last executing test programs: 1m55.251687682s ago: executing program 3 (id=103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f000000aa00), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f000000ab40)={0x0, 0x0, &(0x7f000000ab00)={&(0x7f000000aa40)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x24}}, 0x4004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, 0x3e, 0x107, 0xfffffffc, 0x25df9bfd, {0x3, 0x7c}, [@nested={0x4, 0x138}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f000000aa00), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f000000ab40)={0x0, 0x0, &(0x7f000000ab00)={&(0x7f000000aa40)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x24}}, 0x4004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, 0x3e, 0x107, 0xfffffffc, 0x25df9bfd, {0x3, 0x7c}, [@nested={0x4, 0x138}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) 1m55.250842052s ago: executing program 3 (id=104): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80140, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000180)={0x0, 0x40000105, 0x0, 0x0}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000000)={0x4, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 1m55.091803622s ago: executing program 3 (id=107): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x4, 0x400) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x4c}}, 0x2) 1m55.03182119s ago: executing program 3 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="03c900271e37"], 0x12b) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m55.030248336s ago: executing program 3 (id=111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b00000800", @ANYRES16=r0], 0x2c}}, 0x20000000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r2, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x401, @loopback, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000140)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f00000001c0)=0x9, 0x4) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0xc4ef, 0x401, 0x2f34, 0xb7, 0xe, "bbf7194348548d51b9a2d07aba8b8354982d19"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) r6 = io_uring_setup(0xdac, &(0x7f0000000180)={0x0, 0x4491, 0x2, 0x800000}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x9, 0x0, 0x0, 0xa, 0x20}, {0xffffffffffffffbc, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff57a}, {0x0, 0x400000000000, 0x0, 0x2}, 0xb}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x6, 0x3, 0x1, 0x0, 0xf000000}}, 0xe8) close(0xffffffffffffffff) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(r1, 0x8926, &(0x7f0000000780)={0x4, 0x4, 0x577d, 0xc1, 0x3, "51fed8089f0bd95e"}) r8 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r8, 0x8932, &(0x7f0000000080)={'dummy0\x00'}) 1m54.751671546s ago: executing program 3 (id=117): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000036000000", 0xfe60) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m54.672219044s ago: executing program 32 (id=117): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000036000000", 0xfe60) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m39.570114642s ago: executing program 2 (id=374): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xb, r3}) r4 = socket(0x2c, 0x803, 0x0) r5 = memfd_secret(0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast1, @private=0xa010101}}}}) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r7, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380), &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000540), &(0x7f00000005c0), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f0000000000)={0x7, 0x400000000000305, 0x0, 0x0, &(0x7f0000000480)}) syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(r5, 0x0, 0x0, 0x40010011, 0x0, 0xffffffffffffff91) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f00000000c0)={0x8, 0x2}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) 1m39.401420056s ago: executing program 2 (id=377): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000001dc0), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x846, 0x4, 0x7ff}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000998842e7ac2ec09e39e91b127f1001001c00128009000100626f6e64000000000c0002800500010004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x240048c4}, 0x0) 1m39.398730512s ago: executing program 2 (id=379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000bc0)="496a64b5a51618841697471f", 0xc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="3fac0860bfaee9712e544e902e643c09b2a7ef85ca117994828451f3a7fe9d9878810383d696879ca11f54750de1ba98b732fff800a3387b97a13a697cc44fa8980e8de8e33a83a07535adcc5aa4b1de0abd516810582d67e294f788f4ca52c4d7c74a3b2c4ae5ece775418be91da69dde", 0x71}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0x3, @mcast2, 0x1}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000740)="63cef4593f", 0x5}], 0x1}}], 0x3, 0x404c840) (async) syz_usb_disconnect(0xffffffffffffffff) (async) shutdown(r1, 0x2) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01bf58263d002cad701004"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x9) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) (rerun: 32) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000340)='sock_rcvqueue_full\x00', r5}, 0x18) (async) socket$kcm(0x11, 0xa, 0x300) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r7}, 0x10) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x61, &(0x7f00000044c0)={&(0x7f0000004040)=ANY=[@ANYRESDEC=r4], 0x64}, 0x1, 0x0, 0x0, 0x24000010}, 0x44) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x10000, @value=r6}, 0x28) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000140000004844fd43000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000004080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b96860c2bb4073de35fecb6664265ddb2a2f4925e6e33c17b9c647b08c7afb7b070f8c6396f113ea2873f71c5cdc5541a6830c80"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (rerun: 64) r11 = syz_open_dev$vcsa(&(0x7f0000000180), 0x7fffffffffffffff, 0x80400) write$binfmt_register(r11, &(0x7f00000001c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'syzkaller\x00', 0x3a, '*%', 0x3a, './file0', 0x3a, [0x4f, 0x4f, 0x50]}, 0x36) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) 1m39.263660604s ago: executing program 2 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x80003, 0x6) (async) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@can_newroute={0x1c, 0x18, 0x409, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x1c}}, 0x24004004) 1m39.170560483s ago: executing program 2 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000801) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x114, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x401}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004004}, 0x24044800) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_open_procfs(r4, &(0x7f00000023c0)='net/icmp\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000002400), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000024c0)={'ip6_vti0\x00', &(0x7f0000002440)={'syztnl1\x00', 0x0, 0x2f, 0x7f, 0x1, 0x4, 0x0, @empty, @mcast2, 0x700, 0x700, 0x7, 0x2}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffa, '\x00', r6, r5, 0x1, 0x1, 0x5}, 0x50) r7 = openat$cgroup_ro(r5, &(0x7f0000002580)='net_prio.prioidx\x00', 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f0000002d00)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x510400}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002600)=@newchain={0x6bc, 0x64, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x5, 0xc}, {0xfff6, 0x8}, {0xffff, 0x2}}, [@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x469ae51c7646d575, 0x4}}]}}, @f_tcindex={{0xc}, {0x674, 0x2, [@TCA_TCINDEX_ACT={0x1b0, 0x7, [@m_nat={0x1ac, 0x1f, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffb, 0x10001, 0x8, 0x9, 0x5}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd214d6e0, 0x9, 0x5, 0x40, 0xfffff800}, @empty, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x81, 0x3, 0x8, 0x4a57}, @dev={0xac, 0x14, 0x14, 0x37}, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xfffff801, 0x6, 0x8, 0x8}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x400, 0x8, 0x8, 0xc5f}, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1000, 0x10000000, 0x7ff, 0x8}, @private=0xa010100, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x1, 0x10000000, 0x80, 0x7}, @private=0xa010100, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x3, 0x2, 0x9}, @loopback, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x10001, 0x2, 0x3, 0x3}, @multicast2, @loopback}}]}, {0x1a, 0x6, "359cb0e38534ffd9b964c9c9af82fbe21875dc878a95"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_TCINDEX_ACT={0x4b8, 0x7, [@m_nat={0x200, 0x1e, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x9, 0x0, 0x4, 0x80000000}, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x5, 0x6, 0x2}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x6, 0x7, 0x2}, @multicast2, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x2, 0x0, 0xcf1, 0x9}, @multicast2, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x62f, 0x8, 0x1, 0xb1d7}, @local, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2e, 0x8, 0x8, 0x82, 0xc381}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}]}, {0xe8, 0x6, "a6e4157cfa800cfbd51e40f65a2fc0ac6a07e16b8dc66a3ec490f5ea5fca34fe6e1619f5ab43f2d34868de07fc0bb1cf03ae8bc831efc3702fffb8a956d6fb1e2cc8de02278a612f060955055b8130310d1bc00cde4f4b740c4cbb68278ad661563f478ec33ae509bf19228b78a6276f92a69cea2713ca52338763a0fbb4ee5b2ae5045a48b8856340c4fe03c06076232236d52affefe3cef88ab954de293f240c88abf0a3ee0b93604375c2e6b7fbbe18f64f232a1ef71eb2a8c1216ac603fae95d3a041d1d635a9a4bed53509a3f732778f9aefdf1f27e29b9abc04380c80a0523a607"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_xt={0x12c, 0x14, 0x0, 0x0, {{0x7}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x51, 0x6, {0x5, 'filter\x00', 0x7, 0x16d7, "32cf865e420c0d3be3e256aabf07c1594a7b205d2b8709beb9a70924be68ab9f744c456d4d0b7a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x68, 0x6, "5d61cd3f7b4f7912ffec6ce1be0300b826c1b8cdd53b5b9b5bbd1336cc4b8d7bb95edd90c65a88a5bac9b4043b48b344c1cbfa1808883a1c955cf0d9066a1201c8349d7a25cea1cbff8e8ac051784370342e72bb538b9da0214faa577c68e24d8ddee028"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0xaf73720793ca22c}}}}, @m_mirred={0x74, 0xb, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8d, 0xe, 0x2, 0x6, 0x1}, 0x1, r6}}]}, {0x26, 0x6, "709faeb983420ce793740f5eaf0cb2a613e7efe6a23066ee035163a9a97c0dfc4e82"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x114, 0x15, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0xdb, 0x6, "6f856d3e7cb6b6a22da0705a0971d608e2103e60c3223de58cd10b57a968557c362a0b2473c183a36fde8459495d3af20091cc4107d18aa3d6a7fed2d91a4e979ea1c4b87c81e9dbe3dd61fff76096381ab64deb0da7006ca0c28d7d91051ca87ce75b3ab369dc3169832c715c88093c0cd900e1de07787d2b48b423421ee1df9036f31e2900ac9418afa7e85ff91485906d5c9e166ecfe17521656d5a7dd8ba5b532b2c5ee95685d1de6ad534b591e236186be922e3f176c039ee2cabbb0696906602dcd9c65d665668b8f0a8530cf52a086df9d18ef0"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xd047}]}}]}, 0x6bc}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002d40)=@bloom_filter={0x1e, 0xbb29, 0x8, 0x1, 0x14084, r5, 0x7, '\x00', r6, r7, 0x3, 0x1, 0x5, 0xc, @void, @value, @value=r7}, 0x50) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000002f40)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e00)={0xf8, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xb7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3d}, {0x6, 0x11, 0x401}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4080}, 0x40000cd) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002f80), 0x1000, 0x0) write$9p(r8, &(0x7f0000002fc0)="4729cf426b473c5ec8907c6337add500b2c809bf4e93a77e86768220c1a7ee596d95e353878a5e9695b6db1a7b2169e49df51a3fdc839a00c1777bac189376041a226ec3d1f9a2d2d50522d3937a4e1fedaaf9ffff317b628da24903e580b54ab1a490ed2de52716906347f9e2bbf774f872c2987983d717d096def130b334040d61528f08a3aa8826734e11774afec1c0996d68c556c88a59d21502c68acf058fe8d3f7f8b851a18b201debb20332b936a8f1dde5", 0xb5) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000030c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003100)={0x44, r9, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4840}, 0x400004b) recvmmsg$unix(r8, &(0x7f00000048c0)=[{{&(0x7f0000003200), 0x6e, &(0x7f0000003780)=[{&(0x7f0000003280)=""/199, 0xc7}, {&(0x7f0000003380)=""/74, 0x4a}, {&(0x7f0000003400)=""/214, 0xd6}, {&(0x7f0000003500)=""/179, 0xb3}, {&(0x7f00000035c0)=""/163, 0xa3}, {&(0x7f0000003680)=""/172, 0xac}, {&(0x7f0000003740)}], 0x7, &(0x7f0000003800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000003880), 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003900)=""/222, 0xde}, {&(0x7f0000003a00)=""/98, 0x62}, {&(0x7f0000003a80)=""/23, 0x17}, {&(0x7f0000003ac0)=""/250, 0xfa}, {&(0x7f0000003bc0)=""/43, 0x2b}, {&(0x7f0000003c00)=""/61, 0x3d}], 0x6, &(0x7f0000003cc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000003d80), 0x6e, &(0x7f00000041c0)=[{&(0x7f0000003e00)=""/179, 0xb3}, {&(0x7f0000003ec0)=""/209, 0xd1}, {&(0x7f0000003fc0)=""/67, 0x43}, {&(0x7f0000004040)=""/250, 0xfa}, {&(0x7f0000004140)=""/117, 0x75}], 0x5, &(0x7f0000004240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}}, {{0xfffffffffffffffc, 0x0, &(0x7f0000004700)=[{&(0x7f0000004380)}, {&(0x7f00000043c0)=""/14, 0xe}, {&(0x7f0000004400)=""/21, 0x15}, {&(0x7f0000004440)=""/97, 0x61}, {&(0x7f00000044c0)=""/66, 0x42}, {&(0x7f0000004540)=""/98, 0x62}, {&(0x7f00000045c0)=""/10, 0xa}, {&(0x7f0000004600)=""/190, 0xbe}, {&(0x7f00000046c0)=""/43, 0x2b}], 0x9, &(0x7f00000047c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc8}}], 0x4, 0x40, &(0x7f00000049c0)) syz_open_dev$sndpcmp(&(0x7f0000004a00), 0x1, 0x101000) socket$inet_tcp(0x2, 0x1, 0x0) close_range(r16, r12, 0x2) getsockopt$MRT(r13, 0x0, 0xce, &(0x7f0000004a40), &(0x7f0000004a80)=0x4) r17 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004ac0), 0x2, 0x0) write$FUSE_CREATE_OPEN(r17, &(0x7f0000004b00)={0xa0, 0x0, r3, {{0x4, 0x2, 0x3e, 0x9, 0x4, 0x9, {0x4, 0x1, 0x7fffffff, 0x240000000000, 0x3, 0x467, 0xe56, 0x4, 0x3, 0xa000, 0x6, r10, r14, 0x8, 0x7}}, {0x0, 0x18}}}, 0xa0) recvfrom$inet(r15, &(0x7f0000004bc0)=""/4, 0x4, 0x10000, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r11, 0xc00864bf, &(0x7f0000004c00)) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r18, &(0x7f0000004dc0)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d80)={&(0x7f0000004d00)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r19}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}}, 0xc010) 1m39.080506788s ago: executing program 2 (id=388): openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000004002, 0x0) (async) r0 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x1, 0x3, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040)=0x200, 0x4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, &(0x7f0000000180)) (async) r4 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000480), &(0x7f00000000c0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) (async) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r4, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2004, @fd_index, 0x0, 0x86d, 0x6, 0xa, 0x0, {0x0, r5}}) (async) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000680001002cbd70007cdbdf250200000000000000080001000200000004000b"], 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x0) (async) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, @empty, @empty, 0x40, 0x20, 0x2, 0x2}}) (async) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r7) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r9, @ANYBLOB="000126bd7000ffdbdf25010000000800080000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40015}, 0x8004800) syz_usb_disconnect(0xffffffffffffffff) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r11 = socket$kcm(0x29, 0x2, 0x0) (async) r12 = memfd_create(&(0x7f00000014c0)='e\xf4\x01\x88-\x00\xe96\xec\xaf[Uvy*\v\x12\xf9\x88(\xf0\x82\xf9\xcfF*B\x00a\xe2\xf4r\x99%\xbaq4\x16\xd5\x00+\x98s\x88\x1d@Tl\"\x89\xe9\xa0\x13\x83y\xe6\xaa}k6%\xdcG!\x05\xf7\xa0b\x8a\xda\x91B\x05\xc3\x9c/\x8a\x19\x91\xb9\xfc\xfa\xd33\xc2w7H@\xaaG\xf6\x8d\xd9`\xbc\xb8\xc6\xd6\x80\xf9\x83l\x1c\x8b]}S\xe3\x01\x9a\x85\'\xb2\xbfx\xc8=/d\xdc\xbb\xd6Z \xcd\xfe\x8c\x02/\xa1\xa3-\xf7\x00'/149, 0x0) pwritev(r12, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x9, 0x0) (async) sendmsg$kcm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="0b2a6ec1", 0x4}], 0x1}, 0x4) (async) sendfile(r11, r12, 0x0, 0x8000fb00) (async) getsockopt$ax25_int(r10, 0x101, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r13, 0x407, 0x4) 1m38.984584391s ago: executing program 33 (id=388): openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000004002, 0x0) (async) r0 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x1, 0x3, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040)=0x200, 0x4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, &(0x7f0000000180)) (async) r4 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000480), &(0x7f00000000c0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) (async) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r4, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2004, @fd_index, 0x0, 0x86d, 0x6, 0xa, 0x0, {0x0, r5}}) (async) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000680001002cbd70007cdbdf250200000000000000080001000200000004000b"], 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x0) (async) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, @empty, @empty, 0x40, 0x20, 0x2, 0x2}}) (async) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r7) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r9, @ANYBLOB="000126bd7000ffdbdf25010000000800080000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40015}, 0x8004800) syz_usb_disconnect(0xffffffffffffffff) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r11 = socket$kcm(0x29, 0x2, 0x0) (async) r12 = memfd_create(&(0x7f00000014c0)='e\xf4\x01\x88-\x00\xe96\xec\xaf[Uvy*\v\x12\xf9\x88(\xf0\x82\xf9\xcfF*B\x00a\xe2\xf4r\x99%\xbaq4\x16\xd5\x00+\x98s\x88\x1d@Tl\"\x89\xe9\xa0\x13\x83y\xe6\xaa}k6%\xdcG!\x05\xf7\xa0b\x8a\xda\x91B\x05\xc3\x9c/\x8a\x19\x91\xb9\xfc\xfa\xd33\xc2w7H@\xaaG\xf6\x8d\xd9`\xbc\xb8\xc6\xd6\x80\xf9\x83l\x1c\x8b]}S\xe3\x01\x9a\x85\'\xb2\xbfx\xc8=/d\xdc\xbb\xd6Z \xcd\xfe\x8c\x02/\xa1\xa3-\xf7\x00'/149, 0x0) pwritev(r12, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x9, 0x0) (async) sendmsg$kcm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="0b2a6ec1", 0x4}], 0x1}, 0x4) (async) sendfile(r11, r12, 0x0, 0x8000fb00) (async) getsockopt$ax25_int(r10, 0x101, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r13, 0x407, 0x4) 1m9.047616418s ago: executing program 1 (id=979): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000024c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000034c0)={r2, 0xffffffffffffbd45}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000004680)={0x11, 0xf, &(0x7f0000004740)=ANY=[@ANYBLOB="180000000018110000080000000000000000000011cb693fda428f395529802e895ee720d113af65ce46763f72d231644ea74b35c8d340a6e02e7b59f02d53a1fd9b986f950ca96657b7a2334d50af3ea00324a9000000b44fb2768b68e3f208b3aefd1d99bbeb93f79f9101e7a4518b223c586b2eca949cbdce568f7b15cccccc5675d7ac35d11fe81ae8f6ec262e730cee6813c866cd58566116e0aafbfd8f3f637fc54ffe2118b65d7ea8", @ANYRES64=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x2101, 0x0) r7 = fanotify_init(0x4, 0x400) fanotify_mark(r7, 0x39, 0x1a, r6, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r8 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1ee381, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r10, 0x0) rename(0x0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$FS_IOC_SETFLAGS(r9, 0x125f, 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000044c0)={[{0x88f9, 0x7, 0x5, 0x0, 0xd3, 0x4, 0x8, 0x5c, 0x9, 0x5, 0x81, 0x0, 0x3f0}, {0xffff, 0x7, 0x10, 0xa, 0xff, 0xff, 0x1, 0xcf, 0x1, 0xdc, 0x6, 0xa, 0x8000000000000001}, {0x2, 0x1, 0xe2, 0x0, 0xd, 0x43, 0x3, 0x7, 0x9, 0x7f, 0x10, 0x7, 0x6}], 0x6b31bd4a}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000000)={0x0, &(0x7f0000000240)="9338764d86c585b0d4f7dde0cbaa6b0ab726c66e0331c23f97c7670629de842c84bb9e5815f28744f8cea301b80edbee58c6f62eeffa845c8b77ced16524de9ffe76d6fc8db97521751bd39842045a1c7cda", 0x52}) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r14, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m8.871582219s ago: executing program 1 (id=980): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000872ab0a700000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 1m8.751258017s ago: executing program 1 (id=982): r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00') preadv(r0, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x86, 0x451) (async, rerun: 64) memfd_create(&(0x7f0000000040)='\x00', 0x0) (async, rerun: 64) close(r0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x8, 0xf9, 0x2}) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$clear(0x7, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=r3, @ANYBLOB="1052f24f6d6417373bb4e5eef82b77ced323b460cee4e538c903d35e50d9c93538b8eee3733e16a97b40a7805e8b7c7260f79732ccd60d970a6c318534eb662e85a3a13b91f2fa7a795e7522a7ee241fd0c7016f3af24d4427bd55568e13489f15378d53a452fa9c1ebbca91f3289ee2da54dae58e677d51ff29db0e1c0eaea063bb4f8352c51f454c9683a4d4cc0efed1d1daee85cb36539aed89c930140bed32e6e54c580d", @ANYBLOB="00000000000000000104000000000010feffffffffffffff0000004000000000fcffffffffffffff1a000000000000000100000000000000feffffffffffffff770000000000000005000000000000000000000000000000ff7f000000000000080000000000000001000300000000000a00100001"], 0xc4}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async, rerun: 32) sendmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f00000000c0)=@llc={0x1a, 0x102, 0x7, 0xa, 0xff, 0x4, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000400)="5001e4b8112478b00b68064501f6fb1fc6363c3734ddca8a62abdc3581395d30d7f94019b3e30bb7a81de8eeaa99fc17991f06eb79ba50e7b2f9e47b323a0e944f87393efa61556d94e223e5e0456bc4f76dd271f3840565a60e97346963a9a34da93cc977b8562f49f2e895baaa41e1ea9eebc5e8f2729dcd3cbfc8cda7bbe5b20773d6ddde0dacc2db7ecad6ed317f11cd73635f41f1cdfe3bed76c1861e3eef56c4987d56c374d0f06141693c624a21852b451346e7", 0xb7}, {&(0x7f00000004c0)="95574767bfc0cf00bbb14369f83089ea5b2160478e75181514d2f1e36931b74e107c210bd546e3f766d9dfe0df0a7bc91d0ae9666aa96425ba806b443574391aeaa167d91b970d2aa856c9cdc8c477869a4d9ae072e6dbfce94b6ca2b5c287733b5d8e82d5811ac563d3c2d14687516bb365202351c8ef9bb825242261d8158426d18b0a658c352be8d42321641f84370f6fe236af6f0d2877490f4b73c8e447447b1cba3da341f19abb7e2250f3b633e399bdda3e4cb4d4215a6c558790121bb3f567b77970c366dd38c839e6d54dfbe4118a76f9057481e6f10280264889e3111a0a71e7b72e30f28dc0662eadd00cc90b6362", 0xf4}, {&(0x7f00000005c0)="525dd49ea45643f181763f9c9050c1cef8e1c4ab6f1837c2e55e9e1ef460a6a9ad232055b0f5af206edc03b0faa84507d5dbbdfcfbd4277cbc18805eba0e40c90d3560ae73ddd6b8495a74e218f28b0cb1d691dfef9b46efec430150784b282e0c364ce93489ff582462d460d841e9a4167565f004eeb60fddcbbdbeac75", 0x7e}, {&(0x7f0000000b80)="7b7a20aaf0d2a8a1a18d5a56202b14521e5056f7dcdfd1d4bcb4e89d37bb3e8d22c52fef33ca3aedd6daf323ee0070f2e0896e881ab13a8af6001b00000000000000fe00", 0x34}], 0x4}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)="18d903da7e29cf9949acb29e936864d21b0a1646f4edd43e780d30adfb095d8f64ce1390c95156f3182199cf3277164c990a488caec0e05358edbb2aacc9f25f7636df2501a1e612c6ccd5bb6840326f0d05c0c3ba1cd48df5d49f36da1631e9de713b60b9bdc9b71e0ce67481ad2c46d9", 0x71}, {&(0x7f0000000700)="1d8301fe635cb88a9e39b2f1e17ab9127b383bfeeec9d2626933da077cf9fd978ea5b2b671e8adc6198ac3b14563131038f7e9d7c75f8a3b85448b6810391b29e9be79b5e26413e9b445c31bef4e5affb8e866495936a5042059edc994f358bbbd0e5b5bffb56c9cc5ab8bf4c5008450cfd389958b6c15fabb76238e033545e5e6e3eb92f8b4aa50e43b71ba650ac9fc593d4d2b234a83f16c471bc84799f4c83e52eca1dfd0fd1e52f8898823", 0xad}, {&(0x7f0000000ac0)="fe1912f79f5122b5d4cc9567f4f0033e789d75775838a6d1dea1594dfb08187104f7d02cc621d1026e28e5ac9c1a58dc5b11eb5e619878d1c0bd200862b982089f01fe0cad59b995e515882a1485e6bbe9cf7ee8634e34a13df286039ef45ae1589337a33fde4e95930f868125abe69c9cb94424d999a8e90408f9a22d9b99de2b75963c7a97774ff46344570db4da2e3d5927530206310bf1fca258f0fe216f9a236280c9b6e3c84d09132aab918581c5b8f6bec3345530db", 0xb9}, {&(0x7f0000000880)="1d81b2621da0b7a8d7d4bc66f11ebcce38d56db5f63a8ea3e6500d362761b37930d25b023ebdc69cd92c63511c33cc1f1cf70dcfb3b99c4afc4eaedf71bf2e5119da5a61bd2a06c83d0bf02844b8729792b2789ec0df53dfa84ef84bd04f7009d47f", 0x62}, {&(0x7f0000000900)="89b5339faf2f90603dcd65aa228294a7b8947d3cfb780a528d6558284551bc8fb49afd86a0f4f6fa905669b41557157103d31a17c49fae83ba5300374533e1c5465ee2b676dffef393e59f2538c38c596edfd0ad886bfc557462de6fe0d693668e18ba5bb8bfa98beb1bbf6e0357011f5ee4", 0x85}, {&(0x7f0000000980)="5b326cc9f03a2badeab4456e4305c53d66ebc9bbb4c165d672a31dc6693c5adc64014b4e087786641b24bb78a9d8387d47d0691674d22bf0e31c95", 0x3b}], 0x6, &(0x7f0000002980)=ANY=[@ANYBLOB="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"], 0x12f8}}], 0x2, 0x0) (async, rerun: 32) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000007c0)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8b}]}}]}, 0x48}}, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x8804) (async) close(r4) 1m8.670578876s ago: executing program 1 (id=983): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000001340)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x180) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000400)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}]}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x29, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x6, {0x2000000008, 0xfffffffffffffffc, 0x4, 0x0, 0x8, 0x0, {0x10000000004, 0x80, 0x8000000000000001, 0xfffffffffffffffd, 0x2000, 0x4, 0x0, 0x2, 0x5, 0x4000, 0xfffffffd, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write(r0, &(0x7f0000000340)="18000000010003", 0x7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0xff, 0x0, 0x3, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r5, 0x0, 0xf}, 0x18) r7 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x2, 0x31e}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x110, &(0x7f0000000180)=0xfffffffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x74f8, &(0x7f00000005c0)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 1m8.549660628s ago: executing program 1 (id=984): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 1m8.311256434s ago: executing program 1 (id=992): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = fsopen(0x0, 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) r3 = fcntl$getown(r2, 0x9) tkill(r3, 0x1d) (async) close(r2) (async, rerun: 32) landlock_restrict_self(0xffffffffffffffff, 0x0) (rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x9d8, 0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (rerun: 64) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x15, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0x7ff, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0xe0a, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x9, 0x8, 0x4, 0xfffffffe], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x2, 0x4, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x48, 0x8000, 0x1, 0x7dad5133, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x2, 0x9, 0x8000001, 0x3, 0x3, 0xbc44, 0x1, 0x3, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x80000003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x8, 0x4, 0x1, 0x27, 0x0, 0x5, 0x1c, 0x120000, 0x100, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x58, 0x1, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x1, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x40006, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0x10000, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000100)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) r8 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2400c049, &(0x7f00000001c0)={0xa, 0x4e20, 0x18000000, @loopback}, 0x1c) (async, rerun: 32) recvmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/109, 0x6d}, 0xf}], 0x40, 0x2, 0x0) (rerun: 32) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) recvfrom(r8, &(0x7f0000000200)=""/186, 0xba, 0x10062, &(0x7f0000000380)=@ax25={{0x3, @bcast, 0x4}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null]}, 0x80) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 1m8.263079697s ago: executing program 34 (id=992): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = fsopen(0x0, 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) r3 = fcntl$getown(r2, 0x9) tkill(r3, 0x1d) (async) close(r2) (async, rerun: 32) landlock_restrict_self(0xffffffffffffffff, 0x0) (rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x9d8, 0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (rerun: 64) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x15, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0x7ff, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0xe0a, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x9, 0x8, 0x4, 0xfffffffe], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x2, 0x4, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x48, 0x8000, 0x1, 0x7dad5133, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x2, 0x9, 0x8000001, 0x3, 0x3, 0xbc44, 0x1, 0x3, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x80000003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x8, 0x4, 0x1, 0x27, 0x0, 0x5, 0x1c, 0x120000, 0x100, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x58, 0x1, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x1, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x40006, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0x10000, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000100)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) r8 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2400c049, &(0x7f00000001c0)={0xa, 0x4e20, 0x18000000, @loopback}, 0x1c) (async, rerun: 32) recvmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/109, 0x6d}, 0xf}], 0x40, 0x2, 0x0) (rerun: 32) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) recvfrom(r8, &(0x7f0000000200)=""/186, 0xba, 0x10062, &(0x7f0000000380)=@ax25={{0x3, @bcast, 0x4}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null]}, 0x80) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 19.01933274s ago: executing program 0 (id=2017): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x40, r7, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_a, @initial, {0x4, 0x9}, @value=@ver_80211n={0x0, 0xd6, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @val, @void, @void, @void, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r11 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_FILES(r11, 0x2, &(0x7f0000000180)=[r10], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r11, 0x18, &(0x7f0000000000), 0x1) getpeername$netrom(r0, 0x0, &(0x7f0000000080)) 18.810573676s ago: executing program 0 (id=2020): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x100) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x5411, &(0x7f0000000100)={'erspan0\x00', 0xfffffffffffffffc, 0x2}) shmdt(0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {0xa, 0x1000}, 0x40}}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000010400002f0000c6"]) 18.748835686s ago: executing program 0 (id=2021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe800000000000000000000000be88aaff02000000000000000000000000000133"], 0x10da) 18.630528909s ago: executing program 0 (id=2024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000028c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000002a40)=0xd3a0, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x118, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xe8, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xfffff801}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2f, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3f5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xa46f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0xd47}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xda4229b7, 0xfffffc38}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x4}}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x84}}, @IFLA_VLAN_QOS_MAPPING={0x5, 0x1, {0x6ea, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x96ce, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe0000000, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffb, 0xffff}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}]}, 0x118}}, 0x4000) 18.630441906s ago: executing program 0 (id=2025): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0xffffff7e, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x400, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x4, 0x6040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 18.570935169s ago: executing program 0 (id=2027): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) setxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440), 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1504000065ffff001000000800395032304a302a75"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) read$FUSE(r5, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x205c) write$FUSE_GETXATTR(r5, &(0x7f0000000080)={0x18, 0x0, r6, {0x441}}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 3.561813727s ago: executing program 35 (id=2027): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) setxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440), 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1504000065ffff001000000800395032304a302a75"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) read$FUSE(r5, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x205c) write$FUSE_GETXATTR(r5, &(0x7f0000000080)={0x18, 0x0, r6, {0x441}}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 1.361551184s ago: executing program 5 (id=2237): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003b00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x50) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r3 = io_uring_setup(0x2b9b, &(0x7f0000000640)={0x0, 0x8658d, 0x800, 0x400, 0x7d}) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0xd) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x4, 0x2c, 0x80000005, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x44, r8, 0x511, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x44}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x14, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1.278138797s ago: executing program 5 (id=2239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00'}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x20, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x7, 0xd99d}}]}]}}}]}, 0x70}}, 0x4) sendto$packet(r5, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0xc800, &(0x7f0000000440)={0x11, 0x18, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delqdisc={0xa38, 0x25, 0x101, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffff, 0xc}, {0xffff, 0x2}, {0xfffe, 0xb}}, [@TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x7, 0xa7, 0x4, 0x2, 0x0, 0x8001, 0x7}}, {0x12, 0x2, [0xff, 0x151d, 0x2, 0x1, 0xdd0, 0x5, 0xa]}}, {{0x1c, 0x1, {0x8, 0x4, 0xfffe, 0x2, 0x1, 0x3, 0x5, 0x5}}, {0xe, 0x2, [0x2, 0x2, 0xe0, 0x4, 0xa4e]}}, {{0x1c, 0x1, {0x7, 0x4, 0x3, 0x4, 0x2, 0x68, 0xfb, 0x3}}, {0xa, 0x2, [0x0, 0x8, 0x0]}}, {{0x1c, 0x1, {0x2, 0x5, 0x6, 0x8, 0x0, 0x13e0a6e6, 0x401, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x1, 0x7, 0x2]}}, {{0x1c, 0x1, {0x3, 0xfd, 0x0, 0xff00, 0x0, 0x5, 0xfffffff1, 0x1}}, {0x6, 0x2, [0xb]}}, {{0x1c, 0x1, {0xfd, 0x2a, 0x3ff, 0xb41, 0x0, 0x8208, 0x580, 0x6}}, {0x10, 0x2, [0x1, 0xdc8, 0x8, 0x2, 0xfffd, 0x7]}}, {{0x1c, 0x1, {0x1, 0x80, 0x4, 0x735, 0x2, 0x3, 0xa, 0x2}}, {0x8, 0x2, [0x7, 0x9]}}, {{0x1c, 0x1, {0x28, 0x4, 0x1877, 0x3, 0x1, 0x4000000, 0x82, 0x6}}, {0x10, 0x2, [0x101, 0x7, 0x8, 0x401, 0xfffb, 0x8]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @qdisc_kind_options=@q_tbf={{0x8}, {0x890, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xacbd, 0xe, 0x4, 0x4, 0x4, 0x1, 0x2, 0x50, 0xe3, 0x8000, 0x7ff, 0x8, 0x9, 0x84e, 0xb872, 0x6, 0x0, 0x4, 0x4, 0x7, 0x2, 0x7b4, 0x3, 0x7, 0x6, 0xca, 0x8, 0x3, 0xbe40, 0xffffffff, 0xf, 0xd1c97b31, 0xddb1, 0x0, 0x5, 0xa, 0x1, 0xc, 0x3, 0xe, 0x80000001, 0xb89f, 0xfffffff7, 0xaf, 0x4, 0x1, 0x81, 0x1, 0x1, 0x8, 0x10, 0x7, 0x9, 0x101, 0x7, 0x1, 0xffff, 0x5, 0x2, 0x8, 0x6, 0xfffffffd, 0x1, 0x3, 0x0, 0x2, 0x2, 0x3c3, 0x4, 0x4, 0x7fffffff, 0x1e55, 0x9, 0x2, 0x1ccd, 0xffffff38, 0x6, 0x2, 0x7, 0x6, 0x8, 0x2, 0xf, 0x1, 0x1000, 0x8, 0x2, 0x9, 0x5, 0xf75, 0x6, 0x7, 0x6, 0x5, 0x5, 0x7fffffff, 0x37d00000, 0x4, 0x8, 0x7, 0x80000000, 0x7e, 0x1, 0x1, 0xe, 0x9, 0x3, 0x9ad, 0x6a, 0x5, 0x1, 0x0, 0x800, 0x5, 0x8, 0x8, 0x3, 0x29, 0x8, 0xd, 0x7ff, 0x5, 0x80000001, 0x69, 0x800, 0xfffffff7, 0x8, 0x9, 0xa, 0x101, 0x0, 0x3ff, 0xffffff7f, 0x100, 0x9, 0xa0, 0xb, 0x1, 0x1, 0x2, 0x2, 0x5, 0x9, 0xf, 0x5, 0x80, 0x6e66, 0x3, 0x340000, 0x4, 0x0, 0x3, 0x9, 0x4, 0x9, 0x3, 0x7, 0x2, 0x2, 0x800, 0xfffffc01, 0x10, 0x1, 0x1, 0x4, 0x3, 0x7, 0x7, 0xfffffffd, 0x1, 0x1a, 0x7fffffff, 0xffffffff, 0x7f, 0x5, 0xfa1f, 0x179c5f86, 0xe4f1, 0xffffff7f, 0x3d5, 0x9d, 0x8, 0x8, 0xb7, 0x2, 0xffffffff, 0x7, 0x5, 0x1, 0x3, 0x1ff, 0x9, 0x0, 0x6, 0x5, 0x2, 0x80, 0x5, 0x9, 0x4, 0x6, 0x3, 0xc, 0x800, 0x5, 0x0, 0x0, 0x2, 0x800, 0x6, 0x1200000, 0x2, 0x2, 0xf, 0x6, 0x0, 0x4, 0x5, 0x5, 0x401, 0x3, 0x583a, 0x2, 0x7, 0x4, 0x2, 0x6, 0x8, 0x3330, 0x401, 0x8000, 0x1000, 0x14a8, 0x2, 0x6, 0xaf8, 0x0, 0x0, 0x9, 0x8, 0x8, 0x80000001, 0x6, 0x0, 0x80, 0x0, 0x4, 0x5, 0x7, 0x135, 0x4, 0xffffff2f, 0xffffffff, 0x6, 0x80, 0x8]}, @TCA_TBF_PTAB={0x404, 0x3, [0x81, 0x9, 0xc, 0x4, 0x0, 0x96, 0xc, 0x2, 0x8000, 0x4, 0x8, 0x8, 0x49c, 0x8, 0x7, 0x4, 0x1000, 0x5000000, 0x4, 0x7, 0xc, 0x5, 0x800, 0x3, 0x462, 0x3, 0x6, 0x9, 0x948, 0x7, 0x6, 0x7, 0x0, 0x9c66, 0x7, 0xffffffff, 0x3, 0x6, 0x2, 0xa3a7, 0x5, 0x8, 0x5, 0x8, 0x1, 0xd6, 0x4, 0x6, 0x8001, 0x5, 0x0, 0x28fb, 0x3f9, 0x101, 0x800, 0x7, 0x2, 0x20000000, 0x9, 0xfffffffb, 0x80000000, 0x8, 0x5, 0x6, 0x1, 0x7a, 0xff, 0x81, 0x1, 0x8, 0x303, 0x81, 0xc0ad, 0x5, 0x989, 0x0, 0x8e6, 0x0, 0x0, 0x8, 0x4, 0x623d, 0x1, 0x4, 0xfffff958, 0x6, 0x9, 0x6, 0x2, 0x4, 0x800, 0x5, 0x87, 0x800, 0x2, 0x2, 0xffffff80, 0x8, 0xffff, 0x100, 0x10000, 0x40c4, 0x2, 0x8, 0x9, 0x1, 0x6, 0x0, 0x101, 0x1, 0x7, 0xf6c9, 0x80, 0x8, 0x401, 0x8, 0x9, 0x40, 0x11d, 0x6, 0x5, 0xfffffffc, 0x1, 0x71, 0xa026, 0x9, 0xb3d, 0x4, 0x4, 0x6, 0xfffff836, 0x0, 0x4, 0xffffffc0, 0x8001, 0x6, 0xe, 0x9, 0x3ff, 0x2, 0x7, 0x8001, 0x0, 0x40, 0x0, 0x200, 0xffff, 0xb3, 0x7, 0xfffffff2, 0x5, 0x6, 0x0, 0x5, 0x8eb, 0x80f, 0x15f, 0x43b, 0x1, 0xb5, 0x23e32849, 0x81, 0x9bbc, 0x7, 0x5, 0x13, 0x9, 0x9, 0x1, 0x4b, 0x1000, 0x7, 0x8, 0xc0000000, 0x0, 0x17b, 0x8, 0x3, 0x1ff, 0xfff, 0x1, 0xc1a268c5, 0xa8, 0x1, 0x5, 0x5, 0x1, 0x7fffffff, 0x1, 0x3ff, 0x100, 0x8, 0x8, 0x6, 0x30, 0x100, 0x5c8, 0x9d5b, 0x80000001, 0xb8, 0x8, 0xbdc, 0x40, 0x3, 0x7, 0x2, 0x7, 0x4, 0x4772, 0xffffffff, 0x3, 0x1bc, 0x6, 0x2, 0x1, 0x6, 0x1, 0x1, 0x1, 0x5, 0x5524, 0x4, 0xf3fb, 0x1ff, 0x5, 0x0, 0x4, 0x80000000, 0x3b8aeebf, 0x3, 0x2, 0x9, 0x7, 0xffff, 0x7f, 0xfffffff6, 0x2, 0x39, 0x9f, 0x7, 0x7fff, 0x2, 0x5, 0x3, 0x6, 0x81, 0x2, 0x8, 0xcc, 0x9, 0xa18, 0x2, 0x40, 0x8001, 0x7, 0x2865]}, @TCA_TBF_RATE64={0xc, 0x4, 0xad892d6a62a97987}, @TCA_TBF_PBURST={0x8, 0x7, 0xbe9}, @TCA_TBF_PBURST={0x8, 0x7, 0x211a}, @TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x75, 0x0, 0x3, 0xebb6, 0x1}, {0x7, 0x0, 0x1, 0x3, 0x6, 0xdf3}, 0x5, 0x9, 0xf8a}}, @TCA_TBF_PBURST={0x8, 0x7, 0x14cf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7f, 0x1, 0x3, 0x9, 0x2, 0xe}, {0x0, 0x0, 0x7ff, 0x3, 0x6a4f, 0x2}, 0x80000001, 0x5, 0x226b}}, @TCA_TBF_PBURST={0x8, 0x7, 0x4df}]}}, @qdisc_kind_options=@q_qfg={0x8}]}, 0xa38}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840) 1.276576587s ago: executing program 5 (id=2241): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'none\x00', 0x20, 0x8, 0x5b}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000240)={'batadv_slave_0\x00', {0x2, 0x4e22, @remote}}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b70010000000000095000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x10, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x202, 0x510, 0x3, 0x6}, {0x6783, 0x2, 0x8801, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x2}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x140}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newtclass={0x38, 0x28, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6, 0xffff}, {0xb, 0x3}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @tclass_kind_options=@c_cake={0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 1.1722123s ago: executing program 7 (id=2244): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x4, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x1, 0x3}}, 0xb8}}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0xc, 0x0, 0x24011}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x9}]}}}]}, 0x3c}}, 0x0) init_module(&(0x7f0000000300), 0xaf, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$inet(0x2, 0xa, 0x400) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0x4b, 0x0}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000000e140100d53698801662859f65e4a02bdf2508003c0001000000e75c918d44f78ba67c2e2d2aa1261f2e50bbed884ab189e04bf5ecbc36e31d8fd58e6e070ae495a3dc7b7977a9d144fc32791bbfde32ec8519cc8f79b956135033c588cc3f55cb66c95b2fa6a7184c8dcc4881a70f5c53dff5"], 0x18}}, 0x4000) 1.091627685s ago: executing program 5 (id=2245): syz_clone(0x8000011, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) 1.042113672s ago: executing program 7 (id=2246): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xa0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000300), 0x440, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') bind(0xffffffffffffffff, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote, 0x6, 0x3}, 0x80) 971.275895ms ago: executing program 7 (id=2247): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84) mount(0x0, &(0x7f0000005880)='./file0\x00', &(0x7f00000058c0)='sysfs\x00', 0x18010, 0x0) r3 = inotify_init() r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) close(0x3) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0xc, &(0x7f0000000400)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x9, 0x0, 0x7, 0x32}, @initr0={0x18, 0x0, 0x0, 0x0, 0x70c8, 0x0, 0x0, 0x0, 0xc}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x4b}], &(0x7f0000000340)='GPL\x00', 0xd0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000500)=[{0x5, 0x1, 0x7, 0x8}]}, 0x94) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = syz_open_dev$sg(0x0, 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$SG_SET_COMMAND_Q(r10, 0x2271, &(0x7f0000000040)=0x1) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000000200)={0x2020}, 0x2020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf0f}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x0, 0x3, 0x3, 0xa, 0xffffffffffffffe0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0xf, 0xd1, &(0x7f0000000180)=""/209, 0x40f00, 0x56, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x0, 0x4}, 0x10, 0x1f31b, r7, 0x7, &(0x7f0000000700)=[r8, r10, r11, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x3, 0x0, 0x8}, {0x5, 0x3, 0xf, 0x3}, {0x4, 0x2, 0x1, 0x9}, {0x4, 0x2, 0xe, 0xa}, {0x5, 0x4, 0x0, 0x2}, {0x4, 0x3, 0x4, 0x6}, {0x5, 0x4, 0x0, 0x5}]}, 0x94) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0xc00) umount2(&(0x7f0000000040)='./file0\x00', 0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x20, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) 902.026814ms ago: executing program 7 (id=2249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe, 0x3, "277eb11f8f51106199e6"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfad}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "ffffffffffffffff", "75e207f9124edc5b938000", "ed0b4000", "578619a280c847dd"}, 0x28) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000200)={'mangle\x00', 0xc2, "1a7501c53dc0f6b9466eac7903270eb8e5ad8e225a7b1c48667a5b7b15a0c397d4b5c6c3b2458b4ea3b4cb49861ce013bf5cf9511aa29dba512e53c96cd128bd2608c64c8f8e3d11700386c77d189637821f71550a15dded77e8d80074a07749b4530f773e1555a087a2375fc375908ffc07c71ce7b1c5ebd1b2ed9b5645111c905cf979f79ee4a2c77d1a0a9d33cbd80bae06abeb9b6d2846459b3bb42dd50d6c27d2d4032e2bb083c1d0a74a3deae01565603b458e9ad1eb3c2dabb4038c8be884"}, &(0x7f0000000000)=0xe6) read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0xff01, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="b8b28225ea772f0daee8c7c981001f0c88fb", 0x12}], 0x1}, 0x24004054) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, @in6={0xa, 0x4e21, 0x800, @local, 0x8}, @in6={0xa, 0x4e24, 0xb, @empty, 0x9}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e20, 0x5, @remote, 0x1a}, @in6={0xa, 0x4e20, 0x1ff, @private2, 0x6}], 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060101000000000000000001ebff000c0007800500150009000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c000300686173683a697000"], 0x50}, 0x1, 0x0, 0x0, 0x240040c1}, 0x0) 899.975387ms ago: executing program 5 (id=2251): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x7ff, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x82040, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) 828.450783ms ago: executing program 7 (id=2252): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r1, &(0x7f0000001040)=""/227, 0xe3, 0x40002041, &(0x7f0000000ec0)=@hci={0x1f, 0x0, 0x4}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newlink={0xfc, 0x10, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x40810, 0x1020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'erspan0\x00'}, {0x14, 0x35, 'team0\x00'}, {0x14, 0x35, 'caif0\x00'}, {0x14, 0x35, 'vlan0\x00'}, {0x14}, {0x14, 0x35, 'xfrm0\x00'}, {0x14, 0x35, 'wg1\x00'}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8001}, @IFLA_TXQLEN={0x8, 0xd, 0x723e8dff}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKMODE={0x5, 0x11, 0x40}]}, 0xfc}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r3, 0x200000000114, 0x8, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=0x0) sendmmsg$sock(r0, &(0x7f0000000dc0)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x2, 0x1, {0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="c695ba63749127af36c459dd079372436b0c590bc8e0c5fe90ef74fd0271ea3101a89cdf41e5cfebe71f9dd28dc95500b822e7bf2f7772bc1297a35460fc11266dcccd440a567b65983aa0", 0x4b}], 0x1, &(0x7f00000002c0)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}], 0x78}}, {{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @loopback}, 0x3, 0x3, 0x1, 0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000003c0)="96d928c830066f543b8859d3bfac54aaa94ba2eb1330dbe9a91f473ddcd6d6d4cf980e8ff71211099c9a43935cafca2ae22aa443d1b4fde2f451c262f2043f59504d580a3d4fc56c446fa265519d7a2f5751c6be9644d52b227c4cf5e7ee65c9ef4f23c264700e3b731801e68f988f7a3360cf0921e12b4b85171fb3b6ab832e83bac64d30b954a3baf1b61f9213bd15beb129f1a76654f4756bee6e530e01b1a426333cccb4f08b37285c8a18f5388bc40143cb03b562453f448faa", 0xbc}, {&(0x7f0000000480)="966ca657a15cf33a093431d6149bb58ad3a59351c52c15a0aa7e40824f09083aef9050757e9d06dbd1a0587441519b285b145aac0ecc2f01a713fffa98427f2e242cea6b86171dc771dd0f9f8af58110cec7e6270e9d895a63f4552f558171b4bb5ab60964353a7c4149706c135211c85abea64b4d37d571aaa6e8307a163c77b04bcdc3612a77219197bf1f6e2636413dc572c424817ee04cf265f3363e7c9784a3887182c43c56483a472418a7b1e8ff37b25299b907810540d20fcc188060350de339fc90767cd9af7ba8078d249cc974086e5a1f56bd8a6bfe5dedaf88dd83aea472358ebc2584", 0xe9}], 0x2, &(0x7f0000000580)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffff68f2}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}}, {{&(0x7f00000005c0)=@llc={0x1a, 0x4, 0x5, 0x1, 0x7, 0x5, @random="b31933d0ce77"}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)="685ff7c55753c4d76fd71d89e27c4ba5fce95c3e5f62046cc1145577b23bcc2a04b13aedf49b1ae9c6b0d287629780e64614aa9afe8ad9da098063ff8606a87e9a942a316418eff39d94654ee1691ff2", 0x50}, {&(0x7f00000006c0)="310f6a04c40a07cbe30324408b83ccdcb7907b904375830814ad6665e814a02d1302ace368d838600663d3f2d817ee3bf52af1d21bd54c38b2e3922740cf467484b29f250067828500ef7e85b89846414aabcb101da083656b7ce2ab4260b1260ab08d58712b71de9a0bcc7eed16cd13acaae4c302f90d64ae8b2ab734d47562087964e747002eade2d468143657b739c4169ac13d0610327b069139bd05e30e380e", 0xa2}, {&(0x7f0000000780)="03c6e9f64c95d9df8fe1b57330d756d32487ed098ea2c9bf0292519f2bac4839425e467198e42ef0cb302628f24fee3c941e9f6e6cebc7912c477c3da256e1592e565a5b434b2ded8d9eb6068e38930d0cdf94ffb510da4d11eb59564705c36d3420e46e561b59af42b52a3f38eb3ca41c7f481c7e2c7f54e62fdba8e69222a3436f1b4a94db8b92d27f274531ca1ec07877c2558873a2b9be3efcd87e8554c7", 0xa0}, {&(0x7f0000000840)="ba23974d82f7d9aaa9be2fe16f71d395d812b7d8435ee39378201c76b706d1fe7ba8f393f60f23125182d21fef304bdf04d04d09445fdbf1942a8b30b568ed44a22a22af5bbd45f72645d0ac228f25475593bc684ce8aa50f2cc97a0010f15dc4afb66c646a03fdf9fae8bb2051babce761be95e4ee8fe3cd4caee61c1d282749d926c25776374c8df5b50302af23d444abcdfecc1682cd6b1aebc3cfc87808ba02d", 0xa2}, {&(0x7f0000000900)="9643742a48bd4287906ef76c069f214854d01539b9a76c64dc835a79b3b66143ac09b0b1aa0cdc334551a9c6eba2c155999ff489a23d57fdb872f6fb584b568306201ccf44007ce95316f77ee115c1d1a77c1a25cf0aa52741dc77495c30f23c4ee87061f16e78f25cd652832343898d2e990aba14c2f3ec763cb699fc52435c103a9b24f4b060eb3a0ee6abe20edca7973d3715fd653af828915242d8c22521329ad01c85fda70601a09f273552637fa232caaac66bd013a4142636d3197500922af5fcbedcb540857481592da7a926f8c749902d07fcde76fa", 0xda}, {&(0x7f0000000a00)="99d6751bfbaae6b88ef05bcf363000c84aa1faecc57d4244439831599f1f18b2d0154379a1f0ec4b70f9420cbafb923167b396bea57c82039e5d464e7a654401e07eb0", 0x43}, {&(0x7f0000000a80)="46110f7b91ebc98de91b7c7563d5fda8dc5df3451e918cc342aa19938d86bfc8e7d89079ec1b57e063e61fdc82cb835dbf26255aab40ae713bc90f024f705d82a95e63", 0x43}], 0x7, &(0x7f0000000b80)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}}, {{&(0x7f0000000c00)=@nfc={0x27, r4, 0xffffffffffffffff, 0x7}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c80)}], 0x1, &(0x7f0000000d00)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xeaee}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xa8}}], 0x4, 0x4000000) 820.050347ms ago: executing program 4 (id=2253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff02000000070000000000000000000133"], 0x10da) 818.862748ms ago: executing program 7 (id=2254): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x1480}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x3]}, 0x8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 752.086508ms ago: executing program 5 (id=2255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="7a8b6f1ae7ffc6ed13eaf0a4b3e50c555e503388212ec5a7e7fd67240da68e17d7e55ed9b7696fe9c8e2d42d92a8fb2f3148bd65f244cc244f829fa542d4c7eb9aa67206bbdf6c45283c330c1ad3f4da69277f9c73f56661a4539aa1a976cecc331f8b425883a2630c996f7fae4265096f0fd7e5764a1371a16278971a24be5e905284db7e74745decf3e31a8f5636f4d74876991b6be7a4b30d2d96783214fc0a6899086faf37667d53afec884a2895017772fe440ffe3c631434155a6c27ef812d46bcc52941398f44d4171fb1fd1aa474090c913b0e66e5b7045a416e8c02aafa55df6ea5613c4694cccc8474c2a8b556c6dd6550471969a27703b9349ae0ed4df9126dbe3b29ee502fea7308f2ddce78266add8336f7d13356f42878abc863620f61d0bd291aa20dbd58db8e917e20c01988b73361e61ee6b2308a9b7b12c98cc83c41d5642758e03c945a12331dff33b4da5caff383ff476770", &(0x7f0000000140)="670c15129b394db00cdcf09f5bb883a9c458b4b5f50b000000", 0x1003, r0, 0x4}, 0x38) ppoll(&(0x7f0000000180)=[{r0, 0x1}, {r0, 0x48}], 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f00000003c0)={[0x800]}, 0x8) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x1e0200, 0x0) write(r1, &(0x7f0000000080)="ea2ac900f3953bb2e2759ec8448cd453b7f1112d3f942a4e9ff77ae39dd7084f9f68a2c773a3473832a66f968c6eaf726be06eb7af44bdb15a8bb170da32585fdef50de57b176f8701d203ebfeda0b614314434a43990d76b9c6459269268b43b4ac26f71027db33a03a72fcaedd8a46f305a48002b7729941d677b398b4d233aef3ae9cd5491200604b1507d91218026bfa30c786387c82d346b1ed11822e6fdeea42f5d93f6e1a4e5c9aad7300ffbf6ce46ec5e55059f0d6789d8db13017", 0xbf) 681.667185ms ago: executing program 4 (id=2256): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="1100000000030000"]) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e61740024000280080006400000000308000540000000"], 0xac}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x3a31129dc5552a00) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) 616.779416ms ago: executing program 4 (id=2257): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) (async, rerun: 64) r2 = gettid() (rerun: 64) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) statx(0xffffffffffffffff, &(0x7f0000002340)='./file0\x00', 0x1000, 0x200, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) (async) write$tun(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="b445cfcdd781"], 0xfdef) fcntl$getownex(r1, 0x10, &(0x7f0000003100)={0x0, 0x0}) syz_open_procfs$pagemap(r6, &(0x7f0000003140)) (async, rerun: 64) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000030c0)) (rerun: 64) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002580)={0x0, 0x0}, &(0x7f00000025c0)=0xc) (async) stat(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002880)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000002980)=0xe8) (async) ioctl$TCFLSH(r1, 0x540b, 0x1) getresgid(&(0x7f00000029c0), &(0x7f0000002a00), &(0x7f0000002a40)=0x0) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r11, 0x29, 0x11, 0x0, &(0x7f0000001040)) (async, rerun: 64) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002b40)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000002c40)=0xe8) (async, rerun: 64) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002c80)={0x0, 0x0, 0x0}, &(0x7f0000002cc0)=0xc) getresgid(&(0x7f0000002e00)=0x0, &(0x7f0000002e40), &(0x7f0000002e80)) syz_fuse_handle_req(r1, &(0x7f00000001c0)="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", 0x2000, &(0x7f0000003000)={&(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x8001, {0x7, 0x2b, 0x5, 0x202020, 0x76, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, &(0x7f0000000080)={0x18, 0x0, 0xa198, {0x70}}, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0xe15b}}, &(0x7f0000000100)={0x18, 0x0, 0x3}, &(0x7f0000000140)={0x18, 0xfffffffffffffffe, 0xffffffff00000000, {0x2}}, &(0x7f00000021c0)={0x28, 0xfffffffffffffff5, 0x5, {{0x80, 0x9, 0x1, r2}}}, &(0x7f0000002200)={0x60, 0x0, 0x2, {{0x5, 0x10000, 0x8000, 0x8001, 0x35cd2c3c, 0xfffff001, 0xd, 0x1}}}, &(0x7f0000002280)={0x18, 0x0, 0xf305}, &(0x7f00000022c0)={0x15, 0x0, 0x7, {':^)-\x00'}}, &(0x7f0000002300)={0x20, 0x0, 0x0, {0x0, 0x1}}, &(0x7f0000002500)={0x78, 0xfffffffffffffffe, 0x101, {0x4, 0x0, 0x0, {0x3, 0x0, 0x9166, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x8, 0xdec1, 0xa000, 0x5, r3, r4, 0x4}}}, &(0x7f00000026c0)={0x90, 0x0, 0x0, {0x0, 0x2, 0x0, 0x3c37, 0x1, 0x4, {0x2, 0x80000001, 0x0, 0x1, 0x2, 0x365, 0x8, 0xd, 0x8, 0x1000, 0x1000, r7, r8, 0x100, 0x7fffffff}}}, &(0x7f0000002780)={0x100, 0xffffffffffffffda, 0x0, [{0x1, 0xe1}, {0x0, 0x1, 0x9, 0x5, '.@]*\'--,/'}, {0x1, 0xa1f, 0x1, 0x5, ']'}, {0x3, 0xffff, 0x0, 0xfff}, {0x6, 0x0, 0x6, 0x10000, '[-\xcd]/\\'}, {0x6, 0x401, 0x2, 0x401, '(^'}, {0x0, 0xffffffffffffffff, 0x5, 0x8, '}/)($'}, {0x6, 0x0, 0x0, 0x4}]}, &(0x7f0000002a80)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x0, 0x0, 0xffffffffffffffff, 0x4, 0x8, 0xe6d1, {0x4, 0x8000000000000001, 0x6, 0x2, 0xe, 0xc00000000, 0xffffffff, 0x80, 0x2, 0x1000, 0x5, r9, r10, 0x7, 0xd}}, {0x2, 0x304, 0x1, 0x3, 'p'}}]}, &(0x7f0000002d00)={0xa0, 0x0, 0x8, {{0x3, 0x2, 0xffffffff, 0x2, 0x800, 0x5, {0x6, 0x3, 0x3, 0x8, 0x8, 0x7, 0xcc, 0xa, 0x0, 0x1000, 0x3, r12, r13, 0xf, 0x4}}, {0x0, 0x1}}}, &(0x7f0000002dc0)={0x20, 0xffffffffffffffda, 0xd99d, {0x800, 0x4, 0xc69}}, &(0x7f0000002ec0)={0x130, 0xfffffffffffffff5, 0x1, {0x9, 0x22f, 0x0, '\x00', {0x4, 0x7, 0x4, 0x7ff, 0x0, r14, 0x4000, '\x00', 0x6, 0x0, 0x5, 0x10001, {0x2, 0x10}, {0x8, 0x22d}, {0x7, 0x80}, {0xfffffffffffffffd, 0x8}, 0x2, 0x7, 0x2, 0x9}}}}) 550.833919ms ago: executing program 4 (id=2259): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000080)={0x4, 0x8}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r3, &(0x7f00000009c0)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000040)={0x7, 0x80}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r5, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r6 = syz_open_dev$admmidi(&(0x7f00000000c0), 0x9, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r6, 0xc0245720, &(0x7f0000000100)) 550.23819ms ago: executing program 4 (id=2260): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000fc003f11000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500170001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000006c0)={0x78, 0x2, 0x1, 'queue1\x00', 0x700e}) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8801) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000080)={0x1, r5}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x50, r4, 0x10f26000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r7, 0xee01) newfstatat(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r9 = socket$kcm(0x11, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000540)=0xc) setresuid(r10, r10, r10) sendmmsg$unix(r2, &(0x7f0000002600)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000780)="7460ee1c5053b68cc239376eda6ebc757b79ab18ef64d6882edb1a0c3be7c195da9ae965ac1a39754eee117a910ac650c4e2564d5f25f4a112b75b28575dbbdbbb8d12bd899d", 0x46}, {&(0x7f0000000800)="a67c36949e0dfa4e8c54bd3f4ae082c7c50c9ab9b9c3b223e3673ad92c531d4126e37f28eeb1d144518f7860706148f20291e35b7a2ac2b4574de314cc9babe189413071bc011caab509f490d8ed5dd23e7ad94f6d1ed3c83badd7d1e53e182d9e3bedca7268c8f4e55ee3e0649bc34f16c33d7a5183df93e4c1ec647f705bbb467198e2c2846c15bd52db0f0cae5a826be95a68ff1437a0de87e4288f6aa29662c6499ef8d5d11bf965d004ab96fe59b24ee747c3d5826c5a1a8983f1b9f58ad3b6aa4af5bf64c30a1aba354de67d6a2dda3422d83fb422492e061ec723dfd05b95a20da1d3eb63c083ad40246c711c11d2e4596eb32c3508552f175261553f418aedfe6495c71f551e663635149b5921864291060c9b5383c7f949912f803b6609d9a0686b2cd1c380827fae19f78c2027150cfcc294dd31d3202109c9de329d1b1d26caf6a1084116f8697de64e730d9285ceef50ca0fe436edf0d00fb32ec9189b6bdbd9fc17f021125adeeb06f1ee4cbb0151d5b72aaeabb9c6c01079d59ff3dae3e90a9e1eeb9135ab06ac12786ed23ef3c34fbde2400383ade21c3d54dffd7aec0f7b4916f573e0b5f97b3d28f39f04a5733002942400e28a88c1936b1d0a8804b88886c40d5896473d09cbbefd602b35a553d1aeaf5660d421164f4b598122543a563b67b5afc8c5de9e4abfe5567d9113e0e315bef0e08d5fb5d7932377e909cbe2f6234c542fc601da3fbc0718eac70faa0a270d716eb9ecc1d6d4918f61b14e7b8815fe9bb65d20195e5c557345c162fd46c6ba292c9cb82367e69d9bb920d34c8777347e334615abdb958ec5737ae1a6b12f1affa096e7d12cf4f0442723dbe99e5763a27638d052d7793b64d2542e8dfcdf7f2afa3faefc2c2cd56e75aab3231a09b9270b292808027b67824e540eacbef56bcfa50247b28e9cb99e43faf4dffa72eb34945c9a40ee7bce0996e80be34485c3cd45c5f412a8dc64e16a770d3c25e7f307e146254b10a92f5b85da88971c6a85f9bc16b898c4112f9642eeba11688e018b666d827c99ba34b3e9226971f71aee99d858308034ad852ff57666e4fbdd7b8ff58c245d0e8ae20bbfaddf4d4f503ed6d72180f6641372b263e086746d1542c8a7bba06a2c04afc6b139f1029ed24405ba7e81ffeab9f1f881e6954d600749686a51082a4078b982f427d3008290cc649586a76aea1d207bc4d710a9c6074d8035d5aa832b4d7a33d62d30773c221e5ceb0768518e3d8215043abf5a5fc06001aaa958a5884d54ea7a716c48004bddd94915f2063ba09784a9194bafb4000c643823e896269c2f3e6c324bbfeedea9d924656b4e6fb7946a7572c207fa34a7d62824b0fa0497291fe3bb4dc566d393accea1579f21b09c093f6fe426b608fcbba5c2c3cb1032e46e89053e77f4a99284394989bfd078b7afa0f89eb387ed8dcf4fd1d36ea9284c8ad468a6687920de5d197d4eb7c92c946a10773665115ca8d51d142a4cb562739ee8083358221d6ca39cc8d2efb58585d21bec902c6953820ccb981cccbed0106f8994c679631ff72af6c906e0bd63f0a28bc00ac924cee4fc2a9760e726f1350a42d3811ad1d478bb3a22968158bcdddce424a9b88d3bbed5ba0b21c6ade3b1c8d6673706211aea8d9e63cdc08c26e80d0a4ebef3c034c911205ec0ce9cc9650bff8abffddeceffacfa20f4148a16e05662481bea1652812012f5b843c7aa1b66bea4ffbee77a5fa215d621dd26d9059ec997de67ce1ffb9fd6f6a9591a8833eb5e4d1ba31c21d7a2bdec745167cad027697de538eae0de27e0d389773b9f824e98abdce2384abad39443e37c4a0d0ab701e2a5cb506c28c0a43fc95f61f9881944980f52d0975564ebd6acee5de5f8b68ca21a9ce723a8d2101f456baaea386ef4845d874658ec5a65fb19517943ff05e5f079c256deaeecb71a27156a9f6fb0506a0e591963a4bb1eab8dc5fa99a399ebc947ef30139c1f77da8cc28507838f15d527478bd14178533b0b0c809fdb32ae6bb4980d6a8254dea78d0d3845a8dd35dd4f41838d985f97c7c9aaebbc442ae30f3386042c4f3581a5a31f61054ab78493c0580c35ae6c277a4646814ac020a17efe5f7f487c0a4b6e7caa2a7bc4801036dfdfb3acf944b4c9fce4fab20ddc04a9fdd0a3288610c5a6829aed96093d59b53cd41694ba038d4c21f82ecf0af7c05ab3d617e021e3f8453de714732ded724fa70b9fe319f661fbdfea0ffe02c78829bfc55acc53fb27afa1bd21425481bcca190f457aa8e21b9ade16e36199d9679237e475d4273b2c3969c27ac6ced36e8c58f2e2353bc86a06d2f142ff0a7f2786d020b6c238c2cf48f743276d378ba21e226a0c9cb639e849ca42480bd99e7ba502909a0dde0c117007c9dc900e65c675e417b70595781ee4874b7129e8349d3fa6740f6889c3f6f7aef09c21c786fd652a045a7de889571826fbdc3fe12edb2d4b4d94cb0a69784840f42a32129687d8841f7969d51a6d192e08d01388cecfcf2a9f147dbd19a3759898ad60bd0c67c4a7dc9fa3d48030baba0db1ceed6b85759f532697b4ccf8458fe9a34936c89bc0189b51778236b9192364c11a12f78451b6762b9a83f0ec0b55f97242e96115a4ccdbe7326e10e79c000987f269bdfea10204ef23a289b5a41119b565af318443756f2f2fa8bc7e0fb5b4d0847dcfb61357a95f0af5e008336533eaca194f1837d9a1b70b2724987c3755281f24c42ebcba098db56ec7582db5752d817ace22d82d49e9876743072bc2810ddb96f45540383bf566f24d9345faf1eae0d9399fac99c0d7b323a76f84bca98a40bab25045545a18f69d5f64e4dbac035fcef7040275d71fd5445ea58454c1930664c1023b71918afbbdb3c1fa26674e79f0bdac1e10ae2caddc54e16c1f8355f28aa11c9b4aab08eed85526d4d91c13fb8571ff45463f8c1133636ad7469a1f97e3cd81cea536c34ddf859b232d64316a2225de37bae9f04fac7f1fee0a137470036d4234b66a37eea0902fc3733b761998a9262fd5d79d40e9bf5d6f8c371a8c505013a001bcf7ca28fd71f01e5d1ff68c790057dbe71d7532ed91a279d7fc346d0a064ed33a3959977ca0e08e47cb008436978961364398d6c65ae16059bda21d10c2937c71ed3c47dcaf0580ae321a71312f5c5365373cf0f56000c06fcc4f821076f2f066c7e316c2cc5dd072b060f6cf2f85a92f2623b7ddfd499d079310e4fde155cfad4e3152a26b2b37e75329962074db984946979037ad8efd53932016b670d34b8f5dbca51c78880647a0a528f1782f6d4dd0b65bf52a619f4a936178933f7d248733b64346faf1b0caba9800b8e8eee7d33f946168546bf2580445e7e03e81ac52819eaf6a8c86b3b1f01413d7ee73ee7178e9bc8dfcb538138e1f7565c1418a2088f830a4d26c04d287cdb92421b9e53af4f641d5d44a910f69ed6330e190b81b4ea74646b3e366dc1beeebd443c14b003a9f82914cbb2426bf4c2e7350f9fe86f8de25d6c9ecd2c6cc41a33225bdc0c4ab6519d75792256612388fb99921060a4478379910835ba9340f6f28bbef033b86fa1a8b7b3e16659688b35ea453a431ab1f21ca517c974b41e981912e5c0de997c06b6f23498f886d0721923b307869704c3a96136ad3395ee0580838e8fc600400cd5aa2b89cc650dc1349f9d3152aec2f631421b237bcf2e4017948c7bca707fd2d225b4494be6baae90d3a8d0d5125008a030730f2c4341feeccd6d790390ba921fe5df902eb2d1448c78e8be541fffbfa06bf1772b629bb5e0176f4a4f4f8ce934f3cb63985a02c037d72013f815e225a733ff76f704724d654808e0fd70a59babbb6b651a910d25923c2e4527ac4addaf8abe5644b569524cbb43ab95bf685164062193de566cefe9bfd4dbb32b4cac338cee40b25beed1fac2fcb0e98acbd5034cd7e8e62f80849a981536ca41b1541e58c0074adeef8bef7f77b1afe130c79de6d6f8d5adfbe5a6ecd7538bcee176e9d8a947bbee4c06d58cf2c26d86a30bc06e6967a4a2c4f461fec4faac8bd9f3b7ebb9887cc4cfa0c3a6cb1b113738a37f72506b01812c1914faa9a6927d23ee5804bf264099903f32fa5cac5bbdf22541d231de7639780af4c897bf309c111f0c1a386ea7a1b9b61187eea810fa29f468d6838aab1334d4291b7ba3b9fe6a9984de83d6e227488004311d46993ec507b5eb826d7aef2f47657f22ff89c5ebd0babcfc98e3f1dfe44d10c7e724f2ffdc068955c32d96acbfae50c3e5a4154262ae9ac67ebc4b320f32055e388b028f69f98835ff47512221e013ce7e75d40f2030318345aaa50e4dd8d6acc54a6449da78ea1b02633fa1d6c0ff1f50113dd39e242cb3f355a9c83f1802c8d3ae32208efc52faffb8df774790679d6366a51a2c9cd8a413faf599b77020fef8a31c2d72bb7bcd1fe1e54ff58b18e10e35c3395558874bc52f1029352bfabb88400e83eae08cada7ad111ba962e601e3335071ab96787f7574643f088e83585dcc2d28f6c92793f4c3a572ee45bec93146d3f06b468409ff49d9535c78b597361429c13cbf4917dfbd9cc5e963ad11f258f947654828fabeb0ccee1c04c2f836903457fbb68a4d2b5bc5365c6d25df2c0724b2a03808007135b95c8cc71dab1335210e776669fe6ec8cf1b69e66219464e6d3836adf8ff3cf3b99e8769e8f4cbff1b6fbaebaba69dd6b7ca9079f71bd4618541e95527305fb7cc81ee82049aa51f898f37a455b08259b299b1eeecee8bfeeaee541bdaa3bd5ba7b1621a9d2886fe228a2d6974b19a338b8a244f8557b94a64704bdb7b7307fec1712f7502ca90ff769ac73c2f7011731b05c021f35e474721856dc389d46995f927e12655a86f79d65c3209ffd024184958a0f7437df4e99620e0d282b010b98356469500c9da788f876fdd96ff0b8075e27857226c39b3481829416e6f68695ddbf8e3b0596da05b1e89377a0770f838c7d2d49c8238c2b1536405eee8e4dd157b57e44bdde01631192b76cb82ab947a8d75a832b155119fba9345fa40d196115f1f9af3a8b2750374ee1220667a1c22f104069ce87e91dafc2a67e8449a8fa6ac07b145fa3eca51fc2dc27ac47cdd8bc1dbb73d15698e8e54e7dc51d9eb0e7dc99185e90b9e6afd52ca5eecba6c3f41d9530afc5aa22d843ee935e68de6379098322e8462ebcec304bee3f022c5cb3b4a1dd2fad6fc7967b071c0ce798d390d30c858c3c90f1483f2f90abe13db19a1f0d8c1e64c21111718dc6c9fa29205f978e15f761f0fada1d4dff7196c1e2ba9ab0e6312aaac483732f8a5ff161c8985074eeee5a38cbe11f6b501b6ff7bd5273146662cfa4e55fba82c9ba9e3ac9a4003c106ad8d24c4169c5faf80badc74e7c7063b3f78d58ee2dc69ec6dca0e7d5bfab2ccacf601abcc68bd171cef17370a3f05c70ec388b2e9c6a2a4a503905fc603193d806de5657a019950732c200742e1434dfa792f6fd8d95297c0e99d4bf8f5a83dd08363d6c6b4f2d0db8edd94ad05238a8aa50aa9daa83e66057a9123f9e2435a16c0cc276f7d9400664635a2b98f2a46b93972755e0ab91494728c8864fd390ab176c5e757cbcc5c647bc524ea7f4b55715ab731aeb16c7dcc485766a3d6406e29af86858162e457dfa791638728fde42a070e763869110f673adf292179cd01b159f1ddcda4f6727a58bc05a1662da487551d6315eb6a3c74fcbf7f3b9949f465695", 0xff4}, {&(0x7f0000001800)="4e1db07c53dc82899d421e", 0xb}, {&(0x7f0000001840)="c8aaf4bca9d3fe09698d1d087f5a44b8679f69e8c4b4267602e2897692c2da70c2dd84bc6336c5954de73161a965cca55a0371e8dd7400eed03925937963a165ddc919d89d0b5db2de7650b6084267ea58854e32eb09a94c889860f4f9acf1a6c2f4ce8917fbe9b0890abe683086", 0x6e}, {&(0x7f00000018c0)}], 0x5, &(0x7f0000001e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r4, r3, r5, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8, 0xc0}}, {{&(0x7f0000001ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001f40)="bd1c8eb53c7e1a993a38eb235d85ae58a18634c38b03abacbe7d732f72604c2300887d42ec029d100fa6ddfebe2de8995a862b0f1435dff77f776c40", 0x3c}, {&(0x7f0000001f80)="772a6f23a6e078a4b970b955228168ccefe4fcb6927f19e49d84edf44f20c1507754f08d70c61b4c673c197617858d6a1533399a5b3cbceee7462e2866a3177b0e035d31d5183c59535dcc28d3230e78a773a2f7b15d83d05cdd4f2085dc4b2df1b75045c45a4ea85516f01bbfd2005ea4b56fd10eb94daccd708e2cf815d4c836a739ae79f05e4b3feeeb4c197763757d86bc9fc0a3c9d580399bc1a81f8bd6cef398e94c049d16252a2ee2c60c5cfca69ce9a55f5e9467e9066ecfecfcc76bb6b943d352ae", 0xc6}, {&(0x7f0000002080)="407128e5003bda78f5c7e17198d712f2b2b1e475ca2e32a8e99716dd3562e28030826a07ce93e7b54d38e2b268a6067f89b9b8795aaa8854eed8b5cf599af0de1cbbacd105", 0x45}, {&(0x7f0000002100)="1d715aefd4550dde8935b79311f8634af884a825a13aaa3f217aed1418230054376507ef978f5c212305611699f4a2c46c122aa407aeda5271b6c11f7eb8333275ba13531f5b1a5f22502d459391f4cae4083670d38a0b5aabbdb1a1e61dcb5b3d7cf7c16352c4632ea2c2374b5a1a74ef18c9fe349ac6dbcc7c9c47156c9b6b02ad31412787ba3b", 0x88}], 0x4, &(0x7f00000022c0)=[@rights={{0x28, 0x1, 0x1, [r1, r2, r0, r6, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @rights={{0x1c, 0x1, 0x1, [r3, r6, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, 0xee00}}}], 0x88, 0x20000004}}, {{&(0x7f0000002380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000025c0)=[{&(0x7f0000002400)="42ce1bf91a7736c5b2143b5e6b767e8aa101450ff4db1a054f4c740240a1c5c802b1fdd5", 0x24}, {&(0x7f0000002440)="a047e0c569ec5bc48db7f77f639e6148349a12a5608a31e500378c45d85e1c9b3f4d503f72ae4b6e26d195543e88dd48cfb77d3a4b54212b032d63d38fdcea4ed4aed5ec3d057b4551480c88abe58f4539cf24d36946273ecdab162db985b160ab1baba4a60859b434f8ad56e9b92e847a65da7b2ea1702f4d856ecc47ce8d23b524c9d5e2b41d2f9187b33573b0e8778d322f645bd2405d913e10c087fa44c905cb63d87c182fbbb985edd60b3617b160636076d2d06d70d456fa07f0d8c167d0408eb4f70f8e7d4ab10427fe3cc02207bbf820055cc577b17052f4f738954acb373cead2817f0f9aec1ed4867da686a50eee23b9f92489", 0xf8}, {&(0x7f0000002540)="48294d5503d359b67ef15b60e78e5d63a61f52a6ea894f21696ac101e516f53859b9e68381a1ebdc45adcffbeba5c95312dd501b4294e206b1a034e8e21dc8205ebfdbadbb86ce1398cbc8bad5087e53a13c3ab8a1b3770312", 0x59}], 0x3, 0x0, 0x0, 0x8081}}], 0x3, 0x4000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='auxv\x00') 460.163313ms ago: executing program 4 (id=2262): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x8001, 0x0}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x40, 0x0, r3}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x1, 0xd, 0x9, 0x7, 0xfffffffffffffff0, 0x8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x784, 0x82, &(0x7f0000000180)=""/130, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x1, &(0x7f00000002c0)=[r1, r4, r5], &(0x7f0000000300)=[{0x0, 0x5, 0x8}], 0x10, 0x5}, 0x94) r6 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x7) r8 = accept$netrom(r5, &(0x7f0000000400)={{0x3, @bcast}, [@bcast, @bcast, @default, @null, @null, @null, @default, @netrom]}, &(0x7f0000000480)=0x48) readahead(r8, 0x6, 0x3a) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 249.863975ms ago: executing program 6 (id=2265): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) signalfd4(r0, &(0x7f0000000000)={[0x2]}, 0x8, 0x80800) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x80402) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) signalfd4(r0, &(0x7f0000000000)={[0x2]}, 0x8, 0x80800) (async) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x80402) (async) 249.369033ms ago: executing program 6 (id=2266): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000880), 0x800, 0x0) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000040)=@type=0xa) (async) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000040)=@type=0xa) syz_emit_vhci(&(0x7f0000002900)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x7}}}}, 0x11) keyctl$set_reqkey_keyring(0xe, 0x5) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r6, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001840)={0x10, 0x1000}, 0x10}], 0x1}, 0x10) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x5c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {0xf}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x30, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'xfrm0\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x5c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {0xf}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x30, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'xfrm0\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 171.398864ms ago: executing program 6 (id=2267): r0 = timerfd_create(0x0, 0x80000) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 171.134714ms ago: executing program 6 (id=2268): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0xa34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x5, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @filter_kind_options=@f_basic={{0xa}, {0x9fc, 0x2, [@TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_ACT={0x1b8, 0x3, [@m_bpf={0x1b4, 0x10, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x2, 0xf, 0xb4, 0x70}, {0x6, 0xa0, 0x6, 0x4}, {0x3, 0x7, 0x1, 0xd}, {0x7, 0x2, 0x1, 0x40}, {0xfff, 0x5, 0xd, 0x5}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x2, 0x10, 0x18, 0x4}, {0xff24, 0x81, 0x1, 0x9}, {0x2, 0x3, 0x7, 0xfffffff8}, {0x16, 0x7, 0x6, 0x81}, {0x4d, 0x3, 0x1}, {0x14, 0x1, 0x0, 0xbc}, {0x3, 0x3b, 0x0, 0x3}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100, 0x1, 0x10000000, 0x2, 0x1}}]}, {0xd7, 0x6, "73f66680336ce2b4a6f0554e83d8f6da6ca6838fe54c9f4d40fc4cfc210fb0b2f2ff606d0e22c35e6921918cb56e619e4e5cb5dbce23914f93d5cf86883ffaee534b9131f4168cc773c34460a1c93d54dd7477849d8399953f39caccda006be4ec43c76ed22c0750d2241043414312089b0d03062e60719b28b1d46e5ecbfee37ce7cdfee131dc75bcc7276d1375ff51aedee3e39b39b74acd36eaef5cd2697d1715a989bd16df44f5b37f619405e9a6c6e53f112484f3365ad5539f123784700ef107b4225884ad715f95095c833f6711ec6b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BASIC_POLICE={0x83c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x200, 0x0, 0x9, 0x100000, 0x0, 0x6, 0x7, 0x1ff, 0x5, 0x2, 0x4, 0x6, 0x298a, 0x4, 0x2, 0x40415d0f, 0x6, 0x4, 0xe, 0x7, 0x5, 0x71, 0x6, 0x9, 0x7, 0x400, 0x5, 0xfff, 0x6, 0xb, 0x197ee0ac, 0x0, 0xffffff80, 0x80000000, 0x5, 0x3, 0x1, 0x101, 0x5, 0x78, 0x71f, 0xff, 0x8, 0x7, 0xbb8, 0x8, 0x0, 0x1, 0x2, 0x8, 0x6, 0x8, 0x4, 0x7fff, 0x8179, 0x400, 0xb, 0xb25, 0x7, 0x101, 0x6, 0x5, 0xc, 0x9, 0x68bb57d4, 0x2, 0x401, 0x6, 0x1, 0x8, 0x2, 0x8, 0x8, 0x6, 0x5, 0xffff, 0x7, 0xa5, 0x0, 0xc26, 0x993, 0x0, 0xfff, 0x40, 0x5, 0x80, 0x0, 0x0, 0x8000, 0xbf3, 0x7, 0x6, 0x9, 0xd03, 0x47, 0xc, 0x44, 0x4, 0xfffffffe, 0x400, 0x6, 0x7f, 0x3, 0x3, 0x6293, 0xa9, 0x2, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x2, 0x7, 0xffff, 0xfff, 0x0, 0xb5, 0x0, 0x5, 0xa1, 0x4, 0x1, 0x81, 0xffffffff, 0x838d, 0x9, 0x101, 0x1000, 0x7, 0x3, 0x4, 0x7, 0x100, 0x0, 0x6, 0x9, 0x7, 0x0, 0x40002, 0x7, 0x8, 0x9, 0x5, 0x2, 0x6, 0x10000, 0x3, 0x4, 0x6, 0x8, 0xfffffffb, 0x982, 0xffffff90, 0x4, 0xcf, 0x6, 0x6, 0x8, 0x4, 0x9, 0x2, 0x4, 0xc, 0x85d0, 0x5, 0x3, 0xffffffff, 0x0, 0x1, 0xfffff9a6, 0x7, 0x0, 0x2, 0x3, 0xe, 0xfffffff9, 0x7, 0x1a, 0x7, 0x0, 0x1000, 0x7, 0xe, 0x4, 0x5, 0xfffffffb, 0x3f, 0x8, 0x9, 0x7, 0x1000, 0x7, 0x2, 0x304f, 0x2, 0xfffffffa, 0x6, 0x10, 0x3d, 0x2, 0xca, 0x0, 0x9, 0x6, 0x1, 0x4, 0x2, 0x4, 0x1, 0x8, 0xf1e6a2ab, 0x0, 0xfff, 0x3ff, 0x7, 0x6, 0x8, 0xffffffff, 0x8, 0x3, 0x564, 0xd1edf5, 0xf, 0xf, 0x6, 0x6, 0x4, 0x5, 0x400, 0xf6b, 0x80000001, 0x26, 0x9, 0x9, 0x3, 0x2, 0x4, 0x3ff, 0x3ff80000, 0x5, 0xb, 0x12e429c9, 0x6, 0x8, 0x3, 0x10001, 0x0, 0xd1, 0x0, 0xffffffff, 0xe, 0x10000, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x0, 0x77, 0x10001, 0x8, 0x8, 0x7ac6, 0x6, 0x2, 0xb80, 0x2, 0x4, 0x80000000, 0x7, 0x400, 0x6, 0x4, 0x80000001, 0x7fff, 0xeeb, 0x8, 0x0, 0x981, 0x5, 0x5, 0x6, 0x5, 0x6bb494e5, 0x4ad, 0xff, 0xa57, 0x8, 0x4, 0x4, 0x4, 0x5989, 0xfffffff0, 0xffffff80, 0x1, 0x9, 0xaa9, 0x400, 0x3ff, 0xc9fc, 0x1ff, 0xd, 0x400, 0x10000, 0xfffffffd, 0x80000000, 0x80000001, 0x9, 0x4, 0xff, 0x5, 0x800, 0x0, 0x2, 0x0, 0x7, 0xfff, 0xffffffff, 0x3ff, 0x0, 0xce, 0x0, 0x8, 0x1, 0x9, 0x7, 0x80000000, 0x8, 0x80, 0x6, 0x400, 0x2, 0x2, 0xffffffff, 0x3, 0x7, 0x7, 0x4, 0x7fff, 0x69, 0x6, 0x3, 0x8, 0x6, 0x1, 0x8, 0x788, 0xe6e, 0x2, 0x7f, 0x0, 0x7, 0x3, 0x5, 0x0, 0x4, 0x0, 0xffffffff, 0xd7f, 0xec01, 0xe4, 0x401, 0x6, 0x4, 0x9, 0xffffffff, 0x3, 0x1, 0x80, 0x71a8, 0x0, 0x9, 0xd93, 0x4c5, 0xfff, 0x3, 0x61, 0xfffffda1, 0x9, 0x3, 0x2, 0x100, 0x6, 0x6, 0x7a8, 0xa5, 0x3, 0x9, 0x2, 0xffffff01, 0xfffff001, 0x3, 0x0, 0xff, 0x7, 0x1, 0xffffff80, 0x4203, 0x0, 0x2bcf, 0x1, 0xffffffff, 0x7, 0x0, 0xfff, 0x6, 0x4, 0x8, 0xffff8000, 0x8000, 0x8000, 0x80000001, 0x1, 0x8, 0xf75, 0x1, 0x3b, 0x8, 0xec, 0x9, 0x78, 0x2, 0x2c, 0x6, 0x0, 0x9, 0x1, 0xf, 0x5, 0x8, 0x7, 0x1, 0x2, 0x2, 0x1, 0x1, 0x4, 0x7, 0x8, 0x7fffffff, 0x6, 0x1, 0xd7c, 0x8, 0x0, 0x3, 0x101, 0x8, 0x7, 0x7, 0xffff, 0xac, 0x2, 0x6753, 0x9, 0x76c, 0x32, 0xfff, 0x7, 0x10, 0x2, 0x2, 0x6, 0x4, 0x2, 0x1784, 0x6, 0x0, 0x6, 0x40cd, 0x3, 0x6, 0xff, 0xe, 0xa727, 0x88c, 0x9, 0x0, 0x4, 0x1ff, 0x4, 0x81, 0xd, 0x5, 0x81, 0x5, 0x3, 0x0, 0x7, 0xe4, 0x99, 0x6, 0x9, 0x0, 0xfffff047, 0x5, 0x1, 0x684d97e4, 0x3, 0x2, 0x7, 0x401, 0x5, 0x6, 0x4, 0x7ff, 0x8, 0x5, 0x4, 0x0, 0xe2, 0x349b]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}]}}]}, 0xa34}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25260000000c00018008000100", @ANYRES32=r8], 0x20}}, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffd14, 0x0, 'syz0\x00', 0x0, 0x3}) (async) ioctl$TCSETA(r0, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) 1.514113ms ago: executing program 6 (id=2269): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100)=0x400, 0x2) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)={0x18, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0xff, 0x0, 0x0, @pid=r3}]}, 0x14}], 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 6 (id=2270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) (async) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) kernel console output (not intermixed with test programs): usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.482898][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.487198][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 108.493716][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.497768][ T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.501538][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.506106][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 108.512187][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.515512][ T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.518955][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.522309][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 108.525470][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.529998][ T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.532824][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.536783][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 108.541042][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.544706][ T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.550268][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.551595][ T7026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.554742][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 108.558951][ T7026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.562810][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.565650][ T53] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 108.573011][ T53] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 108.575181][ T9424] chnl_net:caif_netlink_parms(): no params data found [ 108.576419][ T53] usb 5-1: Product: syz [ 108.581148][ T53] usb 5-1: Manufacturer: syz [ 108.583097][ T53] usb 5-1: SerialNumber: syz [ 108.589578][ T53] usb 5-1: config 0 descriptor?? [ 108.595886][ T53] yurex 5-1:0.0: Could not submitting URB [ 108.598555][ T53] yurex 5-1:0.0: probe with driver yurex failed with error -5 [ 108.688306][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.691328][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.694404][ T9424] bridge_slave_0: entered allmulticast mode [ 108.698307][ T9424] bridge_slave_0: entered promiscuous mode [ 108.702101][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.704770][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.707850][ T9424] bridge_slave_1: entered allmulticast mode [ 108.710619][ T9424] bridge_slave_1: entered promiscuous mode [ 108.752968][ T9424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.758080][ T9424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.808964][ T9424] team0: Port device team_slave_0 added [ 108.824232][ T9424] team0: Port device team_slave_1 added [ 108.828988][ T9409] netlink: 'syz.0.989': attribute type 4 has an invalid length. [ 108.837523][ T7008] tipc: Subscription rejected, illegal request [ 108.843782][ T7026] bridge_slave_1: left allmulticast mode [ 108.845577][ T7026] bridge_slave_1: left promiscuous mode [ 108.848947][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.852924][ T7026] bridge_slave_0: left allmulticast mode [ 108.854700][ T7026] bridge_slave_0: left promiscuous mode [ 108.856526][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.899062][ T9442] affs: No valid root block on device nullb0 [ 109.058313][ T7026] team0: Port device geneve0 removed [ 109.120064][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 109.419511][ T9450] openvswitch: netlink: IP tunnel TTL not specified. [ 110.477636][ T63] Bluetooth: hci1: command tx timeout [ 110.916323][ T7026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.921567][ T7026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.926937][ T7026] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 110.930336][ T7026] veth1_vlan: left allmulticast mode [ 110.933000][ T7026] bond0 (unregistering): Released all slaves [ 110.942586][ T7026] bond1 (unregistering): Released all slaves [ 110.995590][ T9456] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 110.998916][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.003873][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.017494][ T9424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.021876][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.024549][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.034123][ T9424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.046662][ T9460] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 111.085040][ T9424] hsr_slave_0: entered promiscuous mode [ 111.088248][ T9424] hsr_slave_1: entered promiscuous mode [ 111.091078][ T9424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.094206][ T9424] Cannot create hsr debugfs directory [ 111.109670][ T9467] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1006'. [ 111.112952][ T9469] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1006'. [ 111.212604][ T6034] Process accounting resumed [ 111.228957][ T9481] Process accounting resumed [ 111.241118][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1010'. [ 111.241169][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1010'. [ 111.255818][ T9424] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 111.262287][ T9424] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 111.266404][ T9424] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 111.270355][ T9424] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 111.308332][ T9424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.322189][ T9424] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.326884][ T7048] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.329171][ T7048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.335834][ T7060] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.338167][ T7060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.450025][ T9505] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1014'. [ 111.467093][ T61] usb 5-1: USB disconnect, device number 12 [ 111.489779][ T9424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.659697][ T9424] veth0_vlan: entered promiscuous mode [ 111.664417][ T9424] veth1_vlan: entered promiscuous mode [ 111.676775][ T9424] veth0_macvtap: entered promiscuous mode [ 111.681051][ T9424] veth1_macvtap: entered promiscuous mode [ 111.689661][ T9424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.693774][ T9424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.698586][ T9424] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.701303][ T9424] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.703995][ T9424] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.706691][ T9424] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.713534][ T9529] tmpfs: Bad value for 'mpol' [ 111.775190][ T7064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.783883][ T7064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.800194][ T7064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.802375][ T9535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1022'. [ 111.802705][ T7064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.821949][ T9535] netlink: 'syz.0.1022': attribute type 11 has an invalid length. [ 111.948892][ T9539] PM: Enabling pm_trace changes system date and time during resume. [ 111.948892][ T9539] PM: Correct system time has to be restored manually after resume. [ 112.013245][ T9539] netlink: 700 bytes leftover after parsing attributes in process `syz.6.993'. [ 112.080910][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1025'. [ 112.105966][ T9555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.108696][ T9555] IPv6: NLM_F_CREATE should be set when creating new route [ 112.111402][ T9555] IPv6: NLM_F_CREATE should be set when creating new route [ 112.114094][ T9555] IPv6: NLM_F_CREATE should be set when creating new route [ 112.136523][ T9555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.154878][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 112.168809][ T9562] bond0: mtu less than device minimum [ 112.171025][ T9562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9562 comm=syz.5.1029 [ 112.175494][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1029'. [ 112.216038][ T9562] vlan2: entered allmulticast mode [ 112.218753][ T9562] bond3: entered allmulticast mode [ 112.557544][ T63] Bluetooth: hci1: command tx timeout [ 112.608004][ T9609] openvswitch: netlink: Key type 179 is out of range max 32 [ 112.706235][ T9615] bio_check_eod: 2 callbacks suppressed [ 112.706246][ T9615] syz.6.1045: attempt to access beyond end of device [ 112.706246][ T9615] sr0: rw=0, sector=8, nr_sectors = 8 limit=0 [ 112.719603][ T9615] qnx4: unable to read the superblock [ 112.725325][ T7026] tipc: Disabling bearer [ 112.727639][ T7026] tipc: Left network mode [ 112.945922][ T9638] syz.0.1053: attempt to access beyond end of device [ 112.945922][ T9638] sr0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 112.952346][ T9638] (syz.0.1053,9638,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 112.954740][ T9638] (syz.0.1053,9638,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 112.957880][ T9638] (syz.0.1053,9638,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 112.960731][ T9638] (syz.0.1053,9638,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 112.964476][ T9638] nbd: must specify an index to disconnect [ 113.009399][ T7026] hsr_slave_0: left promiscuous mode [ 113.012871][ T7026] hsr_slave_1: left promiscuous mode [ 113.016916][ T9641] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 113.027819][ T9646] syz.0.1053: attempt to access beyond end of device [ 113.027819][ T9646] sr0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 113.029651][ T7064] Bluetooth: hci4: Frame reassembly failed (-84) [ 113.031815][ T9646] (syz.0.1053,9646,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 113.036657][ T9646] (syz.0.1053,9646,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 113.038857][ T7026] hsr0: left allmulticast mode [ 113.040255][ T9646] (syz.0.1053,9646,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 113.041038][ T7026] veth1_macvtap: left promiscuous mode [ 113.043657][ T9646] (syz.0.1053,9646,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 113.045756][ T7026] veth0_macvtap: left promiscuous mode [ 113.045811][ T7026] veth1_vlan: left promiscuous mode [ 113.052058][ T7026] veth0_vlan: left promiscuous mode [ 113.602380][ T7026] team0 (unregistering): Port device team_slave_1 removed [ 113.663178][ T7026] team0 (unregistering): Port device team_slave_0 removed [ 114.130834][ T40] kauditd_printk_skb: 227 callbacks suppressed [ 114.130846][ T40] audit: type=1400 audit(1752920358.215:2995): avc: denied { setopt } for pid=9654 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.141014][ T40] audit: type=1400 audit(1752920358.215:2996): avc: denied { write } for pid=9654 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.147435][ T40] audit: type=1400 audit(1752920358.215:2997): avc: denied { mounton } for pid=9654 comm="syz.0.1057" path="/236/file0" dev="tmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 114.154331][ T40] audit: type=1400 audit(1752920358.215:2998): avc: denied { read } for pid=9654 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.167423][ T40] audit: type=1400 audit(1752920358.245:2999): avc: denied { mount } for pid=9654 comm="syz.0.1057" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 114.175691][ T40] audit: type=1400 audit(1752920358.245:3000): avc: denied { mounton } for pid=9654 comm="syz.0.1057" path="/236/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 114.446320][ T40] audit: type=1400 audit(1752920358.525:3001): avc: denied { create } for pid=9680 comm="syz.4.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.457488][ T40] audit: type=1400 audit(1752920358.525:3002): avc: denied { write } for pid=9680 comm="syz.4.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.463717][ T40] audit: type=1400 audit(1752920358.525:3003): avc: denied { nlmsg_write } for pid=9680 comm="syz.4.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.508349][ T40] audit: type=1400 audit(1752920358.595:3004): avc: denied { create } for pid=9685 comm="syz.4.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.553897][ T9693] dns_resolver: Unsupported content type (234) [ 114.637442][ T5953] Bluetooth: hci1: command tx timeout [ 114.916158][ T9734] syz.0.1072: attempt to access beyond end of device [ 114.916158][ T9734] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 114.921776][ T9734] syz.0.1072: attempt to access beyond end of device [ 114.921776][ T9734] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 114.925846][ T9734] Mount JFS Failure: -5 [ 114.927181][ T9734] jfs_mount failed w/return code = -5 [ 114.932608][ T9735] syz.0.1072: attempt to access beyond end of device [ 114.932608][ T9735] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 114.936742][ T9735] syz.0.1072: attempt to access beyond end of device [ 114.936742][ T9735] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 114.942008][ T9735] Mount JFS Failure: -5 [ 114.943415][ T9735] jfs_mount failed w/return code = -5 [ 115.029213][ T9739] uprobe: syz.0.1074:9739 failed to unregister, leaking uprobe [ 115.037669][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 115.192398][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1077'. [ 115.195212][ T9747] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 115.306646][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1080'. [ 115.826555][ T9814] netlink: 'syz.4.1095': attribute type 29 has an invalid length. [ 115.915087][ T9819] Bluetooth: MGMT ver 1.23 [ 115.968621][ T9824] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002 [ 115.976849][ T9827] Failed to get privilege flags for destination (handle=0x2:0x5) [ 116.072730][ T9834] program syz.0.1102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.305091][ T9858] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 116.318627][ T9858] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.353749][ T63] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 116.353799][ T63] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 116.645173][ T9876] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4008af12, magic af != 6b] [ 116.718445][ T5953] Bluetooth: hci1: command tx timeout [ 117.087065][ T9899] fuse: Unknown parameter 'subj_type' [ 117.465094][ T9908] bpf: Bad value for 'uid' [ 117.467047][ T9910] netlink: 'syz.4.1125': attribute type 2 has an invalid length. [ 117.499210][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 117.504746][ T1112] ata1: failed to read log page 10h (errno=-5) [ 117.506778][ T1112] ata1.00: exception Emask 0x1 SAct 0xc00 SErr 0x0 action 0x0 [ 117.511596][ T1112] ata1.00: irq_stat 0x40000000 [ 117.514076][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED [ 117.516465][ T1112] ata1.00: cmd 61/e0:50:56:f0:08/00:00:00:00:00/40 tag 10 ncq dma 114688 out [ 117.516465][ T1112] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 117.518324][ T9912] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.523658][ T1112] ata1.00: status: { DRDY } [ 117.528667][ T1112] ata1.00: error: { ABRT } [ 117.530542][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED [ 117.532650][ T9912] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.533111][ T1112] ata1.00: cmd 61/08:58:36:c1:08/00:00:00:00:00/40 tag 11 ncq dma 4096 out [ 117.533111][ T1112] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 117.535415][ T9912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.542764][ T1112] ata1.00: status: { DRDY } [ 117.546632][ T1112] ata1.00: error: { ABRT } [ 117.546660][ T9912] bridge_slave_1: left allmulticast mode [ 117.550117][ T1112] ata1.00: configured for UDMA/100 [ 117.550778][ T9912] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.553499][ T1112] ata1: EH complete [ 117.725775][ T9921] tipc: Enabling of bearer rejected, failed to enable media [ 117.783522][ T9926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.787561][ T9926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.923462][ T9937] netlink: 'syz.0.1135': attribute type 2 has an invalid length. [ 117.926540][ T9937] netlink: 'syz.0.1135': attribute type 1 has an invalid length. [ 117.929301][ T9937] __nla_validate_parse: 5 callbacks suppressed [ 117.929309][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 118.038436][ T6034] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 118.178184][ T6034] usb 11-1: device descriptor read/64, error -71 [ 118.207718][ T9957] mac80211_hwsim hwsim3 `ëÿÿ: renamed from wlan1 [ 118.380814][ T9971] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9971 comm=syz.4.1144 [ 118.427405][ T6034] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 118.480897][ T9973] devpts: Unknown parameter 'maxus' [ 118.559351][ T9981] cgroup2: Unknown parameter 'memory_recurwive"ë‰prot' [ 118.567479][ T6034] usb 11-1: device descriptor read/64, error -71 [ 118.621627][ T9980] uprobe: syz.0.1149:9980 failed to unregister, leaking uprobe [ 118.678194][ T6034] usb usb11-port1: attempt power cycle [ 118.812121][T10003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1155'. [ 118.902059][T10013] overlayfs: failed to clone upperpath [ 118.915759][T10003] could not allocate digest TFM handle mcryptd(blake2s-224-x86) [ 119.038019][ T6034] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 119.058054][ T6034] usb 11-1: device descriptor read/8, error -71 [ 119.178642][ T40] kauditd_printk_skb: 302 callbacks suppressed [ 119.178658][ T40] audit: type=1400 audit(1752920363.265:3307): avc: denied { connect } for pid=10026 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.190927][ T40] audit: type=1400 audit(1752920363.265:3308): avc: denied { name_connect } for pid=10026 comm="syz.0.1163" dest=16384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 119.317517][ T6034] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 119.337815][ T6034] usb 11-1: device descriptor read/8, error -71 [ 119.448066][ T6034] usb usb11-port1: unable to enumerate USB device [ 119.525741][ T40] audit: type=1400 audit(1752920363.605:3309): avc: denied { prog_load } for pid=10029 comm="syz.4.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 119.533663][ T40] audit: type=1400 audit(1752920363.605:3310): avc: denied { bpf } for pid=10029 comm="syz.4.1164" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.542195][ T40] audit: type=1400 audit(1752920363.605:3311): avc: denied { perfmon } for pid=10029 comm="syz.4.1164" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.556367][ T40] audit: type=1400 audit(1752920363.635:3312): avc: denied { allowed } for pid=10031 comm="syz.4.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 119.590841][T10036] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1166'. [ 119.773030][ T40] audit: type=1400 audit(1752920363.855:3313): avc: denied { read } for pid=10044 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.784082][ T40] audit: type=1400 audit(1752920363.865:3314): avc: denied { create } for pid=10046 comm="syz.5.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.790968][ T40] audit: type=1400 audit(1752920363.865:3315): avc: denied { setopt } for pid=10046 comm="syz.5.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.824436][ T40] audit: type=1400 audit(1752920363.905:3316): avc: denied { create } for pid=10044 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.032803][T10057] overlayfs: failed to clone upperpath [ 120.226305][T10070] overlayfs: failed to clone upperpath [ 120.338998][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1181'. [ 120.422023][T10086] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=10086 comm=syz.5.1183 [ 120.738890][T10114] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1194'. [ 120.941916][T10137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1202'. [ 121.081941][T10160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.086156][T10160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.137604][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'. [ 121.141635][T10170] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1210'. [ 121.165337][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1208'. [ 121.202163][T10179] netlink: 'syz.4.1211': attribute type 1 has an invalid length. [ 121.204984][T10179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.379453][T10194] netlink: 'syz.4.1217': attribute type 3 has an invalid length. [ 121.384501][T10196] xt_hashlimit: size too large, truncated to 1048576 [ 121.409677][T10199] xt_l2tp: wrong L2TP version: 0 [ 121.414180][T10196] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 121.515902][ T63] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 121.518609][ T63] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 121.520183][T10206] loop6: detected capacity change from 0 to 63 [ 121.521037][ T63] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 121.524273][T10206] overlayfs: failed to resolve './file1': -2 [ 121.526195][ T63] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 121.527327][ T6665] buffer_io_error: 24 callbacks suppressed [ 121.527338][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.532320][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.539465][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.542260][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.545000][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.557106][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1216'. [ 121.703418][T10225] gfs2: gfs2 mount does not exist [ 121.868389][T10250] xt_TCPMSS: Only works on TCP SYN packets [ 121.870107][T10251] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.874919][T10251] overlayfs: failed to set xattr on upper [ 121.876837][T10251] overlayfs: ...falling back to redirect_dir=nofollow. [ 121.879091][T10251] overlayfs: ...falling back to index=off. [ 121.880890][T10251] overlayfs: ...falling back to uuid=null. [ 121.886876][T10251] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.890033][T10251] overlayfs: failed to set xattr on upper [ 121.891863][T10251] overlayfs: ...falling back to redirect_dir=nofollow. [ 121.893994][T10251] overlayfs: ...falling back to index=off. [ 121.895845][T10251] overlayfs: ...falling back to uuid=null. [ 121.925446][T10261] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 122.107470][T10265] /dev/sr0: Can't open blockdev [ 122.221331][T10282] binder: Binderfs stats mode cannot be changed during a remount [ 122.222660][T10281] bridge7: entered promiscuous mode [ 122.229214][T10266] /dev/sr0: Can't open blockdev [ 122.272347][T10284] loop2: detected capacity change from 0 to 7 [ 122.276835][T10284] Dev loop2: unable to read RDB block 7 [ 122.279662][T10284] loop2: unable to read partition table [ 122.281695][T10284] loop2: partition table beyond EOD, truncated [ 122.283651][T10284] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.520470][T10302] xt_nat: multiple ranges no longer supported [ 122.693430][ T53] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 122.740850][T10322] netlink: 'syz.6.1259': attribute type 8 has an invalid length. [ 122.790770][T10325] xt_CT: No such helper "pptp" [ 122.858043][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 122.860868][ T53] usb 5-1: config 2 has an invalid interface number: 32 but max is 0 [ 122.863380][ T53] usb 5-1: config 2 descriptor has 1 excess byte, ignoring [ 122.865632][ T53] usb 5-1: config 2 has no interface number 0 [ 122.867544][ T53] usb 5-1: config 2 interface 32 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.872953][ T53] usb 5-1: config 2 interface 32 has no altsetting 0 [ 122.876577][ T53] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 122.879668][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.882156][ T53] usb 5-1: Product: syz [ 122.883471][ T53] usb 5-1: Manufacturer: syz [ 122.884952][ T53] usb 5-1: SerialNumber: syz [ 123.118373][T10295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.122918][T10295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.136927][ T53] usb 5-1: USB disconnect, device number 13 [ 123.193545][T10347] syz.6.1265: attempt to access beyond end of device [ 123.193545][T10347] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 123.201134][T10347] XFS (nbd6): SB validate failed with error -5. [ 123.315687][T10361] __nla_validate_parse: 6 callbacks suppressed [ 123.315698][T10361] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1269'. [ 123.472751][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 123.585732][T10403] netlink: 'syz.4.1281': attribute type 10 has an invalid length. [ 123.621445][T10403] veth0_vlan: left promiscuous mode [ 123.627974][T10403] veth0_vlan: entered promiscuous mode [ 123.635670][T10403] team0: Device veth0_vlan failed to register rx_handler [ 123.765802][T10423] 9pnet_fd: Insufficient options for proto=fd [ 124.067131][T10445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10445 comm=syz.6.1291 [ 124.122013][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 124.146836][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1298'. [ 124.150007][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1298'. [ 124.194996][T10478] fuse: Bad value for 'fd' [ 124.906137][ T40] kauditd_printk_skb: 265 callbacks suppressed [ 124.906152][ T40] audit: type=1400 audit(3506889309.903:3582): avc: denied { read } for pid=10489 comm="syz.0.1305" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.916420][ T40] audit: type=1400 audit(3506889309.912:3583): avc: denied { read open } for pid=10489 comm="syz.0.1305" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.927685][ T40] audit: type=1400 audit(3506889309.922:3584): avc: denied { ioctl } for pid=10489 comm="syz.0.1305" path="socket:[30247]" dev="sockfs" ino=30247 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.944842][ T40] audit: type=1400 audit(3506889309.942:3585): avc: denied { ioctl } for pid=10489 comm="syz.0.1305" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.961412][ T40] audit: type=1400 audit(3506889309.961:3586): avc: denied { create } for pid=10493 comm="syz.5.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 124.969632][ T40] audit: type=1400 audit(3506889309.961:3587): avc: denied { write } for pid=10493 comm="syz.5.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 124.977601][ T40] audit: type=1400 audit(3506889309.961:3588): avc: denied { create } for pid=10493 comm="syz.5.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.985897][ T40] audit: type=1400 audit(3506889309.961:3589): avc: denied { bpf } for pid=10493 comm="syz.5.1306" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.994759][ T40] audit: type=1400 audit(3506889309.961:3590): avc: denied { perfmon } for pid=10493 comm="syz.5.1306" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.005170][ T40] audit: type=1400 audit(3506889309.990:3591): avc: denied { create } for pid=10495 comm="syz.5.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.085168][T10506] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 125.151640][T10515] netlink: 'syz.5.1313': attribute type 10 has an invalid length. [ 125.152312][T10514] 9pnet_fd: Insufficient options for proto=fd [ 125.154499][T10517] netlink: 'syz.0.1315': attribute type 3 has an invalid length. [ 125.159695][T10517] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1315'. [ 125.185095][T10515] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 125.254107][T10529] 9p filesystem being mounted at /242/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 125.300502][T10529] netlink: 'syz.5.1317': attribute type 1 has an invalid length. [ 125.303196][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1317'. [ 125.368235][T10530] delete_channel: no stack [ 125.456796][T10552] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 125.484271][T10553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1324'. [ 125.487421][T10553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1324'. [ 125.490909][T10553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1324'. [ 125.504690][T10555] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 125.507551][T10555] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 125.689753][T10576] netlink: 'syz.5.1332': attribute type 21 has an invalid length. [ 125.951506][ T63] Bluetooth: hci3: unexpected event for opcode 0x0d57 [ 125.954440][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 126.220611][T10617] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 126.647353][T10662] netlink: 'syz.5.1361': attribute type 10 has an invalid length. [ 126.650084][T10662] team0: entered promiscuous mode [ 126.651752][T10662] team_slave_0: entered promiscuous mode [ 126.654764][T10662] team_slave_1: entered promiscuous mode [ 126.657609][T10662] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.659954][T10662] bridge0: port 2(team0) entered blocking state [ 126.662037][T10662] bridge0: port 2(team0) entered disabled state [ 126.664747][T10662] team0: entered allmulticast mode [ 126.667043][T10662] team_slave_0: entered allmulticast mode [ 126.669046][T10662] team_slave_1: entered allmulticast mode [ 126.672649][T10662] bridge0: port 2(team0) entered blocking state [ 126.674853][T10662] bridge0: port 2(team0) entered forwarding state [ 126.834204][T10684] overlayfs: missing 'lowerdir' [ 126.836355][T10684] overlayfs: missing 'lowerdir' [ 126.839769][T10684] overlayfs: missing 'lowerdir' [ 126.842196][T10684] overlayfs: missing 'lowerdir' [ 126.844072][T10684] overlayfs: missing 'lowerdir' [ 126.845871][T10684] overlayfs: missing 'lowerdir' [ 126.848204][T10684] overlayfs: missing 'lowerdir' [ 126.850362][T10684] overlayfs: missing 'lowerdir' [ 126.852358][T10684] overlayfs: missing 'lowerdir' [ 126.854176][T10684] overlayfs: missing 'lowerdir' [ 126.855990][T10684] overlayfs: missing 'lowerdir' [ 126.858728][T10684] overlayfs: missing 'lowerdir' [ 126.861388][T10684] overlayfs: missing 'lowerdir' [ 126.864025][T10684] overlayfs: missing 'lowerdir' [ 126.866145][T10684] overlayfs: missing 'lowerdir' [ 126.869406][T10684] overlayfs: missing 'lowerdir' [ 126.871327][T10684] overlayfs: missing 'lowerdir' [ 126.873294][T10684] overlayfs: missing 'lowerdir' [ 126.875236][T10684] overlayfs: missing 'lowerdir' [ 126.877116][T10684] overlayfs: missing 'lowerdir' [ 126.880427][T10684] overlayfs: missing 'lowerdir' [ 126.882671][T10684] overlayfs: missing 'lowerdir' [ 126.885359][T10684] overlayfs: missing 'lowerdir' [ 127.196091][T10713] 9p filesystem being mounted at /75/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 127.661577][T10724] netlink: 'syz.5.1380': attribute type 12 has an invalid length. [ 128.207053][T10713] syz.6.1377 (10713) used greatest stack depth: 20424 bytes left [ 128.301959][T10731] 9p filesystem being mounted at /388/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 128.390119][T10740] netlink: 'syz.4.1385': attribute type 4 has an invalid length. [ 128.460493][T10745] netlink: 'syz.6.1387': attribute type 21 has an invalid length. [ 128.463819][T10745] __nla_validate_parse: 12 callbacks suppressed [ 128.463832][T10745] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1387'. [ 128.526616][T10752] binder: 10751:10752 ioctl 4018620d 0 returned -22 [ 128.537730][T10745] kvm: kvm [10744]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0x405 [ 128.582282][T10745] kvm: kvm [10744]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x186) = 0x2c05 [ 128.585409][T10745] kvm: kvm [10744]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x187) = 0x6505 [ 128.593028][T10762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1389'. [ 128.603077][T10745] kvm_intel: kvm [10744]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x1d9) = 0xa705 [ 128.874781][T10786] kAFS: Can only specify source 'none' with -o dyn [ 129.318505][T10821] binfmt_misc: register: failed to install interpreter file ./file0 [ 129.360470][T10823] fuse: Unknown parameter 'pÉ&:§Á© VÕ<šü-L¬ Ù$SA~Õ¼ ‰NåUf [ 129.360470][T10823] ÀÑ«"Šl¼Ìr»ø|Uáþ' [ 129.410683][T10829] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 129.410879][T10828] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1408'. [ 129.430211][T10829] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.458535][T10829] bond4: (slave veth5): Enslaving as an active interface with a down link [ 129.484987][T10829] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 129.488169][T10829] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 129.815334][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1416'. [ 129.883662][T10860] overlayfs: failed to clone upperpath [ 129.891860][T10860] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1419'. [ 129.998567][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1424'. [ 130.153451][ T40] kauditd_printk_skb: 245 callbacks suppressed [ 130.153468][ T40] audit: type=1400 audit(3506889315.030:3837): avc: denied { connect } for pid=10893 comm="syz.5.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.188802][ T40] audit: type=1400 audit(3506889315.060:3838): avc: denied { create } for pid=10897 comm="syz.6.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.197231][ T40] audit: type=1400 audit(3506889315.070:3839): avc: denied { read } for pid=10897 comm="syz.6.1431" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.207694][ T40] audit: type=1400 audit(3506889315.070:3840): avc: denied { open } for pid=10897 comm="syz.6.1431" path="/dev/v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.225158][ T40] audit: type=1400 audit(3506889315.079:3841): avc: denied { setopt } for pid=10897 comm="syz.6.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.234034][ T40] audit: type=1400 audit(3506889315.079:3842): avc: denied { ioctl } for pid=10897 comm="syz.6.1431" path="/dev/v4l-subdev5" dev="devtmpfs" ino=970 ioctlcmd=0x563b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.244639][ T40] audit: type=1400 audit(3506889315.099:3843): avc: denied { create } for pid=10901 comm="syz.4.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 130.276397][ T40] audit: type=1400 audit(3506889315.148:3844): avc: denied { create } for pid=10906 comm="syz.6.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.293871][T10910] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 130.294668][ T40] audit: type=1400 audit(3506889315.158:3845): avc: denied { setopt } for pid=10906 comm="syz.6.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.304692][T10909] tipc: Resetting bearer [ 130.308116][T10909] tipc: Resetting bearer [ 130.309050][ T40] audit: type=1400 audit(3506889315.158:3846): avc: denied { getopt } for pid=10906 comm="syz.6.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.535211][T10941] netlink: 'syz.4.1442': attribute type 1 has an invalid length. [ 130.548100][T10941] 8021q: adding VLAN 0 to HW filter on device bond5 [ 130.556617][T10941] bond5: (slave gretap1): making interface the new active one [ 130.560326][T10941] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 130.905611][T10961] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1447'. [ 130.910893][T10961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1447'. [ 131.238112][T10977] could not allocate digest TFM handle hmac(sha256-avx2) [ 131.265877][T10988] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1454'. [ 131.313042][T10994] ptrace attach of "/syz-executor exec"[9424] was attempted by ""[10994] [ 131.532838][T11009] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 131.535471][T11009] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 131.597222][ T963] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 131.666587][T11012] lo speed is unknown, defaulting to 1000 [ 131.669264][T11012] lo speed is unknown, defaulting to 1000 [ 131.674332][T11012] lo speed is unknown, defaulting to 1000 [ 131.682451][T11012] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.691915][T11012] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 131.715049][T11012] lo speed is unknown, defaulting to 1000 [ 131.719727][T11012] lo speed is unknown, defaulting to 1000 [ 131.723445][T11012] lo speed is unknown, defaulting to 1000 [ 131.728256][T11012] lo speed is unknown, defaulting to 1000 [ 131.729260][ T963] usb 11-1: device descriptor read/64, error -71 [ 131.975865][ T963] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 132.115376][ T963] usb 11-1: device descriptor read/64, error -71 [ 132.229479][T11017] xt_hashlimit: size too large, truncated to 1048576 [ 132.232693][ T963] usb usb11-port1: attempt power cycle [ 132.561878][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 132.584105][ T963] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 132.604984][ T963] usb 11-1: device descriptor read/8, error -71 [ 132.614306][T11035] tipc: New replicast peer: 255.255.255.255 [ 132.620101][T11035] tipc: Enabled bearer , priority 10 [ 132.621334][T11041] tmpfs: Bad value for 'mpol' [ 132.744753][T11056] sctp: [Deprecated]: syz.4.1473 (pid 11056) Use of int in max_burst socket option. [ 132.744753][T11056] Use struct sctp_assoc_value instead [ 132.848544][ T963] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 132.853767][T11067] tmpfs: Group quota block hardlimit too large. [ 132.859623][T11067] tmpfs: Group quota block hardlimit too large. [ 132.869495][ T963] usb 11-1: device descriptor read/8, error -71 [ 132.931131][T11075] netlink: 'syz.0.1479': attribute type 1 has an invalid length. [ 132.934071][T11075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.982543][ T963] usb usb11-port1: unable to enumerate USB device [ 132.985241][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.987785][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.987872][T11081] netlink: 'syz.4.1481': attribute type 7 has an invalid length. [ 133.117459][T11095] loop6: detected capacity change from 0 to 524287999 [ 133.121435][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.126210][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.129912][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.133773][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.137058][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.140537][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.144079][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.146572][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.149145][ T6665] ldm_validate_partition_table(): Disk read failed. [ 133.151638][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.155041][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.158277][ T6665] Dev loop6: unable to read RDB block 0 [ 133.161108][ T6665] loop6: unable to read partition table [ 133.166901][T11095] ldm_validate_partition_table(): Disk read failed. [ 133.169386][T11095] Dev loop6: unable to read RDB block 0 [ 133.215954][T11095] loop6: unable to read partition table [ 133.221716][T11095] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 133.391621][T11118] raw_sendmsg: syz.5.1493 forgot to set AF_INET. Fix it! [ 133.501307][T11115] /dev/sr0: Can't open blockdev [ 133.816940][T11131] 9p filesystem being mounted at /430/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 134.055014][T11128] __nla_validate_parse: 5 callbacks suppressed [ 134.055030][T11128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1496'. [ 134.060823][T11128] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1496'. [ 134.063701][T11128] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1496'. [ 134.220239][T11153] trusted_key: encrypted_key: hex blob is missing [ 134.336163][T11159] binder: 11157:11159 ioctl c0306201 200000000540 returned -22 [ 134.443341][T11172] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1507'. [ 134.469649][T11171] netlink: zone id is out of range [ 134.471279][T11171] netlink: zone id is out of range [ 134.472897][T11171] netlink: zone id is out of range [ 134.474651][T11171] netlink: zone id is out of range [ 134.476319][T11171] netlink: zone id is out of range [ 134.477903][T11171] netlink: zone id is out of range [ 134.479494][T11171] netlink: zone id is out of range [ 134.481126][T11171] netlink: zone id is out of range [ 134.482708][T11171] netlink: zone id is out of range [ 134.821709][ T34] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 134.971906][ T34] usb 11-1: device descriptor read/64, error -71 [ 135.064725][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1515'. [ 135.215558][ T34] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 135.323269][ T40] kauditd_printk_skb: 188 callbacks suppressed [ 135.323283][ T40] audit: type=1400 audit(3506889320.113:4035): avc: denied { create } for pid=11199 comm="syz.4.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.334017][ T40] audit: type=1400 audit(3506889320.113:4036): avc: denied { bind } for pid=11199 comm="syz.4.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.342162][ T40] audit: type=1400 audit(3506889320.113:4037): avc: denied { setopt } for pid=11199 comm="syz.4.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.353411][ T34] usb 11-1: device descriptor read/64, error -71 [ 135.355982][ T40] audit: type=1400 audit(3506889320.113:4038): avc: denied { accept } for pid=11199 comm="syz.4.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.362848][ T40] audit: type=1400 audit(3506889320.113:4039): avc: denied { write } for pid=11199 comm="syz.4.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.376326][T11205] 9pnet_fd: Insufficient options for proto=fd [ 135.407302][ T40] audit: type=1400 audit(3506889320.192:4040): avc: denied { connect } for pid=11206 comm="syz.4.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.413553][ T40] audit: type=1400 audit(3506889320.192:4041): avc: denied { perfmon } for pid=11206 comm="syz.4.1521" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.420127][ T40] audit: type=1400 audit(3506889320.192:4042): avc: denied { prog_run } for pid=11206 comm="syz.4.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 135.459092][ T34] usb usb11-port1: attempt power cycle [ 135.659508][ T40] audit: type=1400 audit(3506889320.438:4043): avc: denied { getopt } for pid=11222 comm="syz.5.1526" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.701404][T11233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.702339][T11234] netlink: 'syz.4.1529': attribute type 1 has an invalid length. [ 135.744765][T11233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.758761][ T40] audit: type=1400 audit(3506889320.537:4044): avc: denied { create } for pid=11237 comm="syz.0.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.803721][ T34] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 135.824542][T11234] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 135.824742][ T34] usb 11-1: device descriptor read/8, error -71 [ 135.992092][T11259] fuse: Bad value for 'fd' [ 135.994289][T11260] fuse: Bad value for 'fd' [ 136.020247][T11259] overlay: Unknown parameter 'euid<00000000000000000000' [ 136.077854][ T34] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 136.101808][ T34] usb 11-1: device descriptor read/8, error -71 [ 136.216797][ T34] usb usb11-port1: unable to enumerate USB device [ 136.524661][T11310] autofs: Unknown parameter 'ð]–ˆïIAîÓ|Bqõ>Þ »'pø±2`½T¶™¡ß(RH‡¨ñÄ [ 136.524661][T11310] aJwz:bëدõÉ„lõï¤?¡æ^FMB”*7ë' [ 136.755756][T11330] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1560'. [ 136.758740][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 137.045324][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1563'. [ 137.084263][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1564'. [ 137.088336][T11346] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1564'. [ 137.119945][T11348] netlink: 'syz.5.1565': attribute type 4 has an invalid length. [ 137.506448][ T63] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 137.523098][T11389] NILFS (nbd6): device size too small [ 137.541328][T11392] tipc: Started in network mode [ 137.543128][T11392] tipc: Node identity 2, cluster identity 4711 [ 137.545463][T11392] tipc: Node number set to 2 [ 137.790266][T11420] netlink: 'syz.6.1590': attribute type 12 has an invalid length. [ 137.792742][T11420] netlink: 'syz.6.1590': attribute type 29 has an invalid length. [ 137.795227][T11420] netlink: 'syz.6.1590': attribute type 2 has an invalid length. [ 137.886501][T11425] netlink: 'syz.6.1592': attribute type 63 has an invalid length. [ 137.895938][T11425] 9p filesystem being mounted at /106/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 137.905987][T11425] netfs: Couldn't get user pages (rc=-14) [ 138.012679][ T963] net_ratelimit: 225 callbacks suppressed [ 138.012691][ T963] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 138.101150][T11432] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.417446][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 138.550948][T11448] sch_tbf: burst 480 is lower than device lo mtu (1550) ! [ 138.676379][T11462] macsec1: entered allmulticast mode [ 138.678066][T11462] hsr0: entered allmulticast mode [ 138.679644][T11462] hsr_slave_0: entered allmulticast mode [ 138.682783][T11462] hsr_slave_1: entered allmulticast mode [ 138.758766][T11473] overlayfs: failed to clone upperpath [ 138.789672][T11475] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 138.822780][ C3] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 138.857443][T11486] netlink: 'syz.5.1618': attribute type 15 has an invalid length. [ 139.244455][T11525] lo speed is unknown, defaulting to 1000 [ 139.283765][T11530] netlink: 'syz.4.1631': attribute type 2 has an invalid length. [ 139.286139][T11530] netlink: 'syz.4.1631': attribute type 1 has an invalid length. [ 139.288845][T11530] netlink: 'syz.4.1631': attribute type 1 has an invalid length. [ 139.470062][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 139.558818][T11556] comedi comedi3: comedi_parport: a I/O base address must be specified [ 139.731983][T11574] sp0: Synchronizing with TNC [ 139.885158][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 139.909298][T11587] sctp: [Deprecated]: syz.4.1647 (pid 11587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.909298][T11587] Use struct sctp_sack_info instead [ 140.035857][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 140.040187][ T10] usb 5-1: config index 0 descriptor too short (expected 6948, got 36) [ 140.042896][ T10] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 140.047003][ T10] usb 5-1: can't read configurations, error -22 [ 140.166194][T11616] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 140.197444][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 140.252186][T11626] __vm_enough_memory: pid: 11626, comm: syz.4.1657, bytes: 21200006656000 not enough memory for the allocation [ 140.345160][ T836] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 140.349012][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 140.353266][ T10] usb 5-1: config index 0 descriptor too short (expected 6948, got 36) [ 140.356329][ T836] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 140.356605][ T10] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 140.364045][ T10] usb 5-1: can't read configurations, error -22 [ 140.366425][ T10] usb usb5-port1: attempt power cycle [ 140.436047][T11638] __nla_validate_parse: 8 callbacks suppressed [ 140.436060][T11638] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1660'. [ 140.473365][T11642] xt_cluster: node mask cannot exceed total number of nodes [ 140.477974][ T40] kauditd_printk_skb: 270 callbacks suppressed [ 140.477990][ T40] audit: type=1400 audit(3506889325.200:4315): avc: denied { write } for pid=11641 comm="syz.5.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.478280][T11642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1661'. [ 140.622145][ T6030] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 140.713050][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 140.733818][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 140.736612][ T10] usb 5-1: config index 0 descriptor too short (expected 6948, got 36) [ 140.739243][ T10] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 140.742254][ T10] usb 5-1: can't read configurations, error -22 [ 140.776409][ T6030] usb 11-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.781162][ T6030] usb 11-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.786023][ T6030] usb 11-1: config 0 interface 0 has no altsetting 0 [ 140.788147][ T6030] usb 11-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 140.791014][ T6030] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.795072][ T6030] usb 11-1: config 0 descriptor?? [ 140.895804][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 140.917559][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 140.921289][ T10] usb 5-1: config index 0 descriptor too short (expected 6948, got 36) [ 140.924639][ T10] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 140.928704][ T10] usb 5-1: can't read configurations, error -22 [ 140.931640][ T10] usb usb5-port1: unable to enumerate USB device [ 141.204221][ T40] audit: type=1400 audit(3506889325.922:4316): avc: denied { ioctl } for pid=11628 comm="syz.6.1658" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 141.218707][ T40] audit: type=1400 audit(3506889325.942:4317): avc: denied { mounton } for pid=11628 comm="syz.6.1658" path="/126/bus" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 141.224941][ T40] audit: type=1400 audit(3506889325.942:4318): avc: denied { unlink } for pid=11628 comm="syz.6.1658" name="#28" dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 141.231039][ T40] audit: type=1400 audit(3506889325.942:4319): avc: denied { mount } for pid=11628 comm="syz.6.1658" name="/" dev="overlay" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 141.249140][ T40] audit: type=1400 audit(3506889325.972:4320): avc: denied { map_create } for pid=11646 comm="syz.5.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 141.255131][ T40] audit: type=1400 audit(3506889325.972:4321): avc: denied { map_read map_write } for pid=11646 comm="syz.5.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 141.261210][ T40] audit: type=1400 audit(3506889325.972:4322): avc: denied { create } for pid=11646 comm="syz.5.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.267359][ T40] audit: type=1400 audit(3506889325.972:4323): avc: denied { write } for pid=11646 comm="syz.5.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.276070][ T40] audit: type=1400 audit(3506889325.972:4324): avc: denied { nlmsg_write } for pid=11646 comm="syz.5.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.285792][ T6030] usbhid 11-1:0.0: can't add hid device: -71 [ 141.287699][ T6030] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 141.290489][T11651] xt_hashlimit: max too large, truncated to 1048576 [ 141.295215][ T6030] usb 11-1: USB disconnect, device number 14 [ 141.299224][T11651] xt_hashlimit: max too large, truncated to 1048576 [ 141.352716][T11658] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 141.563617][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1674'. [ 141.774998][T11683] overlayfs: missing 'lowerdir' [ 141.777837][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1676'. [ 141.921431][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1678'. [ 141.990959][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1681'. [ 142.022921][T11697] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 142.025412][T11701] netlink: 4516 bytes leftover after parsing attributes in process `syz.5.1682'. [ 142.032415][T11701] openvswitch: netlink: Flow key attr not present in new flow. [ 142.041188][T11701] netlink: 4516 bytes leftover after parsing attributes in process `syz.5.1682'. [ 142.044762][T11701] openvswitch: netlink: Flow key attr not present in new flow. [ 142.313220][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1690'. [ 142.413676][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1693'. [ 142.416727][T11738] netlink: 'syz.5.1693': attribute type 6 has an invalid length. [ 142.692343][ C3] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 142.905838][T11786] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.908415][T11786] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.932427][T11786] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.940666][T11786] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.945084][T11786] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.497357][T11835] kvm: pic: single mode not supported [ 143.497447][T11835] kvm: pic: level sensitive irq not supported [ 143.499735][T11835] kvm: pic: non byte read [ 143.505090][T11835] kvm: pic: non byte read [ 143.507889][T11835] kvm: pic: non byte read [ 143.511357][T11835] kvm: pic: non byte read [ 143.514192][T11835] kvm: pic: non byte read [ 143.517090][T11835] kvm: pic: non byte read [ 143.519777][T11835] kvm: pic: non byte read [ 143.522622][T11835] kvm: pic: non byte read [ 143.525450][T11835] kvm: pic: non byte read [ 143.528657][T11835] kvm: pic: non byte read [ 143.730403][ C3] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 143.743321][T11849] bridge_slave_0: left allmulticast mode [ 143.745872][T11849] bridge_slave_0: left promiscuous mode [ 143.748655][T11849] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.758983][T11849] bridge_slave_1: left allmulticast mode [ 143.761978][T11849] bridge_slave_1: left promiscuous mode [ 143.764485][T11849] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.771751][T11849] bond0: (slave bond_slave_0): Releasing backup interface [ 143.777574][T11849] bond0: (slave bond_slave_1): Releasing backup interface [ 143.798417][T11849] team0: Port device team_slave_0 removed [ 143.806502][T11850] netlink: 'syz.6.1727': attribute type 10 has an invalid length. [ 143.808522][T11849] team0: Port device team_slave_1 removed [ 143.812590][T11849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.815721][T11849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.820349][T11849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.823541][T11849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.857131][T11850] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 143.917869][T11857] netlink: 'syz.4.1730': attribute type 21 has an invalid length. [ 144.184940][T11891] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 144.188464][T11891] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 144.341655][T11897] /dev/sr0: Can't open blockdev [ 144.346544][T11899] gfs2: gfs2 mount does not exist [ 144.361193][ T6034] Process accounting resumed [ 144.373681][T11902] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20004 [ 144.636083][T11935] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 144.679676][T11938] overlayfs: statfs failed on './file0' [ 144.711733][T11942] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 144.770946][ C3] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 144.851201][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.931117][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.946702][T11963] bond5: entered promiscuous mode [ 144.949136][T11963] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.011139][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.395851][T12014] No such timeout policy "syz1" [ 145.485710][T12027] vlan0: entered promiscuous mode [ 145.491120][ T40] kauditd_printk_skb: 279 callbacks suppressed [ 145.491130][ T40] audit: type=1400 audit(3506889586.201:4604): avc: denied { perfmon } for pid=12022 comm="syz.5.1781" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.499581][ T40] audit: type=1400 audit(3506889586.211:4605): avc: denied { read } for pid=12026 comm="syz.6.1782" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 145.514509][ T40] audit: type=1400 audit(3506889586.211:4606): avc: denied { open } for pid=12026 comm="syz.6.1782" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 145.529534][ T40] audit: type=1400 audit(3506889586.211:4607): avc: denied { ioctl } for pid=12026 comm="syz.6.1782" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 145.542700][ T40] audit: type=1400 audit(3506889586.241:4608): avc: denied { ioctl } for pid=12035 comm="syz.5.1784" path="socket:[37305]" dev="sockfs" ino=37305 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.553463][ T40] audit: type=1400 audit(3506889586.261:4609): avc: denied { read write } for pid=12033 comm="syz.0.1783" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 145.564067][ T40] audit: type=1400 audit(3506889586.261:4610): avc: denied { open } for pid=12033 comm="syz.0.1783" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 145.573587][ T40] audit: type=1400 audit(3506889586.271:4611): avc: denied { ioctl } for pid=12033 comm="syz.0.1783" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 145.626323][ T40] audit: type=1400 audit(3506889586.341:4612): avc: denied { create } for pid=12039 comm="syz.4.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.634384][ T40] audit: type=1400 audit(3506889586.341:4613): avc: denied { getopt } for pid=12039 comm="syz.4.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.954878][T12077] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 145.957317][T12077] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 146.037710][T12086] __nla_validate_parse: 15 callbacks suppressed [ 146.037722][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1797'. [ 146.043915][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1797'. [ 146.076294][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 146.083451][T12090] netlink: 'syz.4.1799': attribute type 2 has an invalid length. [ 146.316995][T12100] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1801'. [ 146.320578][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1801'. [ 146.427051][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1803'. [ 146.634238][T12106] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1804'. [ 146.688727][T12112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1806'. [ 146.694691][T12112] netlink: 'syz.0.1806': attribute type 1 has an invalid length. [ 146.698903][T12112] netlink: 'syz.0.1806': attribute type 2 has an invalid length. [ 146.703412][T12112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1806'. [ 146.842071][T12123] tmpfs: Bad value for 'mpol' [ 147.059153][T12137] netlink: 'syz.5.1813': attribute type 21 has an invalid length. [ 147.063219][T12137] netlink: 'syz.5.1813': attribute type 6 has an invalid length. [ 147.066470][T12137] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1813'. [ 147.092366][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.192015][ T53] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 147.281190][T12158] netlink: 'syz.4.1821': attribute type 3 has an invalid length. [ 147.342613][ T53] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 147.346261][ T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.349067][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.355943][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.356403][T12158] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 147.359063][ T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.364535][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.368045][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.370854][ T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.374455][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.378540][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.383336][ T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.386824][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.390772][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.394344][ T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.397353][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.401192][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.404149][ T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.407094][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.411403][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.414751][ T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.417644][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.421031][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.424027][ T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.426832][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.430067][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.433637][ T53] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 147.436738][ T53] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 147.439372][ T53] usb 5-1: Product: syz [ 147.440788][ T53] usb 5-1: Manufacturer: syz [ 147.442504][ T53] usb 5-1: SerialNumber: syz [ 147.446446][ T53] usb 5-1: config 0 descriptor?? [ 147.456703][ T53] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 147.535784][T12181] IPVS: Error joining to the multicast group [ 147.589297][T12188] xt_cluster: node mask cannot exceed total number of nodes [ 148.197472][T12205] netlink: 'syz.5.1835': attribute type 10 has an invalid length. [ 148.208314][T12205] geneve0: entered promiscuous mode [ 148.210158][T12205] geneve0: entered allmulticast mode [ 148.212187][T12205] team0: Port device geneve0 added [ 148.335160][T12213] lo speed is unknown, defaulting to 1000 [ 148.678437][T12231] veth0: entered promiscuous mode [ 149.183375][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.351332][T12263] tipc: Enabled bearer , priority 0 [ 149.392277][T12228] veth0: left promiscuous mode [ 149.733408][ C2] usb 5-1: yurex_control_callback - control failed: -2 [ 149.742364][ T10] usb 5-1: USB disconnect, device number 18 [ 149.745585][ T10] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 149.938315][T12280] netlink: 'syz.4.1861': attribute type 2 has an invalid length. [ 149.941751][T12280] netlink: 'syz.4.1861': attribute type 8 has an invalid length. [ 149.945958][T12280] netlink: 'syz.4.1861': attribute type 21 has an invalid length. [ 149.949232][T12280] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.022062][T12291] overlayfs: failed to clone upperpath [ 150.032863][T12291] fuse: Unknown parameter 'romtmode' [ 150.361771][ C2] vkms_vblank_simulate: vblank timer overrun [ 150.363174][T12305] can0: slcan on ttyS3. [ 150.417511][T12305] can0 (unregistered): slcan off ttyS3. [ 150.436053][T12305] 9pnet_fd: Insufficient options for proto=fd [ 150.447298][T12307] overlay: ./file1 is not a directory [ 150.515166][ T40] kauditd_printk_skb: 185 callbacks suppressed [ 150.515177][ T40] audit: type=1400 audit(3506889591.229:4799): avc: denied { create } for pid=12309 comm="syz.6.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 150.523316][ T40] audit: type=1400 audit(3506889591.229:4800): avc: denied { module_request } for pid=12309 comm="syz.6.1872" kmod="net-pf-10-proto-8-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 150.647898][ T40] audit: type=1400 audit(3506889591.359:4801): avc: denied { read write } for pid=12314 comm="syz.6.1873" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 150.648204][T12315] binder: 12314:12315 ioctl 40489426 200000002ec0 returned -22 [ 150.655872][ T40] audit: type=1400 audit(3506889591.359:4802): avc: denied { open } for pid=12314 comm="syz.6.1873" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 150.668156][ T40] audit: type=1400 audit(3506889591.359:4803): avc: denied { ioctl } for pid=12314 comm="syz.6.1873" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 150.789025][T12304] syz.0.1870 (12304): drop_caches: 2 [ 150.812301][ T40] audit: type=1400 audit(3506889591.519:4804): avc: denied { unlink } for pid=5947 comm="syz-executor" name="file0" dev="tmpfs" ino=2130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.827089][ T40] audit: type=1400 audit(3506889591.538:4805): avc: denied { create } for pid=12316 comm="syz.0.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.833956][ T40] audit: type=1400 audit(3506889591.538:4806): avc: denied { bind } for pid=12316 comm="syz.0.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.839711][ T40] audit: type=1400 audit(3506889591.538:4807): avc: denied { listen } for pid=12316 comm="syz.0.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.845931][ T40] audit: type=1400 audit(3506889591.538:4808): avc: denied { connect } for pid=12316 comm="syz.0.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.876497][T12319] syz.0.1875: attempt to access beyond end of device [ 150.876497][T12319] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 150.880886][T12319] EXT4-fs (nbd0): unable to read superblock [ 150.891872][T12319] Context (ID=0x4d2) not attached to queue pair (handle=0x1:0x2) [ 150.903852][ T963] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 150.904031][T12319] syz.0.1875 (12319): drop_caches: 2 [ 151.016130][T12336] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.058094][ T963] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 151.061993][ T963] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.065779][ T963] usb 11-1: Product: syz [ 151.067129][ T963] usb 11-1: Manufacturer: syz [ 151.068663][ T963] usb 11-1: SerialNumber: syz [ 151.077158][ T963] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 151.092691][T12344] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 151.104793][ T53] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 151.126034][T12346] __nla_validate_parse: 10 callbacks suppressed [ 151.126071][T12346] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1883'. [ 151.225631][T12354] 9pnet: Could not find request transport: unix# [ 151.296580][T12361] lo speed is unknown, defaulting to 1000 [ 151.301046][T12360] lo speed is unknown, defaulting to 1000 [ 151.817776][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1891'. [ 151.829727][ T836] usb 11-1: USB disconnect, device number 15 [ 151.988728][T12394] sp0: Synchronizing with TNC [ 152.125680][T12398] delete_channel: no stack [ 152.145397][ T53] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 152.147677][ T53] ath9k_htc: Failed to initialize the device [ 152.150349][ T836] usb 11-1: ath9k_htc: USB layer deinitialized [ 152.158858][T12402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1900'. [ 152.234624][ T963] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 152.414645][ T963] usb 5-1: Using ep0 maxpacket: 16 [ 152.417636][ T963] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 152.420210][ T963] usb 5-1: config 0 has no interface number 0 [ 152.424066][ T963] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 152.427055][ T963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.429684][ T963] usb 5-1: Product: syz [ 152.431028][ T963] usb 5-1: Manufacturer: syz [ 152.432647][ T963] usb 5-1: SerialNumber: syz [ 152.436035][ T963] usb 5-1: config 0 descriptor?? [ 152.439065][ T963] hub 5-1:0.132: bad descriptor, ignoring hub [ 152.441119][ T963] hub 5-1:0.132: probe with driver hub failed with error -5 [ 152.445131][ T963] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.132/input/input11 [ 152.700387][T12418] usb 5-1: USB disconnect, device number 19 [ 152.748894][T12394] netlink: 'syz.0.1897': attribute type 4 has an invalid length. [ 152.751372][T12394] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1897'. [ 152.798070][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1904'. [ 152.801891][T12424] bond0: option use_carrier: invalid value (6) [ 152.987530][T12444] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.987652][T12446] overlay: Unknown parameter 'smackfstransmute' [ 152.996269][T12451] netlink: 'syz.4.1910': attribute type 1 has an invalid length. [ 153.027893][T12453] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 153.041025][T12455] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1913'. [ 153.111259][T12464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1918'. [ 153.121354][T12464] tmpfs: Unknown parameter 'usrqu' [ 153.122060][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1917'. [ 153.128493][T12466] netlink: 'syz.5.1917': attribute type 30 has an invalid length. [ 153.387961][T12478] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1922'. [ 153.474139][T12486] 9p: Unknown Cache mode or invalid value fs [ 153.531591][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1924'. [ 154.000786][T12505] syz_tun: entered allmulticast mode [ 154.008026][T12505] syz_tun: left allmulticast mode [ 154.178581][T12522] lo speed is unknown, defaulting to 1000 [ 154.241130][ T63] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 154.241320][T12530] ªªªªªª2g,¾{: renamed from lo (while UP) [ 154.268569][T12522] trusted_key: encrypted_key: insufficient parameters specified [ 154.466578][T12546] netlink: 'syz.4.1942': attribute type 11 has an invalid length. [ 154.527098][T12552] lo speed is unknown, defaulting to 1000 [ 154.844759][T12574] /dev/nullb0: Can't lookup blockdev [ 154.875428][T12577] 9pnet_fd: Insufficient options for proto=fd [ 154.973462][T12585] lo speed is unknown, defaulting to 1000 [ 155.020425][T12589] loop2: detected capacity change from 0 to 7 [ 155.025101][ T6665] Dev loop2: unable to read RDB block 7 [ 155.027609][ T6665] loop2: unable to read partition table [ 155.029611][ T6665] loop2: partition table beyond EOD, truncated [ 155.035323][T12589] Dev loop2: unable to read RDB block 7 [ 155.038225][T12589] loop2: unable to read partition table [ 155.040076][T12589] loop2: partition table beyond EOD, truncated [ 155.045352][T12589] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 155.460179][ T63] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 155.488963][T12618] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=12618 comm=syz.5.1965 [ 155.494358][T12620] ufs: You didn't specify the type of your ufs filesystem [ 155.494358][T12620] [ 155.494358][T12620] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 155.494358][T12620] [ 155.494358][T12620] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 155.508010][T12620] ufs: ufstype=old is supported read-only [ 155.511199][T12620] ufs: ufs_fill_super(): bad magic number [ 155.545937][ T40] kauditd_printk_skb: 226 callbacks suppressed [ 155.545952][ T40] audit: type=1400 audit(3506889596.246:5035): avc: denied { module_request } for pid=12623 comm="syz.4.1968" kmod="netdev-/dev/ptmx" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 155.563276][ T5953] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 155.573374][ T40] audit: type=1400 audit(3506889596.276:5036): avc: denied { read } for pid=12627 comm="syz.6.1969" name="0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 155.581171][ T40] audit: type=1400 audit(3506889596.276:5037): avc: denied { open } for pid=12627 comm="syz.6.1969" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 155.589329][ T40] audit: type=1400 audit(3506889596.276:5038): avc: denied { ioctl } for pid=12626 comm="syz.5.1970" path="socket:[40030]" dev="sockfs" ino=40030 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.598521][ T40] audit: type=1400 audit(3506889596.286:5039): avc: denied { ioctl } for pid=12627 comm="syz.6.1969" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=723 ioctlcmd=0x2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 155.637969][T12637] CIFS: iocharset name too long [ 155.640719][ T40] audit: type=1400 audit(3506889596.346:5040): avc: denied { create } for pid=12627 comm="syz.6.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 155.649856][ T40] audit: type=1400 audit(3506889596.346:5041): avc: denied { write } for pid=12627 comm="syz.6.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 155.657848][ T40] audit: type=1400 audit(3506889596.356:5042): avc: denied { create } for pid=12641 comm="syz.4.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.669136][ T40] audit: type=1326 audit(3506889596.376:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.4.1971" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d92b8e9a9 code=0x0 [ 155.695218][ T40] audit: type=1400 audit(3506889596.396:5044): avc: denied { read write } for pid=9424 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.713352][T12647] netlink: 'syz.6.1972': attribute type 1 has an invalid length. [ 155.720520][T12647] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 155.882044][T12674] overlayfs: failed to clone upperpath [ 155.890522][T12672] comedi comedi3: comedi_config --init_data is deprecated [ 155.898922][T12672] macvlan0: entered promiscuous mode [ 155.901377][T12672] batadv_slave_1: entered promiscuous mode [ 155.961504][T12678] xfrm1: entered promiscuous mode [ 155.963702][T12678] xfrm1: entered allmulticast mode [ 156.495429][T12721] __nla_validate_parse: 9 callbacks suppressed [ 156.495440][T12721] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1994'. [ 156.503140][T12721] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1994'. [ 156.505918][T12721] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1994'. [ 156.762752][T12716] vlan0: entered promiscuous mode [ 156.764547][T12716] vlan0: entered allmulticast mode [ 156.769791][T12716] bridge0: entered allmulticast mode [ 156.822791][T12753] vcan1: entered allmulticast mode [ 156.828060][T12753] netlink: 'syz.6.2004': attribute type 1 has an invalid length. [ 156.831266][T12753] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2004'. [ 156.861099][T12754] netlink: 'syz.6.2004': attribute type 1 has an invalid length. [ 156.864338][T12754] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2004'. [ 156.899328][T12758] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2006'. [ 156.916209][T12758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.927399][T12758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.931536][T12758] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 156.938401][T12758] bond0 (unregistering): Released all slaves [ 157.134615][T12784] 9pnet_fd: Insufficient options for proto=fd [ 157.246090][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2015'. [ 157.631143][T12808] program syz.0.2020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.849120][T12827] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2019'. [ 157.853587][T12827] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2019'. [ 158.643137][T12881] netlink: 'syz.6.2042': attribute type 2 has an invalid length. [ 158.694917][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2040'. [ 158.752182][T12886] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 158.793734][T12898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.886321][T12908] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 159.048529][T12929] veth0_to_bond: entered allmulticast mode [ 159.394001][T12954] netlink: 'syz.6.2062': attribute type 10 has an invalid length. [ 159.397361][T12954] veth1_vlan: left promiscuous mode [ 159.399901][T12954] macvlan0: entered allmulticast mode [ 159.556490][T12962] netlink: 'syz.6.2065': attribute type 6 has an invalid length. [ 159.561311][T12962] netlink: 'syz.6.2065': attribute type 6 has an invalid length. [ 159.632617][T12968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12968 comm=syz.6.2067 [ 159.921286][T12973] random: crng reseeded on system resumption [ 160.187935][T12951] uprobe: syz.4.2061:12951 failed to unregister, leaking uprobe [ 160.449650][T12980] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.454464][T12980] bond0: (slave bond6): Enslaving as an active interface with an up link [ 160.557872][ T40] kauditd_printk_skb: 241 callbacks suppressed [ 160.557884][ T40] audit: type=1400 audit(3506889601.264:5286): avc: denied { read write } for pid=9424 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.577596][ T40] audit: type=1400 audit(3506889601.264:5287): avc: denied { open } for pid=9424 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.585266][ T40] audit: type=1400 audit(3506889601.264:5288): avc: denied { ioctl } for pid=9424 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.683646][ T40] audit: type=1400 audit(3506889601.384:5289): avc: denied { create } for pid=12993 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.684691][ T6869] tipc: Resetting bearer [ 160.691394][ T40] audit: type=1400 audit(3506889601.394:5290): avc: denied { read write } for pid=12993 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 160.702721][ T40] audit: type=1400 audit(3506889601.394:5291): avc: denied { open } for pid=12993 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 160.703304][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.710231][ T40] audit: type=1400 audit(3506889601.404:5292): avc: denied { ioctl } for pid=12993 comm="syz-executor" path="socket:[40375]" dev="sockfs" ino=40375 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.731381][ T6869] tipc: Disabling bearer [ 160.732399][ T40] audit: type=1400 audit(3506889601.444:5293): avc: denied { allowed } for pid=12995 comm="syz.6.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 160.733333][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.740923][ T40] audit: type=1400 audit(3506889601.444:5294): avc: denied { read write } for pid=12995 comm="syz.6.2075" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 160.748925][ T40] audit: type=1400 audit(3506889601.444:5295): avc: denied { open } for pid=12995 comm="syz.6.2075" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 160.749745][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.762848][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.766650][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.788552][T12993] lo speed is unknown, defaulting to 1000 [ 160.905281][T12993] chnl_net:caif_netlink_parms(): no params data found [ 160.966584][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.971652][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.043355][T13025] overlayfs: missing 'lowerdir' [ 161.056797][T12993] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.061297][T12993] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.064350][T12993] bridge_slave_0: entered allmulticast mode [ 161.067052][T12993] bridge_slave_0: entered promiscuous mode [ 161.084850][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.088242][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.094968][T12993] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.097377][T12993] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.101678][T12993] bridge_slave_1: entered allmulticast mode [ 161.106444][T12993] bridge_slave_1: entered promiscuous mode [ 161.155902][T12993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.162130][T12993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.173490][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.176764][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.214631][T12993] team0: Port device team_slave_0 added [ 161.219772][T12993] team0: Port device team_slave_1 added [ 161.262970][T12993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.265263][T12993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.274663][T12993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.279765][T12993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.282007][T12993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.292694][T12993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.304666][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.307987][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.385613][T12993] hsr_slave_0: entered promiscuous mode [ 161.388029][T12993] hsr_slave_1: entered promiscuous mode [ 161.392146][T12993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.395324][T12993] Cannot create hsr debugfs directory [ 161.534008][ T46] bridge_slave_1: left promiscuous mode [ 161.535941][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.540157][ T46] bridge_slave_0: left allmulticast mode [ 161.542097][ T46] bridge_slave_0: left promiscuous mode [ 161.543947][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.676241][ T46] bond5 (unregistering): (slave gretap1): Releasing active interface [ 162.372132][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.376838][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.381778][ T46] bond0 (unregistering): (slave bond6): Releasing backup interface [ 162.384853][ T46] bond0 (unregistering): Released all slaves [ 162.451751][ T46] bond1 (unregistering): Released all slaves [ 162.457791][ T46] bond2 (unregistering): Released all slaves [ 162.463860][ T46] bond3 (unregistering): Released all slaves [ 162.531962][ T46] bond4 (unregistering): (slave veth5): Releasing active interface [ 162.535509][ T46] bond4 (unregistering): Released all slaves [ 162.601613][ T46] bond5 (unregistering): Released all slaves [ 162.666459][ T46] bond6 (unregistering): Released all slaves [ 162.719347][T13042] lo speed is unknown, defaulting to 1000 [ 162.780689][ T5953] Bluetooth: hci3: command tx timeout [ 162.807818][ T46] tipc: Disabling bearer [ 162.811215][ T46] tipc: Disabling bearer [ 162.815359][ T46] tipc: Left network mode [ 163.117146][T13050] overlayfs: failed to clone upperpath [ 163.184205][T12993] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.189003][T12993] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.199707][T12993] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.209145][T12993] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.234105][ T46] hsr_slave_0: left promiscuous mode [ 163.236124][ T46] hsr_slave_1: left promiscuous mode [ 163.238148][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.254950][ T46] veth1_macvtap: left promiscuous mode [ 163.256740][ T46] veth0_macvtap: left promiscuous mode [ 163.258524][ T46] veth1_vlan: left promiscuous mode [ 163.268803][T13061] __nla_validate_parse: 4 callbacks suppressed [ 163.268818][T13061] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2091'. [ 163.907733][ T46] team0 (unregistering): Port device team_slave_1 removed [ 163.976766][ T46] team0 (unregistering): Port device team_slave_0 removed [ 164.459955][T12993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.469368][T12993] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.475761][ T7041] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.478707][ T7041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.489243][T13071] trusted_key: encrypted_key: insufficient parameters specified [ 164.490970][ T7041] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.494834][ T7041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.648610][T12993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.690180][T13082] "syz.6.2096" (13082) uses obsolete ecb(arc4) skcipher [ 164.802573][T12993] veth0_vlan: entered promiscuous mode [ 164.810685][T12993] veth1_vlan: entered promiscuous mode [ 164.831550][T12993] veth0_macvtap: entered promiscuous mode [ 164.836413][T12993] veth1_macvtap: entered promiscuous mode [ 164.845424][T12993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.851254][T12993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.856705][T12993] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.859594][T12993] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.862694][T12993] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.865532][T12993] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.871565][ T5953] Bluetooth: hci3: command tx timeout [ 164.906912][ T7048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.909554][ T7048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.923018][ T7048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.925667][ T7048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.343693][T13121] netlink: 'syz.5.2103': attribute type 1 has an invalid length. [ 165.561260][ T40] kauditd_printk_skb: 129 callbacks suppressed [ 165.561271][ T40] audit: type=1400 audit(3506889606.271:5425): avc: denied { create } for pid=13133 comm="syz.5.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.564192][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2107'. [ 165.570869][ T40] audit: type=1400 audit(3506889606.271:5426): avc: denied { shutdown } for pid=13133 comm="syz.5.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.575206][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2107'. [ 165.583692][ T40] audit: type=1400 audit(3506889606.271:5427): avc: denied { write } for pid=13133 comm="syz.5.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.644303][ T40] audit: type=1400 audit(3506889606.351:5428): avc: denied { unmount } for pid=9424 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 165.666748][ T40] audit: type=1400 audit(3506889606.371:5429): avc: denied { create } for pid=13137 comm="syz.6.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 165.674812][T13138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.701129][ T40] audit: type=1400 audit(3506889606.401:5430): avc: denied { read } for pid=13142 comm="syz.6.2111" dev="nsfs" ino=4026533244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 165.706540][T13143] program syz.6.2111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.708963][ T40] audit: type=1400 audit(3506889606.411:5431): avc: denied { open } for pid=13142 comm="syz.6.2111" path="net:[4026533244]" dev="nsfs" ino=4026533244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 165.719545][ T40] audit: type=1400 audit(3506889606.411:5432): avc: denied { read } for pid=13142 comm="syz.6.2111" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 165.727157][ T40] audit: type=1400 audit(3506889606.411:5433): avc: denied { open } for pid=13142 comm="syz.6.2111" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 165.736490][ T40] audit: type=1400 audit(3506889606.431:5434): avc: denied { create } for pid=13139 comm="syz.5.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.559158][T13158] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2115'. [ 166.619148][T13162] 9pnet_virtio: no channels available for device /dev/nbd5 [ 166.633029][T13164] netlink: zone id is out of range [ 166.635271][T13164] netlink: zone id is out of range [ 166.637438][T13164] netlink: zone id is out of range [ 166.639536][T13164] netlink: zone id is out of range [ 166.643201][T13164] netlink: zone id is out of range [ 166.647755][T13164] netlink: zone id is out of range [ 166.650014][T13164] netlink: zone id is out of range [ 166.657324][T13164] netlink: zone id is out of range [ 166.659546][T13164] netlink: zone id is out of range [ 166.695920][T13168] tipc: Enabling of bearer rejected, failed to enable media [ 166.699141][T13168] netlink: 'syz.5.2119': attribute type 12 has an invalid length. [ 166.701525][T13168] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2119'. [ 166.856010][T13180] "syz.5.2123" (13180) uses obsolete ecb(arc4) skcipher [ 166.941983][ T5953] Bluetooth: hci3: command tx timeout [ 167.830438][T13201] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2128'. [ 168.312614][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 168.344982][T13219] lo speed is unknown, defaulting to 1000 [ 168.464646][ T29] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 168.469145][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.472637][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.475735][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 168.481772][ T29] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 168.484811][ T29] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 168.487645][ T29] usb 9-1: Manufacturer: syz [ 168.498625][ T29] usb 9-1: config 0 descriptor?? [ 168.646118][T13232] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 168.780488][T13238] usb usb1: usbfs: process 13238 (syz.6.2136) did not claim interface 0 before use [ 168.919178][ T29] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 168.933970][ T29] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 168.968596][ T5953] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 169.025015][ T5953] Bluetooth: hci3: command tx timeout [ 169.323247][T13281] vlan3: entered promiscuous mode [ 169.325285][T13281] bridge0: entered promiscuous mode [ 169.341242][T13281] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2147'. [ 169.388315][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.390791][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.394973][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.397602][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.399967][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.402349][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.406450][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.409159][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.411646][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.414277][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.416670][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.419046][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.421371][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.425236][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.427654][ T34] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 169.430452][T13293] netlink: 'syz.5.2151': attribute type 1 has an invalid length. [ 169.435385][ T34] hid-generic 00A0:0008:0003.0006: hidraw2: HID v0.05 Device [syz1] on syz0 [ 169.538205][T13289] netlink: 204988 bytes leftover after parsing attributes in process `syz.6.2149'. [ 170.026961][T13305] netlink: 'syz.5.2155': attribute type 8 has an invalid length. [ 170.736332][ T40] kauditd_printk_skb: 150 callbacks suppressed [ 170.736343][ T40] audit: type=1400 audit(3506889611.439:5585): avc: denied { watch } for pid=13312 comm="syz.5.2160" path="/509" dev="tmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 170.748212][T13315] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2159'. [ 170.751997][T13315] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2159'. [ 170.761727][ T40] audit: type=1400 audit(3506889611.439:5586): avc: denied { read append } for pid=13314 comm="syz.6.2159" name="0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.773671][ T40] audit: type=1400 audit(3506889611.439:5587): avc: denied { open } for pid=13314 comm="syz.6.2159" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.782964][ T40] audit: type=1400 audit(3506889611.449:5588): avc: denied { ioctl } for pid=13314 comm="syz.6.2159" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=723 ioctlcmd=0x2270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.793155][ T40] audit: type=1400 audit(3506889611.469:5589): avc: denied { create } for pid=13318 comm="syz.5.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 170.801223][ T40] audit: type=1400 audit(3506889611.469:5590): avc: denied { ioctl } for pid=13318 comm="syz.5.2162" path="socket:[43465]" dev="sockfs" ino=43465 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 170.810856][ T40] audit: type=1400 audit(3506889611.469:5591): avc: denied { module_request } for pid=13318 comm="syz.5.2162" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 170.820380][ T40] audit: type=1400 audit(3506889611.509:5592): avc: denied { sys_module } for pid=13318 comm="syz.5.2162" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 170.829978][ T40] audit: type=1400 audit(3506889611.528:5593): avc: denied { read write } for pid=9424 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.840936][ T40] audit: type=1400 audit(3506889611.528:5594): avc: denied { open } for pid=9424 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.885511][T13336] net_ratelimit: 28 callbacks suppressed [ 170.885521][T13336] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 170.888292][T13336] xt_hashlimit: max too large, truncated to 1048576 [ 170.895838][T13336] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 170.899488][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2166'. [ 170.902457][T13336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2166'. [ 170.905121][T13334] smc: net device bond0 applied user defined pnetid SYZ2 [ 170.908029][T13334] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2165'. [ 171.032238][ T34] usb 9-1: USB disconnect, device number 2 [ 171.069054][T13334] smc: removing net device bond0 with user defined pnetid SYZ2 [ 171.077371][T13334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.084350][T13334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.088308][T13334] bond0 (unregistering): Released all slaves [ 171.110207][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2169'. [ 171.114190][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2169'. [ 171.117127][T13350] netlink: 'syz.6.2169': attribute type 18 has an invalid length. [ 171.273792][T13370] syz.4.2175: attempt to access beyond end of device [ 171.273792][T13370] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 171.279190][T13370] syz.4.2175: attempt to access beyond end of device [ 171.279190][T13370] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 171.284237][T13370] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 171.288016][T13370] syz.4.2175: attempt to access beyond end of device [ 171.288016][T13370] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 171.292972][T13370] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 171.296929][T13370] syz.4.2175: attempt to access beyond end of device [ 171.296929][T13370] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 171.302427][T13370] syz.4.2175: attempt to access beyond end of device [ 171.302427][T13370] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 171.306655][T13370] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 171.310395][T13370] syz.4.2175: attempt to access beyond end of device [ 171.310395][T13370] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 171.315455][T13370] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 171.318738][T13370] syz.4.2175: attempt to access beyond end of device [ 171.318738][T13370] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 171.323765][T13370] syz.4.2175: attempt to access beyond end of device [ 171.323765][T13370] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 171.329117][T13370] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 171.332846][T13370] syz.4.2175: attempt to access beyond end of device [ 171.332846][T13370] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 171.338030][T13370] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 171.342007][T13370] syz.4.2175: attempt to access beyond end of device [ 171.342007][T13370] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 171.349924][T13370] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 171.353708][T13370] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 171.357693][T13370] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 171.364801][ T963] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 171.527049][ T963] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 171.530082][ T963] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.532677][ T963] usb 11-1: Product: syz [ 171.534149][ T963] usb 11-1: Manufacturer: syz [ 171.535681][ T963] usb 11-1: SerialNumber: syz [ 171.542047][ T963] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 171.561145][ T5993] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 171.763934][T13350] netlink: 'syz.6.2169': attribute type 10 has an invalid length. [ 171.779222][T13350] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 171.784471][ T6042] usb 11-1: USB disconnect, device number 16 [ 171.904672][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 171.944343][T13413] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 172.166997][T13419] hub 9-0:1.0: USB hub found [ 172.168764][T13419] hub 9-0:1.0: 1 port detected [ 172.359493][T13435] netlink: 'syz.5.2191': attribute type 9 has an invalid length. [ 172.363011][T13435] netlink: 'syz.5.2191': attribute type 6 has an invalid length. [ 172.367289][T13435] netlink: 'syz.5.2191': attribute type 7 has an invalid length. [ 172.370269][T13435] netlink: 'syz.5.2191': attribute type 8 has an invalid length. [ 172.440344][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2194'. [ 172.443130][T13444] netlink: 'syz.5.2194': attribute type 18 has an invalid length. [ 172.625028][ T5993] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 172.629436][ T5993] ath9k_htc: Failed to initialize the device [ 172.633107][ T6042] usb 11-1: ath9k_htc: USB layer deinitialized [ 172.690970][T13467] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 172.697999][ T1044] Bluetooth: (null): Invalid header checksum [ 172.713369][T13469] overlayfs: failed to clone upperpath [ 172.838544][T13478] netlink: 'syz.6.2205': attribute type 21 has an invalid length. [ 172.906079][T13479] xt_cluster: node mask cannot exceed total number of nodes [ 172.938007][T13485] geneve2: entered promiscuous mode [ 172.940313][T13485] geneve2: entered allmulticast mode [ 172.954944][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 173.011233][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.015884][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.018746][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.035204][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.039485][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.062967][ T5953] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 173.078491][T13492] lo speed is unknown, defaulting to 1000 [ 173.193010][T13492] chnl_net:caif_netlink_parms(): no params data found [ 173.299834][T13516] lo speed is unknown, defaulting to 1000 [ 173.308478][T13492] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.311626][T13492] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.314760][T13492] bridge_slave_0: entered allmulticast mode [ 173.319279][T13492] bridge_slave_0: entered promiscuous mode [ 173.336422][T13492] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.342499][T13492] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.347836][T13492] bridge_slave_1: entered allmulticast mode [ 173.351748][T13492] bridge_slave_1: entered promiscuous mode [ 173.425350][T13492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.432418][T13492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.487614][T13492] team0: Port device team_slave_0 added [ 173.493351][T13492] team0: Port device team_slave_1 added [ 173.541221][T13524] cgroup: release_agent respecified [ 173.593605][T13526] loop2: detected capacity change from 0 to 1 [ 173.597663][T13526] Dev loop2: unable to read RDB block 1 [ 173.599484][T13526] loop2: unable to read partition table [ 173.601332][T13526] loop2: partition table beyond EOD, truncated [ 173.603366][T13526] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 173.614550][T13492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.618371][T13492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.627906][T13492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.632728][T13492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.635556][T13492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.643871][T13492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.690617][T13533] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 173.704330][T13533] CIFS: Unable to determine destination address [ 173.730437][T13492] hsr_slave_0: entered promiscuous mode [ 173.733279][T13492] hsr_slave_1: entered promiscuous mode [ 173.736773][T13492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.740448][T13492] Cannot create hsr debugfs directory [ 173.750636][T13535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65024 sclass=netlink_route_socket pid=13535 comm=syz.4.2218 [ 173.769518][T13537] netlink: 'syz.6.2219': attribute type 1 has an invalid length. [ 173.775689][T13537] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 173.781194][T13537] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 173.836811][T13542] (syz.6.2220,13542,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 173.839402][T13542] (syz.6.2220,13542,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 173.841802][T13542] (syz.6.2220,13542,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 173.844616][T13542] (syz.6.2220,13542,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 173.863598][T13542] /dev/sg0: Can't lookup blockdev [ 173.863650][T13543] /dev/sg0: Can't lookup blockdev [ 173.968483][T13492] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 173.974513][T13492] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 173.979406][T13492] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 173.984625][T13492] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 174.041783][T13492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.054447][T13558] QAT: Stopping all acceleration devices. [ 174.087467][T13492] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.098048][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.100320][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.111577][ T7048] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.114373][ T7048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.241507][T13492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.386686][T13492] veth0_vlan: entered promiscuous mode [ 174.392072][T13492] veth1_vlan: entered promiscuous mode [ 174.411749][T13492] veth0_macvtap: entered promiscuous mode [ 174.415756][T13492] veth1_macvtap: entered promiscuous mode [ 174.427404][T13492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.436210][T13492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.442308][T13492] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.445206][T13492] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.449062][T13492] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.451927][T13492] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.902408][ T7041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.904980][ T7041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.940267][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.946054][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.029743][T13605] __nla_validate_parse: 4 callbacks suppressed [ 175.029754][T13605] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2235'. [ 175.071054][T13613] SELinux: policydb version 1402900228 does not match my version range 15-34 [ 175.072784][T13610] IPVS: Error connecting to the multicast addr [ 175.073913][T13613] SELinux: failed to load policy [ 175.077896][T13611] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 175.077958][T13614] SELinux: policydb version 1402900228 does not match my version range 15-34 [ 175.080939][T13611] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 175.084413][T13614] SELinux: failed to load policy [ 175.107576][ T5953] Bluetooth: hci4: command tx timeout [ 175.126571][T13616] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2239'. [ 175.145162][T13613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.164654][T13619] netlink: 'syz.7.2240': attribute type 1 has an invalid length. [ 175.194844][T13619] bond1: entered promiscuous mode [ 175.195581][ T10] IPVS: starting estimator thread 0... [ 175.197415][T13619] bond1: entered allmulticast mode [ 175.206289][T13619] geneve2: entered allmulticast mode [ 175.208585][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2240'. [ 175.271997][T13635] Invalid ELF header type: 0 != 1 [ 175.287233][T13627] IPVS: using max 42 ests per chain, 100800 per kthread [ 175.327690][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2244'. [ 175.737717][T13671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2256'. [ 175.745470][T13671] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 175.748035][T13671] overlayfs: failed to set xattr on upper [ 175.749927][T13671] overlayfs: ...falling back to redirect_dir=nofollow. [ 175.752255][T13671] overlayfs: ...falling back to index=off. [ 175.754719][T13671] overlayfs: ...falling back to uuid=null. [ 175.757033][T13671] overlayfs: ...falling back to xino=off. [ 175.759084][T13671] overlayfs: conflicting lowerdir path [ 175.812602][ T40] kauditd_printk_skb: 305 callbacks suppressed [ 175.812616][ T40] audit: type=1400 audit(3506889616.506:5900): avc: denied { read write } for pid=13673 comm="syz.6.2258" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 175.832370][ T40] audit: type=1400 audit(3506889616.506:5901): avc: denied { open } for pid=13673 comm="syz.6.2258" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 175.858077][ T40] audit: type=1400 audit(3506889616.506:5902): avc: denied { create } for pid=13672 comm="syz.4.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 175.864170][ T40] audit: type=1400 audit(3506889616.506:5903): avc: denied { ioctl } for pid=13672 comm="syz.4.2257" path="socket:[44253]" dev="sockfs" ino=44253 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 175.872296][ T40] audit: type=1400 audit(3506889616.526:5904): avc: denied { ioctl } for pid=13673 comm="syz.6.2258" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 175.880769][ T40] audit: type=1400 audit(3506889616.556:5905): avc: denied { create } for pid=13682 comm="syz.4.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 175.889051][ T40] audit: type=1400 audit(3506889616.556:5906): avc: denied { ioctl } for pid=13682 comm="syz.4.2259" path="socket:[43928]" dev="sockfs" ino=43928 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 175.895347][T13685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=252 sclass=netlink_route_socket pid=13685 comm=syz.4.2260 [ 175.897394][ T40] audit: type=1400 audit(3506889616.586:5907): avc: denied { create } for pid=13684 comm="syz.4.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 175.907797][ T40] audit: type=1400 audit(3506889616.586:5908): avc: denied { write } for pid=13684 comm="syz.4.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 175.914106][ T40] audit: type=1400 audit(3506889616.596:5909): avc: denied { read write } for pid=13684 comm="syz.4.2260" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 176.195002][ T5953] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 176.195399][T13702] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2266'. [ 176.215791][T13702] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13702 comm=syz.6.2266 [ 176.305052][T13710] sp0: Synchronizing with TNC [ 176.312412][T13709] [U] è [ 176.469463][T13665] ================================================================== [ 176.470665][T13716] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2270' sets config #1 [ 176.472702][T13665] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 176.478354][T13718] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2270' sets config #1 [ 176.478744][T13665] Read of size 1 at addr ffff88803524e8b0 by task syz.7.2254/13665 [ 176.486681][T13665] [ 176.487674][T13665] CPU: 0 UID: 0 PID: 13665 Comm: syz.7.2254 Not tainted 6.16.0-rc6-syzkaller-00237-gc7de79e662b8 #0 PREEMPT(full) [ 176.487699][T13665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.487711][T13665] Call Trace: [ 176.487717][T13665] [ 176.487724][T13665] dump_stack_lvl+0x116/0x1f0 [ 176.487756][T13665] print_report+0xcd/0x610 [ 176.487774][T13665] ? __virt_addr_valid+0x81/0x610 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 176.487793][T13665] ? __phys_addr+0xe8/0x180 [ 176.487813][T13665] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 176.487836][T13665] kasan_report+0xe0/0x110 [ 176.487852][T13665] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 176.487877][T13665] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 176.487901][T13665] __kasan_check_byte+0x36/0x50 [ 176.487917][T13665] lock_acquire+0xfc/0x350 [ 176.487933][T13665] ? find_held_lock+0x2b/0x80 [ 176.487956][T13665] _raw_spin_lock_irqsave+0x3a/0x60 [ 176.487979][T13665] ? remove_wait_queue+0x25/0x180 [ 176.488003][T13665] remove_wait_queue+0x25/0x180 [ 176.488027][T13665] poll_freewait+0xd5/0x250 [ 176.488066][T13665] do_sys_poll+0x698/0xdf0 [ 176.488095][T13665] ? __pfx_do_sys_poll+0x10/0x10 [ 176.488123][T13665] ? __lock_acquire+0x622/0x1c90 [ 176.488149][T13665] ? futex_unqueue+0x13d/0x2c0 [ 176.488177][T13665] ? __pfx_pollwake+0x10/0x10 [ 176.488218][T13665] ? rcu_is_watching+0x12/0xc0 [ 176.488239][T13665] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.488263][T13665] ? lockdep_hardirqs_on+0x7c/0x110 [ 176.488289][T13665] ? _raw_spin_unlock_irq+0x2e/0x50 [ 176.488312][T13665] ? set_user_sigmask+0x21b/0x2b0 [ 176.488331][T13665] ? __pfx_set_user_sigmask+0x10/0x10 [ 176.488353][T13665] __x64_sys_ppoll+0x254/0x2d0 [ 176.488379][T13665] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 176.488410][T13665] do_syscall_64+0xcd/0x4c0 [ 176.488426][T13665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.488444][T13665] RIP: 0033:0x7fd9e158e9a9 [ 176.488457][T13665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.488474][T13665] RSP: 002b:00007fd9e23ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 176.488490][T13665] RAX: ffffffffffffffda RBX: 00007fd9e17b5fa0 RCX: 00007fd9e158e9a9 [ 176.488501][T13665] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000200000000000 [ 176.488512][T13665] RBP: 00007fd9e1610d69 R08: 0000000000000008 R09: 0000000000000000 [ 176.488522][T13665] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 176.488532][T13665] R13: 0000000000000000 R14: 00007fd9e17b5fa0 R15: 00007ffe42ef91d8 [ 176.488550][T13665] [ 176.488556][T13665] [ 176.589047][T13665] Allocated by task 13393: [ 176.590850][T13665] kasan_save_stack+0x33/0x60 [ 176.592746][T13665] kasan_save_track+0x14/0x30 [ 176.594636][T13665] __kasan_kmalloc+0xaa/0xb0 [ 176.596458][T13665] comedi_device_postconfig+0x2cb/0xc80 [ 176.598604][T13665] comedi_device_attach+0x3cf/0x900 [ 176.600678][T13665] do_devconfig_ioctl+0x1a7/0x580 [ 176.602597][T13665] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 176.604658][T13665] __x64_sys_ioctl+0x18e/0x210 [ 176.606444][T13665] do_syscall_64+0xcd/0x4c0 [ 176.608205][T13665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.610515][T13665] [ 176.611493][T13665] Freed by task 13668: [ 176.613061][T13665] kasan_save_stack+0x33/0x60 [ 176.614915][T13665] kasan_save_track+0x14/0x30 [ 176.616796][T13665] kasan_save_free_info+0x3b/0x60 [ 176.618724][T13665] __kasan_slab_free+0x51/0x70 [ 176.620627][T13665] kfree+0x2b4/0x4d0 [ 176.622175][T13665] comedi_device_detach+0x2a4/0x9e0 [ 176.624216][T13665] do_devconfig_ioctl+0x46c/0x580 [ 176.626186][T13665] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 176.628331][T13665] __x64_sys_ioctl+0x18e/0x210 [ 176.630156][T13665] do_syscall_64+0xcd/0x4c0 [ 176.631944][T13665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.634237][T13665] [ 176.635191][T13665] The buggy address belongs to the object at ffff88803524e800 [ 176.635191][T13665] which belongs to the cache kmalloc-256 of size 256 [ 176.640531][T13665] The buggy address is located 176 bytes inside of [ 176.640531][T13665] freed 256-byte region [ffff88803524e800, ffff88803524e900) [ 176.645775][T13665] [ 176.646741][T13665] The buggy address belongs to the physical page: [ 176.649244][T13665] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3524e [ 176.652666][T13665] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 176.655945][T13665] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 176.659023][T13665] page_type: f5(slab) [ 176.660624][T13665] raw: 00fff00000000040 ffff88801b842b40 ffffea0001208c00 dead000000000005 [ 176.663790][T13665] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 176.667078][T13665] head: 00fff00000000040 ffff88801b842b40 ffffea0001208c00 dead000000000005 [ 176.670443][T13665] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 176.673357][T13665] head: 00fff00000000001 ffffea0000d49381 00000000ffffffff 00000000ffffffff [ 176.676145][T13665] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 176.678842][T13665] page dumped because: kasan: bad access detected [ 176.680837][T13665] page_owner tracks the page as allocated [ 176.682592][T13665] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7000, tgid 6999 (syz.4.266), ts 71964202758, free_ts 71631382502 [ 176.688924][T13665] post_alloc_hook+0x1c0/0x230 [ 176.690442][T13665] get_page_from_freelist+0x1321/0x3890 [ 176.692217][T13665] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 176.694084][T13665] alloc_pages_mpol+0x1fb/0x550 [ 176.695629][T13665] new_slab+0x23b/0x330 [ 176.696943][T13665] ___slab_alloc+0xd9c/0x1940 [ 176.698422][T13665] __slab_alloc.constprop.0+0x56/0xb0 [ 176.700128][T13665] __kvmalloc_node_noprof+0x3b1/0x620 [ 176.701813][T13665] io_alloc_cache_init+0x33/0x170 [ 176.703405][T13665] io_uring_setup+0x680/0x2120 [ 176.704914][T13665] __x64_sys_io_uring_setup+0xc2/0x170 [ 176.706578][T13665] do_syscall_64+0xcd/0x4c0 [ 176.707978][T13665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.709820][T13665] page last free pid 7000 tgid 6999 stack trace: [ 176.711755][T13665] __free_frozen_pages+0x7fe/0x1180 [ 176.713396][T13665] __put_partials+0x16d/0x1c0 [ 176.714853][T13665] qlist_free_all+0x4d/0x120 [ 176.716318][T13665] kasan_quarantine_reduce+0x195/0x1e0 [ 176.718013][T13665] __kasan_kmalloc+0x8a/0xb0 [ 176.719502][T13665] __kvmalloc_node_noprof+0x27b/0x620 [ 176.721203][T13665] io_create_region+0x68d/0xd40 [ 176.722690][T13665] io_uring_setup+0x11a5/0x2120 [ 176.724228][T13665] __x64_sys_io_uring_setup+0xc2/0x170 [ 176.725929][T13665] do_syscall_64+0xcd/0x4c0 [ 176.727375][T13665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.729219][T13665] [ 176.729989][T13665] Memory state around the buggy address: [ 176.731756][T13665] ffff88803524e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 176.734222][T13665] ffff88803524e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.736694][T13665] >ffff88803524e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.739169][T13665] ^ [ 176.740931][T13665] ffff88803524e900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 176.743411][T13665] ffff88803524e980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 176.745877][T13665] ================================================================== [ 176.748386][T13665] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 176.750638][T13665] CPU: 0 UID: 0 PID: 13665 Comm: syz.7.2254 Not tainted 6.16.0-rc6-syzkaller-00237-gc7de79e662b8 #0 PREEMPT(full) [ 176.754334][T13665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.757649][T13665] Call Trace: [ 176.758659][T13665] [ 176.759611][T13665] dump_stack_lvl+0x3d/0x1f0 [ 176.761078][T13665] panic+0x71c/0x800 [ 176.762329][T13665] ? __pfx_panic+0x10/0x10 [ 176.763753][T13665] ? __pfx__printk+0x10/0x10 [ 176.765211][T13665] ? end_report+0x4c/0x170 [ 176.766618][T13665] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 176.768307][T13665] check_panic_on_warn+0xab/0xb0 [ 176.769866][T13665] end_report+0x107/0x170 [ 176.771259][T13665] kasan_report+0xee/0x110 [ 176.772705][T13665] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 176.774383][T13665] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 176.776082][T13665] __kasan_check_byte+0x36/0x50 [ 176.777543][T13665] lock_acquire+0xfc/0x350 [ 176.778910][T13665] ? find_held_lock+0x2b/0x80 [ 176.780402][T13665] _raw_spin_lock_irqsave+0x3a/0x60 [ 176.782038][T13665] ? remove_wait_queue+0x25/0x180 [ 176.783605][T13665] remove_wait_queue+0x25/0x180 [ 176.785099][T13665] poll_freewait+0xd5/0x250 [ 176.786492][T13665] do_sys_poll+0x698/0xdf0 [ 176.787885][T13665] ? __pfx_do_sys_poll+0x10/0x10 [ 176.789428][T13665] ? __lock_acquire+0x622/0x1c90 [ 176.790997][T13665] ? futex_unqueue+0x13d/0x2c0 [ 176.792494][T13665] ? __pfx_pollwake+0x10/0x10 [ 176.793983][T13665] ? rcu_is_watching+0x12/0xc0 [ 176.795444][T13665] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.797036][T13665] ? lockdep_hardirqs_on+0x7c/0x110 [ 176.798625][T13665] ? _raw_spin_unlock_irq+0x2e/0x50 [ 176.800214][T13665] ? set_user_sigmask+0x21b/0x2b0 [ 176.801750][T13665] ? __pfx_set_user_sigmask+0x10/0x10 [ 176.803378][T13665] __x64_sys_ppoll+0x254/0x2d0 [ 176.804831][T13665] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 176.806437][T13665] do_syscall_64+0xcd/0x4c0 [ 176.807837][T13665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.809623][T13665] RIP: 0033:0x7fd9e158e9a9 [ 176.810999][T13665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.816669][T13665] RSP: 002b:00007fd9e23ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 176.819220][T13665] RAX: ffffffffffffffda RBX: 00007fd9e17b5fa0 RCX: 00007fd9e158e9a9 [ 176.821665][T13665] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000200000000000 [ 176.824092][T13665] RBP: 00007fd9e1610d69 R08: 0000000000000008 R09: 0000000000000000 [ 176.826492][T13665] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 176.828941][T13665] R13: 0000000000000000 R14: 00007fd9e17b5fa0 R15: 00007ffe42ef91d8 [ 176.831412][T13665] [ 176.833072][T13665] Kernel Offset: disabled [ 176.834430][T13665] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:20:20 Registers: info registers vcpu 0 CPU#0 RAX=000000000002d939 RBX=0000000000000040 RCX=ffffc9002d872000 RDX=0000000000080000 RSI=ffffffff819b8f50 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000445f548 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=206e692065655542 R12=1ffff9200088beab R13=0000000000000000 R14=ffff888028760000 R15=ffffc9000445f610 RIP=ffffffff819b8f52 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd9e23ff6c0 ffffffff 00c00000 GS =0000 ffff8880d6722000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556a7cb808 CR3=0000000055a75000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d60211d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d60211d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d60211d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d60211d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d60211de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d60211ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d60386488 00007f9d60386480 00007f9d60386478 00007f9d60386450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d60eed100 00007f9d60386440 00007f9d60380004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d60386498 00007f9d60386490 00007f9d60386488 00007f9d60386480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001cbd8f RBX=0000000000000001 RCX=ffffffff8b866c99 RDX=0000000000000000 RSI=ffffffff8de2fd99 RDI=ffffffff8c157260 RBP=ffffed1003bd8488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90a93d50 R15=0000000000000000 RIP=ffffffff8b8657ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6822000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2eda26 CR3=00000000392c8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000008e5 0000001400000000 0000000000000000 0000000000000014 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c69662f2e01ffff ffffffffffffef08 0480033c0000074a 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ed080fa203740200 0fa00330656c6966 2f2e01ffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffff1080f9203 7a02000f90037269 647265776f6c01ff ffffffffffffffef ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080f80030079616c 7265766f01ffffff ffffffffffef0800 030030656c69662f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e01ffffffffffff ffffef0805800300 1000048004040141 9c00020007003065 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff0401a1 8003020800061000 041000060070f002 a010001080040a10 ZMM25=6e9ba9886e9ba988 6e9ba9886e9ba988 6e9ba9886e9ba988 6e9ba9886e9ba988 6e9ba9886e9ba988 6e9ba9886e9ba988 6e9ba9886e9ba988 6e9ba9886e9ba988 ZMM26=40f5c79140f5c791 40f5c79140f5c791 40f5c79140f5c791 40f5c79140f5c791 40f5c79140f5c791 40f5c79140f5c791 40f5c79140f5c791 40f5c79140f5c791 ZMM27=e8c9667fe8c9667f e8c9667fe8c9667f e8c9667fe8c9667f e8c9667fe8c9667f e8c9667fe8c9667f e8c9667fe8c9667f e8c9667fe8c9667f e8c9667fe8c9667f ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=d40a0000d40a0000 d40a0000d40a0000 d40a0000d40a0000 d40a0000d40a0000 d40a0000d40a0000 d40a0000d40a0000 d40a0000d40a0000 d40a0000d40a0000 info registers vcpu 2 CPU#2 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a3e65 RDI=ffffffff9b0b7e20 RBP=ffffffff9b0b7de0 RSP=ffffc90004ea7620 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000006f R14=ffffffff9b0b7de0 R15=ffffffff855a3e00 RIP=ffffffff855a3e8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f55013d56c0 ffffffff 00c00000 GS =0000 ffff8880d6922000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f55013d4f98 CR3=000000006495e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5503611d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5503611d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5503611d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5503611d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5503611de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5503611ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5503786488 00007f5503786480 00007f5503786478 00007f5503786450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55042ed100 00007f5503786440 00007f5503786458 00007f55037864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5503786498 00007f5503786490 00007f5503786488 00007f5503786480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000005 RBX=ffff88806a73ad04 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff81a9005a RDI=0000000000000001 RBP=0000000000000074 RSP=ffffc900006f8d20 R8 =0000000000000000 R9 =ffffed100d4e4f90 R10=ffff88806a727c83 R11=0000000000000001 R12=0000000000000001 R13=000000003b9aca00 R14=ffff88806a73acd8 R15=0000000000200b20 RIP=ffffffff81918f3d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a22000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f55013d5d58 CR3=00000000620f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00726578696d5f73 736f2f3164726163 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa26f811d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa26f811d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa26f811d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa26f811d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa26f811de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa26f811ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5832da70b18b5a b1bd44afb76ee06b 72af6e8c966fa632 3847a373c7a2689f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 438b26699245c6b9 760d99434a431443 610bdafeeb030004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33d2b498b377d641 9972b70280a405f3 468addaefc723aa0 33db2710f726acb4 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1730b18d9d78d6f0 5950e5c56ee46cbf ff0073ad9a5c4e1a 6e3fd9f542eade6f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e8211edb146d382 7c3886c730fa6b02 1812d907154b6000 1249d59caef3ae33 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d2b498b377d64199 72b70280a405f346 8addaefc723aa033 db2710f726acb443 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b26699245c6b976 0d99434a43144361 0bdafeeb03d20187 6f177be50df5de5f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0377a26919475065 ddc656b5a8c27484 cccc94463c61a56e df55faaa028c6e41 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000