (rerun: 64) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000000ec0)={0xd, 0x19, &(0x7f0000000ac0)="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"}) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000f00)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000f40), 0x4400, 0x0) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000f80), 0x4) (async) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000fc0)={0x2, 0x0, [{0xb, 0x0, 0x0, 0xaf1d, 0x5, 0x9, 0x6}, {0x1, 0x4, 0x5, 0x1000, 0x9, 0x1000, 0xb}]}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001040)={0x0, 0x4, 0x5, 0x7}, &(0x7f0000001080)=0x10) (rerun: 32) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000010c0)=@sack_info={r8, 0x7f, 0x3}, 0xc) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000001100)={0x0, 0xea60}, 0x10) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000001140)) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001180)={r8, @in6={{0xa, 0x4e22, 0x1, @empty, 0xffff}}}, 0x84) (rerun: 64) 0s ago: executing program 1 (id=3035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x3, 0x7, 0x6, '\x00', 0x7}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000100)={0x2180000000000000, 0xeeee8000, 0x20000000, 0x5, 0xf}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYBLOB='3']) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup3(r3, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r6, 0x401070c9, &(0x7f0000000000)) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockname(r9, 0x0, &(0x7f0000000080)) ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000380), &(0x7f0000002340)=""/4108, 0x100c}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000300)={[{0x101, 0x0, 0x8, 0x1, 0x4, 0xf, 0x1, 0x8, 0x3, 0x2, 0x0, 0x6, 0x200000006}, {0x5, 0x509, 0xa, 0xf, 0x8, 0x3, 0x8, 0x3, 0x1, 0x1, 0xe, 0x7, 0xb}, {0x801, 0xe78, 0x8, 0x8, 0x0, 0x5, 0x2, 0x9, 0xc5, 0xb5, 0x5, 0x33}], 0xffffffff}) kernel console output (not intermixed with test programs): super_common+0x5e5/0xfd0 [ 196.914792][T24862] ? snprintf+0xc7/0x100 [ 196.914801][T24862] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 196.914813][T24862] ? do_raw_spin_lock+0x12c/0x2b0 [ 196.914824][T24862] ? setup_bdev_super+0x337/0x730 [ 196.914842][T24862] ? set_blocksize+0x406/0x500 [ 196.914858][T24862] ? sb_set_blocksize+0x176/0x1d0 [ 196.914874][T24862] fuse_fill_super+0x1f2/0x2d0 [ 196.914885][T24862] get_tree_bdev_flags+0x389/0x620 [ 196.914895][T24862] ? __pfx_fuse_fill_super+0x10/0x10 [ 196.914906][T24862] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 196.914918][T24862] ? __fget_files+0x20e/0x3c0 [ 196.914931][T24862] fuse_get_tree+0x4bf/0x640 [ 196.914941][T24862] vfs_get_tree+0x8e/0x340 [ 196.914957][T24862] path_mount+0x1482/0x1fd0 [ 196.914972][T24862] ? __pfx_path_mount+0x10/0x10 [ 196.914986][T24862] ? kmem_cache_free+0x2d1/0x4d0 [ 196.914996][T24862] ? putname+0x154/0x1a0 [ 196.915011][T24862] ? putname+0x154/0x1a0 [ 196.915025][T24862] ? __x64_sys_mount+0x28d/0x310 [ 196.915038][T24862] __x64_sys_mount+0x28d/0x310 [ 196.915052][T24862] ? __pfx___x64_sys_mount+0x10/0x10 [ 196.915068][T24862] do_syscall_64+0xcd/0x4c0 [ 196.915083][T24862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.915097][T24862] RIP: 0033:0x7f5c5bd8ebe9 [ 196.915106][T24862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.915117][T24862] RSP: 002b:00007f5c5cb21038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 196.915136][T24862] RAX: ffffffffffffffda RBX: 00007f5c5bfb5fa0 RCX: 00007f5c5bd8ebe9 [ 196.915143][T24862] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 196.915151][T24862] RBP: 00007f5c5cb21090 R08: 0000200000000300 R09: 0000000000000000 [ 196.915157][T24862] R10: 0000000002010002 R11: 0000000000000246 R12: 0000000000000002 [ 196.915164][T24862] R13: 00007f5c5bfb6038 R14: 00007f5c5bfb5fa0 R15: 00007ffe0334cd28 [ 196.915174][T24862] [ 197.907396][T24869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2324'. [ 197.956014][T24871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2325'. [ 197.962237][T24871] ªªªªªª: renamed from wg2 (while UP) [ 197.983604][ T40] audit: type=1400 audit(1756087674.278:92076): avc: denied { setopt } for pid=24874 comm="syz.5.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 198.041637][T24880] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2327'. [ 198.137742][ T7676] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xe4 [ 198.193793][T24895] tun0: tun_chr_ioctl cmd 1074025677 [ 198.196020][T24895] tun0: linktype set to 32 [ 198.430810][ T5973] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 198.430846][ T5981] Bluetooth: hci4: command 0x1003 tx timeout [ 198.521952][ T1023] usb 14-1: USB disconnect, device number 9 [ 198.555440][T24911] FAULT_INJECTION: forcing a failure. [ 198.555440][T24911] name failslab, interval 1, probability 0, space 0, times 0 [ 198.559650][T24911] CPU: 2 UID: 0 PID: 24911 Comm: syz.9.2331 Not tainted syzkaller #0 PREEMPT(full) [ 198.559666][T24911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.559673][T24911] Call Trace: [ 198.559678][T24911] [ 198.559682][T24911] dump_stack_lvl+0x16c/0x1f0 [ 198.559699][T24911] should_fail_ex+0x512/0x640 [ 198.559712][T24911] should_failslab+0xc2/0x120 [ 198.559726][T24911] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 198.559738][T24911] ? __d_alloc+0x32/0xae0 [ 198.559753][T24911] __d_alloc+0x32/0xae0 [ 198.559765][T24911] ? d_alloc_parallel+0x99/0x1480 [ 198.559782][T24911] d_alloc_parallel+0x111/0x1480 [ 198.559799][T24911] ? lock_release+0x201/0x2f0 [ 198.559816][T24911] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 198.559839][T24911] ? do_raw_spin_lock+0x12c/0x2b0 [ 198.559850][T24911] ? __pfx_d_alloc_parallel+0x10/0x10 [ 198.559866][T24911] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 198.559879][T24911] ? kobject_get+0xbb/0x150 [ 198.559892][T24911] ? lockdep_init_map_type+0x5c/0x280 [ 198.559901][T24911] ? lockdep_init_map_type+0x5c/0x280 [ 198.559912][T24911] __lookup_slow+0x193/0x460 [ 198.559928][T24911] ? __pfx___lookup_slow+0x10/0x10 [ 198.559943][T24911] ? rcu_is_watching+0x12/0xc0 [ 198.559959][T24911] ? d_lookup+0xe7/0x190 [ 198.559976][T24911] lookup_noperm+0xe1/0x110 [ 198.559991][T24911] simple_start_creating+0xd1/0x1b0 [ 198.560004][T24911] start_creating.part.0+0x82/0x190 [ 198.560018][T24911] debugfs_create_dir+0x6c/0x5f0 [ 198.560030][T24911] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 198.560045][T24911] bdi_register_va+0x2c0/0x820 [ 198.560059][T24911] ? __pfx_bdi_register_va+0x10/0x10 [ 198.560072][T24911] ? do_init_timer+0xc9/0x110 [ 198.560088][T24911] super_setup_bdi_name+0xff/0x250 [ 198.560105][T24911] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 198.560123][T24911] ? fuse_fill_super_common+0x48a/0xfd0 [ 198.560134][T24911] ? rcu_is_watching+0x12/0xc0 [ 198.560147][T24911] ? lock_release+0x201/0x2f0 [ 198.560164][T24911] fuse_fill_super_common+0x5e5/0xfd0 [ 198.560174][T24911] ? snprintf+0xc7/0x100 [ 198.560184][T24911] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 198.560196][T24911] ? do_raw_spin_lock+0x12c/0x2b0 [ 198.560207][T24911] ? setup_bdev_super+0x337/0x730 [ 198.560223][T24911] ? set_blocksize+0x406/0x500 [ 198.560238][T24911] ? sb_set_blocksize+0x176/0x1d0 [ 198.560253][T24911] fuse_fill_super+0x1f2/0x2d0 [ 198.560263][T24911] get_tree_bdev_flags+0x389/0x620 [ 198.560275][T24911] ? __pfx_fuse_fill_super+0x10/0x10 [ 198.560285][T24911] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 198.560298][T24911] ? __fget_files+0x20e/0x3c0 [ 198.560320][T24911] fuse_get_tree+0x4bf/0x640 [ 198.560335][T24911] vfs_get_tree+0x8e/0x340 [ 198.560358][T24911] path_mount+0x1482/0x1fd0 [ 198.560377][T24911] ? __pfx_path_mount+0x10/0x10 [ 198.560396][T24911] ? kmem_cache_free+0x2d1/0x4d0 [ 198.560410][T24911] ? putname+0x154/0x1a0 [ 198.560428][T24911] ? putname+0x154/0x1a0 [ 198.560442][T24911] ? __x64_sys_mount+0x28d/0x310 [ 198.560455][T24911] __x64_sys_mount+0x28d/0x310 [ 198.560469][T24911] ? __pfx___x64_sys_mount+0x10/0x10 [ 198.560484][T24911] do_syscall_64+0xcd/0x4c0 [ 198.560497][T24911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.560508][T24911] RIP: 0033:0x7fb4d878ebe9 [ 198.560518][T24911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.560529][T24911] RSP: 002b:00007fb4d9530038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 198.560540][T24911] RAX: ffffffffffffffda RBX: 00007fb4d89b5fa0 RCX: 00007fb4d878ebe9 [ 198.560547][T24911] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 198.560553][T24911] RBP: 00007fb4d9530090 R08: 0000200000000300 R09: 0000000000000000 [ 198.560560][T24911] R10: 0000000002010002 R11: 0000000000000246 R12: 0000000000000002 [ 198.560566][T24911] R13: 00007fb4d89b6038 R14: 00007fb4d89b5fa0 R15: 00007ffdd281d398 [ 198.560576][T24911] [ 198.764154][T24917] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 198.766515][T24917] UDF-fs: Scanning with blocksize 2048 failed [ 198.768996][T24917] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 198.771479][T24917] UDF-fs: Scanning with blocksize 4096 failed [ 199.065386][T24919] kvm: kvm [24918]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 199.068784][T24919] kvm: kvm [24918]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 199.234283][ T40] audit: type=1400 audit(1756087675.527:92077): avc: denied { map } for pid=24928 comm="syz.7.2334" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.242033][ T40] audit: type=1400 audit(1756087675.527:92078): avc: denied { execute } for pid=24928 comm="syz.7.2334" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.631018][ T6210] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 199.781481][ T6210] usb 12-1: too many configurations: 200, using maximum allowed: 8 [ 199.785235][ T6210] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 199.787666][ T6210] usb 12-1: can't read configurations, error -61 [ 199.921786][ T6210] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 200.071978][ T6210] usb 12-1: too many configurations: 200, using maximum allowed: 8 [ 200.075671][ T6210] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 200.078118][ T6210] usb 12-1: can't read configurations, error -61 [ 200.080422][ T6210] usb usb12-port1: attempt power cycle [ 200.421596][ T6210] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 200.452007][ T6210] usb 12-1: too many configurations: 200, using maximum allowed: 8 [ 200.455764][ T6210] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 200.458197][ T6210] usb 12-1: can't read configurations, error -61 [ 200.581717][ T6210] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 200.602031][ T6210] usb 12-1: too many configurations: 200, using maximum allowed: 8 [ 200.605690][ T6210] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 200.608654][ T6210] usb 12-1: can't read configurations, error -61 [ 200.610853][ T6210] usb usb12-port1: unable to enumerate USB device [ 201.078563][T24887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.159674][ T7676] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 201.161767][T24959] FAULT_INJECTION: forcing a failure. [ 201.161767][T24959] name failslab, interval 1, probability 0, space 0, times 0 [ 201.161860][T24958] XFS (nullb0): Invalid superblock magic number [ 201.164511][T24949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.168579][T24959] CPU: 0 UID: 0 PID: 24959 Comm: syz.8.2340 Not tainted syzkaller #0 PREEMPT(full) [ 201.168594][T24959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.168602][T24959] Call Trace: [ 201.168606][T24959] [ 201.168611][T24959] dump_stack_lvl+0x16c/0x1f0 [ 201.168645][T24959] should_fail_ex+0x512/0x640 [ 201.168666][T24959] should_failslab+0xc2/0x120 [ 201.168679][T24959] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 201.168710][T24959] ? __d_alloc+0x32/0xae0 [ 201.168732][T24959] __d_alloc+0x32/0xae0 [ 201.168751][T24959] ? rcu_is_watching+0x12/0xc0 [ 201.168772][T24959] d_alloc_parallel+0x111/0x1480 [ 201.168796][T24959] ? lock_release+0x201/0x2f0 [ 201.168821][T24959] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 201.168847][T24959] ? do_raw_spin_lock+0x12c/0x2b0 [ 201.168864][T24959] ? __pfx_d_alloc_parallel+0x10/0x10 [ 201.168887][T24959] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 201.168904][T24959] ? kobject_get+0xbb/0x150 [ 201.168921][T24959] ? lockdep_init_map_type+0x5c/0x280 [ 201.168937][T24959] ? lockdep_init_map_type+0x5c/0x280 [ 201.168953][T24959] __lookup_slow+0x193/0x460 [ 201.168976][T24959] ? __pfx___lookup_slow+0x10/0x10 [ 201.168998][T24959] ? rcu_is_watching+0x12/0xc0 [ 201.169023][T24959] ? d_lookup+0xe7/0x190 [ 201.169047][T24959] lookup_noperm+0xe1/0x110 [ 201.169071][T24959] simple_start_creating+0xd1/0x1b0 [ 201.169089][T24959] start_creating.part.0+0x82/0x190 [ 201.169110][T24959] debugfs_create_dir+0x6c/0x5f0 [ 201.169129][T24959] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 201.169149][T24959] bdi_register_va+0x2c0/0x820 [ 201.169170][T24959] ? __pfx_bdi_register_va+0x10/0x10 [ 201.169189][T24959] ? do_init_timer+0xc9/0x110 [ 201.169212][T24959] super_setup_bdi_name+0xff/0x250 [ 201.169236][T24959] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 201.169263][T24959] ? fuse_fill_super_common+0x48a/0xfd0 [ 201.169279][T24959] ? rcu_is_watching+0x12/0xc0 [ 201.169298][T24959] ? lock_release+0x201/0x2f0 [ 201.169323][T24959] fuse_fill_super_common+0x5e5/0xfd0 [ 201.169339][T24959] ? snprintf+0xc7/0x100 [ 201.169354][T24959] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 201.169371][T24959] ? do_raw_spin_lock+0x12c/0x2b0 [ 201.169388][T24959] ? setup_bdev_super+0x337/0x730 [ 201.169411][T24959] ? set_blocksize+0x406/0x500 [ 201.169434][T24959] ? sb_set_blocksize+0x176/0x1d0 [ 201.169457][T24959] fuse_fill_super+0x1f2/0x2d0 [ 201.169473][T24959] get_tree_bdev_flags+0x389/0x620 [ 201.169489][T24959] ? __pfx_fuse_fill_super+0x10/0x10 [ 201.169506][T24959] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 201.169538][T24959] ? __fget_files+0x20e/0x3c0 [ 201.169563][T24959] fuse_get_tree+0x4bf/0x640 [ 201.169580][T24959] vfs_get_tree+0x8e/0x340 [ 201.169602][T24959] path_mount+0x1482/0x1fd0 [ 201.169623][T24959] ? __pfx_path_mount+0x10/0x10 [ 201.169644][T24959] ? kmem_cache_free+0x2d1/0x4d0 [ 201.169658][T24959] ? putname+0x154/0x1a0 [ 201.169679][T24959] ? putname+0x154/0x1a0 [ 201.169700][T24959] ? __x64_sys_mount+0x28d/0x310 [ 201.169718][T24959] __x64_sys_mount+0x28d/0x310 [ 201.169739][T24959] ? __pfx___x64_sys_mount+0x10/0x10 [ 201.169762][T24959] do_syscall_64+0xcd/0x4c0 [ 201.169779][T24959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.169796][T24959] RIP: 0033:0x7f9ac8d8ebe9 [ 201.169810][T24959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.169826][T24959] RSP: 002b:00007f9ac9c73038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 201.169848][T24959] RAX: ffffffffffffffda RBX: 00007f9ac8fb5fa0 RCX: 00007f9ac8d8ebe9 [ 201.169859][T24959] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 201.169870][T24959] RBP: 00007f9ac9c73090 R08: 0000200000000300 R09: 0000000000000000 [ 201.169879][T24959] R10: 0000000002010002 R11: 0000000000000246 R12: 0000000000000002 [ 201.169890][T24959] R13: 00007f9ac8fb6038 R14: 00007f9ac8fb5fa0 R15: 00007ffe6695c158 [ 201.169905][T24959] [ 201.330017][T24979] overlayfs: conflicting lowerdir path [ 201.333940][T24981] netlink: 'syz.9.2341': attribute type 1 has an invalid length. [ 201.404194][T24992] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2343'. [ 201.409706][T24992] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.422766][T24992] bridge_slave_0 (unregistering): left allmulticast mode [ 201.425027][T24992] bridge_slave_0 (unregistering): left promiscuous mode [ 201.427281][T24992] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.466471][T25013] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 201.471842][ T40] audit: type=1400 audit(1756087677.767:92079): avc: denied { accept } for pid=24989 comm="syz.5.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 201.488205][T25017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=25017 comm=syz.9.2348 [ 201.516981][T25033] FAULT_INJECTION: forcing a failure. [ 201.516981][T25033] name failslab, interval 1, probability 0, space 0, times 0 [ 201.521041][T25033] CPU: 1 UID: 0 PID: 25033 Comm: syz.9.2351 Not tainted syzkaller #0 PREEMPT(full) [ 201.521056][T25033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.521063][T25033] Call Trace: [ 201.521067][T25033] [ 201.521072][T25033] dump_stack_lvl+0x16c/0x1f0 [ 201.521088][T25033] should_fail_ex+0x512/0x640 [ 201.521102][T25033] should_failslab+0xc2/0x120 [ 201.521115][T25033] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 201.521126][T25033] ? security_inode_alloc+0x3b/0x2b0 [ 201.521152][T25033] security_inode_alloc+0x3b/0x2b0 [ 201.521168][T25033] inode_init_always_gfp+0xce4/0x1030 [ 201.521182][T25033] alloc_inode+0x86/0x240 [ 201.521197][T25033] new_inode+0x22/0x1c0 [ 201.521212][T25033] debugfs_create_dir+0xdd/0x5f0 [ 201.521226][T25033] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 201.521240][T25033] bdi_register_va+0x2c0/0x820 [ 201.521254][T25033] ? __pfx_bdi_register_va+0x10/0x10 [ 201.521267][T25033] ? do_init_timer+0xc9/0x110 [ 201.521283][T25033] super_setup_bdi_name+0xff/0x250 [ 201.521300][T25033] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 201.521317][T25033] ? fuse_fill_super_common+0x48a/0xfd0 [ 201.521328][T25033] ? rcu_is_watching+0x12/0xc0 [ 201.521342][T25033] ? lock_release+0x201/0x2f0 [ 201.521359][T25033] fuse_fill_super_common+0x5e5/0xfd0 [ 201.521370][T25033] ? snprintf+0xc7/0x100 [ 201.521380][T25033] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 201.521393][T25033] ? do_raw_spin_lock+0x12c/0x2b0 [ 201.521405][T25033] ? setup_bdev_super+0x337/0x730 [ 201.521420][T25033] ? set_blocksize+0x406/0x500 [ 201.521436][T25033] ? sb_set_blocksize+0x176/0x1d0 [ 201.521451][T25033] fuse_fill_super+0x1f2/0x2d0 [ 201.521462][T25033] get_tree_bdev_flags+0x389/0x620 [ 201.521472][T25033] ? __pfx_fuse_fill_super+0x10/0x10 [ 201.521483][T25033] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 201.521495][T25033] ? __fget_files+0x20e/0x3c0 [ 201.521507][T25033] fuse_get_tree+0x4bf/0x640 [ 201.521518][T25033] vfs_get_tree+0x8e/0x340 [ 201.521533][T25033] path_mount+0x1482/0x1fd0 [ 201.521547][T25033] ? __pfx_path_mount+0x10/0x10 [ 201.521561][T25033] ? kmem_cache_free+0x2d1/0x4d0 [ 201.521570][T25033] ? putname+0x154/0x1a0 [ 201.521585][T25033] ? putname+0x154/0x1a0 [ 201.521599][T25033] ? __x64_sys_mount+0x28d/0x310 [ 201.521612][T25033] __x64_sys_mount+0x28d/0x310 [ 201.521625][T25033] ? __pfx___x64_sys_mount+0x10/0x10 [ 201.521640][T25033] do_syscall_64+0xcd/0x4c0 [ 201.521652][T25033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.521664][T25033] RIP: 0033:0x7fb4d878ebe9 [ 201.521674][T25033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.521686][T25033] RSP: 002b:00007fb4d9530038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 201.521697][T25033] RAX: ffffffffffffffda RBX: 00007fb4d89b5fa0 RCX: 00007fb4d878ebe9 [ 201.521704][T25033] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 201.521711][T25033] RBP: 00007fb4d9530090 R08: 0000200000000300 R09: 0000000000000000 [ 201.521717][T25033] R10: 0000000002010002 R11: 0000000000000246 R12: 0000000000000002 [ 201.521724][T25033] R13: 00007fb4d89b6038 R14: 00007fb4d89b5fa0 R15: 00007ffdd281d398 [ 201.521733][T25033] [ 201.624037][T25033] debugfs: out of free dentries, can not create directory '7:0-fuseblk' [ 201.647993][T25044] binder: 25043:25044 ioctl 40046205 0 returned -22 [ 201.666329][T25048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=25048 comm=syz.9.2355 [ 201.849553][T25070] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2359'. [ 201.852968][T25070] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2359'. [ 201.855953][T25070] netlink: 'syz.9.2359': attribute type 12 has an invalid length. [ 201.951274][ T6210] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 201.994093][T25077] syz.9.2360 (25077): drop_caches: 2 [ 202.032926][ T40] audit: type=1400 audit(1756087678.327:92080): avc: denied { watch_sb } for pid=25079 comm="syz.9.2361" path="/151/file0" dev="tmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 202.059612][T25084] FAULT_INJECTION: forcing a failure. [ 202.059612][T25084] name failslab, interval 1, probability 0, space 0, times 0 [ 202.064710][T25084] CPU: 0 UID: 0 PID: 25084 Comm: syz.9.2362 Not tainted syzkaller #0 PREEMPT(full) [ 202.064726][T25084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 202.064733][T25084] Call Trace: [ 202.064737][T25084] [ 202.064741][T25084] dump_stack_lvl+0x16c/0x1f0 [ 202.064757][T25084] should_fail_ex+0x512/0x640 [ 202.064771][T25084] should_failslab+0xc2/0x120 [ 202.064784][T25084] __kmalloc_cache_noprof+0x6a/0x3e0 [ 202.064801][T25084] ? call_usermodehelper_setup+0xaf/0x360 [ 202.064815][T25084] ? kfree_skbmem+0x1a4/0x1f0 [ 202.064829][T25084] ? __pfx_cleanup_uevent_env+0x10/0x10 [ 202.064843][T25084] call_usermodehelper_setup+0xaf/0x360 [ 202.064857][T25084] kobject_uevent_env+0x1690/0x1870 [ 202.064872][T25084] ? bus_to_subsys+0x131/0x160 [ 202.064889][T25084] device_add+0x10dd/0x1aa0 [ 202.064903][T25084] ? __pfx_device_add+0x10/0x10 [ 202.064916][T25084] ? kstrdup+0xb5/0x100 [ 202.064929][T25084] device_create_groups_vargs+0x1f8/0x270 [ 202.064945][T25084] device_create+0xed/0x130 [ 202.064959][T25084] ? __pfx_device_create+0x10/0x10 [ 202.064974][T25084] ? __pfx_vsnprintf+0x10/0x10 [ 202.064984][T25084] ? __pfx___debug_object_init+0x10/0x10 [ 202.065001][T25084] ? rcu_is_watching+0x12/0xc0 [ 202.065016][T25084] bdi_register_va+0x114/0x820 [ 202.065030][T25084] ? __pfx_bdi_register_va+0x10/0x10 [ 202.065043][T25084] ? do_init_timer+0xc9/0x110 [ 202.065059][T25084] super_setup_bdi_name+0xff/0x250 [ 202.065076][T25084] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 202.065094][T25084] ? fuse_fill_super_common+0x48a/0xfd0 [ 202.065105][T25084] ? rcu_is_watching+0x12/0xc0 [ 202.065118][T25084] ? lock_release+0x201/0x2f0 [ 202.065135][T25084] fuse_fill_super_common+0x5e5/0xfd0 [ 202.065146][T25084] ? snprintf+0xc7/0x100 [ 202.065155][T25084] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 202.065166][T25084] ? do_raw_spin_lock+0x12c/0x2b0 [ 202.065178][T25084] ? setup_bdev_super+0x337/0x730 [ 202.065193][T25084] ? set_blocksize+0x406/0x500 [ 202.065210][T25084] ? sb_set_blocksize+0x176/0x1d0 [ 202.065225][T25084] fuse_fill_super+0x1f2/0x2d0 [ 202.065235][T25084] get_tree_bdev_flags+0x389/0x620 [ 202.065246][T25084] ? __pfx_fuse_fill_super+0x10/0x10 [ 202.065257][T25084] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 202.065269][T25084] ? __fget_files+0x20e/0x3c0 [ 202.065281][T25084] fuse_get_tree+0x4bf/0x640 [ 202.065291][T25084] vfs_get_tree+0x8e/0x340 [ 202.065307][T25084] path_mount+0x1482/0x1fd0 [ 202.065321][T25084] ? __pfx_path_mount+0x10/0x10 [ 202.065335][T25084] ? kmem_cache_free+0x2d1/0x4d0 [ 202.065344][T25084] ? putname+0x154/0x1a0 [ 202.065359][T25084] ? putname+0x154/0x1a0 [ 202.065373][T25084] ? __x64_sys_mount+0x28d/0x310 [ 202.065386][T25084] __x64_sys_mount+0x28d/0x310 [ 202.065400][T25084] ? __pfx___x64_sys_mount+0x10/0x10 [ 202.065415][T25084] do_syscall_64+0xcd/0x4c0 [ 202.065427][T25084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.065438][T25084] RIP: 0033:0x7fb4d878ebe9 [ 202.065447][T25084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.065457][T25084] RSP: 002b:00007fb4d9530038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 202.065468][T25084] RAX: ffffffffffffffda RBX: 00007fb4d89b5fa0 RCX: 00007fb4d878ebe9 [ 202.065475][T25084] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 202.065482][T25084] RBP: 00007fb4d9530090 R08: 0000200000000300 R09: 0000000000000000 [ 202.065488][T25084] R10: 0000000002010002 R11: 0000000000000246 R12: 0000000000000002 [ 202.065495][T25084] R13: 00007fb4d89b6038 R14: 00007fb4d89b5fa0 R15: 00007ffdd281d398 [ 202.065504][T25084] [ 202.186062][ T6210] usb 10-1: device descriptor read/64, error -71 [ 202.277844][T25097] lo: entered allmulticast mode [ 202.280471][T25097] tunl0: entered allmulticast mode [ 202.284110][T25097] gre0: entered allmulticast mode [ 202.287729][T25097] gretap0: entered allmulticast mode [ 202.290600][T25097] erspan0: entered allmulticast mode [ 202.294644][T25097] ip_vti0: entered allmulticast mode [ 202.296943][T25097] ip6_vti0: entered allmulticast mode [ 202.299526][T25097] sit0: entered allmulticast mode [ 202.302477][T25097] ip6tnl0: entered allmulticast mode [ 202.305007][T25097] ip6gre0: entered allmulticast mode [ 202.307595][T25097] ip6gretap0: entered allmulticast mode [ 202.310430][T25097] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.312882][T25097] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.316026][T25097] bridge0: entered allmulticast mode [ 202.318727][T25097] vcan0: entered allmulticast mode [ 202.320803][T25097] bond0: entered allmulticast mode [ 202.322775][T25097] bond_slave_0: entered allmulticast mode [ 202.324598][T25097] bond_slave_1: entered allmulticast mode [ 202.327884][T25097] team0: entered allmulticast mode [ 202.330081][T25097] team_slave_0: entered allmulticast mode [ 202.332685][T25097] team_slave_1: entered allmulticast mode [ 202.335633][T25097] dummy0: entered allmulticast mode [ 202.338373][T25097] nlmon0: entered allmulticast mode [ 202.340519][T25097] caif0: entered allmulticast mode [ 202.342892][T25097] batadv0: entered allmulticast mode [ 202.345519][T25097] vxcan0: entered allmulticast mode [ 202.347449][T25097] vxcan1: entered allmulticast mode [ 202.349455][T25097] veth0: entered allmulticast mode [ 202.352086][T25097] veth1: entered allmulticast mode [ 202.358080][T25097] wg0: entered allmulticast mode [ 202.361235][T25097] wg1: entered allmulticast mode [ 202.366276][T25097] wg2: entered allmulticast mode [ 202.368892][T25097] veth0_to_bridge: entered allmulticast mode [ 202.372466][T25097] veth1_to_bridge: entered allmulticast mode [ 202.376120][T25097] veth0_to_bond: entered allmulticast mode [ 202.379112][T25097] veth1_to_bond: entered allmulticast mode [ 202.383381][T25097] veth0_to_team: entered allmulticast mode [ 202.386899][T25097] veth1_to_team: entered allmulticast mode [ 202.390286][T25097] veth0_to_batadv: entered allmulticast mode [ 202.393602][T25097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.396028][T25097] batadv_slave_0: entered allmulticast mode [ 202.399826][T25097] veth1_to_batadv: entered allmulticast mode [ 202.402991][T25097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.405320][T25097] batadv_slave_1: entered allmulticast mode [ 202.408245][T25097] xfrm0: entered allmulticast mode [ 202.410943][T25097] veth0_to_hsr: entered allmulticast mode [ 202.414170][T25097] hsr_slave_0: entered allmulticast mode [ 202.416750][T25097] veth1_to_hsr: entered allmulticast mode [ 202.419417][T25097] hsr_slave_1: entered allmulticast mode [ 202.421509][ T6210] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 202.425671][T25097] hsr0: entered allmulticast mode [ 202.428268][T25097] veth1_virt_wifi: entered allmulticast mode [ 202.431704][T25097] veth0_virt_wifi: entered allmulticast mode [ 202.434825][T25097] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 202.437319][T25097] veth1_vlan: entered allmulticast mode [ 202.440001][T25097] veth0_vlan: entered allmulticast mode [ 202.445163][T25097] vlan0: entered allmulticast mode [ 202.446901][T25097] vlan1: entered allmulticast mode [ 202.448749][T25097] macvlan0: entered allmulticast mode [ 202.450856][T25097] macvlan1: entered allmulticast mode [ 202.454297][T25097] ipvlan0: entered allmulticast mode [ 202.456633][T25097] ipvlan1: entered allmulticast mode [ 202.458999][T25097] veth1_macvtap: entered allmulticast mode [ 202.462469][T25097] veth0_macvtap: entered allmulticast mode [ 202.465600][T25097] macvtap0: entered allmulticast mode [ 202.468400][T25097] macsec0: entered allmulticast mode [ 202.469310][T25113] netlink: 'syz.7.2367': attribute type 3 has an invalid length. [ 202.472578][T25113] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2367'. [ 202.475895][T25097] geneve0: entered allmulticast mode [ 202.480161][T25097] geneve1: entered allmulticast mode [ 202.486320][T25097] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 202.490823][T25097] netdevsim netdevsim9 netdevsim1: entered allmulticast mode [ 202.495890][T25097] netdevsim netdevsim9 netdevsim2: entered allmulticast mode [ 202.500051][T25097] netdevsim netdevsim9 netdevsim3: entered allmulticast mode [ 202.506721][T25097] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 202.514474][T25097] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 202.517440][T25097] : entered allmulticast mode [ 202.519133][T25097] vxlan0: entered allmulticast mode [ 202.521331][ T7673] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.525566][ T7673] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.532722][ T7673] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.536672][ T7673] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.552277][ T6210] usb 10-1: device descriptor read/64, error -71 [ 202.556120][T25123] FAULT_INJECTION: forcing a failure. [ 202.556120][T25123] name failslab, interval 1, probability 0, space 0, times 0 [ 202.560113][T25123] CPU: 2 UID: 0 PID: 25123 Comm: syz.8.2371 Not tainted syzkaller #0 PREEMPT(full) [ 202.560129][T25123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 202.560136][T25123] Call Trace: [ 202.560140][T25123] [ 202.560144][T25123] dump_stack_lvl+0x16c/0x1f0 [ 202.560159][T25123] should_fail_ex+0x512/0x640 [ 202.560172][T25123] should_failslab+0xc2/0x120 [ 202.560186][T25123] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 202.560199][T25123] ? __d_alloc+0x32/0xae0 [ 202.560214][T25123] __d_alloc+0x32/0xae0 [ 202.560226][T25123] ? rcu_is_watching+0x12/0xc0 [ 202.560241][T25123] d_alloc_parallel+0x111/0x1480 [ 202.560258][T25123] ? lock_release+0x201/0x2f0 [ 202.560275][T25123] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 202.560288][T25123] ? do_raw_spin_lock+0x12c/0x2b0 [ 202.560299][T25123] ? __pfx_d_alloc_parallel+0x10/0x10 [ 202.560316][T25123] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 202.560327][T25123] ? kobject_get+0xbb/0x150 [ 202.560339][T25123] ? lockdep_init_map_type+0x5c/0x280 [ 202.560348][T25123] ? lockdep_init_map_type+0x5c/0x280 [ 202.560359][T25123] __lookup_slow+0x193/0x460 [ 202.560375][T25123] ? __pfx___lookup_slow+0x10/0x10 [ 202.560390][T25123] ? rcu_is_watching+0x12/0xc0 [ 202.560406][T25123] ? d_lookup+0xe7/0x190 [ 202.560423][T25123] lookup_noperm+0xe1/0x110 [ 202.560438][T25123] simple_start_creating+0xd1/0x1b0 [ 202.560451][T25123] start_creating.part.0+0x82/0x190 [ 202.560464][T25123] debugfs_create_dir+0x6c/0x5f0 [ 202.560477][T25123] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 202.560491][T25123] bdi_register_va+0x2c0/0x820 [ 202.560506][T25123] ? __pfx_bdi_register_va+0x10/0x10 [ 202.560519][T25123] ? do_init_timer+0xc9/0x110 [ 202.560534][T25123] super_setup_bdi_name+0xff/0x250 [ 202.560551][T25123] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 202.560568][T25123] ? fuse_fill_super_common+0x48a/0xfd0 [ 202.560584][T25123] ? rcu_is_watching+0x12/0xc0 [ 202.560597][T25123] ? lock_release+0x201/0x2f0 [ 202.560614][T25123] fuse_fill_super_common+0x5e5/0xfd0 [ 202.560625][T25123] ? snprintf+0xc7/0x100 [ 202.560635][T25123] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 202.560646][T25123] ? do_raw_spin_lock+0x12c/0x2b0 [ 202.560657][T25123] ? setup_bdev_super+0x337/0x730 [ 202.560673][T25123] ? set_blocksize+0x406/0x500 [ 202.560689][T25123] ? sb_set_blocksize+0x176/0x1d0 [ 202.560704][T25123] fuse_fill_super+0x1f2/0x2d0 [ 202.560715][T25123] get_tree_bdev_flags+0x389/0x620 [ 202.560726][T25123] ? __pfx_fuse_fill_super+0x10/0x10 [ 202.560736][T25123] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 202.560748][T25123] ? __fget_files+0x20e/0x3c0 [ 202.560761][T25123] fuse_get_tree+0x4bf/0x640 [ 202.560771][T25123] vfs_get_tree+0x8e/0x340 [ 202.560786][T25123] path_mount+0x1482/0x1fd0 [ 202.560801][T25123] ? __pfx_path_mount+0x10/0x10 [ 202.560814][T25123] ? kmem_cache_free+0x2d1/0x4d0 [ 202.560824][T25123] ? putname+0x154/0x1a0 [ 202.560838][T25123] ? putname+0x154/0x1a0 [ 202.560852][T25123] ? __x64_sys_mount+0x28d/0x310 [ 202.560865][T25123] __x64_sys_mount+0x28d/0x310 [ 202.560879][T25123] ? __pfx___x64_sys_mount+0x10/0x10 [ 202.560894][T25123] do_syscall_64+0xcd/0x4c0 [ 202.560906][T25123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.560917][T25123] RIP: 0033:0x7f9ac8d8ebe9 [ 202.560926][T25123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.560937][T25123] RSP: 002b:00007f9ac9c73038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 202.560948][T25123] RAX: ffffffffffffffda RBX: 00007f9ac8fb5fa0 RCX: 00007f9ac8d8ebe9 [ 202.560955][T25123] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 202.560962][T25123] RBP: 00007f9ac9c73090 R08: 0000200000000300 R09: 0000000000000000 [ 202.560969][T25123] R10: 0000000002010002 R11: 0000000000000246 R12: 0000000000000002 [ 202.560975][T25123] R13: 00007f9ac8fb6038 R14: 00007f9ac8fb5fa0 R15: 00007ffe6695c158 [ 202.560985][T25123] [ 202.662600][ T6210] usb usb10-port1: attempt power cycle [ 202.731016][T25134] tmpfs: Bad value for 'mpol' [ 202.942781][T25159] option changes via remount are deprecated (pid=25158 comm=syz.8.2380) [ 203.011281][T25167] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 203.029992][T25164] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2381'. [ 203.041494][ T6210] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 203.062363][ T6210] usb 10-1: device descriptor read/8, error -71 [ 203.108677][T25191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=25191 comm=syz.9.2386 [ 203.114241][T25191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55570 sclass=netlink_route_socket pid=25191 comm=syz.9.2386 [ 203.149500][T25197] macvlan2: entered promiscuous mode [ 203.152417][T25197] macvlan2: entered allmulticast mode [ 203.154170][T25197] veth1_vlan: entered allmulticast mode [ 203.156245][T25197] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 203.223177][T25211] No control pipe specified [ 203.301183][T25255] openvswitch: netlink: Message has 8 unknown bytes. [ 203.311608][ T6210] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 203.330793][T25267] netlink: 'syz.8.2399': attribute type 4 has an invalid length. [ 203.334052][ T6210] usb 10-1: device descriptor read/8, error -71 [ 203.355807][ T40] audit: type=1400 audit(1756087679.647:92081): avc: denied { listen } for pid=25272 comm="syz.8.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 203.461602][ T6210] usb usb10-port1: unable to enumerate USB device [ 203.506991][ T7684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.509652][ T7684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.541694][ T5973] Bluetooth: hci0: command 0x0c20 tx timeout [ 203.555689][T25297] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2406'. [ 203.717306][ T40] audit: type=1400 audit(1756087680.007:92082): avc: denied { getopt } for pid=25315 comm="syz.7.2409" lport=53002 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 203.731885][ T24] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 203.741270][ T40] audit: type=1400 audit(1756087680.027:92083): avc: denied { execute } for pid=25320 comm="syz.7.2410" path="/dev/vcs0" dev="devtmpfs" ino=3619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 203.749312][ T40] audit: type=1400 audit(1756087680.027:92084): avc: denied { read } for pid=25320 comm="syz.7.2410" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 203.756583][ T40] audit: type=1400 audit(1756087680.027:92085): avc: denied { open } for pid=25320 comm="syz.7.2410" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 203.822142][ T40] audit: type=1400 audit(1756087680.117:92086): avc: denied { setattr } for pid=25323 comm="syz.7.2411" name="nbd7" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.823234][T25325] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2411'. [ 203.881609][ T24] usb 14-1: Using ep0 maxpacket: 32 [ 203.884630][ T24] usb 14-1: config 0 has an invalid interface number: 247 but max is 0 [ 203.887248][ T24] usb 14-1: config 0 has no interface number 0 [ 203.889241][ T24] usb 14-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.892644][ T24] usb 14-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 203.898358][ T24] usb 14-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 203.901646][ T24] usb 14-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 203.904269][ T24] usb 14-1: Product: syz [ 203.905602][ T24] usb 14-1: Manufacturer: syz [ 203.907990][ T24] usb 14-1: config 0 descriptor?? [ 204.115519][ T24] usb 14-1: USB disconnect, device number 10 [ 204.642421][T25350] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2415'. [ 204.690442][T25359] fuse: Bad value for 'fd' [ 204.690526][T25360] fuse: Bad value for 'fd' [ 204.695428][ T40] audit: type=1400 audit(1756087680.987:92087): avc: denied { append } for pid=25358 comm="syz.9.2418" name="file0" dev="tmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.713717][T25362] netlink: 'syz.8.2419': attribute type 1 has an invalid length. [ 204.737123][T25365] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2420'. [ 204.739730][T25362] bond6: (slave geneve3): making interface the new active one [ 204.744007][T25362] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 204.746745][ T7673] netdevsim netdevsim8 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 204.749786][ T7673] netdevsim netdevsim8 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 204.754144][T25362] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2419'. [ 204.759377][T25365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.764781][T25365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.767997][T25365] bond0 (unregistering): Released all slaves [ 204.776408][ T7673] netdevsim netdevsim8 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 204.779069][ T7673] netdevsim netdevsim8 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 204.783353][T25362] 8021q: adding VLAN 0 to HW filter on device bond6 [ 204.949200][T25482] cgroup: name respecified [ 204.957119][T25484] bridge2: entered promiscuous mode [ 204.999726][T25494] CUSE: unknown device info "" [ 205.001420][T25494] CUSE: zero length info key specified [ 205.041642][ T34] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 205.082262][T25508] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 205.085917][T25508] netdevsim netdevsim9: Falling back to sysfs fallback for: ./file0 [ 205.134050][T25511] 8021q: adding VLAN 0 to HW filter on device bond6 [ 205.138522][T25511] bond5: (slave bond6): Enslaving as an active interface with an up link [ 205.150367][T25511] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 205.153062][T25511] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 205.155918][T25511] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 205.158679][T25511] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 205.201686][ T34] usb 13-1: Using ep0 maxpacket: 32 [ 205.208281][ T34] usb 13-1: config 0 has an invalid interface number: 247 but max is 0 [ 205.208306][ T34] usb 13-1: config 0 has no interface number 0 [ 205.208332][ T34] usb 13-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 205.208350][ T34] usb 13-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 205.209573][ T34] usb 13-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 205.209593][ T34] usb 13-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 205.209610][ T34] usb 13-1: Product: syz [ 205.209622][ T34] usb 13-1: Manufacturer: syz [ 205.210839][ T34] usb 13-1: config 0 descriptor?? [ 205.237480][T25588] netlink: 'syz.7.2439': attribute type 1 has an invalid length. [ 205.298453][ T40] audit: type=1400 audit(1756087681.587:92088): avc: denied { setopt } for pid=25598 comm="syz.7.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 205.306950][ T40] audit: type=1326 audit(1756087681.597:92089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25598 comm="syz.7.2443" exe="/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7f02ca12add9 code=0x0 [ 205.378353][T25604] delete_channel: no stack [ 205.436825][T25608] Trying to write to read-only block-device nullb0 [ 205.443029][T25608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=25608 comm=syz.7.2444 [ 205.451522][ T34] usb 13-1: USB disconnect, device number 9 [ 205.507825][T25616] vlan2: entered promiscuous mode [ 205.510036][T25616] bridge0: entered promiscuous mode [ 205.513387][T25616] vlan2: entered allmulticast mode [ 205.515534][T25616] bridge0: entered allmulticast mode [ 205.571453][T25623] netlink: 'syz.7.2447': attribute type 21 has an invalid length. [ 205.728609][T25634] dlm: no locking on control device [ 205.736871][T25638] could not open pipe file descriptor [ 205.909812][ T40] audit: type=1400 audit(1756087682.197:92090): avc: denied { write } for pid=25648 comm="syz.7.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 205.910170][T25651] overlay: Bad value for 'workdir' [ 206.009113][T25664] netlink: 'syz.5.2460': attribute type 30 has an invalid length. [ 206.067193][ T5973] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 206.086443][T25678] comedi comedi3: comedi_config --init_data is deprecated [ 206.119543][T25687] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=25687 comm=syz.5.2466 [ 206.337172][T25715] netlink: 'syz.9.2473': attribute type 12 has an invalid length. [ 206.340389][T25715] netlink: 'syz.9.2473': attribute type 12 has an invalid length. [ 206.344684][ T40] audit: type=1400 audit(1756087682.637:92091): avc: denied { listen } for pid=25714 comm="syz.9.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 206.348041][ T7681] Bluetooth: hci4: Frame reassembly failed (-84) [ 206.402500][ T53] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 206.551838][ T53] usb 13-1: Using ep0 maxpacket: 32 [ 206.554757][ T53] usb 13-1: config 0 has an invalid interface number: 247 but max is 0 [ 206.557409][ T53] usb 13-1: config 0 has no interface number 0 [ 206.559410][ T53] usb 13-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 206.563259][ T53] usb 13-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 206.567483][ T53] usb 13-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 206.570407][ T53] usb 13-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 206.573258][ T53] usb 13-1: Product: syz [ 206.574895][ T53] usb 13-1: Manufacturer: syz [ 206.577574][ T53] usb 13-1: config 0 descriptor?? [ 206.685502][T25723] netlink: 'syz.7.2474': attribute type 1 has an invalid length. [ 206.700251][T25723] bond7: entered promiscuous mode [ 206.702267][T25723] 8021q: adding VLAN 0 to HW filter on device bond7 [ 206.705026][T25723] __nla_validate_parse: 11 callbacks suppressed [ 206.705039][T25723] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2474'. [ 206.785145][ T6210] usb 13-1: USB disconnect, device number 10 [ 206.973901][ T40] audit: type=1400 audit(1756087683.266:92092): avc: denied { accept } for pid=25769 comm="syz.5.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 206.980395][ T40] audit: type=1400 audit(1756087683.266:92093): avc: denied { getopt } for pid=25769 comm="syz.5.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 206.994166][T25773] netlink: 'syz.5.2478': attribute type 11 has an invalid length. [ 207.024338][ T40] audit: type=1400 audit(1756087683.316:92094): avc: denied { create } for pid=25775 comm="syz.5.2479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 207.079558][T25783] netlink: 'syz.5.2481': attribute type 39 has an invalid length. [ 207.117631][T25788] vxcan1: tx address claim with dlc 0 [ 207.140917][ T5981] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 207.145267][T25792] netlink: 'syz.5.2484': attribute type 29 has an invalid length. [ 207.148629][T25792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2484'. [ 207.153555][T25792] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 207.191980][ T40] audit: type=1400 audit(1756087683.476:92095): avc: denied { bind } for pid=25800 comm="syz.5.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 207.314854][T25819] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2489'. [ 207.334837][T25826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=25826 comm=syz.8.2492 [ 207.368489][T25831] fuse: Unknown parameter 'subj_type' [ 207.430102][ T40] audit: type=1400 audit(1756087683.716:92096): avc: denied { execute } for pid=25839 comm="syz.8.2496" path="/sys/kernel/warn_count" dev="sysfs" ino=60520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 207.630114][T25856] netlink: 33 bytes leftover after parsing attributes in process `syz.7.2499'. [ 207.639850][T25856] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 207.754033][T25869] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 207.761973][ T6220] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 207.912418][ T6220] usb 13-1: Using ep0 maxpacket: 32 [ 207.916987][ T6220] usb 13-1: config 0 has an invalid interface number: 247 but max is 0 [ 207.919747][ T6220] usb 13-1: config 0 has no interface number 0 [ 207.921815][ T6220] usb 13-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 207.925325][ T6220] usb 13-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 207.929594][ T6220] usb 13-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 207.932969][ T6220] usb 13-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 207.935641][ T6220] usb 13-1: Product: syz [ 207.937013][ T6220] usb 13-1: Manufacturer: syz [ 207.940205][ T6220] usb 13-1: config 0 descriptor?? [ 208.145852][ T6220] usb 13-1: USB disconnect, device number 11 [ 208.422249][ T5981] Bluetooth: hci4: command 0x1003 tx timeout [ 208.424452][ T5973] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 208.499323][T25899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2506'. [ 208.669583][T25918] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 208.676145][T25918] netlink: 'syz.7.2511': attribute type 10 has an invalid length. [ 208.679355][T25918] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 208.684000][T25918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.690472][T25927] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2513'. [ 208.694153][T25927] netem: change failed [ 208.694790][T25918] netlink: 'syz.7.2511': attribute type 32 has an invalid length. [ 208.860471][T25958] lo speed is unknown, defaulting to 1000 [ 208.866638][T25958] lo speed is unknown, defaulting to 1000 [ 208.869957][T25958] lo speed is unknown, defaulting to 1000 [ 208.906803][T25958] infiniband syz2: set down [ 208.908366][ T6021] lo speed is unknown, defaulting to 1000 [ 208.908707][T25958] infiniband syz2: added lo [ 208.920707][T25958] RDS/IB: syz2: added [ 208.922190][T25958] smc: adding ib device syz2 with port count 1 [ 208.924153][T25958] smc: ib device syz2 port 1 has pnetid [ 208.926049][ T1023] lo speed is unknown, defaulting to 1000 [ 208.928093][T25958] lo speed is unknown, defaulting to 1000 [ 208.966481][T25958] lo speed is unknown, defaulting to 1000 [ 209.013028][T25958] lo speed is unknown, defaulting to 1000 [ 209.064080][T25958] lo speed is unknown, defaulting to 1000 [ 209.092195][ T34] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 209.098716][T25958] lo speed is unknown, defaulting to 1000 [ 209.134023][T25958] lo speed is unknown, defaulting to 1000 [ 209.187581][T25991] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2522'. [ 209.201216][T25991] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2522'. [ 209.243772][ T34] usb 12-1: Using ep0 maxpacket: 32 [ 209.246636][ T34] usb 12-1: config 0 has an invalid interface number: 247 but max is 0 [ 209.249331][ T34] usb 12-1: config 0 has no interface number 0 [ 209.252497][ T34] usb 12-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 209.255369][ T34] usb 12-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 209.257850][ T34] usb 12-1: Product: syz [ 209.259228][ T34] usb 12-1: Manufacturer: syz [ 209.261706][ T34] usb 12-1: config 0 descriptor?? [ 209.434704][T26069] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2525'. [ 209.437642][T26069] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2525'. [ 209.463265][T26086] ALSA: mixer_oss: invalid OSS volume '' [ 209.497082][T26091] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 209.499386][T26091] UDF-fs: Scanning with blocksize 2048 failed [ 209.502320][T26091] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 209.505751][T26091] UDF-fs: Scanning with blocksize 4096 failed [ 209.546160][T26098] bond5: entered allmulticast mode [ 209.548012][T26098] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.606492][T26142] netem: change failed [ 209.611454][T26142] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 209.713571][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 209.713582][ T40] audit: type=1326 audit(1756087686.006:92104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26166 comm="syz.9.2539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d878ebe9 code=0x7ffc0000 [ 209.723768][ T40] audit: type=1326 audit(1756087686.006:92105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26166 comm="syz.9.2539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d878ebe9 code=0x7ffc0000 [ 209.734251][ T40] audit: type=1326 audit(1756087686.006:92106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26166 comm="syz.9.2539" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4d878ebe9 code=0x7ffc0000 [ 209.741822][ T40] audit: type=1326 audit(1756087686.006:92107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26166 comm="syz.9.2539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d878ebe9 code=0x7ffc0000 [ 209.751090][ T40] audit: type=1326 audit(1756087686.006:92108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26166 comm="syz.9.2539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d878ebe9 code=0x7ffc0000 [ 209.758538][ T40] audit: type=1326 audit(1756087686.006:92109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26166 comm="syz.9.2539" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4d878ebe9 code=0x7ffc0000 [ 209.765868][ T40] audit: type=1326 audit(1756087686.006:92110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26166 comm="syz.9.2539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d878ebe9 code=0x7ffc0000 [ 209.773943][ T40] audit: type=1326 audit(1756087686.006:92111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26166 comm="syz.9.2539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d878ebe9 code=0x7ffc0000 [ 209.802621][ T40] audit: type=1400 audit(1756087686.096:92112): avc: denied { name_bind } for pid=26182 comm="syz.8.2541" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 209.926517][T26191] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 209.929100][T26191] UDF-fs: Scanning with blocksize 2048 failed [ 209.931651][T26191] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 209.934133][T26191] UDF-fs: Scanning with blocksize 4096 failed [ 210.004967][T26204] ALSA: mixer_oss: invalid OSS volume '' [ 210.328479][ T6220] libceph: connect (1)[c::]:6789 error -101 [ 210.330494][ T6220] libceph: mon0 (1)[c::]:6789 connect error [ 210.377539][ T6220] libceph: connect (1)[b::]:6789 error -101 [ 210.379485][ T6220] libceph: mon0 (1)[b::]:6789 connect error [ 210.592394][ T24] libceph: connect (1)[c::]:6789 error -101 [ 210.594571][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 210.642719][ T24] libceph: connect (1)[b::]:6789 error -101 [ 210.645207][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 210.675711][ T40] audit: type=1400 audit(1756087686.966:92113): avc: denied { read } for pid=26295 comm="syz.9.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 210.676528][T26297] syz.9.2561: attempt to access beyond end of device [ 210.676528][T26297] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 210.686086][T26297] (syz.9.2561,26297,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 210.689230][T26297] (syz.9.2561,26297,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 210.692814][T26297] (syz.9.2561,26297,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 210.696349][T26297] (syz.9.2561,26297,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 210.742751][ T24] usb 12-1: USB disconnect, device number 14 [ 210.746083][T26308] netlink: 'syz.9.2566': attribute type 4 has an invalid length. [ 210.746085][T26309] netlink: 'syz.9.2566': attribute type 4 has an invalid length. [ 210.754479][T26308] netlink: 'syz.9.2566': attribute type 4 has an invalid length. [ 210.754920][T26309] netlink: 'syz.9.2566': attribute type 4 has an invalid length. [ 211.102571][ T24] libceph: connect (1)[c::]:6789 error -101 [ 211.104640][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 211.139388][T26363] bridge_slave_0: left promiscuous mode [ 211.141318][T26363] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.146496][T26363] bridge_slave_1: left promiscuous mode [ 211.148477][T26363] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.152768][ T6220] libceph: connect (1)[b::]:6789 error -101 [ 211.154816][ T6220] libceph: mon0 (1)[b::]:6789 connect error [ 211.157537][T26269] ceph: No mds server is up or the cluster is laggy [ 211.157954][T26363] team0: Port device team_slave_0 removed [ 211.160787][T26254] ceph: No mds server is up or the cluster is laggy [ 211.165929][T26363] team0: Port device team_slave_1 removed [ 211.168207][T26363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.171509][T26363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.301600][T26380] netlink: 'syz.7.2581': attribute type 30 has an invalid length. [ 211.642363][ T1023] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 211.792618][ T1023] usb 14-1: Using ep0 maxpacket: 32 [ 211.796606][ T1023] usb 14-1: config 0 has an invalid interface number: 247 but max is 0 [ 211.800153][ T1023] usb 14-1: config 0 has no interface number 0 [ 211.804176][ T1023] usb 14-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 211.807089][ T1023] usb 14-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 211.809627][ T1023] usb 14-1: Product: syz [ 211.811023][ T1023] usb 14-1: Manufacturer: syz [ 211.816757][ T1023] usb 14-1: config 0 descriptor?? [ 212.074712][T26453] lo speed is unknown, defaulting to 1000 [ 212.145887][T26478] __nla_validate_parse: 12 callbacks suppressed [ 212.145902][T26478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2600'. [ 212.223169][ T6220] usb 14-1: USB disconnect, device number 11 [ 212.308501][ T5973] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 212.331457][T26495] __vm_enough_memory: pid: 26495, comm: syz.8.2603, bytes: 21199793266688 not enough memory for the allocation [ 212.403740][T26499] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2605'. [ 212.450198][T26505] netlink: 'syz.8.2607': attribute type 1 has an invalid length. [ 212.453785][T26505] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2607'. [ 212.511815][T26511] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 213.005502][T26480] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 213.008679][T26480] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 213.011361][T26480] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 213.042043][T26592] ALSA: mixer_oss: invalid OSS volume '' [ 213.118935][T26607] sp0: Synchronizing with TNC [ 213.137060][T26614] netlink: 'syz.9.2624': attribute type 1 has an invalid length. [ 213.139799][T26614] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2624'. [ 213.143828][T26614] netlink: 'syz.9.2624': attribute type 2 has an invalid length. [ 213.147495][T26614] netlink: 'syz.9.2624': attribute type 1 has an invalid length. [ 213.211417][T26617] tmpfs: Bad value for 'mpol' [ 213.252686][ T6220] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 213.298104][ T7687] tipc: Subscription rejected, illegal request [ 213.302488][T26628] program syz.8.2631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.323868][T26636] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2633'. [ 213.394065][T26704] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2635'. [ 213.403747][ T6220] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.407450][ T6220] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 213.411264][ T6220] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.414767][ T6220] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.418723][T26513] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 213.429104][ T6220] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.496279][T26719] efs: device does not support 512 byte blocks [ 213.498974][T26719] device does not support 512 byte blocks [ 213.498974][T26719] [ 213.517148][T26740] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 213.519920][T26740] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 213.523835][T26740] vhci_hcd vhci_hcd.0: Device attached [ 213.527888][T26741] vhci_hcd: connection closed [ 213.528143][ T7680] vhci_hcd: stop threads [ 213.531132][ T7680] vhci_hcd: release socket [ 213.533342][ T7680] vhci_hcd: disconnect device [ 213.624073][T26513] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2611'. [ 213.633242][ T6021] usb 12-1: USB disconnect, device number 15 [ 213.660318][T26746] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2642'. [ 214.155900][T26787] netlink: 'syz.7.2648': attribute type 1 has an invalid length. [ 214.158401][T26787] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2648'. [ 214.161856][T26787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2648'. [ 214.240324][ T5981] Bluetooth: hci3: unexpected event for opcode 0x080d [ 214.242467][T26804] overlayfs: conflicting lowerdir path [ 214.262471][ T5981] Bluetooth: hci2: command 0x0c1a tx timeout [ 214.268415][T26809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=26809 comm=syz.9.2652 [ 214.272175][ T5381] udevd[5381]: worker [23218] terminated by signal 33 (Unknown signal 33) [ 214.276829][ T5381] udevd[5381]: worker [23218] failed while handling '/devices/virtual/block/loop9' [ 214.432520][ T6021] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 214.571555][T26817] netlink: 'syz.5.2655': attribute type 3 has an invalid length. [ 214.594219][ T6021] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 214.597675][ T6021] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 214.601942][ T6021] usb 13-1: config 0 interface 0 has no altsetting 0 [ 214.606571][ T6021] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 214.609441][ T6021] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 214.612033][ T6021] usb 13-1: Product: syz [ 214.613617][ T6021] usb 13-1: Manufacturer: syz [ 214.615215][ T6021] usb 13-1: SerialNumber: syz [ 214.617380][ T6021] usb 13-1: config 0 descriptor?? [ 214.620463][ T6021] hub 13-1:0.0: bad descriptor, ignoring hub [ 214.622555][ T6021] hub 13-1:0.0: probe with driver hub failed with error -5 [ 214.625905][ T6021] usb 13-1: selecting invalid altsetting 0 [ 214.661623][ T5381] udevd[5381]: worker [23227] terminated by signal 33 (Unknown signal 33) [ 214.664704][ T5381] udevd[5381]: worker [23227] failed while handling '/devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/sound/card3/controlC3' [ 214.922672][ T6220] usb 13-1: USB disconnect, device number 12 [ 215.062779][ T5981] Bluetooth: hci0: command 0x0c20 tx timeout [ 215.712524][ C2] sl0: NETDEV WATCHDOG: CPU: 2: transmit queue 0 timed out 21130 ms [ 215.715524][ C2] sl0: transmit timed out, driver error? [ 218.263109][ T5981] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 218.266387][ T5981] Bluetooth: hci3: Injecting HCI hardware error event [ 228.808650][T26861] input: syz1 as /devices/virtual/input/input19 [ 228.828579][T26861] netlink: 'syz.5.2663': attribute type 1 has an invalid length. [ 228.837852][T26898] __nla_validate_parse: 3 callbacks suppressed [ 228.837868][T26898] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2665'. [ 228.847307][T26863] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2663'. [ 228.849014][T26861] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2663'. [ 228.895634][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 228.895650][ T40] audit: type=1400 audit(1756087705.185:92123): avc: denied { map } for pid=26925 comm="syz.5.2670" path="/466/file0" dev="tmpfs" ino=2499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 229.030293][ T40] audit: type=1400 audit(1756087705.315:92124): avc: denied { getopt } for pid=26929 comm="syz.9.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.049038][T26945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.083811][ T40] audit: type=1400 audit(1756087705.375:92125): avc: denied { shutdown } for pid=26949 comm="syz.5.2674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 229.091886][T26950] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.095405][T26950] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.178650][T26950] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.182654][T26950] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.238637][T26950] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.242877][T26950] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.245119][T26975] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2681'. [ 229.289454][T26980] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2682'. [ 229.295454][T26980] IPv6: sit1: Disabled Multicast RS [ 229.297681][T26980] sit1: entered allmulticast mode [ 229.302204][T26950] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.306704][T26950] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.355674][ T7673] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.358267][ T7673] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.363880][ T7681] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.366505][ T7681] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.371732][ T7680] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.374432][ T7680] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.379929][ T7673] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.382627][ T7673] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.395142][ T6220] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 229.404847][T27000] loop2: detected capacity change from 0 to 7 [ 229.409644][T26871] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 229.411376][T26871] loop2: partition table partially beyond EOD, truncated [ 229.413909][T26871] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 229.421622][T27000] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 229.423517][T27000] loop2: partition table partially beyond EOD, truncated [ 229.426227][T27000] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 229.442180][T26871] udevd[26871]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 229.451025][T26871] udevd[26871]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 229.471028][T27012] ip6tnl1: entered promiscuous mode [ 229.472855][T27012] ip6tnl1: entered allmulticast mode [ 229.521663][T27022] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2685'. [ 229.543627][ T6220] usb 12-1: Using ep0 maxpacket: 32 [ 229.546958][ T6220] usb 12-1: config 0 has an invalid interface number: 247 but max is 0 [ 229.549573][ T6220] usb 12-1: config 0 has no interface number 0 [ 229.552789][ T6220] usb 12-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 229.556031][ T6220] usb 12-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 229.558565][ T6220] usb 12-1: Product: syz [ 229.559923][ T6220] usb 12-1: Manufacturer: syz [ 229.562533][ T6220] usb 12-1: config 0 descriptor?? [ 229.683031][ T53] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 229.720995][T27029] netlink: 'syz.8.2687': attribute type 7 has an invalid length. [ 229.813130][ T53] usb 10-1: device descriptor read/64, error -71 [ 229.826030][T27038] netlink: 'syz.8.2690': attribute type 1 has an invalid length. [ 229.852422][T27040] loop6: detected capacity change from 0 to 7 [ 229.857913][T26871] Dev loop6: unable to read RDB block 7 [ 229.859728][T26871] loop6: unable to read partition table [ 229.862052][T26871] loop6: partition table beyond EOD, truncated [ 229.870887][T27040] Dev loop6: unable to read RDB block 7 [ 229.872734][T27040] loop6: unable to read partition table [ 229.875020][T27040] loop6: partition table beyond EOD, truncated [ 229.877065][T27040] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 230.067468][T27060] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96 [ 230.070803][T27060] trusted_key: encrypted_key: insufficient parameters specified [ 230.083116][ T53] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 230.213191][ T53] usb 10-1: device descriptor read/64, error -71 [ 230.283027][ T6220] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 230.323257][ T53] usb usb10-port1: attempt power cycle [ 230.437575][ T6220] usb 14-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 230.440555][ T6220] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 230.443332][ T6220] usb 14-1: Product: syz [ 230.444658][ T6220] usb 14-1: Manufacturer: syz [ 230.446175][ T6220] usb 14-1: SerialNumber: syz [ 230.448557][ T6220] usb 14-1: config 0 descriptor?? [ 230.451339][ T6220] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 230.453798][ T6220] dvb-usb: bulk message failed: -22 (2/0) [ 230.456545][ T6220] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.459800][ T6220] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 230.462306][ T6220] usb 14-1: media controller created [ 230.468340][ T6220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.652834][T27053] dvb-usb: bulk message failed: -22 (4/0) [ 230.673045][ T53] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 230.693477][ T53] usb 10-1: device descriptor read/8, error -71 [ 230.933045][ T53] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 230.953422][ T53] usb 10-1: device descriptor read/8, error -71 [ 230.984076][ T24] usb 12-1: USB disconnect, device number 16 [ 231.029128][T27076] tmpfs: Cannot enable quota on remount [ 231.063593][ T53] usb usb10-port1: unable to enumerate USB device [ 231.162750][ T6220] cxusb: set interface failed [ 231.164540][ T6220] dvb-usb: bulk message failed: -22 (1/0) [ 231.178146][ T6220] DVB: Unable to find symbol mt352_attach() [ 231.180108][ T6220] dvb-usb: bulk message failed: -22 (5/0) [ 231.181905][ T6220] zl10353_read_register: readreg error (reg=127, ret==-121) [ 231.184479][ T6220] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 231.199743][T27096] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 231.223603][ T6220] rc_core: IR keymap rc-dvico-mce not found [ 231.225767][ T6220] Registered IR keymap rc-empty [ 231.227681][ T6220] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0 [ 231.231204][ T6220] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0/input20 [ 231.235088][ T6220] dvb-usb: schedule remote query interval to 100 msecs. [ 231.237499][ T6220] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 231.241479][ T6220] usb 14-1: USB disconnect, device number 12 [ 231.264438][ T6220] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 231.334542][T27135] lo speed is unknown, defaulting to 1000 [ 231.416021][T27164] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2705'. [ 231.419656][T27165] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2705'. [ 231.528652][T27174] batman_adv: batadv0: Adding interface: gretap1 [ 231.530813][T27174] batman_adv: batadv0: Interface activated: gretap1 [ 231.899484][T27205] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 231.901828][T27205] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 231.904286][T27204] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(13) [ 231.907292][T27204] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 231.910227][T27204] vhci_hcd vhci_hcd.0: Device attached [ 231.910280][T27205] vhci_hcd vhci_hcd.0: Device attached [ 231.914553][T27212] vhci_hcd: connection closed [ 231.914640][T27211] vhci_hcd: connection closed [ 231.914720][ T46] vhci_hcd: stop threads [ 231.919189][ T46] vhci_hcd: release socket [ 231.920685][ T46] vhci_hcd: disconnect device [ 231.922363][ T46] vhci_hcd: stop threads [ 231.924395][ T46] vhci_hcd: release socket [ 231.925931][ T46] vhci_hcd: disconnect device [ 232.375650][T27219] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2719'. [ 232.555342][T27232] kvm: user requested TSC rate below hardware speed [ 232.559825][T27232] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4223616668 (8447233336 ns) > initial count (4629617844 ns). Using initial count to start timer. [ 232.566819][T27233] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4223616668 (8447233336 ns) > initial count (4629617844 ns). Using initial count to start timer. [ 232.642689][T27239] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2724'. [ 232.913109][ T53] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 233.064933][ T53] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.068616][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.072056][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 233.076029][ T53] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.080275][ T53] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.083421][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.087445][ T53] usb 10-1: config 0 descriptor?? [ 233.552341][ T53] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 233.559506][ T53] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 233.603409][ T1023] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 233.765428][ T1023] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.769093][ T1023] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 233.772327][ T1023] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.775374][ T1023] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.781985][T27277] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 233.785412][ T1023] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 233.986393][ T6210] usb 13-1: USB disconnect, device number 13 [ 234.366429][T27345] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27345 comm=syz.7.2740 [ 234.517623][ T40] audit: type=1400 audit(1756087710.805:92126): avc: denied { map } for pid=27359 comm="syz.7.2743" path="/dev/video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 234.525838][ T40] audit: type=1400 audit(1756087710.805:92127): avc: denied { execute } for pid=27359 comm="syz.7.2743" path="/dev/video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 234.544132][ T6210] libceph: connect (1)[c::]:6789 error -22 [ 234.547116][ T6210] libceph: mon0 (1)[c::]:6789 connect error [ 234.594888][ T34] libceph: connect (1)[c::]:6789 error -22 [ 234.596838][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 234.738344][T27375] __nla_validate_parse: 2 callbacks suppressed [ 234.738360][T27375] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2745'. [ 234.803673][ T6210] libceph: connect (1)[c::]:6789 error -22 [ 234.805684][ T6210] libceph: mon0 (1)[c::]:6789 connect error [ 234.853431][ T34] libceph: connect (1)[c::]:6789 error -22 [ 234.855422][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 235.216407][T27394] random: crng reseeded on system resumption [ 235.323786][ T6210] libceph: connect (1)[c::]:6789 error -22 [ 235.326095][ T6210] libceph: mon0 (1)[c::]:6789 connect error [ 235.373603][ T34] libceph: connect (1)[c::]:6789 error -22 [ 235.375584][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 235.413396][T27360] ceph: No mds server is up or the cluster is laggy [ 235.413761][T27366] ceph: No mds server is up or the cluster is laggy [ 235.730065][T27437] autofs: Unknown parameter 'À' [ 235.776849][ T24] usb 10-1: USB disconnect, device number 19 [ 235.799768][ T5981] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 235.822890][T27461] netlink: 'syz.5.2763': attribute type 1 has an invalid length. [ 235.826857][T27461] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2763'. [ 235.998456][ T40] audit: type=1326 audit(1756087712.285:92128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27477 comm="syz.7.2769" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02ca18ebe9 code=0x0 [ 236.100059][T27479] fuse: Unknown parameter 'rootm00€' [ 236.304046][T27488] netlink: 'syz.9.2771': attribute type 29 has an invalid length. [ 236.307166][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2771'. [ 236.433286][ T34] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 236.574069][ T40] audit: type=1400 audit(1756087712.865:92129): avc: denied { ioctl } for pid=27506 comm="syz.9.2775" path="/271/file0/file0" dev="fuse" ino=3 ioctlcmd=0x5010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 236.585026][ T34] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.588538][ T34] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 236.591962][ T34] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 236.596066][ T34] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.600028][ T34] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.602856][ T34] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.606302][ T34] usb 13-1: config 0 descriptor?? [ 236.795616][T27525] FAULT_INJECTION: forcing a failure. [ 236.795616][T27525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.800020][T27525] CPU: 2 UID: 0 PID: 27525 Comm: syz.9.2778 Not tainted syzkaller #0 PREEMPT(full) [ 236.800036][T27525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 236.800043][T27525] Call Trace: [ 236.800047][T27525] [ 236.800052][T27525] dump_stack_lvl+0x16c/0x1f0 [ 236.800088][T27525] should_fail_ex+0x512/0x640 [ 236.800108][T27525] _copy_from_iter+0x29f/0x16f0 [ 236.800123][T27525] ? kernel_text_address+0x8d/0x100 [ 236.800136][T27525] ? __kernel_text_address+0xd/0x40 [ 236.800149][T27525] ? unwind_get_return_address+0x59/0xa0 [ 236.800169][T27525] ? __pfx__copy_from_iter+0x10/0x10 [ 236.800195][T27525] ping_common_sendmsg+0xc4/0x2e0 [ 236.800219][T27525] ping_v6_sendmsg+0x201/0x15e0 [ 236.800239][T27525] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 236.800256][T27525] ? avc_has_perm+0x144/0x1f0 [ 236.800272][T27525] ? __pfx_kstrtouint+0x10/0x10 [ 236.800283][T27525] ? sock_has_perm+0x259/0x2f0 [ 236.800296][T27525] ? __pfx_sock_has_perm+0x10/0x10 [ 236.800311][T27525] ? __fget_files+0x20e/0x3c0 [ 236.800322][T27525] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 236.800332][T27525] inet_sendmsg+0x11c/0x140 [ 236.800348][T27525] __sys_sendto+0x43c/0x520 [ 236.800366][T27525] ? __pfx___sys_sendto+0x10/0x10 [ 236.800386][T27525] ? ksys_write+0x1ac/0x250 [ 236.800397][T27525] ? __pfx_ksys_write+0x10/0x10 [ 236.800408][T27525] __x64_sys_sendto+0xe0/0x1c0 [ 236.800425][T27525] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 236.800439][T27525] do_syscall_64+0xcd/0x4c0 [ 236.800451][T27525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.800475][T27525] RIP: 0033:0x7fb4d878ebe9 [ 236.800491][T27525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.800507][T27525] RSP: 002b:00007fb4d9530038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 236.800526][T27525] RAX: ffffffffffffffda RBX: 00007fb4d89b5fa0 RCX: 00007fb4d878ebe9 [ 236.800537][T27525] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: 0000000000000003 [ 236.800548][T27525] RBP: 00007fb4d9530090 R08: 0000000000000000 R09: 0000000000000000 [ 236.800557][T27525] R10: 0000000024040810 R11: 0000000000000246 R12: 0000000000000001 [ 236.800564][T27525] R13: 00007fb4d89b6038 R14: 00007fb4d89b5fa0 R15: 00007ffdd281d398 [ 236.800574][T27525] [ 236.849476][ T40] audit: type=1400 audit(1756087713.095:92130): avc: denied { bind } for pid=27529 comm="syz.7.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 236.872391][T27534] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 236.955316][ T40] audit: type=1400 audit(1756087713.245:92131): avc: denied { read } for pid=27529 comm="syz.7.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 237.069102][ T34] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 237.073835][ T34] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 237.196822][T27572] FAULT_INJECTION: forcing a failure. [ 237.196822][T27572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.200954][T27572] CPU: 0 UID: 0 PID: 27572 Comm: syz.7.2788 Not tainted syzkaller #0 PREEMPT(full) [ 237.200970][T27572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.200977][T27572] Call Trace: [ 237.200982][T27572] [ 237.200987][T27572] dump_stack_lvl+0x16c/0x1f0 [ 237.201003][T27572] should_fail_ex+0x512/0x640 [ 237.201017][T27572] _copy_to_user+0x32/0xd0 [ 237.201032][T27572] simple_read_from_buffer+0xcb/0x170 [ 237.201044][T27572] proc_fail_nth_read+0x197/0x240 [ 237.201057][T27572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.201068][T27572] ? security_file_permission+0x71/0x210 [ 237.201086][T27572] ? rw_verify_area+0xcf/0x6c0 [ 237.201102][T27572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.201114][T27572] vfs_read+0x1e1/0xcf0 [ 237.201125][T27572] ? __pfx___sys_sendto+0x10/0x10 [ 237.201143][T27572] ? __pfx___mutex_lock+0x10/0x10 [ 237.201167][T27572] ? __pfx_vfs_read+0x10/0x10 [ 237.201177][T27572] ? __fget_files+0x204/0x3c0 [ 237.201188][T27572] ? rcu_is_watching+0x12/0xc0 [ 237.201207][T27572] ? __fget_files+0x20e/0x3c0 [ 237.201222][T27572] ksys_read+0x12a/0x250 [ 237.201233][T27572] ? __pfx_ksys_read+0x10/0x10 [ 237.201245][T27572] do_syscall_64+0xcd/0x4c0 [ 237.201258][T27572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.201269][T27572] RIP: 0033:0x7f02ca18d5fc [ 237.201279][T27572] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 237.201290][T27572] RSP: 002b:00007f02cb09b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 237.201301][T27572] RAX: ffffffffffffffda RBX: 00007f02ca3b5fa0 RCX: 00007f02ca18d5fc [ 237.201309][T27572] RDX: 000000000000000f RSI: 00007f02cb09b0a0 RDI: 0000000000000004 [ 237.201315][T27572] RBP: 00007f02cb09b090 R08: 0000000000000000 R09: 0000000000000000 [ 237.201322][T27572] R10: 0000000024040810 R11: 0000000000000246 R12: 0000000000000001 [ 237.201328][T27572] R13: 00007f02ca3b6038 R14: 00007f02ca3b5fa0 R15: 00007ffe5e74d968 [ 237.201338][T27572] [ 237.324650][ T6220] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 237.447456][T27582] batman_adv: batadv0: Interface deactivated: gretap1 [ 237.453450][ T7675] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 237.457868][ T7675] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.461269][ T7675] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 237.465425][ T7675] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.468807][ T7675] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 237.471646][ T7675] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.474772][ T7675] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 237.477597][ T7675] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.483129][ T6220] usb 14-1: Using ep0 maxpacket: 8 [ 237.486563][ T6220] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 237.490246][ T6220] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.494562][ T6220] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.498635][ T6220] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.502767][ T6220] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.508702][ T6220] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 237.512476][ T6220] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.718598][ T6220] usb 14-1: usb_control_msg returned -32 [ 237.720490][ T6220] usbtmc 14-1:16.0: can't read capabilities [ 237.811768][T27603] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 237.817590][T27605] overlay: filesystem on ./bus not supported as upperdir [ 237.887740][ T7675] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.891009][ T7675] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.964873][ T7675] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.967946][ T7675] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.014948][ T7675] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.018116][ T7675] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.068043][ T5332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.070510][ T5332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.072866][ T5332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.075813][ T5332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.078432][ T5332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.089182][T27613] lo speed is unknown, defaulting to 1000 [ 238.095165][ T7675] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.098265][ T7675] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.175570][T27613] chnl_net:caif_netlink_parms(): no params data found [ 238.179606][T27732] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2797'. [ 238.212897][ T7675] bond2 (unregistering): (slave gretap0): Releasing active interface [ 238.216349][ T29] SELinux: failure in sel_netif_sid_slow(), invalid network interface (119) [ 238.218031][ T7675] gretap0 (unregistering): left promiscuous mode [ 238.221601][ T7675] gretap0 (unregistering): left allmulticast mode [ 238.485447][ T7675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.489230][ T7675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.492568][ T7675] bond0 (unregistering): Released all slaves [ 238.496539][ T7675] bond1 (unregistering): Released all slaves [ 238.502500][ T7675] bond2 (unregistering): Released all slaves [ 238.507426][ T7675] bond3 (unregistering): Released all slaves [ 238.514263][ T7675] bond4 (unregistering): Released all slaves [ 238.518855][ T7675] bond5 (unregistering): Released all slaves [ 238.522603][ T7675] bond6 (unregistering): Released all slaves [ 238.569891][T27613] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.572213][T27613] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.574900][T27613] bridge_slave_0: entered allmulticast mode [ 238.578224][T27613] bridge_slave_0: entered promiscuous mode [ 238.582570][T27613] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.585774][T27613] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.589247][T27613] bridge_slave_1: entered allmulticast mode [ 238.592584][T27613] bridge_slave_1: entered promiscuous mode [ 238.595733][ T7675] tipc: Disabling bearer [ 238.598136][ T7675] tipc: Left network mode [ 238.627438][T27613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.636696][T27613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.677462][T27613] team0: Port device team_slave_0 added [ 238.681606][T27613] team0: Port device team_slave_1 added [ 238.701952][T27613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.704281][T27613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.712199][T27613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.719502][T27613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.721783][T27613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.729814][T27613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.766825][T27613] hsr_slave_0: entered promiscuous mode [ 238.769033][T27613] hsr_slave_1: entered promiscuous mode [ 238.771053][T27613] debugfs: 'hsr0' already exists in 'hsr' [ 238.772851][T27613] Cannot create hsr debugfs directory [ 238.796369][ T7675] hsr_slave_0: left promiscuous mode [ 238.798881][ T7675] hsr_slave_1: left promiscuous mode [ 238.801277][ T7675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.806646][ T7675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.809965][ T7675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.812311][ T7675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.817230][ T7675] veth1_macvtap: left promiscuous mode [ 238.819108][ T7675] veth0_macvtap: left promiscuous mode [ 238.820879][ T7675] veth1_vlan: left promiscuous mode [ 238.822573][ T7675] veth0_vlan: left promiscuous mode [ 238.845130][ T7675] pimreg (unregistering): left allmulticast mode [ 239.223383][ T6220] usb 13-1: reset high-speed USB device number 14 using dummy_hcd [ 239.374960][T27613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 239.380057][T27613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.381579][T28674] cgroup: name respecified [ 239.386127][T27613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.387141][ T40] audit: type=1400 audit(1756087715.675:92132): avc: denied { listen } for pid=28672 comm="syz.8.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 239.395648][ T40] audit: type=1400 audit(1756087715.675:92133): avc: denied { accept } for pid=28672 comm="syz.8.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 239.396990][T27613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.430415][T27613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.438960][T27613] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.439196][T28682] overlayfs: failed to resolve 'verity=require': -2 [ 239.444511][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.446753][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.451449][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.453989][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.478148][ T40] audit: type=1400 audit(1756087715.765:92134): avc: denied { egress } for pid=1023 comm="kworker/1:2" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 239.530055][T27613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.546361][T27613] veth0_vlan: entered promiscuous mode [ 239.551525][T27613] veth1_vlan: entered promiscuous mode [ 239.567442][T27613] veth0_macvtap: entered promiscuous mode [ 239.571887][T27613] veth1_macvtap: entered promiscuous mode [ 239.580300][T27613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.585475][T27613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.589929][ T7658] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.592852][ T7658] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.596702][ T7658] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.599515][ T7658] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.602256][ T40] audit: type=1400 audit(1756087715.885:92135): avc: denied { prog_load } for pid=28692 comm="syz.7.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 239.609051][ T40] audit: type=1400 audit(1756087715.885:92136): avc: denied { map_create } for pid=28692 comm="syz.7.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 239.615516][ T40] audit: type=1400 audit(1756087715.885:92137): avc: denied { prog_run } for pid=28692 comm="syz.7.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 239.636485][ T7658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.639150][ T7658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.647279][ T7658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.649791][ T7658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.657180][T28710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2808'. [ 239.665339][ T40] audit: type=1400 audit(1756087715.955:92138): avc: denied { accept } for pid=28709 comm="syz.7.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 239.696877][ T40] audit: type=1400 audit(1756087715.985:92139): avc: denied { create } for pid=28717 comm="syz.1.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 239.703664][ T40] audit: type=1400 audit(1756087715.985:92140): avc: denied { setopt } for pid=28717 comm="syz.1.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 239.709802][ T40] audit: type=1400 audit(1756087715.985:92141): avc: denied { connect } for pid=28717 comm="syz.1.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 239.749386][ T40] audit: type=1400 audit(1756087716.035:92142): avc: denied { map_read map_write } for pid=28717 comm="syz.1.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 240.070714][ T1337] usb 14-1: USB disconnect, device number 13 [ 240.074075][T19883] usb 13-1: USB disconnect, device number 14 [ 240.103025][T28743] SELinux: syz.9.2812 (28743) set checkreqprot to 1. This is no longer supported. [ 240.113356][ T5332] Bluetooth: hci2: command tx timeout [ 240.336141][T28759] bridge0: port 1(syz_tun) entered blocking state [ 240.338491][T28759] bridge0: port 1(syz_tun) entered disabled state [ 240.340676][T28759] syz_tun: entered allmulticast mode [ 240.342788][T28759] syz_tun: entered promiscuous mode [ 240.344985][T28759] bridge0: port 1(syz_tun) entered blocking state [ 240.347138][T28759] bridge0: port 1(syz_tun) entered forwarding state [ 240.368510][ T40] audit: type=1400 audit(1756087716.655:92143): avc: denied { write } for pid=28762 comm="syz.8.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 240.416899][ T40] audit: type=1400 audit(1756087716.705:92144): avc: denied { listen } for pid=28767 comm="syz.8.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 240.420042][T28768] kAFS: unparsable volume name [ 240.568647][T28779] ceph: No mds server is up or the cluster is laggy [ 240.570944][T19883] libceph: connect (1)[c::]:6789 error -22 [ 240.572862][T19883] libceph: mon0 (1)[c::]:6789 connect error [ 240.601638][T28797] Bluetooth: MGMT ver 1.23 [ 240.640632][T28810] tmpfs: Bad value for 'mpol' [ 240.641181][T28811] tmpfs: Bad value for 'mpol' [ 240.645095][T28810] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 240.647592][T28811] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 240.652217][T28810] tmpfs: Unknown parameter 'subj_type' [ 240.740915][T28826] program syz.1.2835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.768682][T28832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2838'. [ 240.780921][T28837] ALSA: mixer_oss: invalid OSS volume '' [ 240.893737][T28856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 240.896567][T28856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2844'. [ 240.899445][T28856] netlink: 'syz.1.2844': attribute type 20 has an invalid length. [ 240.904927][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.904974][T28856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 240.908625][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.911011][T28856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2844'. [ 240.914407][ T7702] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.916620][T28856] netlink: 'syz.1.2844': attribute type 20 has an invalid length. [ 240.922416][ T7702] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.927626][T28861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 240.931266][T28861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2844'. [ 240.935420][T28861] netlink: 'syz.1.2844': attribute type 20 has an invalid length. [ 240.938830][T28861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 240.942280][T28861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2844'. [ 240.945902][T28861] netlink: 'syz.1.2844': attribute type 20 has an invalid length. [ 241.064681][T28893] ALSA: mixer_oss: invalid OSS volume '' [ 241.332737][T28925] 9pnet: Could not find request transport: v=9p2000.u [ 241.355378][T28930] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 241.369804][T28931] 9pnet: Could not find request transport: trp [ 241.394189][T28939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.399433][T28941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.439044][T28947] syz.7.2865(28947): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 241.492158][T28959] ALSA: mixer_oss: invalid OSS volume '' [ 241.524429][T28963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2869'. [ 241.527268][T28963] netlink: 'syz.7.2869': attribute type 19 has an invalid length. [ 241.638128][T28984] SELinux: failed to load policy [ 241.739005][T28997] overlay: filesystem on ./file0 not supported as upperdir [ 241.739417][T29014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57766 sclass=netlink_route_socket pid=29014 comm=syz.9.2881 [ 241.786126][T29025] syz.7.2884: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 241.790955][T29025] CPU: 2 UID: 0 PID: 29025 Comm: syz.7.2884 Not tainted syzkaller #0 PREEMPT(full) [ 241.790974][T29025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 241.790982][T29025] Call Trace: [ 241.790987][T29025] [ 241.790991][T29025] dump_stack_lvl+0x16c/0x1f0 [ 241.791031][T29025] warn_alloc+0x248/0x3a0 [ 241.791050][T29025] ? __pfx_warn_alloc+0x10/0x10 [ 241.791061][T29025] ? __pfx_stack_trace_save+0x10/0x10 [ 241.791079][T29025] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 241.791095][T29025] ? kasan_save_stack+0x42/0x60 [ 241.791107][T29025] ? kasan_save_stack+0x33/0x60 [ 241.791133][T29025] ? kasan_save_track+0x14/0x30 [ 241.791145][T29025] ? xskq_create+0x52/0x1d0 [ 241.791162][T29025] ? xsk_setsockopt+0x74e/0x9a0 [ 241.791181][T29025] ? do_sock_setsockopt+0xf3/0x1d0 [ 241.791198][T29025] ? xskq_create+0xfb/0x1d0 [ 241.791214][T29025] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 241.791234][T29025] ? xskq_create+0xfb/0x1d0 [ 241.791253][T29025] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 241.791274][T29025] ? xskq_create+0xfb/0x1d0 [ 241.791291][T29025] vmalloc_user_noprof+0x9e/0xe0 [ 241.791308][T29025] ? xskq_create+0xfb/0x1d0 [ 241.791325][T29025] xskq_create+0xfb/0x1d0 [ 241.791341][T29025] xsk_setsockopt+0x74e/0x9a0 [ 241.791357][T29025] ? __pfx_xsk_setsockopt+0x10/0x10 [ 241.791372][T29025] ? __fget_files+0x204/0x3c0 [ 241.791384][T29025] ? rcu_is_watching+0x12/0xc0 [ 241.791398][T29025] ? selinux_socket_setsockopt+0x6a/0x80 [ 241.791413][T29025] ? __pfx_xsk_setsockopt+0x10/0x10 [ 241.791430][T29025] do_sock_setsockopt+0xf3/0x1d0 [ 241.791444][T29025] __sys_setsockopt+0x1a0/0x230 [ 241.791455][T29025] __x64_sys_setsockopt+0xbd/0x160 [ 241.791465][T29025] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 241.791478][T29025] do_syscall_64+0xcd/0x4c0 [ 241.791491][T29025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.791502][T29025] RIP: 0033:0x7f02ca18ebe9 [ 241.791512][T29025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.791523][T29025] RSP: 002b:00007f02cb09b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 241.791539][T29025] RAX: ffffffffffffffda RBX: 00007f02ca3b5fa0 RCX: 00007f02ca18ebe9 [ 241.791546][T29025] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 241.791553][T29025] RBP: 00007f02ca211e19 R08: 0000000000000004 R09: 0000000000000000 [ 241.791559][T29025] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.791566][T29025] R13: 00007f02ca3b6038 R14: 00007f02ca3b5fa0 R15: 00007ffe5e74d968 [ 241.791576][T29025] [ 241.791595][T29025] Mem-Info: [ 241.816519][ T5332] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 241.816857][T29025] active_anon:9519 inactive_anon:0 isolated_anon:0 [ 241.816857][T29025] active_file:8406 inactive_file:14256 isolated_file:0 [ 241.816857][T29025] unevictable:1768 dirty:175 writeback:0 [ 241.816857][T29025] slab_reclaimable:8755 slab_unreclaimable:84269 [ 241.816857][T29025] mapped:25161 shmem:2417 pagetables:1323 [ 241.816857][T29025] sec_pagetables:313 bounce:0 [ 241.816857][T29025] kernel_misc_reclaimable:0 [ 241.816857][T29025] free:470682 free_pcp:15715 free_cma:0 [ 241.868615][T29033] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 241.868782][T29025] Node 0 active_anon:38076kB inactive_anon:0kB active_file:33624kB inactive_file:56880kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100636kB dirty:696kB writeback:0kB shmem:6132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:15024kB pagetables:5080kB sec_pagetables:1252kB all_unreclaimable? no Balloon:0kB [ 241.928155][T29025] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 241.937732][T29025] Node 0 DMA free:15344kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 241.946781][T29025] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 241.948636][T29025] Node 0 DMA32 free:275380kB boost:20480kB min:47996kB low:54872kB high:61748kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38076kB inactive_anon:0kB active_file:33624kB inactive_file:56880kB unevictable:3536kB writepending:696kB present:2080628kB managed:1263492kB mlocked:0kB bounce:0kB free_pcp:44728kB local_pcp:18392kB free_cma:0kB [ 241.958728][T29025] lowmem_reserve[]: 0 0 0 0 0 [ 241.960283][T29025] Node 1 Normal free:1592004kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:19120kB local_pcp:4676kB free_cma:0kB [ 241.970142][T29025] lowmem_reserve[]: 0 0 0 0 0 [ 241.972063][T29025] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (U) = 15344kB [ 241.976989][T29025] Node 0 DMA32: 2717*4kB (UME) 1514*8kB (UME) 862*16kB (UME) 1006*32kB (UME) 611*64kB (UME) 266*128kB (UME) 74*256kB (UME) 57*512kB (UME) 13*1024kB (UME) 19*2048kB (UM) 8*4096kB (M) = 275236kB [ 241.983423][T29025] Node 1 Normal: 11*4kB (UME) 25*8kB (UME) 45*16kB (UME) 100*32kB (UME) 44*64kB (UME) 21*128kB (UME) 5*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 3*2048kB (UM) 383*4096kB (UM) = 1592004kB [ 241.989000][T29025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.992085][T29025] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 241.995099][ T1337] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 241.995582][T29025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.001159][T29025] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 242.005634][T29025] 25107 total pagecache pages [ 242.007247][T29025] 0 pages in swap cache [ 242.008670][T29025] Free swap = 124996kB [ 242.010059][T29025] Total swap = 124996kB [ 242.011464][T29025] 1048443 pages RAM [ 242.012748][T29025] 0 pages HighMem/MovableOnly [ 242.014801][T29025] 283257 pages reserved [ 242.016199][T29025] 0 pages cma reserved [ 242.071690][T29100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29100 comm=syz.8.2890 [ 242.153290][ T1337] usb 6-1: Using ep0 maxpacket: 8 [ 242.156417][ T1337] usb 6-1: config 0 interface 0 has no altsetting 0 [ 242.158092][T29175] NILFS (nbd7): device size too small [ 242.158590][ T1337] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 242.162088][T29175] evm: overlay not supported [ 242.163064][ T1337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.165201][ T1337] usb 6-1: config 0 descriptor?? [ 242.166237][T29175] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 242.184295][ T5332] Bluetooth: hci2: command tx timeout [ 242.265887][T29201] IPVS: Unknown mcast interface: [ 242.322596][T29201] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 242.356068][T29205] netlink: 'syz.8.2900': attribute type 10 has an invalid length. [ 242.573411][ T1337] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 242.723561][ T6113] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 242.775595][ T61] usb 6-1: USB disconnect, device number 9 [ 242.883253][ T6113] usb 13-1: Using ep0 maxpacket: 32 [ 242.886406][ T6113] usb 13-1: config 0 has an invalid interface number: 247 but max is 0 [ 242.889151][ T6113] usb 13-1: config 0 has no interface number 0 [ 242.892621][ T6113] usb 13-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 242.896240][ T6113] usb 13-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 242.898783][ T6113] usb 13-1: Product: syz [ 242.900173][ T6113] usb 13-1: Manufacturer: syz [ 242.902771][ T6113] usb 13-1: config 0 descriptor?? [ 243.259682][T29266] nbd: must specify a size in bytes for the device [ 243.265372][T29268] nbd: must specify a size in bytes for the device [ 243.282892][T29271] FAULT_INJECTION: forcing a failure. [ 243.282892][T29271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.284596][T29261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.288676][T29271] CPU: 1 UID: 0 PID: 29271 Comm: syz.7.2908 Not tainted syzkaller #0 PREEMPT(full) [ 243.288694][T29271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.288702][T29271] Call Trace: [ 243.288706][T29271] [ 243.288710][T29271] dump_stack_lvl+0x16c/0x1f0 [ 243.288725][T29271] should_fail_ex+0x512/0x640 [ 243.288739][T29271] _copy_from_user+0x2e/0xd0 [ 243.288755][T29271] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 243.288772][T29271] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 243.288789][T29271] ? sockopt_lock_sock+0x54/0x70 [ 243.288800][T29271] ? sockopt_lock_sock+0x54/0x70 [ 243.288810][T29271] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 243.288825][T29271] do_ip_setsockopt+0x1dce/0x3240 [ 243.288842][T29271] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 243.288857][T29271] ? preempt_count_add+0x76/0x150 [ 243.288869][T29271] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 243.288886][T29271] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 243.288905][T29271] ip_setsockopt+0x59/0xf0 [ 243.288921][T29271] udp_setsockopt+0x7d/0xd0 [ 243.288935][T29271] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 243.288950][T29271] do_sock_setsockopt+0xf3/0x1d0 [ 243.288963][T29271] __sys_setsockopt+0x1a0/0x230 [ 243.288974][T29271] __x64_sys_setsockopt+0xbd/0x160 [ 243.288985][T29271] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 243.288998][T29271] do_syscall_64+0xcd/0x4c0 [ 243.289011][T29271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.289023][T29271] RIP: 0033:0x7f02ca18ebe9 [ 243.289034][T29271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.289045][T29271] RSP: 002b:00007f02cb09b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 243.289057][T29271] RAX: ffffffffffffffda RBX: 00007f02ca3b5fa0 RCX: 00007f02ca18ebe9 [ 243.289064][T29271] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000003 [ 243.289071][T29271] RBP: 00007f02cb09b090 R08: 000000000000000c R09: 0000000000000000 [ 243.289077][T29271] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 243.289084][T29271] R13: 00007f02ca3b6038 R14: 00007f02ca3b5fa0 R15: 00007ffe5e74d968 [ 243.289094][T29271] [ 243.373958][T29261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.599891][T29288] team0: Device vlan2 is already an upper device of the team interface [ 243.722485][T29300] sp0: Synchronizing with TNC [ 243.904990][T29318] netlink: 'syz.1.2919': attribute type 21 has an invalid length. [ 243.938260][T29321] FAULT_INJECTION: forcing a failure. [ 243.938260][T29321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.942400][T29321] CPU: 1 UID: 0 PID: 29321 Comm: syz.1.2920 Not tainted syzkaller #0 PREEMPT(full) [ 243.942415][T29321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.942422][T29321] Call Trace: [ 243.942427][T29321] [ 243.942431][T29321] dump_stack_lvl+0x16c/0x1f0 [ 243.942447][T29321] should_fail_ex+0x512/0x640 [ 243.942460][T29321] _copy_to_user+0x32/0xd0 [ 243.942475][T29321] simple_read_from_buffer+0xcb/0x170 [ 243.942487][T29321] proc_fail_nth_read+0x197/0x240 [ 243.942500][T29321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.942513][T29321] ? security_file_permission+0x71/0x210 [ 243.942530][T29321] ? rw_verify_area+0xcf/0x6c0 [ 243.942546][T29321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.942558][T29321] vfs_read+0x1e1/0xcf0 [ 243.942569][T29321] ? __pfx___mutex_lock+0x10/0x10 [ 243.942594][T29321] ? __pfx_vfs_read+0x10/0x10 [ 243.942604][T29321] ? __fget_files+0x204/0x3c0 [ 243.942615][T29321] ? rcu_is_watching+0x12/0xc0 [ 243.942630][T29321] ? __fget_files+0x20e/0x3c0 [ 243.942643][T29321] ksys_read+0x12a/0x250 [ 243.942654][T29321] ? __pfx_ksys_read+0x10/0x10 [ 243.942666][T29321] do_syscall_64+0xcd/0x4c0 [ 243.942678][T29321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.942689][T29321] RIP: 0033:0x7fdd4618d5fc [ 243.942699][T29321] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 243.942710][T29321] RSP: 002b:00007fdd4707e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.942721][T29321] RAX: ffffffffffffffda RBX: 00007fdd463b5fa0 RCX: 00007fdd4618d5fc [ 243.942728][T29321] RDX: 000000000000000f RSI: 00007fdd4707e0a0 RDI: 0000000000000004 [ 243.942735][T29321] RBP: 00007fdd4707e090 R08: 0000000000000000 R09: 0000000000000000 [ 243.942741][T29321] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 243.942748][T29321] R13: 00007fdd463b6038 R14: 00007fdd463b5fa0 R15: 00007ffc38615e48 [ 243.942758][T29321] [ 244.026750][T29323] ALSA: mixer_oss: invalid OSS volume '' [ 244.214871][T29337] batadv_slave_0: entered promiscuous mode [ 244.217179][T29337] erspan0: entered promiscuous mode [ 244.245363][T29343] delete_channel: no stack [ 244.263561][ T5981] Bluetooth: hci2: command tx timeout [ 244.292704][T29355] ALSA: mixer_oss: invalid OSS volume '' [ 244.447651][T29366] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 244.483914][T29369] Invalid logical block size (4) [ 244.652174][ T40] kauditd_printk_skb: 175 callbacks suppressed [ 244.652191][ T40] audit: type=1400 audit(1756087720.935:92320): avc: denied { write } for pid=29380 comm="syz.1.2937" name="001" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 244.743219][ T5981] Bluetooth: hci4: command 0x1003 tx timeout [ 244.743286][ T5332] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 244.767087][ T40] audit: type=1400 audit(1756087721.055:92321): avc: denied { create } for pid=29389 comm="syz.9.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 244.773455][ T40] audit: type=1400 audit(1756087721.055:92322): avc: denied { read write } for pid=29389 comm="syz.9.2938" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 244.780931][ T40] audit: type=1400 audit(1756087721.055:92323): avc: denied { open } for pid=29389 comm="syz.9.2938" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 244.789234][ T40] audit: type=1400 audit(1756087721.055:92324): avc: denied { ioctl } for pid=29389 comm="syz.9.2938" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 244.808309][ T40] audit: type=1400 audit(1756087721.105:92325): avc: denied { read write } for pid=29393 comm="syz.9.2939" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 244.817348][ T40] audit: type=1400 audit(1756087721.105:92326): avc: denied { open } for pid=29393 comm="syz.9.2939" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 244.825081][ T40] audit: type=1400 audit(1756087721.105:92327): avc: denied { mount } for pid=29393 comm="syz.9.2939" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 244.842492][T29397] ALSA: mixer_oss: invalid OSS volume '' [ 244.879370][ T40] audit: type=1400 audit(1756087721.165:92328): avc: denied { unmount } for pid=19932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 244.973452][T29405] block nbd9: shutting down sockets [ 244.989852][T29412] misc userio: The device must be registered before sending interrupts [ 244.998101][ T40] audit: type=1400 audit(1756087721.295:92329): avc: denied { read } for pid=29413 comm="syz.9.2944" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 245.032579][T29430] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 245.172724][T29447] bond_slave_0: entered promiscuous mode [ 245.174611][T29447] bond_slave_1: entered promiscuous mode [ 245.177255][T29447] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 245.180398][T29447] bond_slave_0: left promiscuous mode [ 245.182186][T29447] bond_slave_1: left promiscuous mode [ 245.225118][T29452] binder: 29446:29452 ioctl c0306201 0 returned -14 [ 245.227547][T29452] binder: 29446:29452 ioctl 4018620d 0 returned -22 [ 245.275852][T29454] ALSA: mixer_oss: invalid OSS volume '' [ 245.594204][T19883] usb 13-1: USB disconnect, device number 15 [ 245.611818][T29486] SELinux: failed to load policy [ 245.824412][T29503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64112 sclass=netlink_route_socket pid=29503 comm=syz.8.2960 [ 245.847397][T29505] __nla_validate_parse: 18 callbacks suppressed [ 245.847409][T29505] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2961'. [ 245.874041][ T5332] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 245.876834][ T5332] Bluetooth: hci0: Injecting HCI hardware error event [ 245.879075][ T5332] Bluetooth: hci0: hardware error 0x00 [ 246.064339][T29527] ALSA: mixer_oss: invalid OSS volume '' [ 246.332003][T29538] vivid-003: disconnect [ 246.334782][T29538] Dead loop on virtual device ip6_vti0, fix it urgently! [ 246.337796][T29538] Dead loop on virtual device ip6_vti0, fix it urgently! [ 246.340654][T29538] Dead loop on virtual device ip6_vti0, fix it urgently! [ 246.344221][T29538] Dead loop on virtual device ip6_vti0, fix it urgently! [ 246.347055][T29538] Dead loop on virtual device ip6_vti0, fix it urgently! [ 246.349858][T29538] Dead loop on virtual device ip6_vti0, fix it urgently! [ 246.353279][ T5981] Bluetooth: hci2: command tx timeout [ 246.363806][T29537] vivid-003: reconnect [ 246.368773][T29540] kernel profiling enabled (shift: 63) [ 246.370846][T29540] profiling shift: 63 too large [ 246.406052][T29548] delete_channel: no stack [ 246.437289][T19883] libceph: connect (1)[c::]:6789 error -22 [ 246.439456][T19883] libceph: mon0 (1)[c::]:6789 connect error [ 246.485789][T29552] ceph: No mds server is up or the cluster is laggy [ 247.249959][T29580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2982'. [ 247.380480][T29595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2986'. [ 247.383796][T29595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.393114][T29595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.429296][T29607] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2989'. [ 247.432476][T29607] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 247.437230][T29607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.450131][T29607] openvswitch: netlink: Tunnel attr 14 has unexpected len 2 expected 0 [ 247.471481][T29616] ALSA: mixer_oss: invalid OSS volume '' [ 247.567652][T27588] hid_parser_main: 221 callbacks suppressed [ 247.567665][T27588] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 247.572531][T27588] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 247.576153][T27588] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 247.578832][T27588] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 247.581038][T27588] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 247.584832][T27588] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 247.587307][T27588] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 247.589979][T27588] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 247.595108][T27588] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 247.597862][T27588] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 247.600835][T27588] hid-generic 00A0:0008:0003.0007: hidraw1: HID v0.05 Device [syz1] on syz0 [ 247.709685][T19883] usb 13-1: new low-speed USB device number 16 using dummy_hcd [ 247.747478][T29644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2997'. [ 247.750332][T29644] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2997'. [ 247.755425][T29644] netlink: 'syz.7.2997': attribute type 7 has an invalid length. [ 247.863401][T19883] usb 13-1: Invalid ep0 maxpacket: 16 [ 247.944172][ T5332] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 247.990585][T29658] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3001'. [ 247.993363][T19883] usb 13-1: new low-speed USB device number 17 using dummy_hcd [ 247.993662][T29658] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 248.125976][T29665] ALSA: mixer_oss: invalid OSS volume '' [ 248.143887][T19883] usb 13-1: Invalid ep0 maxpacket: 16 [ 248.146542][T19883] usb usb13-port1: attempt power cycle [ 248.484071][T19883] usb 13-1: new low-speed USB device number 18 using dummy_hcd [ 248.504814][T19883] usb 13-1: Invalid ep0 maxpacket: 16 [ 248.633879][T19883] usb 13-1: new low-speed USB device number 19 using dummy_hcd [ 248.654107][T19883] usb 13-1: Invalid ep0 maxpacket: 16 [ 248.657052][T19883] usb usb13-port1: unable to enumerate USB device [ 248.864898][T29690] geneve2: entered promiscuous mode [ 248.867239][T29690] geneve2: entered allmulticast mode [ 248.871785][ T7702] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.876256][ T7702] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.880126][ T7702] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.883989][ T7702] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.075930][T29702] ÿÿÿÿ: renamed from bridge_slave_0 [ 249.202730][T29705] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3013'. [ 249.223751][T29707] ALSA: mixer_oss: invalid OSS volume '' [ 249.379574][T29724] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3018'. [ 249.382898][T29724] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 249.386833][T29724] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 249.476422][T29738] overlayfs: upper fs does not support file handles, falling back to index=off. [ 249.524813][T29749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3026'. [ 249.549568][T29753] sp0: Synchronizing with TNC [ 249.557247][T29753] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 249.563349][T29759] ALSA: mixer_oss: invalid OSS volume '' [ 249.697339][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 249.697352][ T40] audit: type=1400 audit(1756087725.995:92386): avc: denied { append } for pid=29767 comm="syz.1.3030" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.697517][T29768] random: crng reseeded on system resumption [ 249.699680][ T40] audit: type=1400 audit(1756087725.995:92387): avc: denied { open } for pid=29767 comm="syz.1.3030" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.719152][ T40] audit: type=1400 audit(1756087726.005:92388): avc: denied { firmware_load } for pid=7675 comm="kworker/u32:26" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 249.735197][T29768] netlink: 'syz.1.3030': attribute type 1 has an invalid length. [ 249.745741][T29768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.755280][ T40] audit: type=1400 audit(1756087726.055:92389): avc: denied { ioctl } for pid=29767 comm="syz.1.3030" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.955643][ T40] audit: type=1400 audit(1756087726.255:92390): avc: denied { compute_member } for pid=29820 comm="syz.1.3034" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 250.039324][ T40] audit: type=1400 audit(1756087726.335:92391): avc: denied { setattr } for pid=29825 comm="syz.1.3035" name="/" dev="9p" ino=35913850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.044487][T29826] ------------[ cut here ]------------ [ 250.049963][T29826] WARNING: CPU: 0 PID: 29826 at arch/x86/kvm/x86.c:11551 kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 250.053630][T29826] Modules linked in: [ 250.055087][ T40] audit: type=1400 audit(1756087726.355:92392): avc: denied { write } for pid=5954 comm="syz-executor" path="pipe:[7182]" dev="pipefs" ino=7182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 250.055178][T29826] CPU: 0 UID: 0 PID: 29826 Comm: syz.1.3035 Not tainted syzkaller #0 PREEMPT(full) [ 250.067976][T29826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.071766][T29826] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 250.074121][T29826] Code: 0a 00 00 00 00 00 00 e8 55 6b be 1e 31 ff 89 c5 89 c6 e8 04 ea 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 b2 ee 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 a4 ee 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 250.080542][T29826] RSP: 0018:ffffc900043cfc30 EFLAGS: 00010287 [ 250.082906][T29826] RAX: 0000000000001b81 RBX: ffff888055cca940 RCX: ffffc900283a3000 [ 250.086102][T29826] RDX: 0000000000080000 RSI: ffffffff8141a27e RDI: 0000000000000007 [ 250.088681][T29826] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 250.091477][T29826] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888027446000 [ 250.094289][T29826] R13: ffff888055ccaa18 R14: 0000000000000000 R15: ffff888055ccac74 [ 250.096783][T29826] FS: 00007fdd4707e6c0(0000) GS:ffff8880d66bc000(0000) knlGS:0000000000000000 [ 250.099654][T29826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.101764][T29826] CR2: 0000000000000000 CR3: 000000004441e000 CR4: 0000000000352ef0 [ 250.104352][T29826] Call Trace: [ 250.105451][T29826] [ 250.106450][T29826] kvm_vcpu_ioctl+0x5eb/0x1690 [ 250.108043][T29826] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 250.109717][T29826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.111622][T29826] ? do_vfs_ioctl+0x128/0x14f0 [ 250.113292][T29826] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 250.114978][T29826] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 250.117145][T29826] ? rcu_is_watching+0x12/0xc0 [ 250.118714][T29826] ? __fget_files+0x204/0x3c0 [ 250.120246][T29826] ? hook_file_ioctl_common+0x145/0x410 [ 250.122030][T29826] ? selinux_file_ioctl+0x180/0x270 [ 250.123778][T29826] ? selinux_file_ioctl+0xb4/0x270 [ 250.124439][ T40] audit: type=1400 audit(1756087726.415:92393): avc: denied { mount } for pid=29825 comm="syz.1.3035" name="/" dev="ramfs" ino=73908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 250.125492][T29826] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 250.134857][T29826] __x64_sys_ioctl+0x18e/0x210 [ 250.136397][T29826] do_syscall_64+0xcd/0x4c0 [ 250.137888][T29826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.139781][T29826] RIP: 0033:0x7fdd4618ebe9 [ 250.141217][T29826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.148069][T29826] RSP: 002b:00007fdd4707e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.151019][T29826] RAX: ffffffffffffffda RBX: 00007fdd463b5fa0 RCX: 00007fdd4618ebe9 [ 250.153713][T29826] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 250.156233][T29826] RBP: 00007fdd46211e19 R08: 0000000000000000 R09: 0000000000000000 [ 250.158796][T29826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.161305][T29826] R13: 00007fdd463b6038 R14: 00007fdd463b5fa0 R15: 00007ffc38615e48 [ 250.163952][T29826] [ 250.164978][T29826] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 250.167290][T29826] CPU: 0 UID: 0 PID: 29826 Comm: syz.1.3035 Not tainted syzkaller #0 PREEMPT(full) [ 250.170241][T29826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.173627][T29826] Call Trace: [ 250.174716][T29826] [ 250.175665][T29826] dump_stack_lvl+0x3d/0x1f0 [ 250.177154][T29826] vpanic+0x6e8/0x7a0 [ 250.178490][T29826] ? __pfx_vpanic+0x10/0x10 [ 250.179944][T29826] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 250.181956][T29826] panic+0xca/0xd0 [ 250.183186][T29826] ? __pfx_panic+0x10/0x10 [ 250.184565][T29826] check_panic_on_warn+0xab/0xb0 [ 250.186128][T29826] __warn+0xf6/0x3c0 [ 250.187354][T29826] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 250.189222][T29826] report_bug+0x3c3/0x580 [ 250.190583][T29826] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 250.192407][T29826] handle_bug+0x184/0x210 [ 250.193817][T29826] exc_invalid_op+0x17/0x50 [ 250.195348][T29826] asm_exc_invalid_op+0x1a/0x20 [ 250.196945][T29826] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 250.199061][T29826] Code: 0a 00 00 00 00 00 00 e8 55 6b be 1e 31 ff 89 c5 89 c6 e8 04 ea 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 b2 ee 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 a4 ee 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 250.205436][T29826] RSP: 0018:ffffc900043cfc30 EFLAGS: 00010287 [ 250.207408][T29826] RAX: 0000000000001b81 RBX: ffff888055cca940 RCX: ffffc900283a3000 [ 250.209977][T29826] RDX: 0000000000080000 RSI: ffffffff8141a27e RDI: 0000000000000007 [ 250.212487][T29826] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 250.215025][T29826] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888027446000 [ 250.217526][T29826] R13: ffff888055ccaa18 R14: 0000000000000000 R15: ffff888055ccac74 [ 250.220024][T29826] ? kvm_arch_vcpu_ioctl_run+0x14de/0x1980 [ 250.221883][T29826] kvm_vcpu_ioctl+0x5eb/0x1690 [ 250.223431][T29826] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 250.225075][T29826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.226949][T29826] ? do_vfs_ioctl+0x128/0x14f0 [ 250.228490][T29826] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 250.230094][T29826] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 250.232240][T29826] ? rcu_is_watching+0x12/0xc0 [ 250.233805][T29826] ? __fget_files+0x204/0x3c0 [ 250.235314][T29826] ? hook_file_ioctl_common+0x145/0x410 [ 250.237102][T29826] ? selinux_file_ioctl+0x180/0x270 [ 250.238780][T29826] ? selinux_file_ioctl+0xb4/0x270 [ 250.240422][T29826] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 250.242127][T29826] __x64_sys_ioctl+0x18e/0x210 [ 250.243739][T29826] do_syscall_64+0xcd/0x4c0 [ 250.245199][T29826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.247102][T29826] RIP: 0033:0x7fdd4618ebe9 [ 250.249066][T29826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.255465][T29826] RSP: 002b:00007fdd4707e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.258078][T29826] RAX: ffffffffffffffda RBX: 00007fdd463b5fa0 RCX: 00007fdd4618ebe9 [ 250.260583][T29826] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 250.263108][T29826] RBP: 00007fdd46211e19 R08: 0000000000000000 R09: 0000000000000000 [ 250.265613][T29826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.268146][T29826] R13: 00007fdd463b6038 R14: 00007fdd463b5fa0 R15: 00007ffc38615e48 [ 250.270657][T29826] [ 250.272292][T29826] Kernel Offset: disabled [ 250.273778][T29826] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:30:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000000032e00 RBX=0000000000000051 RCX=ffffc900283a3000 RDX=0000000000080000 RSI=ffffffff819acd70 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc900043cf8b0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=3a474e494e524157 R12=1ffff92000879f19 R13=0000000000000200 R14=ffff88801bf5a440 R15=ffffc900043cf980 RIP=ffffffff81bb9192 RFL=00010087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fdd4707e6c0 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004441e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a441ea0 RCX=ffffffff81af8c51 RDX=ffff88802f180000 RSI=ffffffff81af8c2b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003bbf500 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000007bcc R12=dffffc0000000000 R13=ffffed100d4883d5 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81af8c2d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd2508e7d60 CR3=000000003078e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd24fd876c3 00007fd24fd876c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff306eff90 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555561f009c0 0000555561f002b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555561ef0468 0000555561ef03e0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 038a02000cf80312 02000cf603040200 0cf4030a02000cf2 030002000cf00310 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010c80041084c5b9 cc08000100000a08 0606011fba000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001ffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffb7080d98031f fffffffe08000d90 030010000d800366 02000cfe030a0200 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0cfc0302ea02000c fa03038a02000cf8 031202000cf60304 02000cf4030a0200 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6220303238393033 6239666666666666 66660a37322e7965 6b5f5f2062203065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656b5f5f20622030 3638393033623966 666666666666660a 302e79656b5f5f20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 660a372e79656b5f 5f20622030613839 3033623966666666 666666660a332e79 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2062203034666430 3362396666666666 6666660a64695f74 656e5f656b616873 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6530336239666666 66666666660a6c62 7468736168725f65 6b616873646e6168 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6220303031653033 6239666666666666 66660a322e79656b 5f5f206220306330 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6239666666666666 66660a656e6f645f 726464615f77665f 736f696269637020 info registers vcpu 2 CPU#2 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643805 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc9000078f880 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=74203a7469647561 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9b10dfe0 R15=ffffffff856437a0 RIP=ffffffff8564382f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3de39a CR3=0000000032d52000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd281d8a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd281d8a6 00007ffdd281d8ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4d8812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4d8812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4d8812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4d8812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4d8812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4d8812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a359233542b9bde9 fedb1c464ad95a00 36254523d346bfd0 68b0c5a627acc555 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800000d82c79c8ff 0cecd151a3592335 42b9bde9fedb0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d346bfd068b0c5a6 27acc555c08cc838 0003006548000000 024078a5000ac09a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000028eadc RBX=0000000000000003 RCX=ffffffff8b939c29 RDX=ffffed100d4e6656 RSI=ffffffff8c162800 RDI=ffffffff81913311 RBP=ffffed1003bdd000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801dee8000 R14=ffffffff90ab3f90 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3a42fa CR3=00000000319bd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556bfba97600 0000556bfba97600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff632641e0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 615f6d766b203135 3531313a632e3638 782f6d766b2f3638 782f686372612074 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f64656c6562616c 6e753a725f746365 6a626f3a755f6d65 747379733d747865 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e6f637420745f 6d64617379733a72 5f6d64617379733a 746f6f723d747865 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e6f6373203035 3833313935333d6f 6e6920227039223d 76656420222f223d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d616e20223533 30332e312e7a7973 223d6d6d6f632035 323839323d646970 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000