last executing test programs: 6m54.219530635s ago: executing program 0 (id=307): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={r1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0b2c6ed515651056c705918431d6a", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020008000000000080000000000000000000000000000000000000008e8bc2eae36f9220456d59f31a4f78d69b537db62b8231aae40c7835973327ba9c4fc9bcdddd5c83623bc6fe67f326e453d60730ab288401644cbca78de9e7aadd7607752030efcf4fbe772b0a13272c21554f22744b37f4d0e1ac1482ceb04d202c"], 0x50) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000000008000300000000030800070000000200080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x1025, 0x2, 0x1}, 0x18, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0x6, 0xbd}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001440)={@map=r3, 0x26, 0x0, 0x800, &(0x7f0000001340)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ufs\x00', 0x200000, 0x0) 6m54.216330876s ago: executing program 0 (id=310): r0 = socket$netlink(0x10, 0x3, 0xf) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') mbind(&(0x7f000088b000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0xffe0}, {0xffe0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50d2c1c7db85d2f1f9463382a0c153cfdf9435e3ffe46", 0x48, 0x24008804, &(0x7f0000000040)={0xc9, 0x9, r4, 0x1, 0xe, 0x6, @broadcast}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39) syz_emit_ethernet(0xc7, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100090086dd604dd308008d0601fe8000000000000000000000000000aafe8000000000000000000000000000aa4e204001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800002202000028f64bf19853b4a75b6fd8d6bdaf2b193fbc1c50b2821febe589438516d84010c36789c02426a7773c3702939cc375d416dfb3be56065ebbc116840b5ae8ec08a01baa59b86315417e1a05a13f012599fad97973c4af1dd5578829ac7f4897f200e4ee8cd1915884d2ac997918216584dbe08f7a3d3b111455ed588bf7d3bc9027a446c9427ac92d439f475218d5df55ff3380926da0098dce674d0b4d5c3083cebba0ae81703c0f2a2d67ccaedb2fd16ab26e8ac1e8f3a11ea9bb6f7ebd186e9c86cab815cfe58faaa0cedc1d21f20d5eed367be5f4d02d16"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x1, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x38}}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2cf308003e00070100400000fcdbdf25047c00001d0000001400018006000600800a000008001800e0000001be46edfe557024e34e415a4b11d5151202b2bb1253304eaf39398dd50ff48b500700e1aec62bec54aaabd1"], 0x2c}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x18) 6m54.148507659s ago: executing program 0 (id=314): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x10000, 0x3833, 0x80, 0x4, 0x7, "69df790646a0e7c6c95842451a7a5805dcc6a08af55043573ae151d5b24b6fe29bd66e6fbd171380ed198b44826f995d34afe4d883b554816b9c0073fdb48c9046a60b473086c788cd8e29e80bfc85b886e451753fd39a91d838897c79b8c7974a3d5524d6a411f7af44474f8fa3f4a08701abfaf74ec30411194d0011c1e3da"}) (async, rerun: 32) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002780), 0x202, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) (async, rerun: 32) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r6, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) (async, rerun: 64) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000000040)) 6m53.990696162s ago: executing program 0 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) chdir(&(0x7f0000000380)='./bus\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000200)=@newlinkprop={0x194, 0x6c, 0x800, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x10008, 0x20000}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_PORT_SELF={0x34, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x401}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8d1b8ddc2e4fabd816dca34c691e151e"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "810100173da53a16cd428f658a43b0b0"}]}, @IFLA_VFINFO_LIST={0xf8, 0x16, 0x0, 0x1, [{0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x9f1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x5b00}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xc}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffff7, 0x796, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x8, 0xd9}}, @IFLA_VF_MAC={0x28, 0x1, {0xc, @broadcast}}, @IFLA_VF_TRUST={0xc, 0x9, {0xc3, 0x200}}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9b59, 0x3}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x20}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x3, @local}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x7}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}, @IFLA_PHYS_SWITCH_ID={0x1e, 0x24, "c704fba7870526663bf739eb9703affb4ffda3dd71b1040d38c7"}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x194}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) syz_open_procfs$userns(0x0, &(0x7f0000000040)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpgid(r3, 0x0) (async) setpgid(0x0, r3) (async) chdir(&(0x7f0000000380)='./bus\x00') (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000200)=@newlinkprop={0x194, 0x6c, 0x800, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x10008, 0x20000}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_PORT_SELF={0x34, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x401}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8d1b8ddc2e4fabd816dca34c691e151e"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "810100173da53a16cd428f658a43b0b0"}]}, @IFLA_VFINFO_LIST={0xf8, 0x16, 0x0, 0x1, [{0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x9f1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x5b00}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xc}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffff7, 0x796, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x8, 0xd9}}, @IFLA_VF_MAC={0x28, 0x1, {0xc, @broadcast}}, @IFLA_VF_TRUST={0xc, 0x9, {0xc3, 0x200}}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9b59, 0x3}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x20}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x3, @local}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x7}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}, @IFLA_PHYS_SWITCH_ID={0x1e, 0x24, "c704fba7870526663bf739eb9703affb4ffda3dd71b1040d38c7"}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x194}}, 0x0) (async) 6m53.837898389s ago: executing program 0 (id=320): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) (async) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xd, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@typed={0xa, 0x15, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) (async) unshare(0x6a040000) (async) unshare(0x2000880) 6m53.579938408s ago: executing program 0 (id=325): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x78) (async, rerun: 32) close(r0) (async, rerun: 32) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x1000) 6m53.549466986s ago: executing program 32 (id=325): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x78) (async, rerun: 32) close(r0) (async, rerun: 32) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x1000) 6m19.490523073s ago: executing program 1 (id=790): socketpair$unix(0x1, 0x2, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x10d002) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$kcm(0x2, 0x7, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x6}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="66430f7ff48f6870cdd98541c03000660f3880ac4c0d0000000fc7777e3e3e470feb877c000000b9ce0800000f32b9e80b00000f32b805000000b94e0000000f01d966b8e7008ee8", 0x48}], 0x1, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r7, &(0x7f0000002340)=ANY=[@ANYBLOB="e001000000000000", @ANYRES64=r8, @ANYBLOB="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"], 0x1e0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r9 = accept$alg(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x7ff, 0x7, 0x6, 0x4}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000003bc0)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmmsg$alg(r9, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="cdc9c07f776e6f616a1676b09ac629c76546750766ed6d6ef698bad9a94929035239ad8f040bfa7c3e162fae13b310ef723a897987c09b9184f716d60c2b001ca453daa8f66e868749269ec4d2d4de3f256bd0befb7d7b5ecf52bb4a29cb453ce5803dd00c22d0f94aecf9a784608278795540e3107b2ad2ce92e8ed435d9896", 0x80}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x44001}], 0x1, 0x801) r10 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r10, &(0x7f0000003b80)={&(0x7f0000002180)=@un=@abs, 0x80, &(0x7f0000003a40)=[{&(0x7f0000002200)=""/239, 0xef}, {&(0x7f0000002540)=""/140, 0x8c}, {&(0x7f0000002600)=""/227, 0xe3}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/209, 0xd1}, {&(0x7f0000002300)=""/45, 0x2d}, {&(0x7f0000002880)=""/165, 0xa5}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/211, 0xd3}], 0x9, &(0x7f0000003b00)=""/109, 0x6d}, 0x22) dup3(r6, r7, 0x0) 6m18.606589509s ago: executing program 1 (id=809): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setresuid(0xee00, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x17, 0x0, &(0x7f0000000200)) keyctl$session_to_parent(0x12) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0xfffe, 0x400, @loopback, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000740)=ANY=[], 0x18}}], 0x1, 0x800) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@default) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x339, 0x6, 0x0, 0x4, 0x2, @remote}, 0x10) 6m18.600045558s ago: executing program 1 (id=811): r0 = syz_open_dev$radio(&(0x7f0000002040), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000140)={0x0, "c1e3c6e9d4e0668be33dfa93c2a82cbbd334b5351b615cf0fac06b6babfa8bf6", 0x2, 0xffffc7d7, 0x4, 0x2, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x1295800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000058000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002cf8f6d700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(r3, 0x40806685, &(0x7f0000000340)={0x3, 0x3, 0x4, 0x100000, 0xc2, 0x401}) 6m18.47385195s ago: executing program 1 (id=814): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101602, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x541b, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfdfdffff, 0x0, 0xfffffff8}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=0xee00, @ANYBLOB="080002"], 0x2c}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x747, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xc) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x34) socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'vlan0\x00', {0x2, 0x4e25, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r6 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r6, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/244, 0xf4}, 0x20122) 6m18.38317097s ago: executing program 1 (id=817): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000900)={'syz1\x00', {0x8000}, 0x37b4, [0xfeff, 0x0, 0x0, 0x0, 0x1, 0x420000, 0x0, 0x10000, 0x0, 0x80, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0xfefffffd, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x3, 0x0, 0x20, 0x3, 0x200, 0x0, 0x3, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20007], [0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x20000003, 0x40000000, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0xfffffffc, 0x9, 0x8c, 0x0, 0x0, 0x52, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x80, 0x2, 0x0, 0x8000, 0x0, 0x0, 0xfffffffc], [0x0, 0x4, 0x0, 0x0, 0x5, 0x200, 0x0, 0x4000, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x10000, 0x3, 0x8000000, 0x520, 0xffffffff, 0x4, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0xfffffffc, 0xaf, 0x10001, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0x0, 0x5, 0x2], [0x0, 0xfff, 0x0, 0x4, 0x0, 0x0, 0xe17, 0xe, 0x0, 0x5, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000001, 0x1, 0x7fff, 0x0, 0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x3, 0x4, 0x2000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0x7, 0x0, 0x0, 0x10000, 0x80000000, 0x1000000, 0x0, 0x0, 0x1]}, 0x45c) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, &(0x7f0000000500)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x40000, &(0x7f0000000100)={[{@uuid_null}], [{@context={'context', 0x3d, 'staff_u'}}, {@permit_directio}, {@fowner_gt={'fowner>', r2}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@audit}, {@dont_appraise}]}) 6m18.372206925s ago: executing program 1 (id=818): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') pread64(r0, &(0x7f0000001880)=""/4096, 0x1000, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000003c0)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/4096) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x23, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2591d9ccda9d3f50e5078376407d3fe00"], 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) connect$llc(r0, &(0x7f0000000280)={0x1a, 0x13, 0x0, 0x0, 0xfe, 0xfd, @remote}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x6, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000240)) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/78, 0x4e}, {&(0x7f00000000c0)=""/95, 0x5f}, {&(0x7f0000000300)=""/8, 0x8}], 0x3, 0x2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000095) 6m2.981019049s ago: executing program 4 (id=1027): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x189801, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0xe, "f682756c98cc948c"}) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x5) (rerun: 64) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="b395af315714546038bae1cdc7da482405f430a9b7f1e3fd395c0d3b327d751982986756cf08c4a5ebda23e84f7f39eff4d5a53e1f2d0483eaffb4fc5385dda2069ad57f70050a18", 0x48}], 0x1) 6m2.008730448s ago: executing program 4 (id=1037): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00250327bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80008e040a000200aaaaaaaaaa0c"], 0x30}, 0x1, 0x0, 0x0, 0x240448c1}, 0x14) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) 6m2.008384176s ago: executing program 4 (id=1038): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000041000000", 0x10) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0)) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000372429bd7000fcdbdf2500efff00", @ANYRES32=r3, @ANYBLOB="890c040000000000180012800b000100697036746e6c000008000280040013"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6m1.933682585s ago: executing program 4 (id=1039): madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x12) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r2, &(0x7f0000000300)="a6be1b3d4ab2429b46be0cc3c93f54354a113d400670b6bcb94ca2d9c37b24a3d9d4d2e7c23aeaa32b089586cf2027f64dd8a62bbaac71218222969e835113b837b231643858f02aad6131231bf40fa6e788a49407e40d1c65edec26d8004063f55d9f51b6e843b9323a79e1e8d523558350e884f0159c5fcff0bcb9ee4a2717f80d73d5b98fe7dceeb62a95746473e5a70e23e3f433008200e74fe49339e04e12a92d0354351af59a3c1f7cdf81f3f0624ef5829f5b69b6520b29e7f7c0310896ad011645051190950069f510ec96318cfce6a05273da401947a77e", 0xdc, 0x4010, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rmdir(&(0x7f0000000240)='./file1\x00') ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000002300)) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m1.933363338s ago: executing program 3 (id=1040): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000280)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd230aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57712a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f389abdb6943940ad3a772bf4639838127bd4775b1", 0x92}, {&(0x7f0000000400)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000001880)="b732b06fd220a6dc6eed5ff60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef7971962733ea71dd2bceb1cd2fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac26628a8e1da8150f1a1d8f56351c6c37d7ad2279ad7d1043400e2281c863c243979070cd3920b5bee", 0x87}, {&(0x7f0000001940)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b172133", 0xd2}, {&(0x7f0000002300)="0b41dae71fdbfbd927fcefd552617a67c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853bf08b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680ae667158a9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000500)="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", 0x179}, {&(0x7f0000002480)="9467776b9ec22f06151761843173440c3e9448d40384f222fec952053bd200bbc7ccef8e7c88fb0ae01fa531ad6deb", 0x2f}], 0x2}}], 0x3, 0x2000c044) (async) sendto$inet(r2, &(0x7f00000004c0)="0003", 0x2, 0x16000000, 0x0, 0x0) 6m1.783168362s ago: executing program 3 (id=1041): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0x12) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f00000000c0)=""/151, &(0x7f0000000180)=0x97) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04ff0609a1fa00349d"], 0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4018aee2, &(0x7f0000000040)=ANY=[@ANYBLOB="5b96fd6651"]) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000000700000000000007e6be9080789e1df2", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010069703667726500001800028014000700fe8000000000000000000000000000aa08000a00", @ANYRES32=r6, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r7 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x40400) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000140)=[{{0x80000000}}]}) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000000c14000226bd7000fedbdf250800030002000000080001000200000008000300020000000800010000000000080003000300000008003d00000000001700030000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4028890}, 0x40011) sendmsg$alg(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000440)="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", 0xff}, {&(0x7f0000000640)="c52f1b4a33eb411a266517a3dbc87e6d22f57baab23ee0adf8c35032cb621c6b5997ef2df7cf0766e485ed5347eb1069f77bf826bc72da23e2e56bc7a9ca5af2c3ee9707b91807306564553540f9072171cc14e3053bb9c5148479b0d6d72e28cc1fa902367e20b51eb19e1152fb270d3e1fd63a883e8196d6f6caa4d26ef93764bc97242bc3797994b0767d4a659e5bc4c44290", 0x94}, {&(0x7f0000000700)="658576c98370d5aec89c680d998ee48ffb66089549a66b5651368286857b82b3f766fee544c7b598f5888a46cf0b0c13d8a84627b05403b9e5c93e198896a753069a3842198b8452bb998ef7e3b3e7ff826cad2f3ca317ba5bc540b80434c408874f77e42a9362a76b929f671aef7b59dd36a79793e5e8bf255151cc8e60a201e452e581653967e664152b8866dbbc0188766608a18df26a0229e91867cc15c20a991a1686bc910a2803", 0xaa}, {&(0x7f00000007c0)="ddb6241b386e4e05282085119d6c393972f21b368b97651434c2a106f28b0f31761d2c91f656f2fb6c62c8d0eb6eef9e3c698c7e37ee12c7313092c916a3f0b785782d9cfaa3dad06181935bcead233d8fdeaf03a1d7b84975fed23c8141f2bb4b11e2979bc8729bd7be6c51da509ed34350c66d640dc8f95709fc2a0bb7033a19ffa93693f78456c7f5f6a2", 0x8c}, {&(0x7f00000001c0)="9f6290bd1e8f2281898fd527ad6ae8", 0xf}, {&(0x7f00000005c0)='00~u;Q', 0x6}, {&(0x7f0000000880)="07b7c71e06fac5850bb3d7351919fe1ce9247b9a5b17eca9d23f66b5770279bb8f116e1adcf034ac41a625d07e315e2e89ecf052a4097f8614d4bb2e904b59764ec0208ef99ac50c41fe2ceb5991167b4f8e02e1d93e9d45312c369a594e897e04d95a68050780d61f185372b7c2b72db54b41b8b66d25b30d419ca23b41ddb230c4fc6e36c16f57ca24554689bd5e88ce2167db9ce76d44cf710324425ab2429a8a450fcaac29609c0f82666b849abb73574965b4dd56960f1468f60cf8427c2043089525f7f605d6f71b1579497305e739718352d45164", 0xd8}, {&(0x7f0000000980)="031e1bf47e173b49e2f18c789b957f2c5e9c57c5c02c5a5e0b4b3b62dc0a", 0x1e}, {&(0x7f0000001d00)="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", 0x1000}], 0x9, &(0x7f0000001a80)=[@iv={0xf0, 0x117, 0x2, 0xdb, "2be6290189aea8c9170f616bce58539b28b2e49ceaec44e4282a5f23210ae33d4451ba28c467ce11be52338e8f822e228ce9e665394a89101d2e81b5b7adfde21e6979c2260f1968d52d2b5156d2e46c5ba559659112a09ac4d80f3e194af6992df0301e02aa32103e7dc82ac5afcc3a118b0e16d36f13d778c172fd27321f66a45c4f0c8bc76aaa66993d85df1a9688bf754f3c4bbc305e1314113a7669caf90b46b64e367c3c7fa9ca223ddaed5f93522c1a0d7bf2d6267f7523ae94c255294eb222b6880282348f1b83efc3d256829b81e1f3d061bf646eac72"}, @iv={0xc8, 0x117, 0x2, 0xad, "e8ba7f98b3fa4fe70992cf6970399ec1c0d91d42dea9980faedeb997d5dd4031f668e7135cc8393e34efbb9c16fce9946d0a54ba60187098e9549be26821ee238d9e43975f933847f86ce5bb29ec14f8a4c51129614699b3c37a203d2acd1ff43076c2b6b1df919272c478186a11ae2922c9ceb37698655dfe4dce15c99f5f3e27087b0d324e6f56d9b772547f7d0776b42256aca354916af6304ac47c2e36cc8f157fd6fa2a238108dd98f54d"}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x1d0, 0x4001}, 0x44080) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x4f27, 0x5, 0x10000, 0x0, 0x66, 0xcc7, 0x0, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1db, 0x1, 0x2, 0x101, 0x1, 0x1a449, 0x3, 0x40020003, 0x2089, 0x2, 0xd27, 0x20001e58, 0x7fff, 0xe69, 0x3c, 0x1, 0x6]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000200)={r8, 0x0, 0x0}) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000000)={0xd2ec, 0x4000, 0xc, 0x800, 0x200}) 6m1.781196456s ago: executing program 4 (id=1043): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="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", 0x1e8) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="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", 0x1e8) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x58) syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) (async) syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async) write$cgroup_type(r3, &(0x7f0000000280), 0x9) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) r5 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = fsopen(&(0x7f0000000180)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/141, 0x8d}], 0x1) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x34) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x279, 0x4) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x279, 0x4) r9 = syz_open_dev$video4linux(&(0x7f0000001380), 0x2, 0x501) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0405626, &(0x7f0000000000)={0x0, 0x0, {0x9, 0x2000005, 0xd, 0x3, 0x0, 0x8, 0x1, 0x5}}) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) r11 = memfd_create(&(0x7f0000001100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03', 0x4) ioctl$UDMABUF_CREATE(r10, 0x40187542, &(0x7f0000000100)={r11, 0x0, 0x0, 0x1000}) 6m1.780723962s ago: executing program 3 (id=1044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xf099}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_FORWARDING={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x20040004) 6m1.738787395s ago: executing program 33 (id=818): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') pread64(r0, &(0x7f0000001880)=""/4096, 0x1000, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000003c0)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/4096) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x23, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2591d9ccda9d3f50e5078376407d3fe00"], 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) connect$llc(r0, &(0x7f0000000280)={0x1a, 0x13, 0x0, 0x0, 0xfe, 0xfd, @remote}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x6, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000240)) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/78, 0x4e}, {&(0x7f00000000c0)=""/95, 0x5f}, {&(0x7f0000000300)=""/8, 0x8}], 0x3, 0x2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000095) 6m1.685260214s ago: executing program 3 (id=1047): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x38000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x38000, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) 6m1.557006984s ago: executing program 3 (id=1048): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) r7 = socket$caif_seqpacket(0x25, 0x5, 0x1) recvmmsg(r7, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r6}) dup(r2) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$poke(0x4, r8, &(0x7f0000000140), 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) 6m1.459958365s ago: executing program 3 (id=1049): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e24, 0x80, @remote, 0x40}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84080) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2010008, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r4}, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x24, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x7, 0x8, 0x6, 0x9, 0x7}, @ldst={0x2, 0x2, 0x1, 0xb, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r6}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r8 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, 0x0, 0x0) (async) getsockname$packet(r8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x40) (async) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @empty}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@deltclass={0x3c, 0x29, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff2, 0x4}, {0x0, 0xffe0}, {0x4, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xfe, 0x6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x10}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x24000000) 6m1.26474865s ago: executing program 4 (id=1052): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}]}, 0x28}}, 0x4000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0xa45, 0x541042) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x27c, 0xd, 0xe, 0x5, 0x70bd29, 0x25dfdbfb, {0x1, 0x0, 0xa}, [@typed={0x8, 0x25, 0x0, 0x0, @pid=r1}, @nested={0x8c, 0x88, 0x0, 0x1, [@typed={0x4, 0x113}, @generic="67b573bc818940698213978c5729a83f145475fcfa12151757", @generic="eccc98caf9eb26fdc68eb7303a63714d76a3933c190e36b17250207a38ef57b98b38198170e29d26cfdbdd028769326465a7ed5a5faa06810d5dc2e534d93bbf22e3f14f301032cccbf384", @nested={0x4, 0x107}, @typed={0xc, 0x61, 0x0, 0x0, @u64=0x401}, @nested={0x4, 0x27}, @nested={0x4, 0xa9}, @nested={0x4, 0x64}, @nested={0x4, 0xce}]}, @typed={0x14, 0x6d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}, @typed={0x8, 0x19, 0x0, 0x0, @fd=r2}, @nested={0xd8, 0xb7, 0x0, 0x1, [@typed={0x14, 0xb5, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x21}}, @generic="71d55158acf1ad0406140bd631f04a6c2762030e92cf0070cacc5e0b69e824b3cad48322328f28b6eb10a9b270ebf45c18619956591095987cd1f93ee9b8e3f14a32c80eb1e9810a", @generic="5f108bb8b32f363f75ec8f7c2ed681e1ec22b5ba20c16661c9356b0dc30bd3fb8642f1447915fc38c5d2bac4f43ed3", @generic="c4a5131925e9d8879d8e95113a90ce0061b3f423276512097e2fd6963c29d512a5581022f0faedfc95e3c62bc6bd5d6486b5db519466e76f66c0c745891ce6ba30143a2ba37da67314"]}, @nested={0xdf, 0xc9, 0x0, 0x1, [@nested={0x4, 0xce}, @generic="7fecb37e4b1a87dc40dcda24df5b70fd371a82dea3b84a2782a6922324961caa44ba3423a8f7e191f538875f8221b2627e051bfb2156da279b38b7154d437d3408fbde41231f83", @nested={0x4, 0x5c}, @generic="eee41c72163c80759d629518d2b620b3bd0e84521a051262c1fd506f4873da0822055e7e048cf647b7fd5504a0fbce0a6fd8b67af5643912278626089764f99ee344", @generic="5cf375bf3248fd044d15b936b558eac31ab080c8b3f60a79c112443731a40fa36ffc7503d99d72160718b4431ab0fba18ac05cc02873", @typed={0x14, 0x75, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x44404}, 0x94) 6m1.185111369s ago: executing program 34 (id=1052): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}]}, 0x28}}, 0x4000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0xa45, 0x541042) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x27c, 0xd, 0xe, 0x5, 0x70bd29, 0x25dfdbfb, {0x1, 0x0, 0xa}, [@typed={0x8, 0x25, 0x0, 0x0, @pid=r1}, @nested={0x8c, 0x88, 0x0, 0x1, [@typed={0x4, 0x113}, @generic="67b573bc818940698213978c5729a83f145475fcfa12151757", @generic="eccc98caf9eb26fdc68eb7303a63714d76a3933c190e36b17250207a38ef57b98b38198170e29d26cfdbdd028769326465a7ed5a5faa06810d5dc2e534d93bbf22e3f14f301032cccbf384", @nested={0x4, 0x107}, @typed={0xc, 0x61, 0x0, 0x0, @u64=0x401}, @nested={0x4, 0x27}, @nested={0x4, 0xa9}, @nested={0x4, 0x64}, @nested={0x4, 0xce}]}, @typed={0x14, 0x6d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}, @typed={0x8, 0x19, 0x0, 0x0, @fd=r2}, @nested={0xd8, 0xb7, 0x0, 0x1, [@typed={0x14, 0xb5, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x21}}, @generic="71d55158acf1ad0406140bd631f04a6c2762030e92cf0070cacc5e0b69e824b3cad48322328f28b6eb10a9b270ebf45c18619956591095987cd1f93ee9b8e3f14a32c80eb1e9810a", @generic="5f108bb8b32f363f75ec8f7c2ed681e1ec22b5ba20c16661c9356b0dc30bd3fb8642f1447915fc38c5d2bac4f43ed3", @generic="c4a5131925e9d8879d8e95113a90ce0061b3f423276512097e2fd6963c29d512a5581022f0faedfc95e3c62bc6bd5d6486b5db519466e76f66c0c745891ce6ba30143a2ba37da67314"]}, @nested={0xdf, 0xc9, 0x0, 0x1, [@nested={0x4, 0xce}, @generic="7fecb37e4b1a87dc40dcda24df5b70fd371a82dea3b84a2782a6922324961caa44ba3423a8f7e191f538875f8221b2627e051bfb2156da279b38b7154d437d3408fbde41231f83", @nested={0x4, 0x5c}, @generic="eee41c72163c80759d629518d2b620b3bd0e84521a051262c1fd506f4873da0822055e7e048cf647b7fd5504a0fbce0a6fd8b67af5643912278626089764f99ee344", @generic="5cf375bf3248fd044d15b936b558eac31ab080c8b3f60a79c112443731a40fa36ffc7503d99d72160718b4431ab0fba18ac05cc02873", @typed={0x14, 0x75, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x44404}, 0x94) 5m44.408785726s ago: executing program 35 (id=1049): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e24, 0x80, @remote, 0x40}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84080) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2010008, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r4}, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x24, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x7, 0x8, 0x6, 0x9, 0x7}, @ldst={0x2, 0x2, 0x1, 0xb, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r6}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) r8 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, 0x0, 0x0) (async) getsockname$packet(r8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x40) (async) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @empty}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@deltclass={0x3c, 0x29, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff2, 0x4}, {0x0, 0xffe0}, {0x4, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xfe, 0x6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x10}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x24000000) 2m43.530442052s ago: executing program 5 (id=2642): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x74, 0x2, [@TCA_FLOWER_KEY_MPLS_TTL={0x2e, 0x43, 0x1}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00'}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x40}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0xa4}}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0903006f7d177e0000002a"], 0x14}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m43.333917745s ago: executing program 5 (id=2643): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x21, r1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000005c0)={0x2f, 0x1, 0x3, "1c13ebdaf2f20d55806ba058e8edb1439bfcc1000000efffffffffffffff00", 0x31424752}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ptrace(0x8, r1) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x80800) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x0, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000080000800400000001000000f9ffffffff0300000000000000000080000000000000000000000000010000c00500000001000000580500000000620900"/82]) 2m43.082906555s ago: executing program 5 (id=2644): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) mkdir(0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01]) fchown(r0, r2, r3) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m42.995813319s ago: executing program 5 (id=2645): syz_emit_ethernet(0x41, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x67, 0x1ff, {0x5, 0x4, 0x1, 0x2, 0x69d2, 0x66, 0xfff, 0x2, 0x21, 0x8, @multicast1, @multicast2}, "d506df"}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 2m42.910674166s ago: executing program 5 (id=2646): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x37}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = geteuid() quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@nullb, r0, &(0x7f00000000c0)={0x9, 0x3, 0x1000, 0x7f3, 0x0, 0x7, 0xffffffffffffffff, 0x4f4, 0x86d}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xfffffe99) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) syz_emit_ethernet(0xba, &(0x7f0000000440)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {@private=0xa010102}, {@dev}, {@private}]}, @lsrr={0x83, 0xb, 0x30, [@rand_addr=0x64010101, @loopback]}, @timestamp_prespec={0x44, 0xfffffe9c, 0xbe, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@remote, 0xdfb}, {@multicast1, 0x1}, {@multicast1, 0xf}]}, @noop]}}}}}}}, 0x0) futex(0x0, 0x109, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYRESHEX=r3], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m42.020978752s ago: executing program 5 (id=2659): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r5}, 0x27) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x100, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000000)=0xfd71) 2m25.956793992s ago: executing program 36 (id=2659): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r5}, 0x27) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x100, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000000)=0xfd71) 45.797290656s ago: executing program 8 (id=2690): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x87) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000003c0)={0x1f, 0x1}, 0x6) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, r6, {0x8}}, 0x18) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r7, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) (async) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x121) (async) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x40, r9}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000055430e828a00e50125bd70000000000007000000dc118c4be88cf75ad6a5daffc3622f91a27ba23fbce7c13fa3df75a5479e329976786ed45dc471ca5436e77afdb4fc4f3dc747e9d2fd17cf3a54ccbf2a167b3bca56b071aa3812e7a454aaee0087ffb4394281000000000000000000000000003d2e84693f214021515e80e6b89adf24fc608d7d7b1985ff1cef6ea8d08fa5da71ace6a3b1b7adeafaf628a6f8e51539fb3b96b6689c8d8cd58b43036805a042a2810c647cce616465c834722bf2271f706308c3a52cf51d33676922e38e28ac9e1fd385e309b9f2518c00"/241, @ANYRES32=r10], 0x18}, 0x1, 0xf0}, 0x0) 43.870844086s ago: executing program 8 (id=2690): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x87) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000003c0)={0x1f, 0x1}, 0x6) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, r6, {0x8}}, 0x18) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r7, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) (async) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x121) (async) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x40, r9}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000055430e828a00e50125bd70000000000007000000dc118c4be88cf75ad6a5daffc3622f91a27ba23fbce7c13fa3df75a5479e329976786ed45dc471ca5436e77afdb4fc4f3dc747e9d2fd17cf3a54ccbf2a167b3bca56b071aa3812e7a454aaee0087ffb4394281000000000000000000000000003d2e84693f214021515e80e6b89adf24fc608d7d7b1985ff1cef6ea8d08fa5da71ace6a3b1b7adeafaf628a6f8e51539fb3b96b6689c8d8cd58b43036805a042a2810c647cce616465c834722bf2271f706308c3a52cf51d33676922e38e28ac9e1fd385e309b9f2518c00"/241, @ANYRES32=r10], 0x18}, 0x1, 0xf0}, 0x0) 35.248067403s ago: executing program 6 (id=3333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f00000002c0)=[{r1, 0x2000}], 0x1, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000150001000000000000000000e000000200000000000000000000000000000000000000000000000000000001fffd00000000009d0a0000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x78}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x40) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000007280)={{0x14}, [@NFT_MSG_NEWSETELEM={0x13c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x128, 0x3, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x10c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "ad25ce8dea7f09da217fafff92749388c6f36fba76ef7bf24f8bff2278957bcdc951d3d3d94f4ce6e1bc833dbdd96d34cbeb6ebe24754578e18ca690c227679d223b107301f5ad4293d9dcf1ce"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x96, 0x1, "87629a3e1d5637cc7d99af31519add9534c1a771e76a7824b8c2134199b20e810a42c92401036c5854c9c78678851d1d5d2e5f548a70164c60ed95b210001f84e56389ff22f6ef87eb55c76fa41e21501cc4b2dbfc5c3fdf2bb3bbf829713642d391c3b97fe6e1fac42bfaa833efc356903989110df70210eb0c8bb49a5c765f99cc979bcec4820f065ca38073ce6f13c6e0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x164}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x60e0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x13, 0x0, 0x310) ioctl$KVM_RUN(r8, 0xae80, 0x0) 29.269821111s ago: executing program 8 (id=2690): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x87) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000003c0)={0x1f, 0x1}, 0x6) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, r6, {0x8}}, 0x18) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r7, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) (async) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x121) (async) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x40, r9}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000055430e828a00e50125bd70000000000007000000dc118c4be88cf75ad6a5daffc3622f91a27ba23fbce7c13fa3df75a5479e329976786ed45dc471ca5436e77afdb4fc4f3dc747e9d2fd17cf3a54ccbf2a167b3bca56b071aa3812e7a454aaee0087ffb4394281000000000000000000000000003d2e84693f214021515e80e6b89adf24fc608d7d7b1985ff1cef6ea8d08fa5da71ace6a3b1b7adeafaf628a6f8e51539fb3b96b6689c8d8cd58b43036805a042a2810c647cce616465c834722bf2271f706308c3a52cf51d33676922e38e28ac9e1fd385e309b9f2518c00"/241, @ANYRES32=r10], 0x18}, 0x1, 0xf0}, 0x0) 28.087494353s ago: executing program 6 (id=3333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f00000002c0)=[{r1, 0x2000}], 0x1, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000150001000000000000000000e000000200000000000000000000000000000000000000000000000000000001fffd00000000009d0a0000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x78}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x40) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000007280)={{0x14}, [@NFT_MSG_NEWSETELEM={0x13c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x128, 0x3, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x10c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "ad25ce8dea7f09da217fafff92749388c6f36fba76ef7bf24f8bff2278957bcdc951d3d3d94f4ce6e1bc833dbdd96d34cbeb6ebe24754578e18ca690c227679d223b107301f5ad4293d9dcf1ce"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x96, 0x1, "87629a3e1d5637cc7d99af31519add9534c1a771e76a7824b8c2134199b20e810a42c92401036c5854c9c78678851d1d5d2e5f548a70164c60ed95b210001f84e56389ff22f6ef87eb55c76fa41e21501cc4b2dbfc5c3fdf2bb3bbf829713642d391c3b97fe6e1fac42bfaa833efc356903989110df70210eb0c8bb49a5c765f99cc979bcec4820f065ca38073ce6f13c6e0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x164}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x60e0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x13, 0x0, 0x310) ioctl$KVM_RUN(r8, 0xae80, 0x0) 26.802137367s ago: executing program 6 (id=3333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f00000002c0)=[{r1, 0x2000}], 0x1, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000150001000000000000000000e000000200000000000000000000000000000000000000000000000000000001fffd00000000009d0a0000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x78}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x40) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000007280)={{0x14}, [@NFT_MSG_NEWSETELEM={0x13c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x128, 0x3, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x10c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "ad25ce8dea7f09da217fafff92749388c6f36fba76ef7bf24f8bff2278957bcdc951d3d3d94f4ce6e1bc833dbdd96d34cbeb6ebe24754578e18ca690c227679d223b107301f5ad4293d9dcf1ce"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x96, 0x1, "87629a3e1d5637cc7d99af31519add9534c1a771e76a7824b8c2134199b20e810a42c92401036c5854c9c78678851d1d5d2e5f548a70164c60ed95b210001f84e56389ff22f6ef87eb55c76fa41e21501cc4b2dbfc5c3fdf2bb3bbf829713642d391c3b97fe6e1fac42bfaa833efc356903989110df70210eb0c8bb49a5c765f99cc979bcec4820f065ca38073ce6f13c6e0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x164}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x60e0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x13, 0x0, 0x310) ioctl$KVM_RUN(r8, 0xae80, 0x0) 19.636547401s ago: executing program 8 (id=2690): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x87) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000003c0)={0x1f, 0x1}, 0x6) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, r6, {0x8}}, 0x18) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r7, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) (async) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x121) (async) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x40, r9}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000055430e828a00e50125bd70000000000007000000dc118c4be88cf75ad6a5daffc3622f91a27ba23fbce7c13fa3df75a5479e329976786ed45dc471ca5436e77afdb4fc4f3dc747e9d2fd17cf3a54ccbf2a167b3bca56b071aa3812e7a454aaee0087ffb4394281000000000000000000000000003d2e84693f214021515e80e6b89adf24fc608d7d7b1985ff1cef6ea8d08fa5da71ace6a3b1b7adeafaf628a6f8e51539fb3b96b6689c8d8cd58b43036805a042a2810c647cce616465c834722bf2271f706308c3a52cf51d33676922e38e28ac9e1fd385e309b9f2518c00"/241, @ANYRES32=r10], 0x18}, 0x1, 0xf0}, 0x0) 18.343872636s ago: executing program 6 (id=3333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f00000002c0)=[{r1, 0x2000}], 0x1, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000150001000000000000000000e000000200000000000000000000000000000000000000000000000000000001fffd00000000009d0a0000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000b76b6e0000010000000000000a403eec1d4989a9fba5df12f0b5a49087359fd44b40ed8715afd13ed764fc4b3682d97880cd3a2463d3aac01a3468f90b70a9a73b5c5135ee4d524108dc9d9e9f4b5df6c2831c751e3c12efd9d3e72d2ffea25e2d8a0e1d1b8ac0a11fecd3b78f6c675390b7d41fe492cf3b625742cee7fffd0d917de2719514a4da8cd70dcd435ac3e99311e1fac113f17e2ad4bdf4ba"], 0xb8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x78}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x40) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000007280)={{0x14}, [@NFT_MSG_NEWSETELEM={0x13c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x128, 0x3, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x10c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "ad25ce8dea7f09da217fafff92749388c6f36fba76ef7bf24f8bff2278957bcdc951d3d3d94f4ce6e1bc833dbdd96d34cbeb6ebe24754578e18ca690c227679d223b107301f5ad4293d9dcf1ce"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x96, 0x1, "87629a3e1d5637cc7d99af31519add9534c1a771e76a7824b8c2134199b20e810a42c92401036c5854c9c78678851d1d5d2e5f548a70164c60ed95b210001f84e56389ff22f6ef87eb55c76fa41e21501cc4b2dbfc5c3fdf2bb3bbf829713642d391c3b97fe6e1fac42bfaa833efc356903989110df70210eb0c8bb49a5c765f99cc979bcec4820f065ca38073ce6f13c6e0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x164}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x60e0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x13, 0x0, 0x310) ioctl$KVM_RUN(r8, 0xae80, 0x0) 16.966398219s ago: executing program 6 (id=3333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f00000002c0)=[{r1, 0x2000}], 0x1, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000150001000000000000000000e000000200000000000000000000000000000000000000000000000000000001fffd00000000009d0a0000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x78}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x40) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000007280)={{0x14}, [@NFT_MSG_NEWSETELEM={0x13c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x128, 0x3, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x10c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "ad25ce8dea7f09da217fafff92749388c6f36fba76ef7bf24f8bff2278957bcdc951d3d3d94f4ce6e1bc833dbdd96d34cbeb6ebe24754578e18ca690c227679d223b107301f5ad4293d9dcf1ce"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x96, 0x1, "87629a3e1d5637cc7d99af31519add9534c1a771e76a7824b8c2134199b20e810a42c92401036c5854c9c78678851d1d5d2e5f548a70164c60ed95b210001f84e56389ff22f6ef87eb55c76fa41e21501cc4b2dbfc5c3fdf2bb3bbf829713642d391c3b97fe6e1fac42bfaa833efc356903989110df70210eb0c8bb49a5c765f99cc979bcec4820f065ca38073ce6f13c6e0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x164}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x60e0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x13, 0x0, 0x310) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10.27512959s ago: executing program 8 (id=2690): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x87) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000003c0)={0x1f, 0x1}, 0x6) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, r6, {0x8}}, 0x18) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r7, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) (async) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x121) (async) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x40, r9}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000055430e828a00e50125bd70000000000007000000dc118c4be88cf75ad6a5daffc3622f91a27ba23fbce7c13fa3df75a5479e329976786ed45dc471ca5436e77afdb4fc4f3dc747e9d2fd17cf3a54ccbf2a167b3bca56b071aa3812e7a454aaee0087ffb4394281000000000000000000000000003d2e84693f214021515e80e6b89adf24fc608d7d7b1985ff1cef6ea8d08fa5da71ace6a3b1b7adeafaf628a6f8e51539fb3b96b6689c8d8cd58b43036805a042a2810c647cce616465c834722bf2271f706308c3a52cf51d33676922e38e28ac9e1fd385e309b9f2518c00"/241, @ANYRES32=r10], 0x18}, 0x1, 0xf0}, 0x0) 8.1354951s ago: executing program 6 (id=3333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f00000002c0)=[{r1, 0x2000}], 0x1, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000150001000000000000000000e000000200000000000000000000000000000000000000000000000000000001fffd00000000009d0a0000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x78}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x40) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000007280)={{0x14}, [@NFT_MSG_NEWSETELEM={0x13c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x128, 0x3, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x10c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "ad25ce8dea7f09da217fafff92749388c6f36fba76ef7bf24f8bff2278957bcdc951d3d3d94f4ce6e1bc833dbdd96d34cbeb6ebe24754578e18ca690c227679d223b107301f5ad4293d9dcf1ce"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x96, 0x1, "87629a3e1d5637cc7d99af31519add9534c1a771e76a7824b8c2134199b20e810a42c92401036c5854c9c78678851d1d5d2e5f548a70164c60ed95b210001f84e56389ff22f6ef87eb55c76fa41e21501cc4b2dbfc5c3fdf2bb3bbf829713642d391c3b97fe6e1fac42bfaa833efc356903989110df70210eb0c8bb49a5c765f99cc979bcec4820f065ca38073ce6f13c6e0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x164}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x60e0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x13, 0x0, 0x310) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.353512992s ago: executing program 2 (id=3578): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000180c20000000000140012800b0001006c6f7770616e"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'caif0\x00'}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_emit_ethernet(0xf3, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0xbd, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "c5e4"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x4}}}, {0x8, 0x6558, 0x0, "4acefd7382be81c18d87ecf96c72d8f6a7b85aee7854bfb247346757750202ecfdf89bf5b4b6f301dc09fc341179eace19ea0baf54e733fd67d1cc791c1649155ed6f359c9538420a7c656fbb284dbbdf5b53654a3b7ffaf08149933e2bd25a17e5f5c6ebb7e75e1fc3ea0ceed3805ca02197e9376"}}}}}}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x41) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="66430f7ff48f6870cdd98541c03000660f3880ac4c0d0000000fc7777e3e3e470feb877c000000b9ce0800000f32b9e80b00000f32b805000000b94e0000000f01d966b8e7008ee8", 0x48}], 0x1, 0x20, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000400)="d407f083a3bdbdb40fc7af00000f01c4ba4100ed66fa00da0f936e0436d9ea0f01ca"}], 0x2bc, 0x0, 0x0, 0x0) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x20000810) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@setneightbl={0xe4, 0x43, 0x8, 0x70bd2a, 0x25dfdbfc, {0xa}, [@NDTA_THRESH1={0x8, 0x2, 0x3}, @NDTA_THRESH3={0x8, 0x4, 0x8}, @NDTA_PARMS={0x40, 0x6, 0x0, 0x1, [@NDTPA_GC_STALETIME={0xc, 0x6, 0x7}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x7}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x100}, @NDTPA_PROXY_DELAY={0xc}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0xffffffffffffff73}]}, @NDTA_THRESH2={0x8, 0x3, 0xa697}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x13e7}, @NDTA_PARMS={0x64, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc, 0xf, 0x704f357a}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x908a}, @NDTPA_MCAST_PROBES={0x8}, @NDTPA_GC_STALETIME={0xc, 0x6, 0xffffffffffff8001}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x4}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x4}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x5}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x80000000}, @NDTPA_PROXY_QLEN={0x8}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0xb}]}, @NDTA_THRESH1={0x8, 0x2, 0x3}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40010}, 0x4894) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r10, 0x10001, 0x0) r11 = eventfd2(0x0, 0x800) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x11b803, 0x0) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f0000000000)={0x2, r11}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f00000001c0)) 3.217436155s ago: executing program 2 (id=3579): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getpeername(r7, &(0x7f0000000340)=@ax25={{0x3, @bcast}, [@bcast, @netrom, @netrom, @default, @default, @null, @rose, @netrom]}, &(0x7f0000000240)=0x80) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000ab000a00", @ANYRES32=r8, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.164889597s ago: executing program 2 (id=3580): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4000002}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@delneigh={0x74, 0x1d, 0x400, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x0, r2, 0x0, 0xa0, 0x9}, [@NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NDA_PROBES={0x8, 0x4, 0x1}, @NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}}, @NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}}, @NDA_CACHEINFO={0x14, 0x3, {0x6, 0x8, 0x0, 0x401}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x8400) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4000002}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) (async) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@delneigh={0x74, 0x1d, 0x400, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x0, r2, 0x0, 0xa0, 0x9}, [@NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NDA_PROBES={0x8, 0x4, 0x1}, @NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}}, @NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}}, @NDA_CACHEINFO={0x14, 0x3, {0x6, 0x8, 0x0, 0x401}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x8400) (async) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) (async) 3.025472115s ago: executing program 2 (id=3581): prctl$PR_SET_KEEPCAPS(0x8, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), 0x8) 3.025084394s ago: executing program 2 (id=3582): io_setup(0x8, &(0x7f0000004200)) r0 = memfd_create(&(0x7f0000000240)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x00\x00\x00\x00\xa9t\xa24>X@\rq@\xf2\xe9[\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a`\xf0\xc728\xfc\xfc\x1c1?\x86\xac\xd4\f\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6\x8b\x1d*1\xe8\xb0\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\xdfe;\xc0w\xad\xef\xa3r\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s3\xd7s\xef\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\x9d\xd3[i\x1b|{4)\xd8\xa2\xb8\x8f\xa2\x84_k\xe5\xf0\x05a2)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x1a5\x8c\xa6\xfbq\xa9\x87\x9f\xe1\xfa\xb5\x92\xb1\x00\x00\x00\x00\xd6\xce\xab\x1d%\xb0\xaa\xed\x10\xe9Z\"\x7f\xb2\xde\x00\x00\x00\x00\x00y\xd8\xdf\xc8R\x8b0Bs\x95N\xfa\x02\xe9\xf6\xa20\f1L\v\xdf8W{P\xab\x82\x84\xf0w\x9c\t\xf8\x85\x98S)M*\x88\xf8\xbaC\xa2\xf8\xc3\xe0\xb2)\xf8\x9da%\xd7\x8c\x03\xa9\xb6\x15\x8c\xdd\xaf\xeb\xfa\x1bV\x1c\fJ\xe6n\x19\x94\xea\xb7\xcc\x12q\x06\xbab\xda\xfa\xf7\xe4\x85U:\x1e\xeaC\x9b\xa5\xbb:\xe8\x04\xd9\xb2|\x85\a\x93\xa1a\r\xf0R\x8f\xac\xbc]\xc6\x1a\x86RK\xb3\x95\xbaz\xb7I\a\xd6j,pI\xb07\xc4\x82G\xd2u\x8a\xfc\x10\xffs5\xfd\x99\xdc\x9e\xdf\x86\x11~0+\xa7\x11\x13\xbb5\xc8\x8aW\xfd{\xe1QN\xef\xce~k7\xd9\x02\xac#n\xc3\xdd\x9a\xdaeJ7\x9f5\xae4\x9aoJ\xdcZf\xd4\x7f\x01}\'\x1f\x8e\xee_Q\xb4\xad@\x1a(>\x88\xd2F\x14r\x8c\x1aq@n6~1WP\xc8\xb5\x82\x02*\xcf\x95I\xc01\"\x8c_\x8d\xcb-X\x1f:bOmgTC\xe16\xef\xed\x87\xe42\b\xe5)\x99\x1dt\x17\x8d\xdc\xc2\aL\xb9\x90\xdc~\xf4\x12eXR\x89\x14E\x06\xeb<\x1b-\x955\xb4U\xceN\xf4\xb4l\xd5\xd0\xbfc\xa0\xb4{\xa9\\JL@tW\xa8\xf5\x8b\x9a\x9cF\xf5\xe0\xf4\xeeR#\x16r\x80\x91]c\x99\xd0o\x81b.\x82\xcf4\x01j\xe8\xaf[\xc1\b\xc5@n\x8a(qC\x16\x9e\xf8\x11l\xdbLM\xf9\xb7\xd1\xd5\xa1^\xcb=X\xe56\xc4FW\x0f\xe3\xe0\xa0\xb5JBE\xb5F(\t\xd8\x87\xf7\x92id\x8b\xcf\x846Z\x00\x80\x94\x999\xc2\xc7_\xb0\x02\xcb\xa2k\nB\x8a\'s95\x93Z\xf0\xf1\x9d\n\xf1$N\x03\f\x04Z\xfeX6\xf1\xe0\x95\x80(AV\x91\xd8\xa3\xc4?\xebhh|\xe0\xad2#\xcdF\xd8\x89akF\x05\xb5r6Ueh\x03\x82\x91@\xba\x84\xf5\x84\xaa\x1fZ\x11\n\xb9Y\xba;\xf27\xb9\xd3e1\xe5\xf9\xb3\xeb\x82V\x12\xebO\x02\x81\xd0\xfc1\xf5\x9c|\xfc\x1e_\x00\xa7\x89\x9e\xbe@\xcd\a\x82\xa8`\xa4e\xb7\xb8d\xb45>\xd5o\x1a[d\x04t\xb9\xc2Q T]j~\xa5\x12Lo\xfbP\x1fH*\xe5\a|\x1c/\xc3\x84\x01.F6\xba+\x90/\xc5\xc7\x95Tu\xacH\xbd\xb8\xe9\x04\xe6\xaf\xe7\xa6\x10\xb6\xde', 0x7) fcntl$addseals(r0, 0x409, 0x8) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80009, 0x86e, 0x8}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000003, 0x11, r0, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000300)='.\x00', r2, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) io_setup(0x3, &(0x7f0000000240)) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) io_setup(0x2, &(0x7f0000000800)) pipe(&(0x7f0000000600)) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.479913662s ago: executing program 7 (id=3589): r0 = syz_usbip_server_init(0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101200) ioctl$VIDIOC_G_CTRL(r5, 0xc008561b, &(0x7f00000001c0)={0x2, 0x6}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000003c0)={0x1, 0x0, [{0x1, 0x3, 0x133, 0xfff, 0x9bf}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$usbip_server(r0, &(0x7f0000009980)=ANY=[@ANYBLOB="00000001"], 0x32) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x1109, 0x0, 0x3}, 0x18, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000040)={0x8000, r0}, 0x0) 1.700508347s ago: executing program 7 (id=3590): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x43a1, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0x2, 0xfffffffc}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3f, 0x0, 0x0, 0x0, 0x0) 1.593591514s ago: executing program 7 (id=3591): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = epoll_create1(0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xb0000018}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 1.57602779s ago: executing program 7 (id=3592): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000100)='.\x00', &(0x7f00000001c0), 0x800, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x2b}}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x130, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x100, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_LOSS={0xb4, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0xffff, 0x0, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x9, 0x0, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xcfbb, 0xbb8b, 0x10001, 0x8, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x1003, 0xb}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x3, 0x5, 0x4, 0xea}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x8, 0x10000, 0x2, 0x7fff}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x1000}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xbba5, 0x2}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xff}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x130}}, 0x0) 1.496718191s ago: executing program 7 (id=3593): r0 = syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x6a000000) openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x187840, 0x0) 1.496468582s ago: executing program 8 (id=2690): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x87) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000003c0)={0x1f, 0x1}, 0x6) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, r6, {0x8}}, 0x18) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r7, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) (async) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x121) (async) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x40, r9}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000055430e828a00e50125bd70000000000007000000dc118c4be88cf75ad6a5daffc3622f91a27ba23fbce7c13fa3df75a5479e329976786ed45dc471ca5436e77afdb4fc4f3dc747e9d2fd17cf3a54ccbf2a167b3bca56b071aa3812e7a454aaee0087ffb4394281000000000000000000000000003d2e84693f214021515e80e6b89adf24fc608d7d7b1985ff1cef6ea8d08fa5da71ace6a3b1b7adeafaf628a6f8e51539fb3b96b6689c8d8cd58b43036805a042a2810c647cce616465c834722bf2271f706308c3a52cf51d33676922e38e28ac9e1fd385e309b9f2518c00"/241, @ANYRES32=r10], 0x18}, 0x1, 0xf0}, 0x0) 176.752µs ago: executing program 2 (id=3594): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@host, 0x4}, 0x1, 0x0, 0xfffffffd}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0xe737}}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r3, 0x3ba0, &(0x7f00000008c0)={0x48, 0x8, r5, 0x0, 0x1, 0x27f1d7, 0x0, 0x0, 0x10000}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0x2020) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000140)={0x4, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000040)={0xc, r7}) 0s ago: executing program 7 (id=3595): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x9, 0x9], 0x0, 0x2280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x11, 0x3, 0x40000) mmap(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x5, 0x13, r3, 0x836f3000) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000480)={'trans=virtio,', {[{@dfltuid}, {@uname={'uname', 0x3d, 'sysfs\x00'}}]}}) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000480)={'trans=virtio,', {[{@dfltuid}, {@uname={'uname', 0x3d, 'sysfs\x00'}}]}}) kernel console output (not intermixed with test programs): [ 382.902605][T16500] netlink: 'syz.7.2941': attribute type 4 has an invalid length. [ 382.907157][T16500] netlink: 'syz.7.2941': attribute type 4 has an invalid length. [ 383.065786][T16509] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2940'. [ 383.106023][T16515] netlink: 'syz.7.2946': attribute type 29 has an invalid length. [ 383.111641][T16515] netlink: 'syz.7.2946': attribute type 29 has an invalid length. [ 383.115344][T16515] netlink: 496 bytes leftover after parsing attributes in process `syz.7.2946'. [ 383.319973][T16527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2951'. [ 383.496191][T16534] SELinux: syz.7.2954 (16534) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 383.582229][ T24] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 383.603770][T16540] SELinux: failed to load policy [ 383.604462][ T40] audit: type=1400 audit(3508369345.494:65062): avc: denied { load_policy } for pid=16538 comm="syz.7.2955" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 383.671123][T16546] overlayfs: failed to resolve './file0': -2 [ 383.735989][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2958'. [ 383.738789][T16548] netlink: 31 bytes leftover after parsing attributes in process `syz.7.2958'. [ 383.741517][T16548] netlink: 'syz.7.2958': attribute type 3 has an invalid length. [ 383.744078][ T24] usb 7-1: device descriptor read/64, error -71 [ 383.746235][T16548] netlink: 'syz.7.2958': attribute type 2 has an invalid length. [ 384.010144][ T24] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 384.149119][ T24] usb 7-1: device descriptor read/64, error -71 [ 384.267460][ T24] usb usb7-port1: attempt power cycle [ 384.555674][ T1330] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 384.641240][ T24] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 384.663405][ T24] usb 7-1: device descriptor read/8, error -71 [ 384.694722][ T1330] usb 12-1: device descriptor read/64, error -71 [ 384.920123][ T24] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 384.941394][ T24] usb 7-1: device descriptor read/8, error -71 [ 384.962127][ T1330] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 385.058525][ T24] usb usb7-port1: unable to enumerate USB device [ 385.101175][ T1330] usb 12-1: device descriptor read/64, error -71 [ 385.219455][ T1330] usb usb12-port1: attempt power cycle [ 385.582455][ T1330] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 385.604498][ T1330] usb 12-1: device descriptor read/8, error -71 [ 385.860630][ T1330] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 385.882484][ T1330] usb 12-1: device descriptor read/8, error -71 [ 385.999890][ T1330] usb usb12-port1: unable to enumerate USB device [ 386.236505][T16561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.240203][T16561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.505123][T16570] 9pnet_fd: Insufficient options for proto=fd [ 386.509525][T16570] ªªªªªª: renamed from lo (while UP) [ 386.554221][T16576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=16576 comm=syz.2.2966 [ 386.562754][ T40] audit: type=1400 audit(3508369348.261:65063): avc: denied { map } for pid=16577 comm="syz.6.2967" path="socket:[68047]" dev="sockfs" ino=68047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 386.570513][ T40] audit: type=1400 audit(3508369348.261:65064): avc: denied { read } for pid=16577 comm="syz.6.2967" path="socket:[68047]" dev="sockfs" ino=68047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 386.585757][T16584] trusted_key: encrypted_key: insufficient parameters specified [ 386.593324][T16586] trusted_key: encrypted_key: insufficient parameters specified [ 386.594033][ T40] audit: type=1400 audit(3508369348.289:65065): avc: denied { watch watch_reads } for pid=16583 comm="syz.6.2969" path="pipe:[67171]" dev="pipefs" ino=67171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 386.648603][T16585] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 386.651641][T16591] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 386.702088][T16590] syz.2.2970 (16590): drop_caches: 2 [ 386.754785][T16594] __nla_validate_parse: 1 callbacks suppressed [ 386.754797][T16594] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2971'. [ 386.949004][ T40] audit: type=1400 audit(3508369348.626:65066): avc: denied { getopt } for pid=16609 comm="syz.2.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 386.958733][T16612] random: crng reseeded on system resumption [ 386.965120][T16612] Restarting kernel threads ... [ 386.969219][T16612] Done restarting kernel threads. [ 387.001094][T16616] fuse: Unknown parameter 'fe' [ 387.004799][T16616] binder: 16615:16616 ioctl c018620c 200000000540 returned -22 [ 387.041118][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2981'. [ 387.043944][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2981'. [ 387.112728][T16618] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2981'. [ 387.155039][T16618] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2981'. [ 387.208488][T16618] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2981'. [ 387.225319][T16629] netlink: 212172 bytes leftover after parsing attributes in process `syz.7.2985'. [ 387.243212][T16618] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2981'. [ 387.259264][ T40] audit: type=1400 audit(3508369348.915:65067): avc: denied { setopt } for pid=16630 comm="syz.7.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 387.304801][T16618] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2981'. [ 387.325779][T16639] netlink: 'syz.7.2988': attribute type 1 has an invalid length. [ 387.351550][ T40] audit: type=1400 audit(3508369349.000:65068): avc: denied { write } for pid=16640 comm="syz.7.2989" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 387.379740][T16618] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2981'. [ 388.396629][T16653] nbd: must specify at least one socket [ 388.431731][ T40] audit: type=1400 audit(3508369350.009:65069): avc: denied { map } for pid=16658 comm="syz.2.2995" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 388.480683][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.485708][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.488811][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.500073][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.513462][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.531413][T16662] Failed to initialize the IGMP autojoin socket (err -2) [ 388.531470][T16659] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 388.633804][T16673] tipc: Enabled bearer , priority 0 [ 388.636377][T16674] syzkaller0: entered promiscuous mode [ 388.641667][T16674] syzkaller0: entered allmulticast mode [ 388.645505][T16673] tipc: Resetting bearer [ 388.697875][T16672] tipc: Resetting bearer [ 388.738620][T16672] tipc: Disabling bearer [ 388.795724][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.798552][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.833218][ T40] audit: type=1400 audit(3508369350.383:65070): avc: denied { write } for pid=16695 comm="syz.2.3004" path="socket:[69380]" dev="sockfs" ino=69380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 388.841138][ T40] audit: type=1400 audit(3508369350.383:65071): avc: denied { ioctl } for pid=16695 comm="syz.2.3004" path="socket:[69380]" dev="sockfs" ino=69380 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 388.861107][T16692] (syz.6.3003,16692,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 388.863861][T16692] (syz.6.3003,16692,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 388.953961][ T40] audit: type=1326 audit(3508369350.505:65072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16700 comm="syz.2.3006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4cb8e9a9 code=0x7ffc0000 [ 389.362228][T16708] tipc: Started in network mode [ 389.364498][T16708] tipc: Node identity ac1414aa, cluster identity 4711 [ 389.367305][T16708] tipc: Enabling of bearer rejected, failed to enable media [ 389.559344][T16716] usb usb9: usbfs: process 16716 (syz.7.3012) did not claim interface 0 before use [ 389.771175][T16724] "syz.7.3016" (16724) uses obsolete ecb(arc4) skcipher [ 389.865543][T16729] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.928613][T16662] netdevsim netdevsim8 netdevsim0: renamed from eth18 [ 390.024048][T16729] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.032125][T16662] netdevsim netdevsim8 netdevsim1: renamed from eth19 [ 390.047831][T16662] netdevsim netdevsim8 netdevsim2: renamed from eth20 [ 390.129396][T16729] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.140309][T16662] netdevsim netdevsim8 netdevsim3: renamed from eth21 [ 390.238366][T16729] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.345063][T16713] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 390.436184][T16746] erspan0: entered promiscuous mode [ 390.490437][T16729] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.499637][T16729] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.509120][T16729] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.516990][T16729] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.537210][T16662] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 390.549233][T16662] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 390.559031][T16662] wireguard: wg0: Could not create IPv4 socket [ 390.562147][T16662] wireguard: wg1: Could not create IPv4 socket [ 390.565479][T16662] wireguard: wg2: Could not create IPv4 socket [ 390.567815][T16012] tipc: Subscription rejected, illegal request [ 390.748843][ T63] Bluetooth: hci1: command tx timeout [ 390.850592][T16777] netlink: 'syz.6.3030': attribute type 11 has an invalid length. [ 390.853084][T16777] netlink: 'syz.6.3030': attribute type 10 has an invalid length. [ 400.676631][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.679324][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.038883][T16808] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 404.137348][T16814] __nla_validate_parse: 16 callbacks suppressed [ 404.137361][T16814] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3040'. [ 404.250858][T16828] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3043'. [ 404.451563][T16841] tmpfs: Unknown parameter 'usrquotao' [ 404.485401][T16845] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3049'. [ 404.493709][ T6021] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 404.654799][ T6021] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 404.658038][ T6021] usb 7-1: config index 0 descriptor too short (expected 8192, got 27) [ 404.660513][ T6021] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.663601][ T6021] usb 7-1: config 0 has no interfaces? [ 404.666853][ T6021] usb 7-1: config index 1 descriptor too short (expected 8192, got 27) [ 404.669404][ T6021] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.672490][ T6021] usb 7-1: config 0 has no interfaces? [ 404.675011][ T6021] usb 7-1: config index 2 descriptor too short (expected 8192, got 27) [ 404.677864][ T6021] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.681011][ T6021] usb 7-1: config 0 has no interfaces? [ 404.683520][ T6021] usb 7-1: config index 3 descriptor too short (expected 8192, got 27) [ 404.686279][ T6021] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.690369][ T6021] usb 7-1: config 0 has no interfaces? [ 404.693377][ T6021] usb 7-1: config index 4 descriptor too short (expected 8192, got 27) [ 404.695923][ T6021] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.699234][ T6021] usb 7-1: config 0 has no interfaces? [ 404.701755][ T6021] usb 7-1: config index 5 descriptor too short (expected 8192, got 27) [ 404.704246][ T6021] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.707562][ T6021] usb 7-1: config 0 has no interfaces? [ 404.710773][ T6021] usb 7-1: config index 6 descriptor too short (expected 8192, got 27) [ 404.713510][ T6021] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.716565][ T6021] usb 7-1: config 0 has no interfaces? [ 404.719346][ T6021] usb 7-1: config index 7 descriptor too short (expected 8192, got 27) [ 404.721904][ T6021] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.725032][ T6021] usb 7-1: config 0 has no interfaces? [ 404.728380][ T6021] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 404.731514][ T6021] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 404.734118][ T6021] usb 7-1: Product: syz [ 404.735390][ T6021] usb 7-1: Manufacturer: syz [ 404.736814][ T6021] usb 7-1: SerialNumber: syz [ 404.740979][ T6021] usb 7-1: config 0 descriptor?? [ 405.237478][T16858] SELinux: syz.7.3053 (16858) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 405.246752][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 405.246762][ T40] audit: type=1400 audit(3508369365.734:65114): avc: granted { setsecparam } for pid=16857 comm="syz.7.3053" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 405.303136][ T5958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.308557][ T5958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.314718][ T5958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.319000][ T5958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.321823][ T5958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 405.336744][T16866] Failed to initialize the IGMP autojoin socket (err -2) [ 405.497330][T16871] tipc: Enabling of bearer rejected, failed to enable media [ 405.541009][ T40] audit: type=1400 audit(3508369366.005:65115): avc: denied { setopt } for pid=16876 comm="syz.7.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 405.679160][T16897] binder: BC_ACQUIRE_RESULT not supported [ 405.681536][T16897] binder: 16896:16897 ioctl c0306201 200000000180 returned -22 [ 405.807621][T16901] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3060'. [ 405.810640][T16901] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3060'. [ 405.965299][T16909] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 406.052481][T16911] bridge0: Device is already in use. [ 406.079361][ T40] audit: type=1400 audit(3508369366.511:65116): avc: denied { read } for pid=16912 comm="syz.7.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 406.227346][ T40] audit: type=1400 audit(3508369366.651:65117): avc: denied { mounton } for pid=16917 comm="syz.7.3067" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 406.227583][T16918] Can't find a SQUASHFS superblock on nullb0 [ 406.240247][T16918] Can't find a SQUASHFS superblock on nullb0 [ 406.243773][T16918] Can't find a SQUASHFS superblock on nullb0 [ 406.246609][T16918] Can't find a SQUASHFS superblock on nullb0 [ 406.617384][T16866] netdevsim netdevsim8 netdevsim0: renamed from eth18 [ 406.620409][T16927] netlink: 'syz.7.3069': attribute type 1 has an invalid length. [ 406.629878][T16866] netdevsim netdevsim8 netdevsim1: renamed from eth19 [ 406.630357][T16927] overlayfs: unescaped trailing colons in lowerdir mount option. [ 406.648665][T16866] netdevsim netdevsim8 netdevsim2: renamed from eth20 [ 406.667243][T16866] netdevsim netdevsim8 netdevsim3: renamed from eth21 [ 406.867123][T16931] overlayfs: failed to resolve './file0': -2 [ 407.113746][T16866] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 407.121499][T16866] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 407.128567][T16866] wireguard: wg0: Could not create IPv4 socket [ 407.133087][T16866] wireguard: wg1: Could not create IPv4 socket [ 407.138129][T16866] wireguard: wg2: Could not create IPv4 socket [ 407.392520][ T6021] usb 7-1: USB disconnect, device number 40 [ 407.414917][T16956] input: syz1 as /devices/virtual/input/input66 [ 407.459660][T16956] Failed to initialize the IGMP autojoin socket (err -2) [ 407.494047][T16957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3075'. [ 407.751676][T16967] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3079'. [ 407.780759][T16971] SELinux: security_context_str_to_sid (ƒ3‚'nj·è] ‡A[yÜ Ît) failed with errno=-22 [ 407.804992][T16941] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 407.836776][T16979] overlay: Unknown parameter 'hash' [ 407.847364][ T6021] hid-generic 0000:007F:0009.000A: item fetching failed at offset 0/3 [ 407.851596][ T6021] hid-generic 0000:007F:0009.000A: probe with driver hid-generic failed with error -22 [ 407.883456][T16985] overlayfs: unescaped trailing colons in lowerdir mount option. [ 407.927648][T16993] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3087'. [ 408.918965][T17011] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3092'. [ 409.155378][ T6300] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 409.176917][T17018] openvswitch: netlink: IP tunnel dst address not specified [ 409.234416][T17018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3094'. [ 409.318189][ T6300] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 409.321780][ T6300] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 409.326153][ T6300] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 409.328193][T17020] netlink: 'syz.7.3095': attribute type 5 has an invalid length. [ 409.329993][ T6300] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 409.336391][ T6300] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 409.342485][ T6300] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 409.347183][ T6300] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 409.350985][ T6300] usb 7-1: Product: syz [ 409.355015][ T6300] usb 7-1: Manufacturer: syz [ 409.366050][ T6300] cdc_wdm 7-1:1.0: skipping garbage [ 409.368236][ T6300] cdc_wdm 7-1:1.0: skipping garbage [ 409.373129][ T6300] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 409.375766][ T6300] cdc_wdm 7-1:1.0: Unknown control protocol [ 409.827175][T17032] __nla_validate_parse: 1 callbacks suppressed [ 409.827187][T17032] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3099'. [ 409.833507][T17035] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3099'. [ 409.957558][T17043] Failed to initialize the IGMP autojoin socket (err -2) [ 410.226199][T17047] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 410.228351][T17043] usbtmc 11-1:16.0: send_request_dev_dep_msg_in returned -90 [ 410.228997][T17047] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 410.234729][T17047] vhci_hcd vhci_hcd.0: Device attached [ 410.239289][T17048] vhci_hcd: unknown pdu 2 [ 410.241947][T16004] vhci_hcd: stop threads [ 410.243683][T16004] vhci_hcd: release socket [ 410.245516][T16004] vhci_hcd: disconnect device [ 411.040787][ T40] audit: type=1400 audit(3508369371.150:65118): avc: denied { create } for pid=17068 comm="syz.7.3107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 411.145301][T17073] overlay: ./file0 is not a directory [ 411.578455][T17084] overlayfs: failed to resolve './file0': -2 [ 411.860112][T10124] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 412.009760][T10124] usb 12-1: device descriptor read/64, error -71 [ 412.123941][ T6300] usb 7-1: USB disconnect, device number 41 [ 412.266375][T10124] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 412.416023][T10124] usb 12-1: device descriptor read/64, error -71 [ 412.533781][T10124] usb usb12-port1: attempt power cycle [ 412.614923][T17106] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 412.618968][T17106] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 412.751539][ T40] audit: type=1400 audit(3508369372.750:65119): avc: denied { transfer } for pid=17105 comm="syz.6.3119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 412.897442][T10124] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 412.919229][T10124] usb 12-1: device descriptor read/8, error -71 [ 413.175284][T10124] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 413.197934][T10124] usb 12-1: device descriptor read/8, error -71 [ 413.321497][T10124] usb usb12-port1: unable to enumerate USB device [ 413.353458][T17121] binder: 17120:17121 unknown command 0 [ 413.355790][T17121] binder: 17120:17121 ioctl c0306201 200000000080 returned -22 [ 413.360516][T17121] binder: 17120:17121 ioctl 89e6 200000000740 returned -22 [ 413.532671][T17128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 414.506831][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.511651][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.514805][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.517897][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.521197][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.533927][T17142] Failed to initialize the IGMP autojoin socket (err -2) [ 414.642954][T17145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.646494][T17145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.661300][T17145] FAULT_INJECTION: forcing a failure. [ 414.661300][T17145] name failslab, interval 1, probability 0, space 0, times 0 [ 414.666331][T17145] CPU: 1 UID: 0 PID: 17145 Comm: syz.6.3130 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 414.666346][T17145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 414.666354][T17145] Call Trace: [ 414.666358][T17145] [ 414.666363][T17145] dump_stack_lvl+0x16c/0x1f0 [ 414.666401][T17145] should_fail_ex+0x512/0x640 [ 414.666434][T17145] ? fs_reclaim_acquire+0xae/0x150 [ 414.666452][T17145] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 414.666464][T17145] should_failslab+0xc2/0x120 [ 414.666475][T17145] __kmalloc_noprof+0xd2/0x510 [ 414.666496][T17145] tomoyo_realpath_from_path+0xc2/0x6e0 [ 414.666508][T17145] ? tomoyo_profile+0x47/0x60 [ 414.666522][T17145] tomoyo_path_number_perm+0x245/0x580 [ 414.666538][T17145] ? tomoyo_path_number_perm+0x237/0x580 [ 414.666555][T17145] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 414.666572][T17145] ? find_held_lock+0x2b/0x80 [ 414.666600][T17145] ? find_held_lock+0x2b/0x80 [ 414.666615][T17145] ? hook_file_ioctl_common+0x145/0x410 [ 414.666632][T17145] ? __fget_files+0x20e/0x3c0 [ 414.666645][T17145] security_file_ioctl+0x9b/0x240 [ 414.666665][T17145] __x64_sys_ioctl+0xb7/0x210 [ 414.666681][T17145] do_syscall_64+0xcd/0x4c0 [ 414.666693][T17145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.666705][T17145] RIP: 0033:0x7fdcaa18e9a9 [ 414.666714][T17145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.666725][T17145] RSP: 002b:00007fdcaafc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.666737][T17145] RAX: ffffffffffffffda RBX: 00007fdcaa3b5fa0 RCX: 00007fdcaa18e9a9 [ 414.666744][T17145] RDX: 0000200000000500 RSI: 0000000041015500 RDI: 0000000000000003 [ 414.666750][T17145] RBP: 00007fdcaafc1090 R08: 0000000000000000 R09: 0000000000000000 [ 414.666757][T17145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.666764][T17145] R13: 0000000000000000 R14: 00007fdcaa3b5fa0 R15: 00007ffc4eb80ed8 [ 414.666778][T17145] [ 414.666843][T17145] ERROR: Out of memory at tomoyo_realpath_from_path. [ 414.956235][T17153] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3133'. [ 415.079691][T17161] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3136'. [ 415.084933][T17160] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3136'. [ 415.103405][ T40] audit: type=1400 audit(3508369374.957:65120): avc: denied { map } for pid=17163 comm="syz.2.3137" path="/proc/828/task/829/fd" dev="proc" ino=73095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 415.342754][T17173] kvm: emulating exchange as write [ 415.440365][ T40] audit: type=1400 audit(3508369375.266:65121): avc: denied { ioctl } for pid=17181 comm="syz.6.3143" path="socket:[73170]" dev="sockfs" ino=73170 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 415.530118][T17186] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 415.817022][T17192] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3146'. [ 415.839094][T17192] kvm: MWAIT instruction emulated as NOP! [ 415.866416][T17142] netdevsim netdevsim8 netdevsim0: renamed from eth18 [ 415.884934][T17142] netdevsim netdevsim8 netdevsim1: renamed from eth19 [ 415.899938][T17142] netdevsim netdevsim8 netdevsim2: renamed from eth20 [ 415.918177][T17142] netdevsim netdevsim8 netdevsim3: renamed from eth21 [ 416.131518][ T40] audit: type=1326 audit(3508369375.911:65122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17210 comm="syz.2.3151" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe4cb8e9a9 code=0x0 [ 416.138861][ T40] audit: type=1326 audit(3508369375.911:65123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17210 comm="syz.2.3151" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe4cb8e9a9 code=0x0 [ 416.139517][T17205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.150594][T17205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.153449][T17205] FAULT_INJECTION: forcing a failure. [ 416.153449][T17205] name failslab, interval 1, probability 0, space 0, times 0 [ 416.157425][T17205] CPU: 2 UID: 0 PID: 17205 Comm: syz.6.3149 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 416.157440][T17205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 416.157447][T17205] Call Trace: [ 416.157452][T17205] [ 416.157457][T17205] dump_stack_lvl+0x16c/0x1f0 [ 416.157478][T17205] should_fail_ex+0x512/0x640 [ 416.157495][T17205] ? fs_reclaim_acquire+0xae/0x150 [ 416.157510][T17205] ? tomoyo_encode2+0x100/0x3e0 [ 416.157520][T17205] should_failslab+0xc2/0x120 [ 416.157533][T17205] __kmalloc_noprof+0xd2/0x510 [ 416.157550][T17205] ? d_absolute_path+0x136/0x1a0 [ 416.157568][T17205] tomoyo_encode2+0x100/0x3e0 [ 416.157591][T17205] tomoyo_encode+0x29/0x50 [ 416.157602][T17205] tomoyo_realpath_from_path+0x18f/0x6e0 [ 416.157617][T17205] tomoyo_path_number_perm+0x245/0x580 [ 416.157633][T17205] ? tomoyo_path_number_perm+0x237/0x580 [ 416.157650][T17205] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 416.157666][T17205] ? find_held_lock+0x2b/0x80 [ 416.157694][T17205] ? find_held_lock+0x2b/0x80 [ 416.157707][T17205] ? hook_file_ioctl_common+0x145/0x410 [ 416.157723][T17205] ? __fget_files+0x20e/0x3c0 [ 416.157736][T17205] security_file_ioctl+0x9b/0x240 [ 416.157756][T17205] __x64_sys_ioctl+0xb7/0x210 [ 416.157772][T17205] do_syscall_64+0xcd/0x4c0 [ 416.157784][T17205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.157795][T17205] RIP: 0033:0x7fdcaa18e9a9 [ 416.157805][T17205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.157816][T17205] RSP: 002b:00007fdcaafc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.157827][T17205] RAX: ffffffffffffffda RBX: 00007fdcaa3b5fa0 RCX: 00007fdcaa18e9a9 [ 416.157834][T17205] RDX: 0000200000000500 RSI: 0000000041015500 RDI: 0000000000000003 [ 416.157841][T17205] RBP: 00007fdcaafc1090 R08: 0000000000000000 R09: 0000000000000000 [ 416.157848][T17205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.157855][T17205] R13: 0000000000000000 R14: 00007fdcaa3b5fa0 R15: 00007ffc4eb80ed8 [ 416.157869][T17205] [ 416.184555][T17219] tipc: Enabling of bearer rejected, failed to enable media [ 416.188513][T17205] ERROR: Out of memory at tomoyo_realpath_from_path. [ 416.756601][ T5958] Bluetooth: hci1: command tx timeout [ 417.022596][ T40] audit: type=1400 audit(3508369376.744:65124): avc: denied { ioctl } for pid=17243 comm="syz.7.3160" path="socket:[74888]" dev="sockfs" ino=74888 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 417.091204][ T40] audit: type=1400 audit(3508369376.809:65125): avc: denied { map } for pid=17250 comm="syz.2.3162" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 417.103607][T17251] netlink: 'syz.2.3162': attribute type 4 has an invalid length. [ 417.654392][T10124] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 417.804040][T10124] usb 7-1: device descriptor read/64, error -71 [ 417.978822][T17142] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 417.993825][T17142] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 418.002423][T17142] wireguard: wg0: Could not create IPv4 socket [ 418.005683][T17142] wireguard: wg1: Could not create IPv4 socket [ 418.014776][T17142] wireguard: wg2: Could not create IPv4 socket [ 418.060777][T10124] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 418.095880][ T40] audit: type=1400 audit(3508369377.754:65126): avc: denied { write } for pid=17280 comm="syz.7.3169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 418.102629][T17281] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3169'. [ 418.180034][T17289] FAULT_INJECTION: forcing a failure. [ 418.180034][T17289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.185482][T17289] CPU: 3 UID: 0 PID: 17289 Comm: syz.6.3171 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 418.185507][T17289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 418.185519][T17289] Call Trace: [ 418.185526][T17289] [ 418.185534][T17289] dump_stack_lvl+0x16c/0x1f0 [ 418.185567][T17289] should_fail_ex+0x512/0x640 [ 418.185598][T17289] _copy_from_iter+0x29f/0x16f0 [ 418.185622][T17289] ? __pfx__copy_from_iter+0x10/0x10 [ 418.185643][T17289] ? _kstrtoull+0x145/0x200 [ 418.185664][T17289] ? __pfx__kstrtoull+0x10/0x10 [ 418.185693][T17289] tun_get_user+0x240/0x3b80 [ 418.185724][T17289] ? __pfx_tun_get_user+0x10/0x10 [ 418.185742][T17289] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 418.185778][T17289] ? find_held_lock+0x2b/0x80 [ 418.185802][T17289] ? tun_get+0x191/0x370 [ 418.185823][T17289] tun_chr_write_iter+0xdc/0x210 [ 418.185843][T17289] vfs_write+0x6c4/0x1150 [ 418.185872][T17289] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 418.185894][T17289] ? __pfx_vfs_write+0x10/0x10 [ 418.185917][T17289] ? find_held_lock+0x2b/0x80 [ 418.185956][T17289] ksys_write+0x12a/0x250 [ 418.185982][T17289] ? __pfx_ksys_write+0x10/0x10 [ 418.186014][T17289] do_syscall_64+0xcd/0x4c0 [ 418.186035][T17289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.186055][T17289] RIP: 0033:0x7fdcaa18e9a9 [ 418.186069][T17289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.186087][T17289] RSP: 002b:00007fdcaafc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 418.186106][T17289] RAX: ffffffffffffffda RBX: 00007fdcaa3b5fa0 RCX: 00007fdcaa18e9a9 [ 418.186117][T17289] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 418.186129][T17289] RBP: 00007fdcaafc1090 R08: 0000000000000000 R09: 0000000000000000 [ 418.186139][T17289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.186150][T17289] R13: 0000000000000000 R14: 00007fdcaa3b5fa0 R15: 00007ffc4eb80ed8 [ 418.186174][T17289] [ 418.247032][T10124] usb 7-1: device descriptor read/64, error -71 [ 418.392832][T10124] usb usb7-port1: attempt power cycle [ 418.413875][ T40] audit: type=1400 audit(3508369378.053:65127): avc: denied { listen } for pid=17295 comm="syz.6.3173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 418.469477][ T40] audit: type=1400 audit(3508369378.100:65128): avc: denied { accept } for pid=17295 comm="syz.6.3173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 418.768838][T10124] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 418.788726][T10124] usb 7-1: device descriptor read/8, error -71 [ 418.813535][T17310] tmpfs: Cannot change global quota limit on remount [ 418.893492][ T40] audit: type=1400 audit(3508369378.493:65129): avc: denied { connect } for pid=17313 comm="syz.6.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 418.944923][T17321] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3180'. [ 418.951285][T17324] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3180'. [ 418.996788][T17326] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 419.023333][ T40] audit: type=1400 audit(3508369378.624:65130): avc: denied { read } for pid=17313 comm="syz.6.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 419.065610][T10124] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 419.082042][ T40] audit: type=1400 audit(3508369378.671:65131): avc: denied { write } for pid=17313 comm="syz.6.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 419.090564][T10124] usb 7-1: device descriptor read/8, error -71 [ 419.215847][T10124] usb usb7-port1: unable to enumerate USB device [ 419.372019][ T40] audit: type=1400 audit(3508369378.942:65132): avc: denied { getopt } for pid=17337 comm="syz.7.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 419.377516][T17338] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3186'. [ 419.635588][T17342] create_pit_timer: 2 callbacks suppressed [ 419.635602][T17342] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 419.941200][T17352] batadv_slave_1: entered promiscuous mode [ 419.944818][T17351] batadv_slave_1: left promiscuous mode [ 420.560281][T17382] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3201'. [ 420.917663][T17410] FAULT_INJECTION: forcing a failure. [ 420.917663][T17410] name failslab, interval 1, probability 0, space 0, times 0 [ 420.921628][T17410] CPU: 2 UID: 0 PID: 17410 Comm: syz.7.3210 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 420.921644][T17410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 420.921651][T17410] Call Trace: [ 420.921656][T17410] [ 420.921661][T17410] dump_stack_lvl+0x16c/0x1f0 [ 420.921682][T17410] should_fail_ex+0x512/0x640 [ 420.921699][T17410] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 420.921717][T17410] should_failslab+0xc2/0x120 [ 420.921728][T17410] __kmalloc_cache_noprof+0x6a/0x3e0 [ 420.921744][T17410] ? raw_ioctl_init+0x162/0x860 [ 420.921760][T17410] raw_ioctl_init+0x162/0x860 [ 420.921774][T17410] ? __pfx_raw_ioctl_init+0x10/0x10 [ 420.921787][T17410] ? tomoyo_path_number_perm+0x18d/0x580 [ 420.921814][T17410] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 420.921834][T17410] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 420.921856][T17410] raw_ioctl+0xa3c/0x2c30 [ 420.921873][T17410] ? __pfx_raw_ioctl+0x10/0x10 [ 420.921886][T17410] ? selinux_file_ioctl+0x180/0x270 [ 420.921903][T17410] ? selinux_file_ioctl+0xb4/0x270 [ 420.921921][T17410] ? __pfx_raw_ioctl+0x10/0x10 [ 420.921935][T17410] __x64_sys_ioctl+0x18e/0x210 [ 420.921952][T17410] do_syscall_64+0xcd/0x4c0 [ 420.921963][T17410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.921980][T17410] RIP: 0033:0x7fd95db8e9a9 [ 420.921990][T17410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.922001][T17410] RSP: 002b:00007fd95ea23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.922012][T17410] RAX: ffffffffffffffda RBX: 00007fd95ddb5fa0 RCX: 00007fd95db8e9a9 [ 420.922020][T17410] RDX: 0000200000000500 RSI: 0000000041015500 RDI: 0000000000000003 [ 420.922026][T17410] RBP: 00007fd95ea23090 R08: 0000000000000000 R09: 0000000000000000 [ 420.922033][T17410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.922040][T17410] R13: 0000000000000000 R14: 00007fd95ddb5fa0 R15: 00007ffc65b31148 [ 420.922053][T17410] [ 422.126958][T17445] syz.7.3219: attempt to access beyond end of device [ 422.126958][T17445] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 422.132444][T17445] syz.7.3219: attempt to access beyond end of device [ 422.132444][T17445] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 422.137842][T17445] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 422.142230][T17445] syz.7.3219: attempt to access beyond end of device [ 422.142230][T17445] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 422.149444][T17445] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 422.152750][T17445] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 422.155213][T17445] UDF-fs: Scanning with blocksize 512 failed [ 422.158679][T17445] syz.7.3219: attempt to access beyond end of device [ 422.158679][T17445] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 422.164142][T17445] syz.7.3219: attempt to access beyond end of device [ 422.164142][T17445] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 422.169726][T17445] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 422.173771][T17445] syz.7.3219: attempt to access beyond end of device [ 422.173771][T17445] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 422.178137][T17445] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 422.181086][T17445] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 422.183478][T17445] UDF-fs: Scanning with blocksize 1024 failed [ 422.185705][T17445] syz.7.3219: attempt to access beyond end of device [ 422.185705][T17445] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 422.189872][T17445] syz.7.3219: attempt to access beyond end of device [ 422.189872][T17445] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 422.194016][T17445] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 422.197230][T17445] syz.7.3219: attempt to access beyond end of device [ 422.197230][T17445] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 422.201309][T17445] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 422.204486][T17445] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 422.206921][T17445] UDF-fs: Scanning with blocksize 2048 failed [ 422.209184][T17445] syz.7.3219: attempt to access beyond end of device [ 422.209184][T17445] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 422.213276][T17445] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 422.216414][T17445] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 422.219605][T17445] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 422.221994][T17445] UDF-fs: Scanning with blocksize 4096 failed [ 422.224059][T17445] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 422.286535][T17447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17447 comm=syz.7.3220 [ 422.399191][T17452] FAULT_INJECTION: forcing a failure. [ 422.399191][T17452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.403598][T17452] CPU: 0 UID: 0 PID: 17452 Comm: syz.2.3222 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 422.403621][T17452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 422.403631][T17452] Call Trace: [ 422.403637][T17452] [ 422.403643][T17452] dump_stack_lvl+0x16c/0x1f0 [ 422.403716][T17452] should_fail_ex+0x512/0x640 [ 422.403752][T17452] _copy_from_iter+0x29f/0x16f0 [ 422.403776][T17452] ? __pfx__copy_from_iter+0x10/0x10 [ 422.403793][T17452] ? _copy_from_iter+0x15d/0x16f0 [ 422.403819][T17452] skb_copy_datagram_from_iter+0x124/0x740 [ 422.403846][T17452] ? __pfx__kstrtoull+0x10/0x10 [ 422.403869][T17452] ? iov_iter_advance+0x7d/0x6c0 [ 422.403900][T17452] tun_get_user+0x17ac/0x3b80 [ 422.403928][T17452] ? __pfx_tun_get_user+0x10/0x10 [ 422.403945][T17452] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 422.403980][T17452] ? find_held_lock+0x2b/0x80 [ 422.404004][T17452] ? tun_get+0x191/0x370 [ 422.404027][T17452] tun_chr_write_iter+0xdc/0x210 [ 422.404045][T17452] vfs_write+0x6c4/0x1150 [ 422.404070][T17452] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 422.404092][T17452] ? __pfx_vfs_write+0x10/0x10 [ 422.404115][T17452] ? find_held_lock+0x2b/0x80 [ 422.404158][T17452] ksys_write+0x12a/0x250 [ 422.404183][T17452] ? __pfx_ksys_write+0x10/0x10 [ 422.404210][T17452] ? fput+0x70/0xf0 [ 422.404232][T17452] do_syscall_64+0xcd/0x4c0 [ 422.404252][T17452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.404271][T17452] RIP: 0033:0x7fbe4cb8e9a9 [ 422.404287][T17452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.404304][T17452] RSP: 002b:00007fbe4d996038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.404331][T17452] RAX: ffffffffffffffda RBX: 00007fbe4cdb5fa0 RCX: 00007fbe4cb8e9a9 [ 422.404343][T17452] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 422.404354][T17452] RBP: 00007fbe4d996090 R08: 0000000000000000 R09: 0000000000000000 [ 422.404365][T17452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.404376][T17452] R13: 0000000000000000 R14: 00007fbe4cdb5fa0 R15: 00007fff185d8e78 [ 422.404400][T17452] [ 422.478303][T17455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.478738][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.483573][T17455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.496515][T17455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=17455 comm=syz.6.3223 [ 422.741492][T17461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3225'. [ 423.703645][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 423.710594][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 423.714306][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 423.718302][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 423.721410][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 423.740731][T17477] Failed to initialize the IGMP autojoin socket (err -2) [ 423.837056][T17488] FAULT_INJECTION: forcing a failure. [ 423.837056][T17488] name failslab, interval 1, probability 0, space 0, times 0 [ 423.841322][T17488] CPU: 1 UID: 0 PID: 17488 Comm: syz.6.3233 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 423.841345][T17488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 423.841357][T17488] Call Trace: [ 423.841364][T17488] [ 423.841371][T17488] dump_stack_lvl+0x16c/0x1f0 [ 423.841403][T17488] should_fail_ex+0x512/0x640 [ 423.841434][T17488] should_failslab+0xc2/0x120 [ 423.841453][T17488] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 423.841482][T17488] ? dst_alloc+0x99/0x1a0 [ 423.841511][T17488] dst_alloc+0x99/0x1a0 [ 423.841538][T17488] rt_dst_alloc+0x35/0x3a0 [ 423.841561][T17488] ip_route_input_slow+0x1671/0x3df0 [ 423.841593][T17488] ? __pfx_ip_route_input_slow+0x10/0x10 [ 423.841630][T17488] ? __pfx_ipt_do_table+0x10/0x10 [ 423.841664][T17488] ? __pfx_iptable_mangle_hook+0x10/0x10 [ 423.841694][T17488] ip_route_input_noref+0x120/0x2e0 [ 423.841721][T17488] ? __pfx_ip_route_input_noref+0x10/0x10 [ 423.841754][T17488] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 423.841786][T17488] ip_rcv_finish_core+0x46f/0x22a0 [ 423.841810][T17488] ip_rcv+0x1c0/0x5d0 [ 423.841827][T17488] ? __pfx_ip_rcv+0x10/0x10 [ 423.841841][T17488] __netif_receive_skb_one_core+0x197/0x1e0 [ 423.841867][T17488] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 423.841893][T17488] ? lock_acquire+0x179/0x350 [ 423.841913][T17488] ? read_tsc+0x9/0x20 [ 423.841939][T17488] __netif_receive_skb+0x1d/0x160 [ 423.841969][T17488] netif_receive_skb+0x137/0x7b0 [ 423.842007][T17488] ? __pfx_netif_receive_skb+0x10/0x10 [ 423.842043][T17488] tun_rx_batched.isra.0+0x3ee/0x740 [ 423.842076][T17488] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 423.842112][T17488] ? tun_get_user+0x1c0d/0x3b80 [ 423.842129][T17488] ? rcu_is_watching+0x12/0xc0 [ 423.842156][T17488] tun_get_user+0x28a2/0x3b80 [ 423.842186][T17488] ? __pfx_tun_get_user+0x10/0x10 [ 423.842203][T17488] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 423.842240][T17488] ? find_held_lock+0x2b/0x80 [ 423.842263][T17488] ? tun_get+0x191/0x370 [ 423.842287][T17488] tun_chr_write_iter+0xdc/0x210 [ 423.842308][T17488] vfs_write+0x6c4/0x1150 [ 423.842335][T17488] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 423.842356][T17488] ? __pfx_vfs_write+0x10/0x10 [ 423.842379][T17488] ? find_held_lock+0x2b/0x80 [ 423.842419][T17488] ksys_write+0x12a/0x250 [ 423.842444][T17488] ? __pfx_ksys_write+0x10/0x10 [ 423.842477][T17488] do_syscall_64+0xcd/0x4c0 [ 423.842497][T17488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.842514][T17488] RIP: 0033:0x7fdcaa18e9a9 [ 423.842529][T17488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.842546][T17488] RSP: 002b:00007fdcaafc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 423.842563][T17488] RAX: ffffffffffffffda RBX: 00007fdcaa3b5fa0 RCX: 00007fdcaa18e9a9 [ 423.842575][T17488] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 423.842585][T17488] RBP: 00007fdcaafc1090 R08: 0000000000000000 R09: 0000000000000000 [ 423.842596][T17488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.842606][T17488] R13: 0000000000000000 R14: 00007fdcaa3b5fa0 R15: 00007ffc4eb80ed8 [ 423.842632][T17488] [ 423.877245][T17490] 9pnet_fd: Insufficient options for proto=fd [ 423.913356][ T6300] hid-generic 0005:0B57:0006.000B: collection stack underflow [ 423.951284][ T40] audit: type=1400 audit(3508369383.235:65133): avc: denied { execute } for pid=17493 comm="syz.2.3234" path=2F6D656D66643A9D23202864656C6574656429 dev="hugetlbfs" ino=74752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 423.958830][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3234'. [ 423.964889][ T6300] hid-generic 0005:0B57:0006.000B: item 0 2 0 12 parsing failed [ 423.966757][T17494] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 423.968213][ T6300] hid-generic 0005:0B57:0006.000B: probe with driver hid-generic failed with error -22 [ 423.976340][T17494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.076415][ T40] audit: type=1400 audit(3508369383.338:65134): avc: denied { getopt } for pid=17495 comm="syz.7.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 424.106059][T17498] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3236'. [ 424.137718][T17500] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 424.141806][T17500] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 424.146763][T17500] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 424.150781][T17500] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 424.155243][T17500] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 424.159225][T17500] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 424.164082][T17500] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 424.168880][T17500] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 424.175699][T17500] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 424.193999][T17501] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 424.198288][T17501] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 424.201999][T17501] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 424.205083][T17501] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 424.213006][T17501] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 424.216151][T17501] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 424.225488][T17501] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 424.228816][T17501] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 424.232041][T17501] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 424.517565][T17534] Failed to initialize the IGMP autojoin socket (err -2) [ 424.750799][ T40] audit: type=1326 audit(3508369383.974:65135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.6.3251" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcaa18e9a9 code=0x0 [ 424.956191][ T5949] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 425.137850][ T5949] usb 7-1: Using ep0 maxpacket: 8 [ 425.140754][ T5949] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 425.143728][ T5949] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 425.148624][ T5949] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.153169][ T5949] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 425.156587][ T5949] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 425.160849][ T5949] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 425.163346][ T5949] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 425.166799][ T5949] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.170389][ T5949] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 425.173864][ T5949] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 425.178107][ T5949] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 425.180402][ T5949] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 425.183963][ T5949] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.187689][ T5949] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 425.192349][ T5949] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 425.199919][ T5949] usb 7-1: string descriptor 0 read error: -22 [ 425.202300][ T5949] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 425.205149][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.212666][ T5949] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 425.431742][T17544] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 425.441885][T17544] random: crng reseeded on system resumption [ 425.652257][ T59] usb 7-1: USB disconnect, device number 46 [ 425.843115][T17555] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 425.896929][ T5958] Bluetooth: hci1: command tx timeout [ 426.129357][T17477] netdevsim netdevsim8 netdevsim0: renamed from eth18 [ 426.152343][T17477] netdevsim netdevsim8 netdevsim1: renamed from eth19 [ 426.187626][T17477] netdevsim netdevsim8 netdevsim2: renamed from eth20 [ 426.205749][T17558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.212163][T17558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.218804][T17477] netdevsim netdevsim8 netdevsim3: renamed from eth21 [ 426.425088][T17560] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 426.428566][T17560] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 426.473265][T17560] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 426.643046][T17477] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 426.653829][T17477] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 426.662881][T17477] wireguard: wg0: Could not create IPv4 socket [ 426.722926][T17477] wireguard: wg1: Could not create IPv4 socket [ 426.727696][T17477] wireguard: wg2: Could not create IPv4 socket [ 426.848966][T17596] siw: device registration error -23 [ 426.862083][T17592] FAULT_INJECTION: forcing a failure. [ 426.862083][T17592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.866239][T17592] CPU: 3 UID: 0 PID: 17592 Comm: syz.7.3264 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 426.866262][T17592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 426.866273][T17592] Call Trace: [ 426.866280][T17592] [ 426.866286][T17592] dump_stack_lvl+0x16c/0x1f0 [ 426.866318][T17592] should_fail_ex+0x512/0x640 [ 426.866348][T17592] _copy_from_user+0x2e/0xd0 [ 426.866365][T17592] kstrtouint_from_user+0xd6/0x1d0 [ 426.866387][T17592] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 426.866408][T17592] ? __lock_acquire+0xb8a/0x1c90 [ 426.866437][T17592] proc_fail_nth_write+0x83/0x250 [ 426.866466][T17592] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 426.866498][T17592] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 426.866522][T17592] vfs_write+0x2a0/0x1150 [ 426.866551][T17592] ? __pfx___mutex_lock+0x10/0x10 [ 426.866568][T17592] ? __pfx_vfs_write+0x10/0x10 [ 426.866602][T17592] ? __fget_files+0x20e/0x3c0 [ 426.866625][T17592] ksys_write+0x12a/0x250 [ 426.866649][T17592] ? __pfx_ksys_write+0x10/0x10 [ 426.866675][T17592] ? fput+0x70/0xf0 [ 426.866697][T17592] do_syscall_64+0xcd/0x4c0 [ 426.866717][T17592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.866734][T17592] RIP: 0033:0x7fd95db8d45f [ 426.866749][T17592] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 426.866764][T17592] RSP: 002b:00007fd95ea23030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 426.866781][T17592] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd95db8d45f [ 426.866792][T17592] RDX: 0000000000000001 RSI: 00007fd95ea230a0 RDI: 0000000000000005 [ 426.866803][T17592] RBP: 00007fd95ea23090 R08: 0000000000000000 R09: 0000000000000000 [ 426.866814][T17592] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 426.866824][T17592] R13: 0000000000000000 R14: 00007fd95ddb5fa0 R15: 00007ffc65b31148 [ 426.866848][T17592] [ 426.945666][T17601] tipc: Enabling of bearer rejected, failed to enable media [ 426.949499][T17601] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3267'. [ 427.329889][ T40] audit: type=1400 audit(3508369386.397:65136): avc: denied { ioctl } for pid=17633 comm="syz.7.3278" path="socket:[77961]" dev="sockfs" ino=77961 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 427.664916][ T40] audit: type=1400 audit(3508369386.706:65137): avc: denied { append } for pid=17652 comm="syz.2.3284" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 427.724171][T17663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.756817][T17665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 428.134224][T17705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.237178][T17697] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3296'. [ 428.266267][T17709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3300'. [ 428.269068][T17709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3300'. [ 428.296827][ T40] audit: type=1400 audit(3508369387.295:65138): avc: denied { map } for pid=17711 comm="syz.2.3301" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 428.304282][ T40] audit: type=1400 audit(3508369387.295:65139): avc: denied { execute } for pid=17711 comm="syz.2.3301" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 428.317046][T17706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.320632][T17706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.324793][ T40] audit: type=1326 audit(3508369387.323:65140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17693 comm="syz.6.3296" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcaa18e9a9 code=0x0 [ 428.797801][T17714] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 429.073929][T17717] bio_check_eod: 26 callbacks suppressed [ 429.073947][T17717] syz.7.3303: attempt to access beyond end of device [ 429.073947][T17717] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 429.081839][T17717] syz.7.3303: attempt to access beyond end of device [ 429.081839][T17717] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0 [ 429.088266][T17717] Mount JFS Failure: -5 [ 429.090157][T17717] jfs_mount failed w/return code = -5 [ 429.191550][T17717] kvm: pic: non byte write [ 429.250402][ T40] audit: type=1400 audit(3508369388.184:65141): avc: denied { audit_write } for pid=17716 comm="syz.7.3303" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 429.983684][T17712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3301'. [ 430.107164][ T1330] hid-generic 07FF:18000:0003.000C: item fetching failed at offset 0/4 [ 430.114735][ T1330] hid-generic 07FF:18000:0003.000C: probe with driver hid-generic failed with error -22 [ 430.169251][ T40] audit: type=1400 audit(3508369389.044:65142): avc: denied { setattr } for pid=17728 comm="syz.7.3306" path="socket:[76605]" dev="sockfs" ino=76605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 430.286619][T17733] Failed to initialize the IGMP autojoin socket (err -2) [ 430.776356][T17738] netlink: 'syz.7.3309': attribute type 1 has an invalid length. [ 430.779685][T17738] netlink: 220 bytes leftover after parsing attributes in process `syz.7.3309'. [ 430.787682][T17738] netlink: 'syz.7.3309': attribute type 1 has an invalid length. [ 430.941626][T17712] syz.2.3301 (17712) used greatest stack depth: 20392 bytes left [ 431.210101][ T40] audit: type=1400 audit(3508369390.017:65143): avc: denied { listen } for pid=17748 comm="syz.2.3312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 431.430466][T17767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3318'. [ 431.629598][T17778] loop9: detected capacity change from 0 to 524287999 [ 431.847034][T17791] kvm: requested 50285 ns i8254 timer period limited to 200000 ns [ 432.092634][ T40] audit: type=1400 audit(3508369390.840:65144): avc: denied { mount } for pid=17801 comm="syz.2.3328" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 432.108207][ T40] audit: type=1400 audit(3508369390.840:65145): avc: denied { mounton } for pid=17801 comm="syz.2.3328" path="/330/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 432.661736][T17837] netlink: 212364 bytes leftover after parsing attributes in process `syz.6.3331'. [ 432.664693][T17837] openvswitch: netlink: Message has 5 unknown bytes. [ 432.926899][ T6351] usb 11-1: USB disconnect, device number 8 [ 432.971009][ T40] audit: type=1400 audit(3508369391.663:65146): avc: denied { unmount } for pid=12872 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 433.009111][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.013513][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.016553][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.020927][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.023791][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.051311][T17860] Failed to initialize the IGMP autojoin socket (err -2) [ 433.219730][ T9999] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 433.236605][ T9999] CPU: 0 UID: 0 PID: 9999 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 433.236622][ T9999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 433.236643][ T9999] Call Trace: [ 433.236647][ T9999] [ 433.236652][ T9999] dump_stack_lvl+0x16c/0x1f0 [ 433.236674][ T9999] dump_header+0x101/0x930 [ 433.236695][ T9999] oom_kill_process+0x270/0xa60 [ 433.236715][ T9999] out_of_memory+0x350/0x1700 [ 433.236736][ T9999] ? __pfx_out_of_memory+0x10/0x10 [ 433.236757][ T9999] mem_cgroup_out_of_memory+0x118/0x130 [ 433.236776][ T9999] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 433.236795][ T9999] ? do_raw_spin_unlock+0x172/0x230 [ 433.236811][ T9999] try_charge_memcg+0x72b/0xd50 [ 433.236825][ T9999] ? __pfx_try_charge_memcg+0x10/0x10 [ 433.236839][ T9999] ? find_held_lock+0x2b/0x80 [ 433.236856][ T9999] charge_memcg+0x8a/0x230 [ 433.236867][ T9999] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 433.236882][ T9999] __read_swap_cache_async+0x43e/0x5a0 [ 433.236901][ T9999] ? __pfx___read_swap_cache_async+0x10/0x10 [ 433.236918][ T9999] ? swp_swap_info+0xce/0x130 [ 433.236930][ T9999] ? __pfx_swp_swap_info+0x10/0x10 [ 433.236941][ T9999] ? mark_held_locks+0x49/0x80 [ 433.236953][ T9999] swap_cluster_readahead+0x3eb/0x710 [ 433.236973][ T9999] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 433.236988][ T9999] ? do_raw_spin_unlock+0x172/0x230 [ 433.237009][ T9999] ? get_vma_policy+0x242/0x3c0 [ 433.237023][ T9999] swapin_readahead+0x13a/0xd60 [ 433.237043][ T9999] ? __pfx_swapin_readahead+0x10/0x10 [ 433.237058][ T9999] ? __filemap_get_folio+0x32b/0xc30 [ 433.237073][ T9999] ? swap_cache_get_folio+0x1df/0x450 [ 433.237089][ T9999] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 433.237104][ T9999] ? __pfx_get_swap_device+0x10/0x10 [ 433.237122][ T9999] ? do_swap_page+0x125/0x65c0 [ 433.237137][ T9999] do_swap_page+0x635/0x65c0 [ 433.237152][ T9999] ? __lock_acquire+0x622/0x1c90 [ 433.237166][ T9999] ? __pfx_do_swap_page+0x10/0x10 [ 433.237181][ T9999] ? __pfx_default_wake_function+0x10/0x10 [ 433.237200][ T9999] ? rcu_is_watching+0x12/0xc0 [ 433.237215][ T9999] ? ___pte_offset_map+0x1d5/0x570 [ 433.237230][ T9999] __handle_mm_fault+0x162f/0x5490 [ 433.237250][ T9999] ? __pfx___handle_mm_fault+0x10/0x10 [ 433.237265][ T9999] ? lock_vma_under_rcu+0x47d/0x970 [ 433.237281][ T9999] ? lock_vma_under_rcu+0x47d/0x970 [ 433.237313][ T9999] handle_mm_fault+0x589/0xd10 [ 433.237328][ T9999] ? __pkru_allows_pkey+0x51/0xb0 [ 433.237346][ T9999] do_user_addr_fault+0x60c/0x1370 [ 433.237365][ T9999] ? rcu_is_watching+0x12/0xc0 [ 433.237381][ T9999] exc_page_fault+0x5c/0xb0 [ 433.237399][ T9999] asm_exc_page_fault+0x26/0x30 [ 433.237409][ T9999] RIP: 0033:0x7fd95dbc1268 [ 433.237419][ T9999] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 433.237430][ T9999] RSP: 002b:00007ffc65b31460 EFLAGS: 00010293 [ 433.237440][ T9999] RAX: 0000000000000000 RBX: 00000000000007a6 RCX: 00007fd95dbc1265 [ 433.237447][ T9999] RDX: 00007ffc65b314a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.237454][ T9999] RBP: 00007ffc65b3150c R08: 0000000000000000 R09: 0000000000000000 [ 433.237460][ T9999] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 433.237467][ T9999] R13: 00000000000927c0 R14: 0000000000063603 R15: 00007ffc65b31560 [ 433.237481][ T9999] [ 433.237486][ T9999] memory: usage 307200kB, limit 307200kB, failcnt 394 [ 433.346250][ T9999] memory+swap: usage 307916kB, limit 9007199254740988kB, failcnt 0 [ 433.349630][ T9999] kmem: usage 7120kB, limit 9007199254740988kB, failcnt 0 [ 433.351911][ T9999] Memory cgroup stats for /syz7: [ 433.354570][ T9999] cache 307273728 [ 433.357848][ T9999] rss 0 [ 433.358769][ T9999] rss_huge 0 [ 433.361178][ T9999] shmem 307269632 [ 433.364487][ T9999] mapped_file 0 [ 433.366594][ T9999] dirty 0 [ 433.367560][ T9999] writeback 0 [ 433.368644][ T9999] workingset_refault_anon 1198 [ 433.370319][ T9999] workingset_refault_file 0 [ 433.372255][ T9999] swap 733184 [ 433.373709][ T9999] swapcached 8192 [ 433.374905][ T9999] pgpgin 193872 [ 433.376024][ T9999] pgpgout 118857 [ 433.377172][ T9999] pgfault 152334 [ 433.378302][ T9999] pgmajfault 173 [ 433.379446][ T9999] inactive_anon 0 [ 433.380916][ T9999] active_anon 121184256 [ 433.382217][ T9999] inactive_file 0 [ 433.383415][ T9999] active_file 4096 [ 433.384615][ T9999] unevictable 185692160 [ 433.385926][ T9999] hierarchical_memory_limit 314572800 [ 433.387734][ T9999] hierarchical_memsw_limit 9223372036854771712 [ 433.389660][ T9999] total_cache 307273728 [ 433.396726][ T9999] total_rss 0 [ 433.397821][ T9999] total_rss_huge 0 [ 433.399014][ T9999] total_shmem 307269632 [ 433.400448][ T9999] total_mapped_file 0 [ 433.401925][ T9999] total_dirty 0 [ 433.403121][ T9999] total_writeback 0 [ 433.404405][ T9999] total_workingset_refault_anon 1198 [ 433.406045][ T9999] total_workingset_refault_file 0 [ 433.407615][ T9999] total_swap 733184 [ 433.408803][ T9999] total_swapcached 8192 [ 433.410144][ T9999] total_pgpgin 193873 [ 433.411874][ T9999] total_pgpgout 118858 [ 433.413476][ T9999] total_pgfault 154929 [ 433.414756][ T9999] total_pgmajfault 173 [ 433.416054][ T9999] total_inactive_anon 0 [ 433.417378][ T9999] total_active_anon 121184256 [ 433.418996][ T9999] total_inactive_file 0 [ 433.420424][ T9999] total_active_file 4096 [ 433.421816][ T9999] total_unevictable 185692160 [ 433.423356][ T9999] anon_cost 0 [ 433.424407][ T9999] file_cost 0 [ 433.425465][ T9999] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3320,pid=17772,uid=0 [ 433.432373][ T9999] Memory cgroup out of memory: Killed process 17772 (syz.7.3320) total-vm:103876kB, anon-rss:956kB, file-rss:23116kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 433.514205][T17860] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.517745][T17860] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.855174][T17860] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.858356][T17860] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.930028][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.934936][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 433.938887][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 433.942416][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 433.945014][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 434.044451][T17860] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.047672][T17860] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.063409][T17871] Failed to initialize the IGMP autojoin socket (err -2) [ 434.381691][T17860] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.385818][T17860] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.914673][T17860] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 434.924678][T17860] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 434.931671][T17860] wireguard: wg0: Could not create IPv4 socket [ 434.934723][T17860] wireguard: wg1: Could not create IPv4 socket [ 434.937698][T17860] wireguard: wg2: Could not create IPv4 socket [ 435.799875][ T40] audit: type=1400 audit(3508369394.311:65147): avc: denied { connect } for pid=17886 comm="syz.2.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 435.827504][T17894] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3339'. [ 435.832324][T17894] netlink: 'syz.7.3339': attribute type 15 has an invalid length. [ 435.904392][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 435.908341][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 435.911267][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 435.916341][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 435.919001][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 435.932560][T17898] Failed to initialize the IGMP autojoin socket (err -2) [ 436.071117][T17907] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 436.071117][T17907] The task syz.2.3341 (17907) triggered the difference, watch for misbehavior. [ 436.297990][T17925] nbd: must specify a size in bytes for the device [ 437.112247][ T40] audit: type=1400 audit(3508369395.545:65148): avc: denied { ioctl } for pid=17929 comm="syz.2.3348" path="socket:[79970]" dev="sockfs" ino=79970 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 437.157446][ T40] audit: type=1326 audit(3508369395.583:65149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17931 comm="syz.2.3349" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe4cb8e9a9 code=0x0 [ 437.371529][T17942] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3351'. [ 437.375445][T17942] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3351'. [ 437.577019][T17956] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input71 [ 437.704064][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.707143][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.710345][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.713263][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.715770][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.718816][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.724727][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.727776][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.730844][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.734230][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.737181][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.740126][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.743638][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.746635][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.749663][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.753427][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.756492][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.759575][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.762701][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.766272][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.769334][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.772395][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.775969][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.779028][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.782067][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.786055][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.789152][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.792173][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.795265][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.798884][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.801981][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.805020][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.808340][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.811438][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.814541][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.818226][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.821351][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.824428][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.827669][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.830732][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.833816][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.837100][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.840293][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.843295][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.846011][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.848350][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.851241][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.853941][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.856390][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.858686][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.861060][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.863720][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.866677][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.869360][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.872129][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.875013][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.877971][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.881393][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.884343][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.887150][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.889617][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.892128][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.895032][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.898128][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.901200][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.904357][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.907255][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.910322][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.913886][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.916975][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.920046][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.923159][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.926302][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.929401][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.932471][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.935784][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.938134][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.940420][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.942717][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.945050][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.947591][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.949891][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.952190][ T34] hid-generic 0002:0000:0000.000D: unknown main item tag 0x0 [ 437.957703][ T34] hid-generic 0002:0000:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz0 [ 437.993189][T17964] fido_id[17964]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 438.127102][ T5958] Bluetooth: hci1: command tx timeout [ 439.035666][T17995] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 439.498381][T18003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3368'. [ 439.532428][T18005] netlink: 'syz.2.3369': attribute type 10 has an invalid length. [ 439.567390][ T40] audit: type=1400 audit(3508369397.837:65150): avc: denied { ioctl } for pid=18006 comm="syz.7.3370" path="/664/file0/file1" dev="9p" ino=36047809 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 439.905490][ T40] audit: type=1400 audit(3508369398.155:65151): avc: denied { write } for pid=18022 comm="syz.7.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 440.062649][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3376'. [ 440.114684][T18027] openvswitch: netlink: Flow actions attr not present in new flow. [ 440.192312][T18033] comedi comedi3: comedi_config --init_data is deprecated [ 440.284185][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3378'. [ 440.288268][T18036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3378'. [ 440.291913][T18036] netlink: 'syz.2.3378': attribute type 6 has an invalid length. [ 440.351370][ T5958] Bluetooth: hci1: command tx timeout [ 441.162368][T18075] SELinux: syz.7.3390 (18075) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 441.390701][T18088] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 441.395164][T18088] overlayfs: missing 'workdir' [ 441.533505][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 441.539577][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 441.545330][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 441.551970][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 441.555651][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 441.701660][T18091] Failed to initialize the IGMP autojoin socket (err -2) [ 442.400793][T17898] netdevsim netdevsim8 netdevsim0: renamed from eth22 [ 442.417729][T17898] netdevsim netdevsim8 netdevsim1: renamed from eth23 [ 442.452359][T17898] netdevsim netdevsim8 netdevsim2: renamed from eth24 [ 442.473714][T17898] netdevsim netdevsim8 netdevsim3: renamed from eth25 [ 442.568665][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 442.573279][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 442.576651][ T5955] Bluetooth: hci1: command tx timeout [ 442.577296][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 442.582349][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 442.588036][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 442.605503][T18104] Failed to initialize the IGMP autojoin socket (err -2) [ 442.790357][T17898] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 442.797073][T17898] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 442.803668][T17898] wireguard: wg0: Could not create IPv4 socket [ 442.806659][T17898] wireguard: wg1: Could not create IPv4 socket [ 442.810307][T17898] wireguard: wg2: Could not create IPv4 socket [ 442.813723][T18098] /dev/sr0: Can't open blockdev [ 442.882021][ T40] audit: type=1400 audit(3508369400.933:65152): avc: denied { setattr } for pid=18116 comm="syz.7.3398" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 443.535163][T18135] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3403'. [ 443.539041][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3403'. [ 443.539080][T18135] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3403'. [ 443.542388][T18136] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3403'. [ 443.564327][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 443.569100][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 443.572595][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 443.576259][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 443.580022][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 443.593380][T18137] Failed to initialize the IGMP autojoin socket (err -2) [ 443.726691][T18147] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 443.732955][T18147] overlayfs: missing 'workdir' [ 443.741647][T18148] ip6gretap0: mtu less than device minimum [ 444.680977][T18137] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 444.687989][T18137] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 444.696327][T18137] wireguard: wg0: Could not create IPv4 socket [ 444.696540][T18166] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3410'. [ 444.700268][T18137] wireguard: wg1: Could not create IPv4 socket [ 444.707314][T18137] wireguard: wg2: Could not create IPv4 socket [ 444.740982][ T40] audit: type=1400 audit(3508369402.673:65153): avc: denied { execute_no_trans } for pid=18167 comm="syz.2.3411" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=80376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 444.743760][T18168] overlay: ./file0 is not a directory [ 444.765447][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3411'. [ 444.768403][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3411'. [ 445.264846][T18173] IPVS: Unknown mcast interface: nicvf0 [ 445.923168][T18175] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3414'. [ 446.095381][T18177] usb usb1: usbfs: process 18177 (syz.7.3415) did not claim interface 0 before use [ 446.140768][T18181] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3416'. [ 446.418252][T18196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3419'. [ 446.531144][T18202] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 446.859081][T18215] dlm: plock device version mismatch: kernel (1.2.0), user (4207687471.1574799195.3139252685) [ 447.075788][ T40] audit: type=1800 audit(3508369404.862:65154): pid=18228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3429" name="bus" dev="overlay" ino=3726 res=0 errno=0 [ 447.294221][ T40] audit: type=1400 audit(3508369405.058:65155): avc: denied { append } for pid=18235 comm="syz.2.3433" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 447.502560][ T1330] usb 12-1: new full-speed USB device number 31 using dummy_hcd [ 447.652244][ T1330] usb 12-1: device descriptor read/64, error -71 [ 447.908832][ T1330] usb 12-1: new full-speed USB device number 32 using dummy_hcd [ 448.058479][ T1330] usb 12-1: device descriptor read/64, error -71 [ 448.179222][ T1330] usb usb12-port1: attempt power cycle [ 448.550243][ T1330] usb 12-1: new full-speed USB device number 33 using dummy_hcd [ 448.572112][ T1330] usb 12-1: device descriptor read/8, error -71 [ 448.838896][ T1330] usb 12-1: new full-speed USB device number 34 using dummy_hcd [ 448.860737][ T1330] usb 12-1: device descriptor read/8, error -71 [ 448.978243][ T1330] usb usb12-port1: unable to enumerate USB device [ 450.649385][ T5958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 450.653572][ T5958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 450.660239][ T5958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 450.665050][ T5958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 450.668865][ T5958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 450.682080][T18264] Failed to initialize the IGMP autojoin socket (err -2) [ 451.036773][T18270] wireguard1: entered allmulticast mode [ 451.170963][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 451.175194][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 451.179233][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 451.182644][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 451.183066][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 451.303966][T18277] Failed to initialize the IGMP autojoin socket (err -2) [ 451.339782][T18261] syz.2.3441 (18261) used greatest stack depth: 20136 bytes left [ 451.407015][T18286] netlink: 'syz.7.3446': attribute type 10 has an invalid length. [ 451.413656][T18286] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 452.026833][T18264] netdevsim netdevsim8 netdevsim0: renamed from eth22 [ 452.044447][T18264] netdevsim netdevsim8 netdevsim1: renamed from eth23 [ 452.053574][T18264] netdevsim netdevsim8 netdevsim2: renamed from eth24 [ 452.065277][T18264] netdevsim netdevsim8 netdevsim3: renamed from eth25 [ 452.319705][T18264] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 452.328176][T18264] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 452.334482][T18264] wireguard: wg0: Could not create IPv4 socket [ 452.339172][T18264] wireguard: wg1: Could not create IPv4 socket [ 452.342486][T18264] wireguard: wg2: Could not create IPv4 socket [ 452.507325][T18312] 9p: Unknown uid 00000000004294967295 [ 452.522662][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 452.526343][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 452.531524][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 452.535205][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 452.539356][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 452.551918][T18316] Failed to initialize the IGMP autojoin socket (err -2) [ 452.572467][T18312] 9p: Unknown uid 00000000004294967295 [ 452.609360][T18322] netlink: 'syz.7.3452': attribute type 6 has an invalid length. [ 452.628810][T18312] 9p: Unknown uid 00000000004294967295 [ 452.634826][ T6021] hid (null): unknown global tag 0xc [ 452.636551][ T6021] hid (null): unknown global tag 0xea [ 452.638241][ T6021] hid (null): unknown global tag 0xe [ 452.638889][T18324] sp0: Synchronizing with TNC [ 452.639951][ T6021] hid (null): unknown global tag 0xe [ 452.643284][ T6021] hid (null): unknown global tag 0xc [ 452.645045][ T6021] hid (null): report_id 31585 is invalid [ 452.646844][ T6021] hid (null): unknown global tag 0xc [ 452.648520][ T6021] hid (null): bogus close delimiter [ 452.653281][T18326] 9pnet_virtio: no channels available for device syz [ 452.656662][ T6021] hid (null): unknown global tag 0xe [ 452.658355][ T6021] hid (null): unknown global tag 0xc [ 452.660222][ T6021] hid (null): invalid report_size 892726994 [ 452.662516][ T6021] hid (null): unknown global tag 0xfe [ 452.664232][ T6021] hid (null): invalid report_count 51363 [ 452.668103][ T6021] hid (null): unknown global tag 0xe [ 452.670334][ T6021] hid (null): unknown global tag 0xd [ 452.672486][ T6021] hid (null): nested delimiters [ 452.674422][ T6021] hid (null): unknown global tag 0xc1 [ 452.676378][ T6021] hid (null): report_id 1235951113 is invalid [ 452.678483][ T6021] hid (null): global environment stack underflow [ 452.680570][ T6021] hid (null): unknown global tag 0x9d [ 452.682286][ T6021] hid (null): unknown global tag 0xc [ 452.684039][ T6021] hid (null): unknown global tag 0x67 [ 452.685762][ T6021] hid (null): unknown global tag 0x7e [ 452.689005][ T6021] hid (null): unknown global tag 0xc [ 452.690724][ T6021] hid (null): unknown global tag 0xc [ 452.692427][ T6021] hid (null): global environment stack underflow [ 452.694438][ T6021] hid (null): global environment stack underflow [ 452.696537][ T6021] hid (null): unknown global tag 0xd6 [ 452.699060][ T6021] hid (null): invalid report_count 60338 [ 452.700838][ T6021] hid (null): unknown global tag 0xe [ 452.702517][ T6021] hid (null): invalid report_count 740350749 [ 452.704421][ T6021] hid (null): unknown global tag 0xd [ 452.707183][ T6021] hid-generic 0008:0004:0009.000E: reserved main item tag 0xd [ 452.711928][ T6021] hid-generic 0008:0004:0009.000E: unknown global tag 0xc [ 452.714131][ T6021] hid-generic 0008:0004:0009.000E: item 0 2 1 12 parsing failed [ 452.716780][ T6021] hid-generic 0008:0004:0009.000E: probe with driver hid-generic failed with error -22 [ 452.741911][T18312] 9pnet_virtio: no channels available for device syz [ 452.745164][T18312] 9pnet_virtio: no channels available for device syz [ 452.747537][T18312] 9pnet_virtio: no channels available for device syz [ 452.750444][T18312] 9pnet_virtio: no channels available for device syz [ 452.754302][T18312] 9pnet_virtio: no channels available for device syz [ 452.756631][T18312] 9pnet_virtio: no channels available for device syz [ 452.758914][T18312] 9pnet_virtio: no channels available for device syz [ 452.761281][T18312] 9pnet_virtio: no channels available for device syz [ 452.764229][T18312] 9pnet_virtio: no channels available for device syz [ 452.767284][T18312] 9pnet_virtio: no channels available for device syz [ 452.769701][T18312] 9pnet_virtio: no channels available for device syz [ 452.772144][T18312] 9pnet_virtio: no channels available for device syz [ 452.774643][T18312] 9pnet_virtio: no channels available for device syz [ 452.777038][T18312] 9pnet_virtio: no channels available for device syz [ 452.779314][T18312] 9pnet_virtio: no channels available for device syz [ 452.781766][T18312] 9pnet_virtio: no channels available for device syz [ 452.784375][T18312] 9pnet_virtio: no channels available for device syz [ 452.787189][T18312] 9pnet_virtio: no channels available for device syz [ 452.790078][T18312] 9pnet_virtio: no channels available for device syz [ 452.792893][T18312] 9pnet_virtio: no channels available for device syz [ 452.796610][T18312] 9pnet_virtio: no channels available for device syz [ 452.799372][T18312] 9pnet_virtio: no channels available for device syz [ 452.805252][T18312] 9pnet_virtio: no channels available for device syz [ 452.808088][T18312] 9pnet_virtio: no channels available for device syz [ 452.810988][T18312] 9pnet_virtio: no channels available for device syz [ 452.815969][T18312] 9pnet_virtio: no channels available for device syz [ 452.818832][T18312] 9pnet_virtio: no channels available for device syz [ 452.821697][T18312] 9pnet_virtio: no channels available for device syz [ 452.824543][T18312] 9pnet_virtio: no channels available for device syz [ 452.829955][T18312] 9pnet_virtio: no channels available for device syz [ 452.975133][T18336] netlink: 'syz.7.3457': attribute type 2 has an invalid length. [ 452.977941][T18336] __nla_validate_parse: 3 callbacks suppressed [ 452.977953][T18336] netlink: 1184 bytes leftover after parsing attributes in process `syz.7.3457'. [ 453.670022][T18316] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 453.679147][T18316] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 453.687315][T18316] wireguard: wg0: Could not create IPv4 socket [ 453.692113][T18316] wireguard: wg1: Could not create IPv4 socket [ 453.696598][T18316] wireguard: wg2: Could not create IPv4 socket [ 453.814738][T18353] netlink: 'syz.7.3459': attribute type 64 has an invalid length. [ 453.817228][T18353] netlink: 'syz.7.3459': attribute type 4 has an invalid length. [ 453.819658][T18353] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3459'. [ 455.495531][ T40] audit: type=1400 audit(3508369668.733:65156): avc: denied { mount } for pid=18369 comm="syz.2.3464" name="/" dev="hugetlbfs" ino=80846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 455.591460][T18372] overlayfs: maximum fs stacking depth exceeded [ 455.594330][ T40] audit: type=1400 audit(3508369668.827:65157): avc: denied { mounton } for pid=18369 comm="syz.2.3464" path="/390/file0" dev="hugetlbfs" ino=80846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 455.647267][T18360] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.705540][ T40] audit: type=1400 audit(3508369668.930:65158): avc: denied { unmount } for pid=12872 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 455.726303][T18378] netlink: 'syz.2.3465': attribute type 21 has an invalid length. [ 455.728842][T18378] IPv6: NLM_F_CREATE should be specified when creating new route [ 455.753767][T18381] netlink: ct family unspecified [ 455.755482][T18381] openvswitch: netlink: Actions may not be safe on all matching packets [ 455.782099][T18383] netlink: 'syz.2.3467': attribute type 2 has an invalid length. [ 455.785442][ T40] audit: type=1800 audit(3508369669.004:65159): pid=18383 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3467" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 455.826138][T18387] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 456.076500][ T837] usb 12-1: new high-speed USB device number 35 using dummy_hcd [ 456.247515][ T837] usb 12-1: Using ep0 maxpacket: 16 [ 456.250997][ T837] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 456.254530][ T837] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 456.257963][ T837] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 456.261305][ T837] usb 12-1: config 0 interface 0 has no altsetting 0 [ 456.265161][ T837] usb 12-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 456.267987][ T837] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.270744][ T837] usb 12-1: Product: syz [ 456.272098][ T837] usb 12-1: Manufacturer: syz [ 456.273564][ T837] usb 12-1: SerialNumber: syz [ 456.276279][ T837] usb 12-1: config 0 descriptor?? [ 456.497684][ T837] input: syz syz as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input72 [ 456.501715][ T5347] synaptics_usb 12-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 456.606930][T16885] synaptics_usb 12-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 456.696708][ T5347] synaptics_usb 12-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 456.713737][T18386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.718083][T18386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.722545][T18386] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3468'. [ 456.726142][ T6300] usb 12-1: USB disconnect, device number 35 [ 457.323570][T18395] overlay: Unknown parameter 'permit_directio' [ 458.219893][T18427] overlayfs: failed to resolve './file1': -2 [ 458.360557][T18434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.367788][ T40] audit: type=1400 audit(3508369671.427:65160): avc: denied { module_load } for pid=18436 comm="syz.2.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 459.040200][T18440] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.043099][T18440] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.045906][T18440] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.048935][T18440] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.138398][T18440] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.141766][T18440] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.144716][T18440] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.147536][T18440] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.323934][ T5958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.330720][ T5958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.336865][ T5958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.343176][ T5958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.346441][ T5958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.362223][T18462] Failed to initialize the IGMP autojoin socket (err -2) [ 461.055016][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 461.060739][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 461.064263][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.075190][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.078314][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.091756][ T40] audit: type=1400 audit(3508369673.962:65161): avc: denied { view } for pid=18470 comm="syz.7.3495" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 461.102045][T18479] Failed to initialize the IGMP autojoin socket (err -2) [ 461.139081][T18484] kernel read not supported for file /policy (pid: 18484 comm: syz.2.3498) [ 461.142905][ T40] audit: type=1400 audit(3508369674.009:65162): avc: denied { module_load } for pid=18483 comm="syz.2.3498" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 461.469343][ T40] audit: type=1400 audit(3508369674.327:65163): avc: denied { read } for pid=18508 comm="syz.7.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 461.495884][T18509] netlink: 'syz.7.3505': attribute type 5 has an invalid length. [ 461.500820][T18509] netlink: 'syz.7.3505': attribute type 8 has an invalid length. [ 461.710590][T18462] netdevsim netdevsim8 netdevsim0: renamed from eth22 [ 461.724443][T18462] netdevsim netdevsim8 netdevsim1: renamed from eth23 [ 461.740236][T18462] netdevsim netdevsim8 netdevsim2: renamed from eth24 [ 461.761325][T18462] netdevsim netdevsim8 netdevsim3: renamed from eth25 [ 462.035291][T18462] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 462.041539][T18462] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 462.048116][T18462] wireguard: wg0: Could not create IPv4 socket [ 462.051082][T18462] wireguard: wg1: Could not create IPv4 socket [ 462.055295][T18462] wireguard: wg2: Could not create IPv4 socket [ 462.490392][T18530] (syz.7.3509,18530,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 462.490406][ T40] audit: type=1400 audit(3508369675.272:65164): avc: denied { create } for pid=18529 comm="syz.7.3509" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 462.626944][ T5958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 462.631816][ T5958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 462.634856][ T5958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 462.640857][ T5958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 462.644146][ T5958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 462.661491][T18534] Failed to initialize the IGMP autojoin socket (err -2) [ 463.715021][T18552] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3512'. [ 463.818603][T18558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.823247][T18534] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 463.832793][T18534] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 463.841745][T18534] wireguard: wg0: Could not create IPv4 socket [ 463.846329][T18534] wireguard: wg1: Could not create IPv4 socket [ 463.852523][T18534] wireguard: wg2: Could not create IPv4 socket [ 463.934267][T18560] overlay: ./file0 is not a directory [ 464.233751][T17146] usb 12-1: new full-speed USB device number 36 using dummy_hcd [ 464.396495][T17146] usb 12-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 464.399837][T17146] usb 12-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.402969][T17146] usb 12-1: config 0 interface 0 has no altsetting 0 [ 464.405213][T17146] usb 12-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 464.408234][T17146] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.413001][T17146] usb 12-1: config 0 descriptor?? [ 464.870141][T17146] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 464.872416][T17146] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 464.877104][T17146] hid-steam 0003:28DE:1102.000F: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.7-1/input0 [ 464.882115][T18571] netlink: 'syz.2.3518': attribute type 1 has an invalid length. [ 464.939376][T17146] hid-steam 0003:28DE:1102.000F: Steam Controller 'XXXXXXXXXX' connected [ 464.948036][T17146] input: Steam Controller as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:28DE:1102.000F/input/input73 [ 464.974103][T17146] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 464.977782][T17146] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 464.996241][T17146] hid-steam 0003:28DE:1102.0010: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.7-1/input0 [ 465.410186][T18587] netlink: 'syz.2.3521': attribute type 1 has an invalid length. [ 465.433619][T18587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.465748][T18587] veth5: entered promiscuous mode [ 465.471352][T18587] bond1: (slave veth5): Enslaving as an active interface with a down link [ 465.517888][T18591] input: syz1 as /devices/virtual/input/input74 [ 465.548313][T18591] cgroup: Unknown subsys name 'func' [ 465.874019][T18600] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_tx_wq": -EINTR [ 465.882782][T18601] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_cmd_wq": -EINTR [ 465.989111][ T837] input: Steam Controller as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:28DE:1102.000F/input/input75 [ 466.042289][T18632] comedi comedi3: comedi_config --init_data is deprecated [ 466.224090][T18639] program syz.2.3528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 466.372030][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 466.374703][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 466.389338][T18645] netlink: 'syz.2.3530': attribute type 1 has an invalid length. [ 466.626665][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3532'. [ 466.630140][T18654] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3532'. [ 466.659327][ T40] audit: type=1400 audit(3508369679.172:65165): avc: denied { bind } for pid=18655 comm="syz.7.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 466.736736][T18659] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3534'. [ 466.846337][ T6300] usb 12-1: USB disconnect, device number 36 [ 466.948603][T18665] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3536'. [ 466.948777][T18664] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3536'. [ 466.955121][T18665] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3536'. [ 467.025176][ T6300] hid-steam 0003:28DE:1102.000F: Steam Controller 'XXXXXXXXXX' disconnected [ 467.286840][T18679] Failed to initialize the IGMP autojoin socket (err -2) [ 467.355226][ T40] audit: type=1400 audit(3508369679.836:65166): avc: denied { create } for pid=18683 comm="syz.2.3542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 467.378085][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3542'. [ 467.384870][ T40] audit: type=1400 audit(3508369679.855:65167): avc: denied { getopt } for pid=18683 comm="syz.2.3542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 467.547252][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3545'. [ 467.550872][T18698] bond0: option use_carrier: invalid value (254) [ 468.162277][T18707] SELinux: unknown common r [ 468.163858][T18707] SELinux: failed to load policy [ 469.686218][T18715] netlink: 'syz.7.3552': attribute type 4 has an invalid length. [ 469.692777][T18715] netlink: 'syz.7.3552': attribute type 4 has an invalid length. [ 469.805383][ T5958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 469.810828][ T5958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 469.814700][ T5958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 469.817984][ T5958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 469.821173][ T5958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 469.836848][T18723] Failed to initialize the IGMP autojoin socket (err -2) [ 470.469766][ T40] audit: type=1400 audit(3508369682.745:65168): avc: denied { mount } for pid=18735 comm="syz.7.3558" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 470.470431][T18738] devtmpfs: Unknown parameter 'u' [ 470.476825][ T40] audit: type=1400 audit(3508369682.745:65169): avc: denied { remount } for pid=18735 comm="syz.7.3558" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 470.540327][ T40] audit: type=1400 audit(3508369682.802:65170): avc: denied { unmount } for pid=9999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 471.080172][T18723] netdevsim netdevsim8 netdevsim0: renamed from eth22 [ 471.097217][T18723] netdevsim netdevsim8 netdevsim1: renamed from eth23 [ 471.113074][T18723] netdevsim netdevsim8 netdevsim2: renamed from eth24 [ 471.135476][T18723] netdevsim netdevsim8 netdevsim3: renamed from eth25 [ 471.399829][T18753] netlink: 'syz.2.3559': attribute type 3 has an invalid length. [ 471.403312][T18753] netlink: 'syz.2.3559': attribute type 1 has an invalid length. [ 471.406604][T18753] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3559'. [ 471.410854][T18753] NCSI netlink: No device for ifindex 0 [ 471.414268][T18754] netlink: 'syz.2.3559': attribute type 3 has an invalid length. [ 471.416781][T18754] netlink: 'syz.2.3559': attribute type 1 has an invalid length. [ 471.421149][T18754] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3559'. [ 471.423963][T18754] NCSI netlink: No device for ifindex 0 [ 471.427714][T18723] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 471.435109][T18723] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 471.441455][T18723] wireguard: wg0: Could not create IPv4 socket [ 471.444511][T18723] wireguard: wg1: Could not create IPv4 socket [ 471.447505][T18723] wireguard: wg2: Could not create IPv4 socket [ 471.495479][T18762] wireguard: wg2: Could not create IPv4 socket [ 471.497476][T18762] wg2: entered promiscuous mode [ 471.498991][T18762] wg2: entered allmulticast mode [ 471.511009][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 471.521026][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 471.526775][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 471.536836][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 471.541450][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 471.561447][T18763] Failed to initialize the IGMP autojoin socket (err -2) [ 471.679025][ T40] audit: type=1400 audit(3508369683.877:65171): avc: denied { getopt } for pid=18769 comm="syz.7.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 471.688367][T18771] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 472.531040][T18782] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3566'. [ 472.533839][T18782] nbd: illegal input index 1879048192 [ 472.536472][T18782] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 472.673984][T18763] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 472.682850][T18763] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 472.688896][T18763] wireguard: wg0: Could not create IPv4 socket [ 472.692412][T18763] wireguard: wg1: Could not create IPv4 socket [ 472.695905][T18763] wireguard: wg2: Could not create IPv4 socket [ 473.146215][T18790] input: syz0 as /devices/virtual/input/input76 [ 473.544956][ T29] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 473.677643][T18802] sp0: Synchronizing with TNC [ 473.717267][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.720713][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.723833][ T29] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 473.726897][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.731152][ T29] usb 7-1: config 0 descriptor?? [ 473.810234][T18806] tmpfs: Bad value for 'mpol' [ 473.950640][ T29] usbhid 7-1:0.0: can't add hid device: -71 [ 473.954187][ T29] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 473.957826][ T29] usb 7-1: USB disconnect, device number 47 [ 474.164973][T16209] usb 12-1: new full-speed USB device number 37 using dummy_hcd [ 474.326523][T16209] usb 12-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 474.329826][T16209] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 474.333452][T16209] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 474.337119][T16209] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 474.342700][T16209] usb 12-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 474.345647][T16209] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.348721][T16209] usb 12-1: Product: syz [ 474.350421][T16209] usb 12-1: Manufacturer: syz [ 474.352168][T16209] usb 12-1: SerialNumber: syz [ 474.355971][T16209] usb 12-1: config 0 descriptor?? [ 474.362468][T16209] input: KB Gear Tablet as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input77 [ 474.526333][T18811] Failed to initialize the IGMP autojoin socket (err -2) [ 474.674738][T18812] tipc: Enabling of bearer rejected, failed to enable media [ 474.773316][T18816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3575'. [ 474.777565][T18816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3575'. [ 474.984808][T18821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3576'. [ 475.001584][ T29] usb 12-1: USB disconnect, device number 37 [ 475.003669][ C1] kbtab 12-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 475.208037][T18830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3578'. [ 475.211826][T18830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3578'. [ 475.300960][T18832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3579'. [ 475.313020][T18832] bridge5: port 1(ip6gretap2) entered blocking state [ 475.315685][T18832] bridge5: port 1(ip6gretap2) entered disabled state [ 475.317851][T18832] ip6gretap2: entered allmulticast mode [ 475.321533][T18832] ip6gretap2: entered promiscuous mode [ 475.327556][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3579'. [ 475.348313][T18832] veth7: entered promiscuous mode [ 475.428025][T18834] nfs: Unknown parameter 'û' [ 475.569641][ T40] audit: type=1400 audit(3508369687.516:65172): avc: denied { accept } for pid=18842 comm="syz.7.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 475.798300][T18847] fuse: Bad value for 'group_id' [ 475.799964][T18847] fuse: Bad value for 'group_id' [ 476.104002][T18863] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 476.106735][T18863] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 476.112582][T18863] vhci_hcd vhci_hcd.0: Device attached [ 476.155063][T18864] vhci_hcd: unknown pdu 1 [ 476.160114][T16005] vhci_hcd: stop threads [ 476.161921][T16005] vhci_hcd: release socket [ 476.163852][T16005] vhci_hcd: disconnect device [ 476.819250][T12872] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 476.823772][T12872] CPU: 3 UID: 0 PID: 12872 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 476.823796][T12872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 476.823808][T12872] Call Trace: [ 476.823815][T12872] [ 476.823823][T12872] dump_stack_lvl+0x16c/0x1f0 [ 476.823855][T12872] dump_header+0x101/0x930 [ 476.823888][T12872] oom_kill_process+0x270/0xa60 [ 476.823920][T12872] out_of_memory+0x350/0x1700 [ 476.823954][T12872] ? __pfx_out_of_memory+0x10/0x10 [ 476.823990][T12872] mem_cgroup_out_of_memory+0x118/0x130 [ 476.824017][T12872] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 476.824047][T12872] ? do_raw_spin_unlock+0x172/0x230 [ 476.824073][T12872] try_charge_memcg+0x72b/0xd50 [ 476.824097][T12872] ? __pfx_try_charge_memcg+0x10/0x10 [ 476.824123][T12872] ? find_held_lock+0x2b/0x80 [ 476.824151][T12872] charge_memcg+0x8a/0x230 [ 476.824171][T12872] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 476.824195][T12872] __read_swap_cache_async+0x43e/0x5a0 [ 476.824226][T12872] ? __pfx___read_swap_cache_async+0x10/0x10 [ 476.824251][T12872] ? swp_swap_info+0xce/0x130 [ 476.824270][T12872] ? __pfx_swp_swap_info+0x10/0x10 [ 476.824295][T12872] swap_cluster_readahead+0x3eb/0x710 [ 476.824326][T12872] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 476.824368][T12872] ? get_vma_policy+0x242/0x3c0 [ 476.824391][T12872] swapin_readahead+0x13a/0xd60 [ 476.824425][T12872] ? __pfx_swapin_readahead+0x10/0x10 [ 476.824447][T12872] ? __filemap_get_folio+0x32b/0xc30 [ 476.824471][T12872] ? swap_cache_get_folio+0x1df/0x450 [ 476.824497][T12872] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 476.824519][T12872] ? __pfx_get_swap_device+0x10/0x10 [ 476.824548][T12872] ? do_swap_page+0x125/0x65c0 [ 476.824573][T12872] do_swap_page+0x635/0x65c0 [ 476.824595][T12872] ? __lock_acquire+0x622/0x1c90 [ 476.824621][T12872] ? __pfx_do_swap_page+0x10/0x10 [ 476.824644][T12872] ? __pfx_default_wake_function+0x10/0x10 [ 476.824674][T12872] ? rcu_is_watching+0x12/0xc0 [ 476.824703][T12872] ? ___pte_offset_map+0x1d5/0x570 [ 476.824729][T12872] __handle_mm_fault+0x162f/0x5490 [ 476.824761][T12872] ? __pfx___handle_mm_fault+0x10/0x10 [ 476.824785][T12872] ? lock_vma_under_rcu+0x47d/0x970 [ 476.824809][T12872] ? lock_vma_under_rcu+0x47d/0x970 [ 476.824854][T12872] handle_mm_fault+0x589/0xd10 [ 476.824880][T12872] ? __pkru_allows_pkey+0x51/0xb0 [ 476.824908][T12872] do_user_addr_fault+0x60c/0x1370 [ 476.824938][T12872] ? rcu_is_watching+0x12/0xc0 [ 476.824964][T12872] exc_page_fault+0x5c/0xb0 [ 476.824992][T12872] asm_exc_page_fault+0x26/0x30 [ 476.825009][T12872] RIP: 0033:0x7fbe4cbc1268 [ 476.825026][T12872] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 476.825043][T12872] RSP: 002b:00007fff185d9190 EFLAGS: 00010293 [ 476.825059][T12872] RAX: 0000000000000000 RBX: 0000000000000557 RCX: 00007fbe4cbc1265 [ 476.825071][T12872] RDX: 00007fff185d91d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 476.825082][T12872] RBP: 00007fff185d923c R08: 0000000000000000 R09: 0000000000000000 [ 476.825094][T12872] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 476.825105][T12872] R13: 00000000000927c0 R14: 000000000006d6b4 R15: 00007fff185d9290 [ 476.825131][T12872] [ 476.825138][T12872] memory: usage 307200kB, limit 307200kB, failcnt 13200 [ 476.954233][T12872] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 476.956746][T12872] kmem: usage 5720kB, limit 9007199254740988kB, failcnt 0 [ 476.957779][T18872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.958921][T12872] Memory cgroup stats for /syz2: [ 476.964702][T12872] cache 308207616 [ 476.968093][T12872] rss 147456 [ 476.969368][T12872] rss_huge 0 [ 476.970550][T12872] shmem 307941376 [ 476.971760][T12872] mapped_file 8192 [ 476.973042][T12872] dirty 8192 [ 476.974336][T12872] writeback 0 [ 476.975474][T12872] workingset_refault_anon 354 [ 476.977192][T12872] workingset_refault_file 441 [ 476.978575][T12872] swap 278528 [ 476.979735][T12872] swapcached 118784 [ 476.981334][T12872] pgpgin 864555 [ 476.982516][T12872] pgpgout 790809 [ 476.983824][T12872] pgfault 240472 [ 476.985137][T12872] pgmajfault 241 [ 476.986303][T12872] inactive_anon 307965952 [ 476.988013][T12872] active_anon 131072 [ 476.989263][T12872] inactive_file 0 [ 476.990434][T12872] active_file 266240 [ 476.991692][T12872] unevictable 0 [ 476.992817][T12872] hierarchical_memory_limit 314572800 [ 476.994718][T12872] hierarchical_memsw_limit 9223372036854771712 [ 476.996910][T12872] total_cache 308207616 [ 476.999012][T12872] total_rss 147456 [ 477.000683][T12872] total_rss_huge 0 [ 477.002337][T12872] total_shmem 307941376 [ 477.002357][T18874] 9pnet_virtio: no channels available for device 127.0.0.1 [ 477.004114][T12872] total_mapped_file 8192 [ 477.008953][T12872] total_dirty 8192 [ 477.010574][T12872] total_writeback 0 [ 477.011981][T12872] total_workingset_refault_anon 354 [ 477.013614][T12872] total_workingset_refault_file 441 [ 477.015246][T12872] total_swap 278528 [ 477.016466][T12872] total_swapcached 118784 [ 477.017828][T12872] total_pgpgin 864555 [ 477.019119][T12872] total_pgpgout 790809 [ 477.020482][T12872] total_pgfault 240472 [ 477.021782][T12872] total_pgmajfault 241 [ 477.022990][T12872] total_inactive_anon 307965952 [ 477.024584][T12872] total_active_anon 131072 [ 477.025989][T12872] total_inactive_file 0 [ 477.027296][T12872] total_active_file 266240 [ 477.028674][T12872] total_unevictable 0 [ 477.030307][T12872] anon_cost 0 [ 477.031384][T12872] file_cost 0 [ 477.032458][T12872] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3582,pid=18840,uid=0 [ 477.039198][T12872] Memory cgroup out of memory: Killed process 18840 (syz.2.3582) total-vm:101944kB, anon-rss:952kB, file-rss:23080kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 478.524297][T18880] Failed to get privilege flags for destination (handle=0x2:0x4) [ 478.604317][ T40] audit: type=1400 audit(3508369690.350:65173): avc: denied { map } for pid=18881 comm="syz.7.3595" path="socket:[90259]" dev="sockfs" ino=90259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 478.613902][ T40] audit: type=1400 audit(3508369690.360:65174): avc: denied { accept } for pid=18881 comm="syz.7.3595" path="socket:[90259]" dev="sockfs" ino=90259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 478.626941][T18882] ------------[ cut here ]------------ [ 478.629248][T18882] WARNING: CPU: 2 PID: 18882 at arch/x86/kvm/x86.c:11645 kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 478.630754][T18887] 9pnet_virtio: no channels available for device syz [ 478.633750][T18882] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 478.633809][T18882] CPU: 2 UID: 0 PID: 18882 Comm: syz.7.3595 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 478.642432][ T40] audit: type=1400 audit(3508369690.378:65175): avc: denied { write } for pid=5864 comm="syz-executor" path="pipe:[7211]" dev="pipefs" ino=7211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 478.643044][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 478.643329][T18882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 478.654485][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 478.655362][T18882] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 478.663274][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 478.663956][T18882] Code: 0a 00 00 00 00 00 00 e8 25 88 be 1e 31 ff 89 c5 89 c6 e8 67 5f 7a 00 85 ed 0f 8f f4 f0 ff ff e9 f5 f1 ff ff e8 15 64 7a 00 90 <0f> 0b 90 e9 9c f0 ff ff e8 07 64 7a 00 90 0f 0b 90 e9 d3 f0 ff ff [ 478.673669][T18882] RSP: 0018:ffffc90003647c38 EFLAGS: 00010293 [ 478.674596][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 478.675986][T18882] RAX: 0000000000000000 RBX: ffff88805b52a940 RCX: ffffffff81417587 [ 478.679372][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 478.682636][T18882] RDX: ffff88805881a440 RSI: ffffffff814184eb RDI: 0000000000000007 [ 478.689193][T18882] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 478.692730][T18882] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88805bc08000 [ 478.696234][T18882] R13: ffff88805b52aa18 R14: 0000000000000000 R15: ffff88805bc08120 [ 478.699833][T18882] FS: 00007fd95ea236c0(0000) GS:ffff8880d6922000(0000) knlGS:0000000000000000 [ 478.703873][T18882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.706846][T18882] CR2: 000000005200000c CR3: 000000005bf83000 CR4: 0000000000352ef0 [ 478.710492][T18882] Call Trace: [ 478.712048][T18882] [ 478.713426][T18885] Failed to initialize the IGMP autojoin socket (err -2) [ 478.713470][T18882] kvm_vcpu_ioctl+0x5eb/0x1690 [ 478.717946][T18882] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 478.720501][T18882] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 478.723540][T18882] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 478.726857][T18882] ? hook_file_ioctl_common+0x145/0x410 [ 478.729499][T18882] ? selinux_file_ioctl+0x180/0x270 [ 478.732116][T18882] ? selinux_file_ioctl+0xb4/0x270 [ 478.734567][T18882] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 478.737033][T18882] __x64_sys_ioctl+0x18e/0x210 [ 478.739269][T18882] do_syscall_64+0xcd/0x4c0 [ 478.741502][T18882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.744252][T18882] RIP: 0033:0x7fd95db8e9a9 [ 478.746332][T18882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.755103][T18882] RSP: 002b:00007fd95ea23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.758958][T18882] RAX: ffffffffffffffda RBX: 00007fd95ddb5fa0 RCX: 00007fd95db8e9a9 [ 478.762085][T18882] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 478.765164][T18882] RBP: 00007fd95dc10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 478.768232][T18882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.770931][T18882] R13: 0000000000000000 R14: 00007fd95ddb5fa0 R15: 00007ffc65b31148 [ 478.773717][T18882] [ 478.774807][T18882] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 478.777484][T18882] CPU: 2 UID: 0 PID: 18882 Comm: syz.7.3595 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 478.781642][T18882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 478.785669][T18882] Call Trace: [ 478.786986][T18882] [ 478.788199][T18882] dump_stack_lvl+0x3d/0x1f0 [ 478.790066][T18882] panic+0x71c/0x800 [ 478.791846][T18882] ? __pfx_panic+0x10/0x10 [ 478.793814][T18882] ? show_trace_log_lvl+0x29b/0x3e0 [ 478.795630][T18882] ? check_panic_on_warn+0x1f/0xb0 [ 478.797402][T18882] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 478.799421][T18882] check_panic_on_warn+0xab/0xb0 [ 478.801128][T18882] __warn+0xf6/0x3c0 [ 478.802520][T18882] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 478.804533][T18882] report_bug+0x3c3/0x580 [ 478.806035][T18882] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 478.808059][T18882] handle_bug+0x184/0x210 [ 478.809553][T18882] exc_invalid_op+0x17/0x50 [ 478.811129][T18882] asm_exc_invalid_op+0x1a/0x20 [ 478.812825][T18882] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 478.815021][T18882] Code: 0a 00 00 00 00 00 00 e8 25 88 be 1e 31 ff 89 c5 89 c6 e8 67 5f 7a 00 85 ed 0f 8f f4 f0 ff ff e9 f5 f1 ff ff e8 15 64 7a 00 90 <0f> 0b 90 e9 9c f0 ff ff e8 07 64 7a 00 90 0f 0b 90 e9 d3 f0 ff ff [ 478.821544][T18882] RSP: 0018:ffffc90003647c38 EFLAGS: 00010293 [ 478.823660][T18882] RAX: 0000000000000000 RBX: ffff88805b52a940 RCX: ffffffff81417587 [ 478.826322][T18882] RDX: ffff88805881a440 RSI: ffffffff814184eb RDI: 0000000000000007 [ 478.829027][T18882] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 478.831731][T18882] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88805bc08000 [ 478.834446][T18882] R13: ffff88805b52aa18 R14: 0000000000000000 R15: ffff88805bc08120 [ 478.837166][T18882] ? kvm_arch_vcpu_ioctl_run+0x457/0x18c0 [ 478.839121][T18882] ? kvm_arch_vcpu_ioctl_run+0x13bb/0x18c0 [ 478.841137][T18882] ? kvm_arch_vcpu_ioctl_run+0x13bb/0x18c0 [ 478.843141][T18882] kvm_vcpu_ioctl+0x5eb/0x1690 [ 478.844807][T18882] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 478.846605][T18882] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 478.848847][T18882] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 478.851186][T18882] ? hook_file_ioctl_common+0x145/0x410 [ 478.853086][T18882] ? selinux_file_ioctl+0x180/0x270 [ 478.854877][T18882] ? selinux_file_ioctl+0xb4/0x270 [ 478.856660][T18882] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 478.858444][T18882] __x64_sys_ioctl+0x18e/0x210 [ 478.860110][T18882] do_syscall_64+0xcd/0x4c0 [ 478.861678][T18882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.863730][T18882] RIP: 0033:0x7fd95db8e9a9 [ 478.865265][T18882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.871729][T18882] RSP: 002b:00007fd95ea23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.874563][T18882] RAX: ffffffffffffffda RBX: 00007fd95ddb5fa0 RCX: 00007fd95db8e9a9 [ 478.877260][T18882] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 478.879964][T18882] RBP: 00007fd95dc10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 478.882661][T18882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.885359][T18882] R13: 0000000000000000 R14: 00007fd95ddb5fa0 R15: 00007ffc65b31148 [ 478.888078][T18882] [ 478.889784][T18882] Kernel Offset: disabled [ 478.891331][T18882] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:29:18 Registers: info registers vcpu 0 CPU#0 RAX=1ffff1100a3d2c11 RBX=ffff888051e96000 RCX=0000000000000008 RDX=0000000024924925 RSI=0000000000000000 RDI=ffff88801cef4025 RBP=dffffc0000000000 RSP=ffffc9000378fd10 R8 =0000000000000440 R9 =0000000000000000 R10=00000000000001c0 R11=0000000000000001 R12=ffffea0000ee2280 R13=ffff88801cef4000 R14=ffff888051e96088 R15=ffffc9000378fda0 RIP=ffffffff822a6b69 RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055557505a500 ffffffff 00c00000 GS =0000 ffff8880d6722000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd95e9e0f98 CR3=000000005cc33000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dc11c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dc11c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dc11c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dc11c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dc11d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dc11df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dd86488 00007fd95dd86480 00007fd95dd86478 00007fd95dd86450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95e8ed100 00007fd95dd86440 00007fd95dd86458 00007fd95dd864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dd86498 00007fd95dd86490 00007fd95dd86488 00007fd95dd86480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88801ce88048 RCX=1ffffffff2152de8 RDX=00000000ffffffff RSI=0000000000000011 RDI=ffff88801ce88048 RBP=ffff88807ffd7400 RSP=ffffc90003fc77a0 R8 =f8051b4ef456f122 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00000000ffffffff R13=0000000000000011 R14=ffff88801caf8000 R15=0000000000000000 RIP=ffffffff8229a9f7 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6822000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0821ae7d60 CR3=0000000028ce8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0820f866a3 00007f0820f866a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc5badbf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000030000000a 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 000000040000000d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555713a55c4 00005555713a4860 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69763d736e617274 01ffffffffffffff ffe5081280030070 3901ffffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0112800408808080 1000088004068004 00040a0142940002 0012ea0358020012 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e803007366737973 01ffffffffffffff fff30812dc037a02 0012da03656d616e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7501ffffffffffff fffff50812d00358 020012ce03000ca4 0012aa037a020012 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a803646975746c66 6401ffffffffffff fffff108129a032c 6f69747269763d73 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a3d95 RDI=ffffffff9b0b7e60 RBP=ffffffff9b0b7e20 RSP=ffffc900036475a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000005d R14=ffffffff9b0b7e20 R15=ffffffff855a3d30 RIP=ffffffff855a3dbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007fd95ea236c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6922000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=000000005bf83000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dc11d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dc11df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffc900041f777c RDX=1ffff9200083ef0c RSI=ffffffff822105a3 RDI=ffffc900041f7828 RBP=ffffc900041f7870 RSP=ffffc900041f77b8 R8 =ffffffff91435d38 R9 =0000000000000000 R10=0000000000000000 R11=000000000000a790 R12=ffffffff81a78d60 R13=ffffc900041f7828 R14=0000000000000000 R15=ffff888037f4a440 RIP=ffffffff816ad76a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fd95ea026c0 ffffffff 00c00000 GS =0000 ffff8880d6a22000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000fe9008 CR3=000000005bf83000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc65b314d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dc11c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dc11c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dc11c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dc11c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dc11d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95dc11df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000