last executing test programs: 5m18.408804694s ago: executing program 32 (id=478): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f00000003c0)={{r0, &(0x7f0000000140)='{\x00', 0x450881, &(0x7f00000001c0)={@align=0x4, {0x8, 0x9, 0x200, 0x1}}, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x6}, 0x2, &(0x7f0000000380)=[{0x2, 0xf, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="c7d8d76d44830abfe921", 0xa, 0x22}, {0x3, 0x1, &(0x7f0000000300)='(.+\\\\\x00', &(0x7f0000000340)="88ab3baa690cba12375761eccd452d6eb509a822780e2cf88c5b043d", 0x1c, 0x6}]}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x140c, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4044800) ioctl$COMEDI_BUFCONFIG(r3, 0x8020640d, &(0x7f0000000440)={0x0, 0xf8, 0x36d460dc, 0xa}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xd}, 'port1\x00', 0x72, 0x21cfa, 0x0, 0x8000007, 0x3, 0x4, 0x12, 0x0, 0x6}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x263, @tick=0x3e5, 0x2, {0x0, 0xfe}, 0x5, 0x2, 0x80}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r5, 0x1, 0x0, 0x1000000000000}) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(0xffffffffffffffff, 0x6f44, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0x3) 4m46.898603986s ago: executing program 33 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) sendfile(r0, r4, 0x0, 0x4000000000000007) 4m29.348839264s ago: executing program 34 (id=793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) (async) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x5, 0x8, [0x1, 0x3a5d, 0x6, 0x2f, 0x2, 0x4, 0x3, 0x1]}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={r4, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000100)=0x84) 4m0.043697915s ago: executing program 35 (id=1311): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000180700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m32.895912194s ago: executing program 36 (id=1557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x8, 0x4, 0xe66d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8000, 0x5, 0x4000000, 0x0, 0xd304}, 0x8, 0x1, 0x3ff, 0x7, 0x7f, 0x5, 0x8, 0x16, 0x1, 0x6, {0x7, 0x7, 0x8, 0x7fffffff, 0x6f0f88ae}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'nr0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@newtclass={0x3c, 0x28, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0x9}, {0x5, 0x8}, {0x5, 0x5}}, [@tclass_kind_options=@c_htb={{0x8}, {0x10, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x8}]}}]}, 0x3c}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) close(r7) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010015, 0x0, 0x9}]}) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004b00)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0xfffe}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$NBD_PRINT_DEBUG(r9, 0xab06) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'veth0_to_hsr\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2m35.624675213s ago: executing program 3 (id=2293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 2m35.32453046s ago: executing program 3 (id=2302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8000, 0x5, 0x4000000, 0x0, 0xd304}, 0x8, 0x1, 0x3ff, 0x7, 0x7f, 0x5, 0x8, 0x16, 0x1, 0x6, {0x7, 0x7, 0x8, 0x7fffffff, 0x6f0f88ae}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004b00)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2m35.145344508s ago: executing program 3 (id=2307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f7274000000000c000780080008400000005f"], 0x58}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x39]}}}}]}) 2m35.091922423s ago: executing program 3 (id=2309): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r1 = socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000600000000000000351a4a2c216576d60000d14a3abef0d4023dcbd298e4091192384cf010c9c6b2d9b789963817e2ba52146cfe4ece8cd1fb5e12868e2e29692d09c9db450b04536fc502a9ffbaa54843a7c576168b98d3302e92bf7d14217d433300c1bd29f0e72ec8c14965ef573084cfb639b70cb664020daebefad09a8df3228f946c30", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280080003000010000008000700216a0000"], 0x44}}, 0x0) 2m34.945349934s ago: executing program 3 (id=2310): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x8101) 2m34.906003919s ago: executing program 3 (id=2311): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000e00)={0x1, r2, r1}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = getegid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}], [{@audit}, {@obj_type={'obj_type', 0x3d, '!&{&[#-/-*&\'!\''}}]}}) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000200, r4, &(0x7f0000000280)='./bus\x00') chdir(&(0x7f0000000140)='./bus\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 2m34.758684979s ago: executing program 37 (id=2311): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000e00)={0x1, r2, r1}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = getegid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}], [{@audit}, {@obj_type={'obj_type', 0x3d, '!&{&[#-/-*&\'!\''}}]}}) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000200, r4, &(0x7f0000000280)='./bus\x00') chdir(&(0x7f0000000140)='./bus\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 2m0.044781877s ago: executing program 9 (id=2755): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0xfffffffc, 0x317}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x60, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0, 0x40002141}) io_uring_enter(r0, 0x19ff, 0x0, 0x4, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020"], 0x138) write$UHID_DESTROY(r4, &(0x7f0000000340), 0x4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000300)=@v={0x93, 0x3, 0x80, 0x0, @generic}) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x6}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000, @value=r6}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r8, @ANYBLOB="05002bbd7000fcdbdf254400000008000b00e4c92351383ff1d748992917f082a992c7d28ff367a6a22e9efea94afceeccf58a63fa4514203dd3cbe2ccb0ae4ed3e69e8aaff2d4adda41273ba27d820d5413fddd26f692604f464383b8c88b9e8f05d42bbbbde3e4e36f0e6ce337ec2cd9", @ANYRES32=r9, @ANYBLOB="0c0023800500130000000000"], 0x28}}, 0x0) 1m59.834956873s ago: executing program 9 (id=2758): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x6, 0x0, 0x0, 0x1a, 0x1, {0x3}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m59.621226899s ago: executing program 9 (id=2760): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, 0x2010, r1, 0xe2b21000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42501, 0x0) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x4042895) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000540), 0x0, 0x1) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000080)={0x36, &(0x7f0000000580)=[{0x16, '\x00', @buffer={"35272ae91496445f86d1ddf767d3d003026c6539de187d6fc0800419c9a80d41", 0x20}, 0x2}]}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) pwrite64(r2, &(0x7f00000001c0)="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", 0xff, 0x10000) 1m59.504863461s ago: executing program 9 (id=2764): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_clone(0x40880400, &(0x7f0000000300)="248bf9073c18a3d8198b02cda3d22ec7bd9dc0b9cdfa86fbad5b4a02d7450194fd53c028e88200e0b0e97aa22bbdc1b5e5ce2dfef50e8cc732c3efc77683551a07c99b2d0ebc5840c2a75dc825e23c0b941de56b704b6e0621530ccb1128c55957c6f2182ee1fcf94def287c4c8ace6cfa", 0x71, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="c28c418c872f54a204849f3ee9f53c15ac231a6fb5b0f5af5ad8a03e7d7364584f2799ac67ccdbe2148b82eb8c20732fe514134cad7113361fec0b2d9e69ba99e36da3309abaffe107d373781786021b427a9ad31a30fb9bad5f3d0d93724f0392523cdb0fb4275b0f77242b84e6cd") r2 = syz_open_procfs(r1, &(0x7f0000000480)='timers\x00') getdents64(r2, &(0x7f0000000240)=""/44, 0x7a) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) getdents64(r2, 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(r4, &(0x7f0000000280)='./file0/file0\x00', 0x6c2241, 0x121) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r4, 0x0, 0x240) 1m59.222501157s ago: executing program 9 (id=2767): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) r1 = gettid() bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES64=r1], 0x50) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0xfff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x511000) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$bpf(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000440), 0x808, &(0x7f0000000880)={[{}]}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) sendmsg$nl_netfilter(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)={0x244, 0x7, 0xa, 0x3, 0x70bd2b, 0x25dfdbfc, {0x1, 0x0, 0x7}, [@typed={0x8, 0x1f, 0x0, 0x0, @u32=0x2}, @generic="05490fb0ee4a1fae35bba656c8f4bdc6257fe24fa8ee0b4e02cb49bca300", @nested={0x10, 0xb5, 0x0, 0x1, [@nested={0x4, 0x19}, @typed={0x8, 0xaf, 0x0, 0x0, @fd=r3}]}, @typed={0x4, 0x39}, @nested={0x18d, 0x152, 0x0, 0x1, [@generic="992b04f93236099ef97a5e3e4dd7df8274051a663ea7f0dd0f56001f1abb171ba0a2740e003febb0ed5b39d4c19f6006699a951388a29687f38c01d724cb6e81a56bd707f3892efac60d0807c73b15f454fd209874d885de67da91baaa2452e9cbafbfce176de5a9b4832e339bfbe36c0bb6346e28c7dc662011d81a51cd2f07e165bc9028ec734571e29f803553bca18eb855f5b3dff13820f906e1f6b04bf316344af842665ee2c7b05ad3b7039fe8c50774c7fbfead69b6bc41a04b22c9032d343abd62e61718e95c573f2763c1d02c9a111eb75e5c79ef82e8fdd7d6e3b20c7d4ac271c5160a2b16ea6533b6784e9058349f2f41210d", @generic="63b1cfeada25dd8b897e21245310141d9eaaf6", @typed={0x5, 0x25, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x2a}, @typed={0x4, 0x45}, @generic="b7d64e6e3bd9f30ba1d5a9c481001643bdc89e2133f17f0de3fbebe3ae4e861679f0ea75bd75f5a897a865b5ba79571b44d172ede7bc4cab505618dbc6562fc65b92", @generic="0cc4970fe4906825fa2be7fec37fd0b231550a2c61db085b", @typed={0x8, 0x78, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x98, 0x0, 0x0, @pid=r1}, @nested={0x4, 0x6c}]}, @generic="c915e20b1c26327e87f7ae77d10562fcb7", @generic="0581e2e96652ec5964b08eb0f370833363009f12e25bef7d423f699bb4491c3374e4a4c36d3e8ef045860a16cae2d892450177d8e674e056d23ac4258561b545ac15bde0fbbf4e611931bfa310e178bd7b2cd4f74c"]}, 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x4008840) read$FUSE(r0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) write$FUSE_POLL(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xba49}}, 0x18) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 1m58.564827843s ago: executing program 9 (id=2769): r0 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xa, &(0x7f0000000140)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000170000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r2, 0xc008644e, &(0x7f0000000080)={0xf}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x45}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000280)=""/242, 0xf2}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/nf_conntrack_expect\x00') lseek(r4, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000440)={0x0, 0x8, 0x3, 0x1}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4c850) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)=@newtfilter={0x4a0, 0x2c, 0x8, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0xd, 0xfff1}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x470, 0x2, [@TCA_BASIC_EMATCHES={0x46c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x8}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="52c70f", @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x8}, {0x0, 0x9, 0x2, 0x80}}}, @TCF_EM_CONTAINER={0x90, 0x1, 0x0, 0x0, {{0x400, 0x0, 0x40}, "1fffd7b09e82b92ebdacbbcc05591ff86d5250e593ec3bc7502bc8b1e36323d4d3d50337b62f02a815f175d2b5068aea3115047abf68da8d16e8e854163aee3450c14e06360e099af5f3bd7033f9093af6b6e3d6ef28d1af49e7eae8e41d3cc537dba4d3718c322663bbba66623511dc2481727d890295a31062ad8cdbfcf54dba2613"}}]}, @TCA_EMATCH_TREE_LIST={0x2d8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x74, 0x3, 0x0, 0x0, {{0x1, 0x0, 0xff80}, "640635fbaaad871385b78faf0c42aff9712eadd14d7f92b14cb2424c971c5a8c8e24df98ae36271dd17452eb867d0ca4285eb4e62710d39fa781bc3fa5e7220440c42f4f33914a1fda683f0d50bc8ff186a62eece7d2eda3a1d2bf1d8a172f7e413e12fca4b3"}}, @TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x2d, 0x3, [@TCF_META_TYPE_VAR="7b7518354a5256", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="efbeebffffffa46df493", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x7}, {0x3, 0x5}}}, @TCF_EM_META={0x74, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR="717ad7", @TCF_META_TYPE_VAR="31317bed4667b578f7", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="2fd38e1bc2139a7e", @TCF_META_TYPE_VAR="10fb27ea49", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="81", @TCF_META_TYPE_VAR="325bc9ed1c425c665f", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x690, 0x1}, {0x2, 0x4, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xe, 0x2}, {0xff80, 0x6, 0x1}}}]}}, @TCF_EM_IPT={0x190, 0x2, 0x0, 0x0, {{0xaa24, 0x9, 0xffff}, [@TCA_EM_IPT_MATCH_DATA={0xd3, 0x5, "00a84f0d557a2471129d3ff7ac0a44a152893be877213283502c5fab1aa942878886c554e8768894945f2359dea1557e628823a9da34fd036a07e3e545c682df83b55659853fac379bc9b26f182b358290118c71b7865190b6e3e1c07cd89326c7dc0e5869551da13e74da8195379450bebe4806f0c6b1b7bf076999434294f93569ca3281fba5229110f31835c3a624e9ed5fbc9e675400e9b9d8d59144a1114c8615a958e45bfa89856d125ad9b411efc3bd56c22e4d4eaa4da7b813b7ac8c99a1c39fa2cf99f211b1afa39a5288"}, @TCA_EM_IPT_MATCH_DATA={0x85, 0x5, "75e445f2991a50cadf7d16cde3bc93883ce584efd7066d282bfe226a4fd4b340cc3f24159b01e8c96c7fea642e001b10ac0b266061bc8ea3d07ee7cc4cee3ecbd4896ce2b70bfb8a30da314347f58ea6a639fbea3c29fbc58088049846aff9282c98d046497bd768962ada1633a66f32a6c084a4b7014cabacec9d17a7227c67bc"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xb0, 0x3, 0x0, 0x0, {{0x35, 0x0, 0x4}, "211bd915a2663ff70585dc4875471bcf9ecbc147b6900542f6721e469a2a85905e8c6eb440a1759cc8ab6ea0fe50e93f49759497771e5e1bc7d739707192831412c9cf5ae326e0a3c6ba9431ac062f7316a0bb8636932746dd1ba29cf86dc686c60adf2da05d0acb8e4e77f228984e693c0f3ebd33ee271a38da152e2ee142a032bfd47dccd822d28a4b60bdc2cddca45938735c5067bc37634ba1e71dad6a2e70"}}]}]}]}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000c40)={0x1, @sdr={0x32314742, 0x7fffffff}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000840)={r5, 0x9, 0xfffffffffffff800}) 1m58.484916371s ago: executing program 38 (id=2769): r0 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xa, &(0x7f0000000140)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000170000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r2, 0xc008644e, &(0x7f0000000080)={0xf}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x45}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000280)=""/242, 0xf2}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/nf_conntrack_expect\x00') lseek(r4, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000440)={0x0, 0x8, 0x3, 0x1}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4c850) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)=@newtfilter={0x4a0, 0x2c, 0x8, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0xd, 0xfff1}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x470, 0x2, [@TCA_BASIC_EMATCHES={0x46c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x8}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="52c70f", @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x8}, {0x0, 0x9, 0x2, 0x80}}}, @TCF_EM_CONTAINER={0x90, 0x1, 0x0, 0x0, {{0x400, 0x0, 0x40}, "1fffd7b09e82b92ebdacbbcc05591ff86d5250e593ec3bc7502bc8b1e36323d4d3d50337b62f02a815f175d2b5068aea3115047abf68da8d16e8e854163aee3450c14e06360e099af5f3bd7033f9093af6b6e3d6ef28d1af49e7eae8e41d3cc537dba4d3718c322663bbba66623511dc2481727d890295a31062ad8cdbfcf54dba2613"}}]}, @TCA_EMATCH_TREE_LIST={0x2d8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x74, 0x3, 0x0, 0x0, {{0x1, 0x0, 0xff80}, "640635fbaaad871385b78faf0c42aff9712eadd14d7f92b14cb2424c971c5a8c8e24df98ae36271dd17452eb867d0ca4285eb4e62710d39fa781bc3fa5e7220440c42f4f33914a1fda683f0d50bc8ff186a62eece7d2eda3a1d2bf1d8a172f7e413e12fca4b3"}}, @TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x2d, 0x3, [@TCF_META_TYPE_VAR="7b7518354a5256", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="efbeebffffffa46df493", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x7}, {0x3, 0x5}}}, @TCF_EM_META={0x74, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR="717ad7", @TCF_META_TYPE_VAR="31317bed4667b578f7", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="2fd38e1bc2139a7e", @TCF_META_TYPE_VAR="10fb27ea49", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="81", @TCF_META_TYPE_VAR="325bc9ed1c425c665f", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x690, 0x1}, {0x2, 0x4, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xe, 0x2}, {0xff80, 0x6, 0x1}}}]}}, @TCF_EM_IPT={0x190, 0x2, 0x0, 0x0, {{0xaa24, 0x9, 0xffff}, [@TCA_EM_IPT_MATCH_DATA={0xd3, 0x5, "00a84f0d557a2471129d3ff7ac0a44a152893be877213283502c5fab1aa942878886c554e8768894945f2359dea1557e628823a9da34fd036a07e3e545c682df83b55659853fac379bc9b26f182b358290118c71b7865190b6e3e1c07cd89326c7dc0e5869551da13e74da8195379450bebe4806f0c6b1b7bf076999434294f93569ca3281fba5229110f31835c3a624e9ed5fbc9e675400e9b9d8d59144a1114c8615a958e45bfa89856d125ad9b411efc3bd56c22e4d4eaa4da7b813b7ac8c99a1c39fa2cf99f211b1afa39a5288"}, @TCA_EM_IPT_MATCH_DATA={0x85, 0x5, "75e445f2991a50cadf7d16cde3bc93883ce584efd7066d282bfe226a4fd4b340cc3f24159b01e8c96c7fea642e001b10ac0b266061bc8ea3d07ee7cc4cee3ecbd4896ce2b70bfb8a30da314347f58ea6a639fbea3c29fbc58088049846aff9282c98d046497bd768962ada1633a66f32a6c084a4b7014cabacec9d17a7227c67bc"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xb0, 0x3, 0x0, 0x0, {{0x35, 0x0, 0x4}, "211bd915a2663ff70585dc4875471bcf9ecbc147b6900542f6721e469a2a85905e8c6eb440a1759cc8ab6ea0fe50e93f49759497771e5e1bc7d739707192831412c9cf5ae326e0a3c6ba9431ac062f7316a0bb8636932746dd1ba29cf86dc686c60adf2da05d0acb8e4e77f228984e693c0f3ebd33ee271a38da152e2ee142a032bfd47dccd822d28a4b60bdc2cddca45938735c5067bc37634ba1e71dad6a2e70"}}]}]}]}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000c40)={0x1, @sdr={0x32314742, 0x7fffffff}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000840)={r5, 0x9, 0xfffffffffffff800}) 1m52.554288322s ago: executing program 4 (id=2823): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e20, 0x10, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e, 0x400}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@gettaction={0x38, 0x32, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) clock_getres(0xfffffffffffffff1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'pim6reg1\x00'}) set_mempolicy(0x1, &(0x7f0000000040)=0x1003, 0x5) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e20, 0x10, @mcast2, 0x7}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e, 0x400}]}, 0x24}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101) (async) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@gettaction={0x38, 0x32, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) clock_getres(0xfffffffffffffff1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'pim6reg1\x00'}) (async) set_mempolicy(0x1, &(0x7f0000000040)=0x1003, 0x5) (async) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 1m52.372651094s ago: executing program 4 (id=2824): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000070000000000000002900000004000000040a00000000000007080000000100099f000740000000010e7a01800500000000000000090000000000000004000000000000000600000000000000040000000000000000040000000000000b0000000000000005020a7e00010005020bf400f80000000000000029000000360000005e1b000000000000ff2250d650847249ad288702ebd0d654b985e8908defb7ec6e5ff115c58e128b9e3a21c300010000010001060000000000000738000000030c00ff0f040000000000000066090000000000000700000000000000f7ffffffffffffff01000000000000000100000000000000084cc8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df3bc7b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b07180000000304030700000000000000000004ffffffffffffff01ffffdb86d1ce6a20c20000180000000000000029000000390000000000000000000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff02000000000000000000000000000100"/488], 0x1e8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)=ANY=[@ANYRESHEX=r1], 0x14}], 0x1}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x44, r5, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x7040}, 0x20004800) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="f1e626bd7000fbdbdf251300000008000300", @ANYRES32=r10, @ANYBLOB="04001300060012000400000006001000fd0000000a000600080211000000000044008100050002"], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r11 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000080)="f72c828a46bc59ff48f3be5216344841", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 1m52.194875229s ago: executing program 4 (id=2825): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6erspan0\x00'}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x44041}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) open_by_handle_at(r0, &(0x7f0000000380)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0xa2, 0x4, 0x4, 0xda23, 0x5}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@deltaction={0xfc, 0x31, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb37}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xafa2740}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x85}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1004000, &(0x7f0000000080)=ANY=[@ANYBLOB="47796f4119dd0d4690c2def656dadf655f020000588dca4bb62449b615554e7e719d040641f207a7f2b5e5f674487b31f759"]) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000100)={'dvmrp0\x00', 0x4235}) 1m52.084612005s ago: executing program 4 (id=2826): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000000)='./file1\x00') (async) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x3a, 0x2) write$P9_RSTATu(r0, &(0x7f0000000100)={0x234, 0x7d, 0x1, {{0x500, 0xf3, 0x0, 0x400, {0x0, 0x0, 0x4}, 0x10000000, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x57, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbb\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\x0eG'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x234) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc000, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) 1m52.081508007s ago: executing program 4 (id=2827): ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x724, 0x10}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="fe8000000049fac9826901026f0000aa0000000033000000240100000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007595000000000000240009000900000000000000090000000000000002000000000000007e000000000000004c0014007368613100"], 0x160}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x845) 1m51.814565821s ago: executing program 4 (id=2833): syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="1b68aaaaaaaaaaaae50500000800450000380000fffc00019078ac1e00e1ab1414aa030490780300fffe450000000000ffff002f00007f000001e0004f0000"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001440)=ANY=[@ANYBLOB="180000000200000000000000010000840400000000000000020000000000010000001affdf029b1b0bb5f4af145aa3a7e04ab2c0aa45cfb4ab12a79d6e4daa18da9a28072d208b560355f47a9bf3323eacfd206f86ff"], 0x0, 0x32, 0x0, 0x1}, 0x28) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001400)=0x5, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x541b, &(0x7f0000000300)={@null, 0xf, 'team_slave_1\x00'}) r2 = syz_open_dev$sndmidi(&(0x7f0000000000), 0xf87, 0x40040) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f0000000100)=@attr_pmu_init) preadv(r2, &(0x7f0000001380)=[{&(0x7f0000000040)=""/69, 0x45}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000001280)=""/204, 0xcc}, {&(0x7f0000000180)=""/52, 0x34}], 0x5, 0x3, 0x9) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x1}, 0x8) 1m51.668761633s ago: executing program 39 (id=2833): syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="1b68aaaaaaaaaaaae50500000800450000380000fffc00019078ac1e00e1ab1414aa030490780300fffe450000000000ffff002f00007f000001e0004f0000"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001440)=ANY=[@ANYBLOB="180000000200000000000000010000840400000000000000020000000000010000001affdf029b1b0bb5f4af145aa3a7e04ab2c0aa45cfb4ab12a79d6e4daa18da9a28072d208b560355f47a9bf3323eacfd206f86ff"], 0x0, 0x32, 0x0, 0x1}, 0x28) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001400)=0x5, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x541b, &(0x7f0000000300)={@null, 0xf, 'team_slave_1\x00'}) r2 = syz_open_dev$sndmidi(&(0x7f0000000000), 0xf87, 0x40040) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f0000000100)=@attr_pmu_init) preadv(r2, &(0x7f0000001380)=[{&(0x7f0000000040)=""/69, 0x45}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000001280)=""/204, 0xcc}, {&(0x7f0000000180)=""/52, 0x34}], 0x5, 0x3, 0x9) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x1}, 0x8) 1m46.544937374s ago: executing program 0 (id=2861): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x2, 0x1000, 0xfc, 0x4}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="c74ac7b20d73b72c0ec450dcb6294124b18b50cee6844a5610155ef4bb956a12556509a90e8b175ff06c6e941b75bb9802a231efde5ea8795270cc464972a1cd43b398ee2c904f52bee85f6c0566b6845a05c0cbc4ad35dcc485f6ac4518a78eea69b87090e0", 0x66, 0x8000, &(0x7f0000000180)={0xa, 0x4e24, 0x7fffffff, @mcast2, 0xfffffffe}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)={0x54, r2, 0xfe12482fe0801d67, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xfffffffffffffffa}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040010}, 0x44004) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000000)={0x0, @src_change}) 1m45.674936819s ago: executing program 0 (id=2866): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x100400, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0], 0x1}, 0x58) 1m45.67471364s ago: executing program 0 (id=2867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 41) 1m45.404721661s ago: executing program 0 (id=2869): mkdir(&(0x7f0000000400)='./file0\x00', 0x132) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000001400)) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x15b4c0, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x8, 0x4000) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='o']) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendto$inet(r3, &(0x7f0000000040)='\f\x00', 0x2, 0x0, &(0x7f0000000340)={0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) ioctl$PTP_EXTTS_REQUEST2(r0, 0xc4c03d12, 0x0) 1m45.404276071s ago: executing program 0 (id=2870): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000240)=""/152, 0x98, 0xe1) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x40, 0x2e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000094}, 0x44) sendto(r2, &(0x7f0000000000), 0x0, 0x44, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0x400000, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0xfc, 0x5d, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0x58}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c, '\x00', r4, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6a}, 0x94) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4000000000025}, @fd={0x66642a85, 0x0, r9}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xd, &(0x7f0000000200)={0x1, 0x6dda}, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x20}, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="d45de9fe1623730da4e25fd1302aff9f0f9a048a6c4a76e9737e11d8890cc67cb3d98b2ccfa294dbaf80acb8687cf7c10a1873bb96726ed5ba8ce42bf877125c7d6061600f86e93a7c809ace3b693c1e785c2cd878cc67a7388067b0846019fff263ab9fbfe0e528cd6d15cfec56042813de16d614c9c6efbd13f565e82facf29f0f73d7f84e02513d97d85e647dec167d30fe90893c9663ed35618d735e61495d3a3bc4a06ebd58b84f7107b9d1a92fc77efedb799f10f097e6011a56746a1da49d9db6958a166d35a46c7f2340a6c880de06a50233f7d116af37ff00"/230, @ANYRES32=r6, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 1m44.474886042s ago: executing program 0 (id=2876): r0 = socket$inet(0x2, 0x3, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4f20, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x190, 0x17, 0x8, 0x70bd2c, 0x25dfdbfc, {0x5}, [@generic="9e0ae62508d0c4d81860a6deda4ebf1381765101ae6ecbc44c41ea54ce8092e34bd26a37cbc6c17b094400756c9bbb87c89db9518f50b4ed2241d46b5041e938d5182ef417bb4a24aea38f7d60126b8f612cf4a048c89bf9d52c4d148e90fbe764eb320ef1194b96189e22b291630215fe82e278d575430276ab8a91832ebbd1c098e38e5df24d0ba9c8a7ddbdba3f7862d544", @generic="2c96d02f817e653891f43fbc98b0893711e3a2b2c6d0f94921181a263d0bc0f83ba0e0d9f6193aa548563120ff63abf44bb79b928c3f9a074cc71062a6a6a57761c00ee78ca340266232f140f407d801101e8e5ad84611ead2fd16856e33d2cf9c738c823e9ad683709d76a963b132aae58978547963c7641b8a66b603d9b44ec612cc5412988006c4fa1d343006c9f7cda67ba57d4f6ba36d93483cb27c425c5889be772f97128eb0a37aaf4064f46010210e39afab5521767cd08fc25095377645da438dbb6464b1471eb166792663652aa8c055487ee6f1e151a33bfc45aa4c10a7baae01d76f"]}, 0x190}, 0x1, 0x0, 0x0, 0x40004}, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x2, 0x8, {}, {0xffffffffffffffff}, 0x65d, 0x8}) r4 = getpgid(0xffffffffffffffff) r5 = syz_pidfd_open(r4, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000040)={0x4d, 0x9ad, 0xc, 0xb, 0x6, 0x81}) r7 = pidfd_getfd(r5, r5, 0x0) setns(r7, 0x20000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x8, 0xbc, 0x15, @empty, @empty, 0x8000, 0x8, 0x6950, 0x7fff}}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="c0020000120000032abd7000fcdbdf2507000000", @ANYRES64=r5, @ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0x40001}, 0x20000801) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1m29.459007556s ago: executing program 40 (id=2876): r0 = socket$inet(0x2, 0x3, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4f20, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x190, 0x17, 0x8, 0x70bd2c, 0x25dfdbfc, {0x5}, [@generic="9e0ae62508d0c4d81860a6deda4ebf1381765101ae6ecbc44c41ea54ce8092e34bd26a37cbc6c17b094400756c9bbb87c89db9518f50b4ed2241d46b5041e938d5182ef417bb4a24aea38f7d60126b8f612cf4a048c89bf9d52c4d148e90fbe764eb320ef1194b96189e22b291630215fe82e278d575430276ab8a91832ebbd1c098e38e5df24d0ba9c8a7ddbdba3f7862d544", @generic="2c96d02f817e653891f43fbc98b0893711e3a2b2c6d0f94921181a263d0bc0f83ba0e0d9f6193aa548563120ff63abf44bb79b928c3f9a074cc71062a6a6a57761c00ee78ca340266232f140f407d801101e8e5ad84611ead2fd16856e33d2cf9c738c823e9ad683709d76a963b132aae58978547963c7641b8a66b603d9b44ec612cc5412988006c4fa1d343006c9f7cda67ba57d4f6ba36d93483cb27c425c5889be772f97128eb0a37aaf4064f46010210e39afab5521767cd08fc25095377645da438dbb6464b1471eb166792663652aa8c055487ee6f1e151a33bfc45aa4c10a7baae01d76f"]}, 0x190}, 0x1, 0x0, 0x0, 0x40004}, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x2, 0x8, {}, {0xffffffffffffffff}, 0x65d, 0x8}) r4 = getpgid(0xffffffffffffffff) r5 = syz_pidfd_open(r4, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000040)={0x4d, 0x9ad, 0xc, 0xb, 0x6, 0x81}) r7 = pidfd_getfd(r5, r5, 0x0) setns(r7, 0x20000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x8, 0xbc, 0x15, @empty, @empty, 0x8000, 0x8, 0x6950, 0x7fff}}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="c0020000120000032abd7000fcdbdf2507000000", @ANYRES64=r5, @ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0x40001}, 0x20000801) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1m7.17458948s ago: executing program 5 (id=3177): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000013c0)=0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00007e94ec1e80963e10489500100003040000000000000000e08b7400", @ANYRES32=0x0, @ANYBLOB="00000000031201001c0012800b00010062726964676500000c00028005002d0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000013c0)=0x9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00007e94ec1e80963e10489500100003040000000000000000e08b7400", @ANYRES32=0x0, @ANYBLOB="00000000031201001c0012800b00010062726964676500000c00028005002d0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) 1m7.174336525s ago: executing program 5 (id=3178): r0 = socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x800}, 0x8) (async, rerun: 64) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendto$inet6(r2, &(0x7f0000002100)="2c44d89bcad8826b", 0x8, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = getpid() (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x20008041}}], 0x1, 0x4000090) timer_create(0x5, &(0x7f0000000000)={0x0, 0x6, 0x1, @tid=r3}, &(0x7f00000000c0)) (async) r5 = io_uring_setup(0x2e01, &(0x7f0000000700)={0x0, 0xafd3, 0x1000, 0x2, 0x2d2}) (async) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x6543, 0x0, 0x0, 0x28e}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r5], 0x1) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000b0b089682d15421d9d4c336bd346af989b08b26cfbbddc6a6e56e5a2bba8f52b8c6da4dcfeb5a8c0b69ae7c07f8bfff7a6352f89db7feee7883c510f4a954c19ef841ca28eaae43fc797bad01c42ed96d28a4d9e3288526647c080cdda84378dd0cb0e3e3b6263e63ebcae0e667e240abd7e032ed5c6a57cf2d51f75562c5c948073f5eddd31b82e41f959532a6c06c5", @ANYRES16=r7, @ANYBLOB="010003000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m7.082998307s ago: executing program 5 (id=3179): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000940), &(0x7f0000000980)=0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x170bd2b, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x1074bd}], 0x1, 0x10102, 0x0) clock_adjtime(0x7, &(0x7f0000000440)={0x8, 0x8000000000000001, 0x3, 0x9, 0x3, 0xbb, 0x8, 0x80000001, 0x1, 0x6, 0x7, 0x10, 0x400, 0x7f, 0x8001, 0x9, 0x0, 0x282c000000000000, 0x8, 0x7, 0x2, 0x3, 0x3, 0xa78, 0x3, 0x9}) socket$inet6_udplite(0xa, 0x2, 0x88) 1m6.43461005s ago: executing program 5 (id=3183): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000000)=0x42c8, 0x4) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x44, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x44, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') socket(0x2, 0x3, 0x7) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) (async) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') sendto$inet6(r0, &(0x7f0000000000)="9f", 0x1, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc5f}, 0x1c) 1m5.614143802s ago: executing program 5 (id=3185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 72) 1m5.114611287s ago: executing program 5 (id=3190): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = timerfd_create(0x0, 0xc0000) ioctl$TFD_IOC_SET_TICKS(r4, 0x40085400, &(0x7f0000000080)=0x1c1b) fchown(0xffffffffffffffff, r2, r3) 1m5.071536451s ago: executing program 41 (id=3190): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = timerfd_create(0x0, 0xc0000) ioctl$TFD_IOC_SET_TICKS(r4, 0x40085400, &(0x7f0000000080)=0x1c1b) fchown(0xffffffffffffffff, r2, r3) 57.364006215s ago: executing program 2 (id=3227): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 56.353771589s ago: executing program 2 (id=3236): io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x162c81, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = userfaultfd(0x801) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0x8001, 0x0, r2}) ioctl$KDDISABIO(r4, 0x4b37) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000280)={0x1ff, 0x7, 0x3, 0x0, 0x6, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xa88, 0x80000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x3, 0x2000000000005}) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x400000, 0x3, 0x2}) 56.14398019s ago: executing program 2 (id=3237): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r1, &(0x7f0000001800)=[{{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)=""/212, 0xd4}, {&(0x7f00000000c0)=""/47, 0x2f}], 0x2}, 0x6}, {{&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/116, 0x74}, {&(0x7f0000000540)=""/65, 0x41}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/187, 0xbb}, {&(0x7f00000016c0)=""/149, 0x95}], 0x5}, 0xffff9db6}], 0x2, 0x102, &(0x7f0000000140)={0x0, 0x3938700}) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000006c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) (async) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0x6804, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000007c0)={0x0, 0x7, 0x1, [0xfffffffffffffff1, 0xd, 0x7, 0x2, 0x3], [0x2, 0x100000000, 0x1, 0x6, 0x1, 0x5, 0x5, 0x7, 0x3, 0x8001, 0x3, 0x14, 0x0, 0x3ff8000000000000, 0x6, 0x1, 0x5, 0x7fff, 0x10, 0x6c0, 0xe1, 0xb29, 0x1557, 0xfff, 0xb, 0x80000001, 0x1a, 0x1, 0x7, 0x9, 0xfffffffffffffffd, 0x4, 0x8000000000000001, 0x5, 0x10001, 0x4, 0x8, 0x400, 0xffff, 0x5, 0x800, 0x8, 0x80000000, 0xe48, 0x800000000, 0x0, 0x6, 0x3, 0x0, 0xb, 0x7, 0x6, 0x9a0, 0xc0, 0x200, 0x6, 0x10000, 0x8000, 0x6, 0x9, 0xfff, 0x0, 0x0, 0xfffffffffffeffff, 0x4b, 0x800, 0x117, 0x100, 0x8000, 0x1, 0x6, 0x7f, 0x7f, 0x2, 0x2, 0x3ff, 0x1, 0x100000000, 0x8, 0x9cc, 0x1000, 0x1, 0xc0, 0x7, 0x6, 0x120, 0x2cd0, 0xfff, 0x6, 0x1, 0x0, 0x4, 0x3, 0x400, 0xf, 0x0, 0x4, 0xb3a, 0x69f, 0x82, 0x80000001, 0x4, 0x7fffffff, 0xd, 0x7, 0x10001, 0x0, 0x7, 0xb0, 0x4, 0x10000, 0x0, 0x401, 0x2, 0x5, 0x0, 0x6, 0x3, 0x4, 0x3, 0x6]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 55.914195818s ago: executing program 2 (id=3238): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) getdents(r2, 0x0, 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2}) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @loopback}}}, 0x88) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x10, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e00b90f177020000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x3e, &(0x7f0000000d40)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa86dd6000000000083a00fe8000000000000000000000000000bbff02000000000000000004ac000000018f009078f9000000"], 0x0) 55.734547664s ago: executing program 2 (id=3239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x11, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000080)=0x8ae935af0bc54902, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5, 0x1000000}, 0x10) recvfrom(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000300b70800000000ed007b8af0ff00000000bfa100000000000007010000f8ffffffbf8700000000000007450000f0ffffffb702000008000000182300007d1827b71b3a8b29e9058bedf0efbb59ca2d41de421c9fe24482ed9317602ce2c5751675ab2176b2689c", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007600000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 54.634302158s ago: executing program 2 (id=3248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x420182, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="0000200000000000000000000000000000000000c9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2, r2], 0x0, 0x10, 0x10000}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000003000001000008001c00", @ANYRES32, @ANYBLOB="0800ff6d", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x24000840) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000100), 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r7, 0x18, 0xfff4, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2e, 0xfffd, 0xffffffff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01ffffff7f00000000006700080008000300", @ANYRES32=r8, @ANYBLOB="0800c300741300000800c40001"], 0x30}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="afd322045a9c2b2f14781aca2b4487ec02448fcde8ccba6d4c4fa2112b75acd46cd73ac2955971deae65c43111cd679157e169a583e073", @ANYRES32, @ANYBLOB="00000000000000ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r1], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r11, 0x0, 0x8000000}, 0x27) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r12 = epoll_create1(0x0) epoll_wait(r12, &(0x7f0000000000)=[{}], 0x1, 0x7ff) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000200)={0x1f, 0x2, 0x3}, 0x6) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000340)={0xe0000011}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)) 54.528253532s ago: executing program 42 (id=3248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x420182, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="0000200000000000000000000000000000000000c9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2, r2], 0x0, 0x10, 0x10000}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000003000001000008001c00", @ANYRES32, @ANYBLOB="0800ff6d", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x24000840) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000100), 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r7, 0x18, 0xfff4, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2e, 0xfffd, 0xffffffff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01ffffff7f00000000006700080008000300", @ANYRES32=r8, @ANYBLOB="0800c300741300000800c40001"], 0x30}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="afd322045a9c2b2f14781aca2b4487ec02448fcde8ccba6d4c4fa2112b75acd46cd73ac2955971deae65c43111cd679157e169a583e073", @ANYRES32, @ANYBLOB="00000000000000ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r1], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r11, 0x0, 0x8000000}, 0x27) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r12 = epoll_create1(0x0) epoll_wait(r12, &(0x7f0000000000)=[{}], 0x1, 0x7ff) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000200)={0x1f, 0x2, 0x3}, 0x6) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000340)={0xe0000011}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)) 4.378947638s ago: executing program 7 (id=3993): ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x4}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) init_module(&(0x7f0000000300), 0xaf, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600140000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.063113745s ago: executing program 7 (id=3997): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000003c0)=[{0x30, 0x5, 0x53, 0xfffff030}, {0x6, 0xc1, 0x6, 0x406}]}, 0x10) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x4, '\x00', @st={0x4, [{0x2, @uvalue=0xfff}, {0x0, @uvalue=0x1ff}, {0x3, @uvalue=0xfffffffffffffffb}, {0x0, @svalue=0x47b6cc5d}]}, 0x9}]}) 3.953709344s ago: executing program 7 (id=3998): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$bpf(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000440), 0x808, &(0x7f0000000880)={[{}]}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1.408614632s ago: executing program 1 (id=4021): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000080)={0x1b, "df42b04d5d56bfe3277e754345c2b689a684097ec9296ade39a6829f88070f7caab4ab06d19095091d86aa3666771d91d09e2d4120d953d17591496d82d9153bbe16a1f5b3abed4a084e2c66eb5db326f74de1e85d407c9182ac2555b183ad255c6f3085c52291013cfbf292bb6d1e54b2bc2ecc149949d466d8d007350878f0"}) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 1.353900684s ago: executing program 1 (id=4024): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x401, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x80, 0x46, 0x2, 0x8, 0x7}, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.033818244s ago: executing program 8 (id=4027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8000, 0x5, 0x4000000, 0x0, 0xd304}, 0x8, 0x1, 0x3ff, 0x7, 0x7f, 0x5, 0x8, 0x16, 0x1, 0x6, {0x7, 0x7, 0x8, 0x7fffffff, 0x6f0f88ae}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004b00)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 743.557392ms ago: executing program 7 (id=4028): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x401, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = syz_clone(0x5002011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000019200)=""/255, 0xff) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x80, 0x46, 0x2, 0x8, 0x7}, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 743.016932ms ago: executing program 1 (id=4029): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getenv(0x4201, r0, 0xc, &(0x7f00000003c0)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x4000c45, 0x9, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x10000, 0x3, 0x101, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000000)=0x2005, 0x4) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ff00000000", @ANYRES16=r1, @ANYBLOB="00874bfd5cfc6c54ce002b8008000300190000007f000000", @ANYRES32, @ANYBLOB="08001b0000000000", @ANYBLOB="f6f922dd1dd43b1d83e6dec2d66798996126f9c054f79c4c015dace94e0ebfbe118a87637b08dc3c147cd2dbf9d58ffdbbd532cf4003d575826a42124f49eb6010b0abe2eeab89fe8781f7890d3293b35386d819dd6e5c1b35d0ab662ebc29fcd401df45a333689ee72fec07d02217cecdead6478b3ccf99014fb5d3dd687df752b766cde1", @ANYRES64=r2], 0x3c}}, 0x0) 652.86427ms ago: executing program 8 (id=4030): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x20441) 651.997128ms ago: executing program 8 (id=4031): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x800d, @remote, 0x6459}}, 0x0, 0x0, 0x45, 0x0, "bb02a3c364ca41d6357e544508474004000b42a1ffe9000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0x5a) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 593.731311ms ago: executing program 1 (id=4032): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffccb}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0xd, 0x0, @ofdm={0x6, 0x13, 0x16, 0x9, 0x2, 0xb, 0x4}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffccb}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) (async) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0xd, 0x0, @ofdm={0x6, 0x13, 0x16, 0x9, 0x2, 0xb, 0x4}}) (async) 593.544425ms ago: executing program 1 (id=4033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x2a, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0x1, 0xfff1}, {0xf, 0x6}}}, 0x24}}, 0x0) 492.642788ms ago: executing program 1 (id=4036): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$bpf(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000440), 0x808, &(0x7f0000000880)={[{}]}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 364.119773ms ago: executing program 8 (id=4037): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007001f0095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 362.982748ms ago: executing program 8 (id=4039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8000, 0x5, 0x4000000, 0x0, 0xd304}, 0x8, 0x1, 0x3ff, 0x7, 0x7f, 0x5, 0x8, 0x16, 0x1, 0x6, {0x7, 0x7, 0x8, 0x7fffffff, 0x6f0f88ae}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004b00)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 213.887865ms ago: executing program 6 (id=4042): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a, 0x8000010000002}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x8000000000002}) 212.82859ms ago: executing program 6 (id=4043): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0xf8, 0x4, {{0x14, 0x4, 0x2, 0x37, 0x50, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast1, @empty, {[@rr={0x7, 0x1b, 0x67, [@multicast2, @local, @rand_addr=0x64010101, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x14}]}, @rr={0x7, 0x1b, 0xb7, [@multicast1, @loopback, @multicast2, @rand_addr=0x64010102, @multicast2, @private=0xa010100]}, @generic={0x0, 0x4, "1d2d"}]}}}}}) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x3, @mcast1, 0x800000}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)="122882342605ce8950230c73cfbdd61c3261f9a86b04b37217fa9b9338b5eb0d6e9390c3a2bc634723a3cb314ce3034acb82769a0479aad7a1fa530e3bf511333dcb8479fa79d84fab2fa2", 0x4b}], 0x1, &(0x7f0000000280)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x1d}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x5e, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x28, {0x0, 0x8, 0xa, 0x1af, [0x10001, 0x2, 0x0, 0x3]}}, @pad1]}}}, @hoplimit_2292={{0x14}}, @dstopts={{0x70, 0x29, 0x37, {0x6c, 0xa, '\x00', [@pad1, @calipso={0x7, 0x50, {0x0, 0x12, 0x7, 0x9, [0x80000001, 0x4, 0x4, 0xffffffff, 0x3, 0x9, 0x2d26, 0x7489d17e, 0x2]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts={{0x78, 0x29, 0x36, {0x32, 0xb, '\x00', [@calipso={0x7, 0x58, {0x3, 0x14, 0x3, 0x1, [0x8159, 0x2, 0x4, 0x600000, 0x4, 0x3, 0x6, 0x4, 0x6, 0x8]}}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r1}}}], 0x1c0}}], 0x1, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000c00)={@broadcast, @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r2 = socket(0x1e, 0x6, 0x0) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000480)=0x10000, &(0x7f00000004c0)=0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) close(r3) socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) 204.462477ms ago: executing program 7 (id=4044): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) r2 = gettid() r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7, 0x3a, ')', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f, 0x43, 0x43, 0x50]}, 0x32) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a0b0400000000000000000200000068000480640001800a0001006d617463680000005400028008000240000000000c0001007261746565737400390003007e6b92c43235dc16e08c971863558a3723f4575e4babcb7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c000000140000001100200000000000000000000500000ae691fc083b251a73187fbf1be6b00eed5001b7183a13078c5e381694caca3278"], 0xa4}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000814) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000000380)=0x0) timer_settime(r8, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r9 = gettid() tkill(r9, 0x16) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) timer_create(0x2, &(0x7f0000000100)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f00000001c0)=0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r11, 0x3b84, &(0x7f0000000280)={0x20, r12, 0x1, 0x0, &(0x7f0000001340)=[{}]}) timer_settime(r10, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000003c0)) 154.155155ms ago: executing program 8 (id=4045): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x800d, @remote, 0x6459}}, 0x0, 0x0, 0x45, 0x0, "bb02a3c364ca41d6357e544508474004000b42a1ffe9000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0x5a) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 153.746724ms ago: executing program 6 (id=4046): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x40, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x926}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) (async, rerun: 64) r4 = socket$inet6(0x10, 0x2, 0x4) (rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)="a6", 0x1, 0x840, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18, 0x1, 0x0}, &(0x7f0000000140)=0x40) (async) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x4000000, 0xffffffff, 0x1, 0x0, 0x0, 0x5, 0x4}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000780)=""/214, &(0x7f0000000000)=0xd6) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, &(0x7f0000000140)) 63.856167ms ago: executing program 6 (id=4047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x80) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='exfat\x00', 0x400080, &(0x7f00000001c0)='discard') 2.614868ms ago: executing program 6 (id=4048): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xfffffff7}) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0xf) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000001340)) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040), &(0x7f0000000140), 0x2, 0x0) 2.175288ms ago: executing program 7 (id=4049): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000380), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000140)={0x10, &(0x7f0000000000)=[{0x39, '\x00', @st={0x4, [{0x0, @svalue=0x65c}, {0x1, @uvalue=0x3}, {0x2, @svalue=0x7fffffff}, {0x2, @uvalue=0x6}]}, 0x400}]}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000004c0), 0x0, 0x413f) 0s ago: executing program 6 (id=4050): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000200)}, {&(0x7f0000000500)=""/146, 0x92}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/186, 0xba}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000240)=""/20, 0x14}], 0x6, 0x101, 0x4, 0x1f) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) keyctl$chown(0x4, r2, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x3ff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000040)=0xfffd, 0x4) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f00000001c0)) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r7, 0xc03064ca, &(0x7f0000000480)={&(0x7f00000003c0)=[r8, r8], &(0x7f0000000400)=[0xffffffffffffa820], 0xea25, 0x2, 0x3}) request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='taprio\x00', r2) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x5, 0xf, 0x10, 0x3, 0x2, 0x5, 0x1, 0x0, 0x4, 0xb, 0xe, 0xb, 0x4, 0xf, 0x1, 0xd], 0x1, [0x0, 0x1, 0x0, 0x3c3, 0x7f, 0x442, 0x2, 0x6, 0x9, 0x1000, 0x4, 0x3, 0xfff8, 0x5, 0xa, 0x3dd], [0x2, 0x7, 0x5, 0xfffa, 0xf, 0x1, 0x7, 0x40, 0x7, 0x4, 0x7, 0x0, 0x400, 0x2, 0x9, 0xf46]}}]}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x5, 0x0, 0x1}}}}]}, 0xa8}}, 0x0) kernel console output (not intermixed with test programs): c_pages+0x1f0/0x5f0 [ 358.566355][T17188] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 358.566373][T17188] ? stack_trace_consume_entry+0x151/0x170 [ 358.566394][T17188] ? stack_depot_save_flags+0x27/0x9d0 [ 358.566412][T17188] ? stack_depot_save_flags+0x27/0x9d0 [ 358.566434][T17188] ? kasan_save_stack+0x3f/0x50 [ 358.566450][T17188] ? kasan_save_stack+0x30/0x50 [ 358.566466][T17188] ? kasan_save_track+0x14/0x30 [ 358.566482][T17188] ? __kasan_kmalloc+0xaa/0xb0 [ 358.566499][T17188] ? __kvmalloc_node_noprof+0x360/0xa00 [ 358.566516][T17188] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 358.566539][T17188] ? mmu_topup_memory_caches+0xbc/0x170 [ 358.566554][T17188] ? kvm_mmu_load+0xd6/0x23e0 [ 358.566567][T17188] ? vcpu_run+0x39f4/0x5ca0 [ 358.566583][T17188] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 358.566602][T17188] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 358.566621][T17188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.566655][T17188] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 358.566679][T17188] ? policy_nodemask+0xed/0x4f0 [ 358.566704][T17188] alloc_pages_mpol+0x1fb/0x550 [ 358.566730][T17188] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 358.566754][T17188] ? __kasan_kmalloc+0xaa/0xb0 [ 358.566780][T17188] alloc_pages_noprof+0x131/0x390 [ 358.566805][T17188] get_free_pages_noprof+0x10/0xb0 [ 358.566828][T17188] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 358.566859][T17188] mmu_topup_memory_caches+0xbc/0x170 [ 358.566878][T17188] kvm_mmu_load+0xd6/0x23e0 [ 358.566893][T17188] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 358.566913][T17188] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 358.566936][T17188] ? __pfx_kvm_mmu_load+0x10/0x10 [ 358.566950][T17188] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 358.566972][T17188] ? kvm_check_and_inject_events+0x961/0x10c0 [ 358.566988][T17188] ? record_steal_time+0x430/0xbe0 [ 358.567011][T17188] vcpu_run+0x39f4/0x5ca0 [ 358.567036][T17188] ? __pfx_vcpu_run+0x10/0x10 [ 358.567060][T17188] ? rcu_is_watching+0x12/0xc0 [ 358.567080][T17188] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 358.567137][T17188] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 358.567162][T17188] kvm_vcpu_ioctl+0x730/0x1730 [ 358.567185][T17188] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 358.567207][T17188] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 358.567227][T17188] ? do_vfs_ioctl+0x226/0x13e0 [ 358.567247][T17188] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 358.567266][T17188] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 358.567298][T17188] ? __fget_files+0x215/0x3d0 [ 358.567318][T17188] ? hook_file_ioctl_common+0x146/0x410 [ 358.567342][T17188] ? selinux_file_ioctl+0x139/0x290 [ 358.567355][T17188] ? selinux_file_ioctl+0xb4/0x290 [ 358.567371][T17188] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 358.567393][T17188] __x64_sys_ioctl+0x18e/0x210 [ 358.567414][T17188] do_syscall_64+0x106/0xf80 [ 358.567434][T17188] ? clear_bhb_loop+0x40/0x90 [ 358.567454][T17188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.567469][T17188] RIP: 0033:0x7f227679c139 [ 358.567484][T17188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.567498][T17188] RSP: 002b:00007f2277618028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.567514][T17188] RAX: ffffffffffffffda RBX: 00007f2276a15fa0 RCX: 00007f227679c139 [ 358.567525][T17188] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 358.567534][T17188] RBP: 00007f2277618090 R08: 0000000000000000 R09: 0000000000000000 [ 358.567543][T17188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.567551][T17188] R13: 00007f2276a16038 R14: 00007f2276a15fa0 R15: 00007ffeaed23e38 [ 358.567574][T17188] [ 358.625610][ T6014] usb usb13-port1: attempt power cycle [ 358.903285][ T830] raw-gadget.0 gadget.5: failed to queue reset event [ 358.958282][T17197] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 358.972433][ T40] audit: type=1400 audit(2000000157.744:23677): avc: denied { rename } for pid=17196 comm="syz.1.3113" name="file1" dev="overlay" ino=72613989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 358.984466][ T40] audit: type=1400 audit(2000000157.744:23678): avc: denied { unlink } for pid=17196 comm="syz.1.3113" name="file0" dev="overlay" ino=72613977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 358.985725][ T830] raw-gadget.0 gadget.5: failed to queue resume event [ 358.994744][ T40] audit: type=1400 audit(2000000157.744:23679): avc: denied { write open } for pid=17196 comm="syz.1.3113" path=2F202864656C6574656429 dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 359.009018][ T40] audit: type=1400 audit(2000000157.744:23680): avc: denied { setattr } for pid=17196 comm="syz.1.3113" name="#113" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 359.019993][ T40] audit: type=1400 audit(2000000157.744:23681): avc: denied { read } for pid=17196 comm="syz.1.3113" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 359.028628][ T40] audit: type=1400 audit(2000000157.744:23682): avc: denied { link } for pid=17196 comm="syz.1.3113" name="#113" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 359.035672][ T40] audit: type=1400 audit(2000000157.754:23683): avc: denied { append } for pid=17196 comm="syz.1.3113" name="file0" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 359.065594][ T830] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 359.069293][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 359.072533][ T830] raw-gadget.0 gadget.5: failed to queue reset event [ 359.084841][ T6014] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 359.105467][ T6014] usb 13-1: device descriptor read/8, error -71 [ 359.145576][ T830] raw-gadget.0 gadget.5: failed to queue resume event [ 359.205937][ T830] usb 10-1: device descriptor read/64, error -32 [ 359.314912][ T830] raw-gadget.0 gadget.5: failed to queue suspend event [ 359.317396][ T830] raw-gadget.0 gadget.5: failed to queue reset event [ 359.345165][ T6014] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 359.365763][ T6014] usb 13-1: device descriptor read/8, error -71 [ 359.384957][ T830] raw-gadget.0 gadget.5: failed to queue resume event [ 359.434845][ T7783] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 359.454874][ T830] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 359.458470][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 359.461572][ T830] raw-gadget.0 gadget.5: failed to queue reset event [ 359.485888][ T6014] usb usb13-port1: unable to enumerate USB device [ 359.535459][ T830] raw-gadget.0 gadget.5: failed to queue resume event [ 359.564874][ T7783] usb 6-1: device descriptor read/64, error -71 [ 359.595372][ T830] usb 10-1: device descriptor read/64, error -32 [ 359.705544][ T830] raw-gadget.0 gadget.5: failed to queue suspend event [ 359.707873][ T830] usb usb10-port1: attempt power cycle [ 359.709642][ T830] raw-gadget.0 gadget.5: failed to queue disconnect event [ 359.712218][ T830] raw-gadget.0 gadget.5: failed to queue reset event [ 359.784829][ T830] raw-gadget.0 gadget.5: failed to queue resume event [ 359.788532][ T830] raw-gadget.0 gadget.5: failed to queue reset event [ 359.825060][ T7783] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 359.954867][ T7783] usb 6-1: device descriptor read/64, error -71 [ 359.995061][ T830] raw-gadget.0 gadget.5: failed to queue resume event [ 360.055781][ T830] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 360.075337][ T7783] usb usb6-port1: attempt power cycle [ 360.076936][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 360.081184][ T830] usb 10-1: device descriptor read/8, error -32 [ 360.185850][ T830] raw-gadget.0 gadget.5: failed to queue suspend event [ 360.189492][ T830] raw-gadget.0 gadget.5: failed to queue reset event [ 360.254913][ T830] raw-gadget.0 gadget.5: failed to queue resume event [ 360.314817][ T830] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 360.345075][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 360.348655][ T830] usb 10-1: device descriptor read/8, error -32 [ 360.414928][ T7783] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 360.435616][ T7783] usb 6-1: device descriptor read/8, error -71 [ 360.454922][ T830] raw-gadget.0 gadget.5: failed to queue suspend event [ 360.457320][ T830] usb usb10-port1: unable to enumerate USB device [ 360.617386][T17214] FAULT_INJECTION: forcing a failure. [ 360.617386][T17214] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.621907][T17214] CPU: 2 UID: 0 PID: 17214 Comm: syz.2.3119 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.621926][T17214] Tainted: [L]=SOFTLOCKUP [ 360.621930][T17214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 360.621936][T17214] Call Trace: [ 360.621941][T17214] [ 360.621947][T17214] dump_stack_lvl+0x100/0x190 [ 360.621968][T17214] should_fail_ex.cold+0x5/0xa [ 360.621981][T17214] ? prepare_alloc_pages+0x16d/0x5f0 [ 360.622000][T17214] should_fail_alloc_page+0xeb/0x140 [ 360.622017][T17214] prepare_alloc_pages+0x1f0/0x5f0 [ 360.622036][T17214] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 360.622050][T17214] ? stack_trace_consume_entry+0x151/0x170 [ 360.622065][T17214] ? stack_depot_save_flags+0x27/0x9d0 [ 360.622082][T17214] ? kasan_save_stack+0x3f/0x50 [ 360.622097][T17214] ? kasan_save_stack+0x30/0x50 [ 360.622110][T17214] ? kasan_save_track+0x14/0x30 [ 360.622124][T17214] ? __kasan_kmalloc+0xaa/0xb0 [ 360.622141][T17214] ? __kvmalloc_node_noprof+0x360/0xa00 [ 360.622162][T17214] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 360.622184][T17214] ? mmu_topup_memory_caches+0xbc/0x170 [ 360.622200][T17214] ? kvm_mmu_load+0xd6/0x23e0 [ 360.622216][T17214] ? vcpu_run+0x39f4/0x5ca0 [ 360.622232][T17214] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 360.622251][T17214] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 360.622270][T17214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.622307][T17214] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 360.622323][T17214] ? policy_nodemask+0xed/0x4f0 [ 360.622340][T17214] alloc_pages_mpol+0x1fb/0x550 [ 360.622362][T17214] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 360.622378][T17214] ? __kasan_kmalloc+0xaa/0xb0 [ 360.622395][T17214] alloc_pages_noprof+0x131/0x390 [ 360.622412][T17214] get_free_pages_noprof+0x10/0xb0 [ 360.622427][T17214] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 360.622448][T17214] mmu_topup_memory_caches+0xbc/0x170 [ 360.622464][T17214] kvm_mmu_load+0xd6/0x23e0 [ 360.622480][T17214] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 360.622503][T17214] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 360.622532][T17214] ? __pfx_kvm_mmu_load+0x10/0x10 [ 360.622551][T17214] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 360.622579][T17214] ? kvm_check_and_inject_events+0x961/0x10c0 [ 360.622599][T17214] ? record_steal_time+0x430/0xbe0 [ 360.622627][T17214] vcpu_run+0x39f4/0x5ca0 [ 360.622650][T17214] ? __pfx_vcpu_run+0x10/0x10 [ 360.622667][T17214] ? rcu_is_watching+0x12/0xc0 [ 360.622681][T17214] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 360.622694][T17214] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 360.622711][T17214] kvm_vcpu_ioctl+0x730/0x1730 [ 360.622728][T17214] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 360.622744][T17214] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 360.622759][T17214] ? do_vfs_ioctl+0x226/0x13e0 [ 360.622787][T17214] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 360.622803][T17214] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 360.622838][T17214] ? __fget_files+0x215/0x3d0 [ 360.622861][T17214] ? hook_file_ioctl_common+0x146/0x410 [ 360.622890][T17214] ? selinux_file_ioctl+0x139/0x290 [ 360.622906][T17214] ? selinux_file_ioctl+0xb4/0x290 [ 360.622925][T17214] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 360.622972][T17214] __x64_sys_ioctl+0x18e/0x210 [ 360.622991][T17214] do_syscall_64+0x106/0xf80 [ 360.623007][T17214] ? clear_bhb_loop+0x40/0x90 [ 360.623020][T17214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.623032][T17214] RIP: 0033:0x7f48a4d9c139 [ 360.623044][T17214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.623054][T17214] RSP: 002b:00007f48a5d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.623066][T17214] RAX: ffffffffffffffda RBX: 00007f48a5015fa0 RCX: 00007f48a4d9c139 [ 360.623073][T17214] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 360.623102][T17214] RBP: 00007f48a5d14090 R08: 0000000000000000 R09: 0000000000000000 [ 360.623113][T17214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.623123][T17214] R13: 00007f48a5016038 R14: 00007f48a5015fa0 R15: 00007ffe49ba4018 [ 360.623148][T17214] [ 360.674886][ T7783] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 360.779661][T17220] openvswitch: netlink: IP tunnel dst address not specified [ 360.795586][ T7783] usb 6-1: device descriptor read/8, error -71 [ 360.889576][ T40] audit: type=1400 audit(2000000159.664:23684): avc: denied { mounton } for pid=17221 comm="syz.2.3121" path="/proc/285/task" dev="proc" ino=88037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 360.905345][ T7783] usb usb6-port1: unable to enumerate USB device [ 361.523235][T17247] FAULT_INJECTION: forcing a failure. [ 361.523235][T17247] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 361.529878][T17247] CPU: 2 UID: 0 PID: 17247 Comm: syz.8.3129 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.529907][T17247] Tainted: [L]=SOFTLOCKUP [ 361.529913][T17247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 361.529923][T17247] Call Trace: [ 361.529930][T17247] [ 361.529936][T17247] dump_stack_lvl+0x100/0x190 [ 361.529966][T17247] should_fail_ex.cold+0x5/0xa [ 361.529984][T17247] ? prepare_alloc_pages+0x16d/0x5f0 [ 361.530010][T17247] should_fail_alloc_page+0xeb/0x140 [ 361.530035][T17247] prepare_alloc_pages+0x1f0/0x5f0 [ 361.530062][T17247] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 361.530082][T17247] ? stack_trace_consume_entry+0x151/0x170 [ 361.530135][T17247] ? stack_depot_save_flags+0x27/0x9d0 [ 361.530157][T17247] ? stack_depot_save_flags+0x27/0x9d0 [ 361.530180][T17247] ? kasan_save_stack+0x3f/0x50 [ 361.530199][T17247] ? kasan_save_stack+0x30/0x50 [ 361.530218][T17247] ? kasan_save_track+0x14/0x30 [ 361.530234][T17247] ? __kasan_kmalloc+0xaa/0xb0 [ 361.530253][T17247] ? __kvmalloc_node_noprof+0x360/0xa00 [ 361.530271][T17247] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 361.530293][T17247] ? mmu_topup_memory_caches+0xbc/0x170 [ 361.530308][T17247] ? kvm_mmu_load+0xd6/0x23e0 [ 361.530321][T17247] ? vcpu_run+0x39f4/0x5ca0 [ 361.530337][T17247] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 361.530354][T17247] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 361.530374][T17247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.530417][T17247] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 361.530440][T17247] ? policy_nodemask+0xed/0x4f0 [ 361.530466][T17247] alloc_pages_mpol+0x1fb/0x550 [ 361.530489][T17247] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 361.530512][T17247] ? __kasan_kmalloc+0xaa/0xb0 [ 361.530535][T17247] alloc_pages_noprof+0x131/0x390 [ 361.530558][T17247] get_free_pages_noprof+0x10/0xb0 [ 361.530580][T17247] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 361.530610][T17247] mmu_topup_memory_caches+0xbc/0x170 [ 361.530627][T17247] kvm_mmu_load+0xd6/0x23e0 [ 361.530643][T17247] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 361.530662][T17247] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 361.530686][T17247] ? __pfx_kvm_mmu_load+0x10/0x10 [ 361.530701][T17247] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 361.530724][T17247] ? kvm_check_and_inject_events+0x961/0x10c0 [ 361.530742][T17247] ? record_steal_time+0x430/0xbe0 [ 361.530766][T17247] vcpu_run+0x39f4/0x5ca0 [ 361.530793][T17247] ? __pfx_vcpu_run+0x10/0x10 [ 361.530835][T17247] ? rcu_is_watching+0x12/0xc0 [ 361.530857][T17247] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 361.530876][T17247] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 361.530902][T17247] kvm_vcpu_ioctl+0x730/0x1730 [ 361.530928][T17247] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 361.530951][T17247] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 361.530974][T17247] ? do_vfs_ioctl+0x226/0x13e0 [ 361.530995][T17247] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 361.531016][T17247] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 361.531052][T17247] ? __fget_files+0x215/0x3d0 [ 361.531120][T17247] ? hook_file_ioctl_common+0x146/0x410 [ 361.531145][T17247] ? selinux_file_ioctl+0x139/0x290 [ 361.531159][T17247] ? selinux_file_ioctl+0xb4/0x290 [ 361.531175][T17247] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 361.531199][T17247] __x64_sys_ioctl+0x18e/0x210 [ 361.531221][T17247] do_syscall_64+0x106/0xf80 [ 361.531243][T17247] ? clear_bhb_loop+0x40/0x90 [ 361.531264][T17247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.531281][T17247] RIP: 0033:0x7fbadf39c139 [ 361.531296][T17247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.531312][T17247] RSP: 002b:00007fbae02d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.531329][T17247] RAX: ffffffffffffffda RBX: 00007fbadf615fa0 RCX: 00007fbadf39c139 [ 361.531339][T17247] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 361.531348][T17247] RBP: 00007fbae02d9090 R08: 0000000000000000 R09: 0000000000000000 [ 361.531358][T17247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.531368][T17247] R13: 00007fbadf616038 R14: 00007fbadf615fa0 R15: 00007ffd91f7c388 [ 361.531390][T17247] [ 361.940194][T17258] MPI: mpi too large (113288 bits) [ 361.941738][T17259] vivid-000: kernel_thread() failed [ 362.097926][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3135'. [ 362.126416][T17265] team0: Port device team_slave_0 removed [ 362.227544][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3136'. [ 362.239545][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.239676][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3136'. [ 362.242798][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.249856][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.253134][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.301968][T17272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3137'. [ 362.459847][T17287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3143'. [ 362.500809][T17289] netlink: 'syz.5.3144': attribute type 1 has an invalid length. [ 362.504197][T17289] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3144'. [ 362.511846][ T40] audit: type=1400 audit(2000000161.284:23685): avc: denied { append } for pid=17288 comm="syz.5.3144" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 363.644639][T17309] sp0: Synchronizing with TNC [ 363.650053][T17308] [U] [ 363.788247][T17314] xt_cgroup: xt_cgroup: no path or classid specified [ 363.799466][T17314] tun0: tun_chr_ioctl cmd 1074025672 [ 363.801832][T17314] tun0: ignored: set checksum enabled [ 363.902766][T17316] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 363.966353][T17318] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3153'. [ 363.975367][T17318] 9p: Bad value for 'rfdno' [ 364.069524][T17320] netlink: 'syz.5.3154': attribute type 2 has an invalid length. [ 364.072656][T17320] netlink: 38 bytes leftover after parsing attributes in process `syz.5.3154'. [ 364.397362][T17340] trusted_key: encrypted_key: master key parameter '' is invalid [ 364.402755][T17340] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 364.622365][T17360] FAULT_INJECTION: forcing a failure. [ 364.622365][T17360] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 364.630769][T17360] CPU: 1 UID: 0 PID: 17360 Comm: syz.1.3165 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.630799][T17360] Tainted: [L]=SOFTLOCKUP [ 364.630805][T17360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 364.630816][T17360] Call Trace: [ 364.630822][T17360] [ 364.630830][T17360] dump_stack_lvl+0x100/0x190 [ 364.630862][T17360] should_fail_ex.cold+0x5/0xa [ 364.630880][T17360] ? prepare_alloc_pages+0x16d/0x5f0 [ 364.630908][T17360] should_fail_alloc_page+0xeb/0x140 [ 364.630933][T17360] prepare_alloc_pages+0x1f0/0x5f0 [ 364.630960][T17360] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 364.630981][T17360] ? stack_trace_consume_entry+0x151/0x170 [ 364.631003][T17360] ? stack_depot_save_flags+0x27/0x9d0 [ 364.631025][T17360] ? stack_depot_save_flags+0x27/0x9d0 [ 364.631102][T17360] ? kasan_save_stack+0x3f/0x50 [ 364.631124][T17360] ? kasan_save_stack+0x30/0x50 [ 364.631143][T17360] ? kasan_save_track+0x14/0x30 [ 364.631161][T17360] ? __kasan_kmalloc+0xaa/0xb0 [ 364.631178][T17360] ? __kvmalloc_node_noprof+0x360/0xa00 [ 364.631195][T17360] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 364.631218][T17360] ? mmu_topup_memory_caches+0xbc/0x170 [ 364.631234][T17360] ? kvm_mmu_load+0xd6/0x23e0 [ 364.631247][T17360] ? vcpu_run+0x39f4/0x5ca0 [ 364.631264][T17360] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 364.631284][T17360] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 364.631304][T17360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.631346][T17360] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.631369][T17360] ? policy_nodemask+0xed/0x4f0 [ 364.631391][T17360] alloc_pages_mpol+0x1fb/0x550 [ 364.631414][T17360] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 364.631435][T17360] ? __kasan_kmalloc+0xaa/0xb0 [ 364.631459][T17360] alloc_pages_noprof+0x131/0x390 [ 364.631484][T17360] get_free_pages_noprof+0x10/0xb0 [ 364.631506][T17360] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 364.631535][T17360] mmu_topup_memory_caches+0xbc/0x170 [ 364.631552][T17360] kvm_mmu_load+0xd6/0x23e0 [ 364.631568][T17360] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 364.631590][T17360] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 364.631616][T17360] ? __pfx_kvm_mmu_load+0x10/0x10 [ 364.631632][T17360] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 364.631658][T17360] ? kvm_check_and_inject_events+0x961/0x10c0 [ 364.631674][T17360] ? record_steal_time+0x430/0xbe0 [ 364.631696][T17360] vcpu_run+0x39f4/0x5ca0 [ 364.631720][T17360] ? __pfx_vcpu_run+0x10/0x10 [ 364.631744][T17360] ? rcu_is_watching+0x12/0xc0 [ 364.631763][T17360] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 364.631780][T17360] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 364.631803][T17360] kvm_vcpu_ioctl+0x730/0x1730 [ 364.631827][T17360] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 364.631849][T17360] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.631870][T17360] ? do_vfs_ioctl+0x226/0x13e0 [ 364.631890][T17360] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 364.631911][T17360] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 364.631944][T17360] ? __fget_files+0x215/0x3d0 [ 364.631967][T17360] ? hook_file_ioctl_common+0x146/0x410 [ 364.631991][T17360] ? selinux_file_ioctl+0x139/0x290 [ 364.632006][T17360] ? selinux_file_ioctl+0xb4/0x290 [ 364.632022][T17360] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 364.632046][T17360] __x64_sys_ioctl+0x18e/0x210 [ 364.632067][T17360] do_syscall_64+0x106/0xf80 [ 364.632089][T17360] ? clear_bhb_loop+0x40/0x90 [ 364.632109][T17360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.632127][T17360] RIP: 0033:0x7f227679c139 [ 364.632142][T17360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.632157][T17360] RSP: 002b:00007f2277618028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.632173][T17360] RAX: ffffffffffffffda RBX: 00007f2276a15fa0 RCX: 00007f227679c139 [ 364.632184][T17360] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 364.632193][T17360] RBP: 00007f2277618090 R08: 0000000000000000 R09: 0000000000000000 [ 364.632203][T17360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.632212][T17360] R13: 00007f2276a16038 R14: 00007f2276a15fa0 R15: 00007ffeaed23e38 [ 364.632234][T17360] [ 364.852978][T17365] netlink: 'syz.8.3166': attribute type 2 has an invalid length. [ 364.896756][T17365] netlink: 'syz.8.3166': attribute type 9 has an invalid length. [ 365.098442][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3173'. [ 365.140715][T17383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3173'. [ 365.226261][T17385] fuse: Bad value for 'fd' [ 365.338318][ T40] audit: type=1326 audit(2000000164.114:23686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17389 comm="syz.2.3175" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48a4d9c139 code=0x0 [ 365.411142][T17393] FAULT_INJECTION: forcing a failure. [ 365.411142][T17393] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 365.417430][T17393] CPU: 3 UID: 0 PID: 17393 Comm: syz.5.3176 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.417458][T17393] Tainted: [L]=SOFTLOCKUP [ 365.417464][T17393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 365.417473][T17393] Call Trace: [ 365.417479][T17393] [ 365.417485][T17393] dump_stack_lvl+0x100/0x190 [ 365.417514][T17393] should_fail_ex.cold+0x5/0xa [ 365.417533][T17393] ? prepare_alloc_pages+0x16d/0x5f0 [ 365.417559][T17393] should_fail_alloc_page+0xeb/0x140 [ 365.417583][T17393] prepare_alloc_pages+0x1f0/0x5f0 [ 365.417610][T17393] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 365.417630][T17393] ? stack_trace_consume_entry+0x151/0x170 [ 365.417652][T17393] ? stack_depot_save_flags+0x27/0x9d0 [ 365.417677][T17393] ? kasan_save_stack+0x3f/0x50 [ 365.417695][T17393] ? kasan_save_stack+0x30/0x50 [ 365.417712][T17393] ? kasan_save_track+0x14/0x30 [ 365.417730][T17393] ? __kasan_kmalloc+0xaa/0xb0 [ 365.417747][T17393] ? __kvmalloc_node_noprof+0x360/0xa00 [ 365.417765][T17393] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 365.417788][T17393] ? mmu_topup_memory_caches+0xbc/0x170 [ 365.417804][T17393] ? kvm_mmu_load+0xd6/0x23e0 [ 365.417817][T17393] ? vcpu_run+0x39f4/0x5ca0 [ 365.417833][T17393] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 365.417851][T17393] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 365.417869][T17393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.417901][T17393] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 365.417924][T17393] ? policy_nodemask+0xed/0x4f0 [ 365.417949][T17393] alloc_pages_mpol+0x1fb/0x550 [ 365.417972][T17393] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 365.417995][T17393] ? __kasan_kmalloc+0xaa/0xb0 [ 365.418018][T17393] alloc_pages_noprof+0x131/0x390 [ 365.418041][T17393] get_free_pages_noprof+0x10/0xb0 [ 365.418062][T17393] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 365.418091][T17393] mmu_topup_memory_caches+0xbc/0x170 [ 365.418114][T17393] kvm_mmu_load+0xd6/0x23e0 [ 365.418131][T17393] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 365.418152][T17393] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 365.418175][T17393] ? __pfx_kvm_mmu_load+0x10/0x10 [ 365.418191][T17393] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 365.418213][T17393] ? kvm_check_and_inject_events+0x961/0x10c0 [ 365.418231][T17393] ? record_steal_time+0x430/0xbe0 [ 365.418257][T17393] vcpu_run+0x39f4/0x5ca0 [ 365.418283][T17393] ? __pfx_vcpu_run+0x10/0x10 [ 365.418309][T17393] ? rcu_is_watching+0x12/0xc0 [ 365.418331][T17393] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 365.418348][T17393] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 365.418373][T17393] kvm_vcpu_ioctl+0x730/0x1730 [ 365.418396][T17393] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 365.418418][T17393] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 365.418439][T17393] ? do_vfs_ioctl+0x226/0x13e0 [ 365.418459][T17393] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 365.418479][T17393] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 365.418512][T17393] ? __fget_files+0x215/0x3d0 [ 365.418535][T17393] ? hook_file_ioctl_common+0x146/0x410 [ 365.418559][T17393] ? selinux_file_ioctl+0x139/0x290 [ 365.418574][T17393] ? selinux_file_ioctl+0xb4/0x290 [ 365.418590][T17393] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 365.418613][T17393] __x64_sys_ioctl+0x18e/0x210 [ 365.418634][T17393] do_syscall_64+0x106/0xf80 [ 365.418656][T17393] ? clear_bhb_loop+0x40/0x90 [ 365.418676][T17393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.418692][T17393] RIP: 0033:0x7fc2dfd9c139 [ 365.418706][T17393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.418721][T17393] RSP: 002b:00007fc2e0d0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.418739][T17393] RAX: ffffffffffffffda RBX: 00007fc2e0015fa0 RCX: 00007fc2dfd9c139 [ 365.418750][T17393] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 365.418759][T17393] RBP: 00007fc2e0d0b090 R08: 0000000000000000 R09: 0000000000000000 [ 365.418769][T17393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 365.418778][T17393] R13: 00007fc2e0016038 R14: 00007fc2e0015fa0 R15: 00007ffce36db668 [ 365.418801][T17393] [ 365.814128][T17413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.817609][T17413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.829512][T17413] syzkaller0: entered promiscuous mode [ 365.831949][T17413] syzkaller0: entered allmulticast mode [ 366.192222][T17422] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 366.196362][T17422] /dev/nullb0: Can't open blockdev [ 366.452723][T17430] overlay: filesystem on ./bus not supported as upperdir [ 367.472199][T17445] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 367.748664][T17122] raw-gadget.0 gadget.5: failed to queue disconnect event [ 367.919744][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.926501][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.930304][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.940725][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.943851][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.072627][T12542] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.094051][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.098172][T17465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.106495][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.109550][T17465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.118717][ T40] audit: type=1400 audit(2000000166.894:23687): avc: denied { nlmsg_write } for pid=17468 comm="syz.1.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 368.159252][T17458] vxcan1 speed is unknown, defaulting to 1000 [ 368.194036][T12542] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.214341][T17476] overlayfs: maximum fs stacking depth exceeded [ 368.219882][T17475] overlayfs: maximum fs stacking depth exceeded [ 368.248783][T17478] __nla_validate_parse: 1 callbacks suppressed [ 368.248801][T17478] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3199'. [ 368.276580][T17476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.280794][T17476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.320791][T12542] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.457114][T12542] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.471353][T17492] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3200'. [ 368.475093][T17458] chnl_net:caif_netlink_parms(): no params data found [ 368.514856][ T3247] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 368.559635][T17458] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.562809][T17458] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.567257][T17458] bridge_slave_0: entered allmulticast mode [ 368.571931][T17458] bridge_slave_0: entered promiscuous mode [ 368.576986][T17458] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.580089][T17458] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.583392][T17458] bridge_slave_1: entered allmulticast mode [ 368.587767][T17458] bridge_slave_1: entered promiscuous mode [ 368.617361][T17458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.652375][T17458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.655748][ T3247] usb 6-1: device descriptor read/64, error -71 [ 368.692411][T17497] macsec2: entered promiscuous mode [ 368.715857][T17458] team0: Port device team_slave_0 added [ 368.751351][T17458] team0: Port device team_slave_1 added [ 368.774645][T12542] bridge_slave_1: left allmulticast mode [ 368.777546][T12542] bridge_slave_1: left promiscuous mode [ 368.780098][T12542] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.785449][T12542] bridge_slave_0: left allmulticast mode [ 368.787882][T12542] bridge_slave_0: left promiscuous mode [ 368.790450][T12542] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.894823][ T3247] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 369.044829][ T3247] usb 6-1: device descriptor read/64, error -71 [ 369.081560][T12542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.117841][T12542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.157693][T12542] bond0 (unregistering): Released all slaves [ 369.165168][ T3247] usb usb6-port1: attempt power cycle [ 369.165549][T12542] bond1 (unregistering): Released all slaves [ 369.181443][T17458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.184494][T17458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.197363][T17458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.209521][T17458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.212471][T17458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.223270][T17458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.265665][T17458] hsr_slave_0: entered promiscuous mode [ 369.268578][T17458] hsr_slave_1: entered promiscuous mode [ 369.271172][T17458] debugfs: 'hsr0' already exists in 'hsr' [ 369.273176][T17458] Cannot create hsr debugfs directory [ 369.535032][ T3247] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 369.559554][ T3247] usb 6-1: device descriptor read/8, error -71 [ 369.794977][ T3247] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 369.818861][ T3247] usb 6-1: device descriptor read/8, error -71 [ 369.942971][ T3247] usb usb6-port1: unable to enumerate USB device [ 369.950089][T12542] hsr_slave_0: left promiscuous mode [ 369.952794][T12542] hsr_slave_1: left promiscuous mode [ 369.954993][T12542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.958020][T12542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.962576][T12542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.965681][T12542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.975037][ T5942] Bluetooth: hci0: command tx timeout [ 369.981561][T12542] veth1_macvtap: left promiscuous mode [ 369.983690][T12542] veth0_macvtap: left promiscuous mode [ 369.991154][T12542] veth1_vlan: left promiscuous mode [ 369.993385][T12542] veth0_vlan: left promiscuous mode [ 370.214111][T12542] team0 (unregistering): Port device team_slave_1 removed [ 371.688031][T17458] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 371.827613][T17586] program syz.2.3210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.956877][T17458] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 371.982264][T17585] mkiss: ax0: crc mode is auto. [ 371.993742][T17458] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 372.005513][T17458] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 372.054961][ T5942] Bluetooth: hci0: command tx timeout [ 372.113266][T17609] netlink: 1335 bytes leftover after parsing attributes in process `syz.8.3214'. [ 372.114520][T17458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.168311][T17458] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.178970][T12546] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.181992][T12546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.193277][T12546] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.196474][T12546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.383497][T17458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.550567][T17458] veth0_vlan: entered promiscuous mode [ 372.558419][T17458] veth1_vlan: entered promiscuous mode [ 372.581833][T17458] veth0_macvtap: entered promiscuous mode [ 372.587661][T17458] veth1_macvtap: entered promiscuous mode [ 372.600251][T17458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.611499][T17458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.629688][ T1147] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.635169][ T1147] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.639545][ T1147] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.647265][ T1147] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.723691][T12546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.730389][T12546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.754143][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.757629][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.054233][T17661] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3218'. [ 373.115380][T17665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3219'. [ 373.149546][T17668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17668 comm=syz.2.3219 [ 373.367685][T17674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3220'. [ 373.380118][ T40] audit: type=1400 audit(2000000172.154:23688): avc: denied { create } for pid=17675 comm="syz.6.3222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 373.388965][ T40] audit: type=1400 audit(2000000172.154:23689): avc: denied { connect } for pid=17675 comm="syz.6.3222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 373.398451][ T40] audit: type=1400 audit(2000000172.154:23690): avc: denied { bind } for pid=17675 comm="syz.6.3222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 373.408984][ T40] audit: type=1400 audit(2000000172.184:23691): avc: denied { write } for pid=17675 comm="syz.6.3222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 373.417332][ T40] audit: type=1400 audit(2000000172.184:23692): avc: denied { read } for pid=17675 comm="syz.6.3222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 374.136854][ T5942] Bluetooth: hci0: command tx timeout [ 374.265805][T17675] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 374.342277][T17681] syzkaller0: entered promiscuous mode [ 374.344847][T17681] syzkaller0: entered allmulticast mode [ 375.664966][ T5925] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 375.815295][ T5925] usb 13-1: Using ep0 maxpacket: 16 [ 375.818313][ T5925] usb 13-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 375.822020][ T5925] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.826044][ T5925] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.829241][ T5925] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 375.833627][ T5925] usb 13-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 375.837065][ T5925] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.841285][ T5925] usb 13-1: config 0 descriptor?? [ 375.932927][T17709] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 375.977421][ T5942] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 375.981341][ T5942] Bluetooth: hci2: Injecting HCI hardware error event [ 375.987342][ T5933] Bluetooth: hci2: hardware error 0x00 [ 376.214869][ T5942] Bluetooth: hci0: command tx timeout [ 376.274969][ T5925] input: HID 0458:5013 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0458:5013.000F/input/input39 [ 376.342070][ T5925] input: HID 0458:5013 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0458:5013.000F/input/input40 [ 376.365173][ T5925] kye 0003:0458:5013.000F: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.8-1/input0 [ 376.755372][ T40] audit: type=1400 audit(2000000175.534:23693): avc: denied { read } for pid=17733 comm="syz.2.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 377.249054][T17741] kvm: user requested TSC rate below hardware speed [ 377.386617][T17743] xt_hashlimit: size too large, truncated to 1048576 [ 377.415461][ T5970] usb 13-1: reset high-speed USB device number 23 using dummy_hcd [ 377.438358][T17745] usb usb9: usbfs: process 17745 (syz.8.3241) did not claim interface 5 before use [ 377.565035][ T5970] usb 13-1: device descriptor read/64, error -32 [ 377.734498][T17752] /dev/nullb0: Can't open blockdev [ 377.739755][T17753] /dev/nullb0: Can't open blockdev [ 377.814986][ T5970] usb 13-1: reset high-speed USB device number 23 using dummy_hcd [ 377.884003][T17758] netlink: 'syz.8.3246': attribute type 3 has an invalid length. [ 377.944918][ T5970] usb 13-1: device descriptor read/64, error -32 [ 378.194831][ T5970] usb 13-1: reset high-speed USB device number 23 using dummy_hcd [ 378.215155][ T5933] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 378.219098][ T5970] usb 13-1: device descriptor read/8, error -32 [ 378.458307][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.462963][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.470488][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.474803][ T5970] usb 13-1: reset high-speed USB device number 23 using dummy_hcd [ 378.478295][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.482071][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.495248][ T5970] usb 13-1: device descriptor read/8, error -32 [ 378.592672][T12547] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.617658][ T5970] raw-gadget.0 gadget.8: failed to queue suspend event [ 378.622234][ T5925] usb 13-1: USB disconnect, device number 23 [ 378.648605][T17765] vxcan1 speed is unknown, defaulting to 1000 [ 378.700927][T12547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.772184][T12547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.866667][ T5925] raw-gadget.0 gadget.8: failed to queue reset event [ 378.913394][T12547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.935370][ T5925] raw-gadget.0 gadget.8: failed to queue resume event [ 378.971443][T17772] SELinux: failed to load policy [ 378.972313][T17765] chnl_net:caif_netlink_parms(): no params data found [ 378.994853][ T5925] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 378.998328][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 379.020880][ T5925] raw-gadget.0 gadget.8: failed to queue reset event [ 379.057814][T17765] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.060972][T17765] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.064378][T17765] bridge_slave_0: entered allmulticast mode [ 379.068773][T17765] bridge_slave_0: entered promiscuous mode [ 379.073624][T17765] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.076860][T17765] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.080069][T17765] bridge_slave_1: entered allmulticast mode [ 379.084115][T17765] bridge_slave_1: entered promiscuous mode [ 379.084800][ T5925] raw-gadget.0 gadget.8: failed to queue resume event [ 379.111655][T17765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.118671][T17765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.145263][T17765] team0: Port device team_slave_0 added [ 379.150178][T17765] team0: Port device team_slave_1 added [ 379.154781][ T5925] usb 13-1: device descriptor read/64, error -32 [ 379.198742][T17765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.199923][T17781] afs: Unknown parameter '~ySY?Z.߁iĒe' [ 379.201698][T17765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.219933][T17765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.265621][ T5925] raw-gadget.0 gadget.8: failed to queue suspend event [ 379.268975][ T5925] raw-gadget.0 gadget.8: failed to queue reset event [ 379.276426][T17765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.279850][T17765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.292958][T17765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.335062][ T5925] raw-gadget.0 gadget.8: failed to queue resume event [ 379.363134][T12547] bridge_slave_0: left allmulticast mode [ 379.366172][T12547] bridge_slave_0: left promiscuous mode [ 379.368453][T12547] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.394954][ T5925] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 379.398394][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 379.401527][ T5925] raw-gadget.0 gadget.8: failed to queue reset event [ 379.464840][ T5925] raw-gadget.0 gadget.8: failed to queue resume event [ 379.504892][T14313] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 379.506379][ T5933] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 379.511905][ T5933] Bluetooth: hci4: Injecting HCI hardware error event [ 379.515921][ T5933] Bluetooth: hci4: hardware error 0x00 [ 379.524911][ T5925] usb 13-1: device descriptor read/64, error -32 [ 379.579853][T12547] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 379.645185][ T5925] raw-gadget.0 gadget.8: failed to queue suspend event [ 379.648299][ T5925] usb usb13-port1: attempt power cycle [ 379.652479][ T5925] raw-gadget.0 gadget.8: failed to queue disconnect event [ 379.655824][ T5925] raw-gadget.0 gadget.8: failed to queue reset event [ 379.666509][T14313] usb 6-1: Using ep0 maxpacket: 16 [ 379.670556][T14313] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 379.681431][T14313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.686506][T14313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.690657][T14313] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 379.699495][T14313] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 379.703407][T14313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.715249][T14313] usb 6-1: config 0 descriptor?? [ 379.725025][ T5925] raw-gadget.0 gadget.8: failed to queue resume event [ 379.727753][ T5925] raw-gadget.0 gadget.8: failed to queue reset event [ 379.934976][ T5925] raw-gadget.0 gadget.8: failed to queue resume event [ 379.994935][ T5925] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 380.015061][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 380.017843][ T5925] usb 13-1: device descriptor read/8, error -32 [ 380.124869][ T5925] raw-gadget.0 gadget.8: failed to queue suspend event [ 380.127609][ T5925] raw-gadget.0 gadget.8: failed to queue reset event [ 380.138160][T14313] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5013.0010/input/input41 [ 380.205189][ T5925] raw-gadget.0 gadget.8: failed to queue resume event [ 380.230248][T14313] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5013.0010/input/input42 [ 380.257024][T14313] kye 0003:0458:5013.0010: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 380.274866][ T5925] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 380.295453][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 380.298649][ T5925] usb 13-1: device descriptor read/8, error -32 [ 380.404885][ T5925] raw-gadget.0 gadget.8: failed to queue suspend event [ 380.411062][ T5925] usb usb13-port1: unable to enumerate USB device [ 380.535520][ T5942] Bluetooth: hci2: command tx timeout [ 381.394933][ T3247] usb 6-1: reset high-speed USB device number 23 using dummy_hcd [ 381.535061][ T3247] usb 6-1: device descriptor read/64, error -32 [ 381.681218][T12547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.707473][T12547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.737238][T12547] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 381.744858][ T5933] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 381.774967][ T3247] usb 6-1: reset high-speed USB device number 23 using dummy_hcd [ 381.796350][T12547] bond0 (unregistering): Released all slaves [ 381.803197][T12547] bond1 (unregistering): Released all slaves [ 381.813282][T12547] bond2 (unregistering): Released all slaves [ 381.825874][T17765] hsr_slave_0: entered promiscuous mode [ 381.828701][T17765] hsr_slave_1: entered promiscuous mode [ 381.831653][T17765] debugfs: 'hsr0' already exists in 'hsr' [ 381.836468][T17765] Cannot create hsr debugfs directory [ 381.895254][T12547] : left promiscuous mode [ 381.904834][ T3247] usb 6-1: device descriptor read/64, error -32 [ 382.144971][ T3247] usb 6-1: reset high-speed USB device number 23 using dummy_hcd [ 382.169283][ T3247] usb 6-1: device descriptor read/8, error -32 [ 382.249767][T17825] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 382.253149][T17825] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 382.260167][T17825] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 382.263910][T17825] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 382.319147][T17829] netlink: 'syz.1.3264': attribute type 4 has an invalid length. [ 382.415424][ T3247] usb 6-1: reset high-speed USB device number 23 using dummy_hcd [ 382.435049][ T3247] usb 6-1: device descriptor read/8, error -32 [ 382.486071][ T40] audit: type=1400 audit(2000000181.264:23694): avc: denied { getopt } for pid=17839 comm="syz.1.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 382.544864][ T3247] raw-gadget.1 gadget.1: failed to queue suspend event [ 382.553462][ T34] usb 6-1: USB disconnect, device number 23 [ 382.615066][ T5933] Bluetooth: hci2: command tx timeout [ 382.638353][T17852] fuse: Bad value for 'fd' [ 382.664730][T12547] hsr_slave_0: left promiscuous mode [ 382.667830][T12547] hsr_slave_1: left promiscuous mode [ 382.675991][T12547] veth1_macvtap: left promiscuous mode [ 382.677968][T12547] veth0_macvtap: left promiscuous mode [ 382.679834][T12547] veth1_vlan: left promiscuous mode [ 382.681837][T12547] veth0_vlan: left promiscuous mode [ 382.737966][ T34] raw-gadget.1 gadget.1: failed to queue reset event [ 382.814912][ T34] raw-gadget.1 gadget.1: failed to queue resume event [ 382.874869][ T34] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 382.879106][ C3] raw-gadget.1 gadget.1: ignoring, device is not running [ 382.882299][ T34] raw-gadget.1 gadget.1: failed to queue reset event [ 382.883826][T12547] team0 (unregistering): Port device team_slave_1 removed [ 382.915235][T12547] team0 (unregistering): Port device team_slave_0 removed [ 382.954953][ T34] raw-gadget.1 gadget.1: failed to queue resume event [ 383.014949][ T34] usb 6-1: device descriptor read/64, error -32 [ 383.136214][ T34] raw-gadget.1 gadget.1: failed to queue suspend event [ 383.140138][ T34] raw-gadget.1 gadget.1: failed to queue reset event [ 383.224796][ T34] raw-gadget.1 gadget.1: failed to queue resume event [ 383.294933][ T34] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 383.298083][ C3] raw-gadget.1 gadget.1: ignoring, device is not running [ 383.300902][ T34] raw-gadget.1 gadget.1: failed to queue reset event [ 383.369345][ T34] raw-gadget.1 gadget.1: failed to queue resume event [ 383.385570][T17893] vxcan1 speed is unknown, defaulting to 1000 [ 383.441686][T17765] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 383.465845][ T34] usb 6-1: device descriptor read/64, error -32 [ 383.466782][T17901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3283'. [ 383.470338][T17765] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 383.498127][T17765] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 383.507413][T17765] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 383.549116][T17907] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3284'. [ 383.584942][ T34] raw-gadget.1 gadget.1: failed to queue suspend event [ 383.588127][ T34] usb usb6-port1: attempt power cycle [ 383.590455][ T34] raw-gadget.1 gadget.1: failed to queue disconnect event [ 383.605294][ T34] raw-gadget.1 gadget.1: failed to queue reset event [ 383.607004][T17907] 8021q: adding VLAN 0 to HW filter on device bond7 [ 383.626662][T17916] macvlan2: entered promiscuous mode [ 383.629221][T17916] macvlan2: entered allmulticast mode [ 383.632679][T17916] bond7: entered promiscuous mode [ 383.635742][T17916] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 383.662553][T17907] (syz.8.3284,17907,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 383.665780][T17907] (syz.8.3284,17907,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 383.675333][T17916] bond7: left promiscuous mode [ 383.686638][ T34] raw-gadget.1 gadget.1: failed to queue resume event [ 383.690612][ T34] raw-gadget.1 gadget.1: failed to queue reset event [ 383.747250][T17907] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 383.796897][T17927] bridge3: entered promiscuous mode [ 383.799332][T17927] bridge3: entered allmulticast mode [ 383.867802][T17929] syzkaller0: entered promiscuous mode [ 383.870076][T17929] syzkaller0: entered allmulticast mode [ 383.888355][T17929] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 383.894387][T17765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.894949][ T34] raw-gadget.1 gadget.1: failed to queue resume event [ 383.928855][T17765] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.934147][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.936555][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.949814][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.952904][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.986281][ T34] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 384.005005][ C3] raw-gadget.1 gadget.1: ignoring, device is not running [ 384.007936][ T34] usb 6-1: device descriptor read/8, error -32 [ 384.124777][ T34] raw-gadget.1 gadget.1: failed to queue suspend event [ 384.127704][ T34] raw-gadget.1 gadget.1: failed to queue reset event [ 384.192039][T17765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.195149][ T34] raw-gadget.1 gadget.1: failed to queue resume event [ 384.201317][T17955] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3290'. [ 384.218078][T17955] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 384.255037][ T34] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 384.289728][ C3] raw-gadget.1 gadget.1: ignoring, device is not running [ 384.292280][ T34] usb 6-1: device descriptor read/8, error -32 [ 384.358290][ T5933] Bluetooth: hci1: unexpected event for opcode 0x042c [ 384.358536][T17974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.381166][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.383948][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.390714][T17765] veth0_vlan: entered promiscuous mode [ 384.398923][T17974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.407080][ T34] raw-gadget.1 gadget.1: failed to queue suspend event [ 384.412933][ T34] usb usb6-port1: unable to enumerate USB device [ 384.419567][T17765] veth1_vlan: entered promiscuous mode [ 384.458561][T17982] SELinux: policydb version 4373 does not match my version range 15-35 [ 384.458812][T17984] overlay: Bad value for 'metacopy' [ 384.470549][T17982] SELinux: failed to load policy [ 384.479682][T17765] veth0_macvtap: entered promiscuous mode [ 384.539423][T17765] veth1_macvtap: entered promiscuous mode [ 384.569406][T17765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.592076][T17765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.608574][T12546] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.615140][T12546] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.622837][T12546] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.628583][T12547] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.694966][ T5933] Bluetooth: hci2: command tx timeout [ 384.712285][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.719886][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.752023][T12547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.756396][T12547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.038453][T18024] loop5: detected capacity change from 0 to 7 [ 385.155053][ T40] audit: type=1400 audit(2000000183.924:23695): avc: denied { getattr } for pid=18029 comm="syz.8.3303" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=97297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 385.194974][ T5925] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 385.354939][ T5925] usb 12-1: Using ep0 maxpacket: 16 [ 385.359469][ T5925] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 385.363619][ T5925] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.368182][ T5925] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.371955][ T5925] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 385.380049][ T5925] usb 12-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 385.387549][ T5925] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.391982][ T5925] usb 12-1: config 0 descriptor?? [ 385.617652][T18069] overlayfs: missing 'lowerdir' [ 385.833305][ T5925] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0458:5013.0011/input/input43 [ 385.931491][ T5925] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0458:5013.0011/input/input44 [ 385.965511][ T5925] kye 0003:0458:5013.0011: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.7-1/input0 [ 386.178592][T18123] x_tables: duplicate underflow at hook 1 [ 386.226773][T18126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1056 sclass=netlink_route_socket pid=18126 comm=syz.6.3321 [ 386.407352][T18146] SELinux: security_context_str_to_sid (>'ep?NzA}pԞ$ώ!HXW;yt"v) failed with errno=-22 [ 386.468134][ T40] audit: type=1400 audit(2000000185.244:23696): avc: denied { add_name } for pid=18145 comm="syz.6.3325" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 386.470180][T18146] 8021q: VLANs not supported on ip6tnl0 [ 386.495130][ T40] audit: type=1400 audit(2000000185.244:23697): avc: denied { associate } for pid=18145 comm="syz.6.3325" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 386.501138][T18146] pvfs2: Unknown parameter '--' [ 386.515105][ T40] audit: type=1400 audit(2000000185.244:23698): avc: denied { write open } for pid=18145 comm="syz.6.3325" path="/33/file0" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 386.543315][ T40] audit: type=1400 audit(2000000185.274:23699): avc: denied { mounton } for pid=18145 comm="syz.6.3325" path="/33/file0" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 386.573124][ T40] audit: type=1400 audit(2000000185.344:23700): avc: denied { unlink } for pid=17458 comm="syz-executor" name="file0" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 386.598564][T18152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3326'. [ 386.604772][ T40] audit: type=1400 audit(2000000185.374:23701): avc: denied { setopt } for pid=18151 comm="syz.6.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 386.899292][ T40] audit: type=1326 audit(2000000185.674:23702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18180 comm="syz.7.3333" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80c299c139 code=0x0 [ 387.073635][ T5925] usb 12-1: reset high-speed USB device number 2 using dummy_hcd [ 387.106550][T18198] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3337'. [ 387.110166][T18198] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3337'. [ 387.214806][ T5925] usb 12-1: device descriptor read/64, error -32 [ 387.229291][T18205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.233655][T18205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.306330][T18211] QAT: failed to copy from user cfg_data. [ 387.455747][ T5925] usb 12-1: reset high-speed USB device number 2 using dummy_hcd [ 387.535775][T18216] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 387.590308][T18224] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3342'. [ 387.596309][T18224] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3342'. [ 387.600387][T18224] netlink: 'syz.8.3342': attribute type 10 has an invalid length. [ 387.604166][T18224] netlink: 'syz.8.3342': attribute type 5 has an invalid length. [ 387.604827][ T5925] usb 12-1: device descriptor read/64, error -32 [ 387.609004][T18224] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3342'. [ 387.845058][ T5925] usb 12-1: reset high-speed USB device number 2 using dummy_hcd [ 387.875196][ T5925] usb 12-1: device descriptor read/8, error -32 [ 387.963494][T18251] loop5: detected capacity change from 0 to 7 [ 388.115189][ T5925] usb 12-1: reset high-speed USB device number 2 using dummy_hcd [ 388.144397][ T5925] usb 12-1: device descriptor read/8, error -32 [ 388.158996][T18251] Dev loop5: unable to read RDB block 7 [ 388.161372][T18251] loop5: unable to read partition table [ 388.163986][T18251] loop5: partition table beyond EOD, truncated [ 388.175082][T18251] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 388.255721][ T5925] raw-gadget.2 gadget.7: failed to queue suspend event [ 388.291750][ T5970] usb 12-1: USB disconnect, device number 2 [ 388.297268][T18278] tmpfs: User quota inode hardlimit too large. [ 388.313966][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3354'. [ 388.323007][T18275] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18275 comm=syz.1.3354 [ 388.431843][T18289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.442811][T18289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.478029][ T5970] raw-gadget.2 gadget.7: failed to queue reset event [ 388.556221][ T5970] raw-gadget.2 gadget.7: failed to queue resume event [ 388.598221][ T40] audit: type=1400 audit(2000000187.374:23703): avc: denied { getopt } for pid=18303 comm="syz.1.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 388.600952][T18305] xt_hashlimit: size too large, truncated to 1048576 [ 388.616502][ T5970] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 388.620013][ C1] raw-gadget.2 gadget.7: ignoring, device is not running [ 388.624391][ T5970] raw-gadget.2 gadget.7: failed to queue reset event [ 388.705133][ T5970] raw-gadget.2 gadget.7: failed to queue resume event [ 388.775266][ T5970] usb 12-1: device descriptor read/64, error -32 [ 388.872154][T18333] bridge2: entered promiscuous mode [ 388.874446][T18333] bridge2: entered allmulticast mode [ 388.884877][ T5970] raw-gadget.2 gadget.7: failed to queue suspend event [ 388.887991][ T5970] raw-gadget.2 gadget.7: failed to queue reset event [ 388.922739][T18338] program syz.1.3375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.923163][T18334] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 388.943333][T18338] input: syz0 as /devices/virtual/input/input45 [ 388.954938][ T5970] raw-gadget.2 gadget.7: failed to queue resume event [ 388.977971][T18334] hfs: can't find a HFS filesystem on dev sr0 [ 389.016632][ T5970] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 389.021222][ C1] raw-gadget.2 gadget.7: ignoring, device is not running [ 389.024405][ T5970] raw-gadget.2 gadget.7: failed to queue reset event [ 389.050308][T18334] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 389.095378][ T5970] raw-gadget.2 gadget.7: failed to queue resume event [ 389.157984][ T5970] usb 12-1: device descriptor read/64, error -32 [ 389.161722][ T40] audit: type=1400 audit(2000000187.934:23704): avc: denied { link } for pid=18347 comm="syz.8.3379" name="file1" dev="9p" ino=72613989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 389.274907][ T5970] raw-gadget.2 gadget.7: failed to queue suspend event [ 389.277561][ T5970] usb usb12-port1: attempt power cycle [ 389.279889][ T5970] raw-gadget.2 gadget.7: failed to queue disconnect event [ 389.283267][ T5970] raw-gadget.2 gadget.7: failed to queue reset event [ 389.354988][ T5970] raw-gadget.2 gadget.7: failed to queue resume event [ 389.359915][ T5970] raw-gadget.2 gadget.7: failed to queue reset event [ 389.442974][T18376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.448067][T18376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.550139][T18381] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 389.584775][ T5970] raw-gadget.2 gadget.7: failed to queue resume event [ 389.594626][T18389] __nla_validate_parse: 1 callbacks suppressed [ 389.594644][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3391'. [ 389.601772][T18389] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3391'. [ 389.613688][T12545] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.613858][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3391'. [ 389.617482][T12545] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.621742][T18389] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3391'. [ 389.624333][T12545] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.631964][T12545] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.644813][ T5970] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 389.665084][ C1] raw-gadget.2 gadget.7: ignoring, device is not running [ 389.667739][ T5970] usb 12-1: device descriptor read/8, error -32 [ 389.698732][T18393] Cannot find del_set index 0 as target [ 389.774921][ T5970] raw-gadget.2 gadget.7: failed to queue suspend event [ 389.775174][ T5970] raw-gadget.2 gadget.7: failed to queue reset event [ 389.844926][ T5970] raw-gadget.2 gadget.7: failed to queue resume event [ 389.906367][ T5970] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 389.927779][ C1] raw-gadget.2 gadget.7: ignoring, device is not running [ 389.931280][ T5970] usb 12-1: device descriptor read/8, error -32 [ 390.034912][ T5970] raw-gadget.2 gadget.7: failed to queue suspend event [ 390.041815][ T5970] usb usb12-port1: unable to enumerate USB device [ 390.121955][T18426] batadv_slave_1: entered promiscuous mode [ 390.188885][T18430] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3404'. [ 390.194929][ T40] audit: type=1400 audit(2000000188.964:23705): avc: denied { watch } for pid=18429 comm="syz.8.3404" path="/435/file0" dev="tmpfs" ino=2279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 390.244999][T18425] batadv_slave_1: left promiscuous mode [ 390.528032][ T40] audit: type=1400 audit(2000000189.304:23706): avc: denied { connect } for pid=18445 comm="syz.8.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 390.622795][T18454] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 390.753437][T18457] [syz.1.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 390.888792][T18459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58896 sclass=netlink_route_socket pid=18459 comm=syz.8.3412 [ 390.896045][T18460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58896 sclass=netlink_route_socket pid=18460 comm=syz.8.3412 [ 391.053586][T18466] netlink: 'syz.8.3415': attribute type 1 has an invalid length. [ 391.169078][T18470] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3416'. [ 391.172495][T18470] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3416'. [ 391.312032][T18476] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3419'. [ 391.318979][T18476] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3419'. [ 391.383172][T18478] vivid-002: ================= START STATUS ================= [ 391.386656][T18478] vivid-002: Radio HW Seek Mode: Bounded [ 391.389724][T18478] vivid-002: Radio Programmable HW Seek: false [ 391.392418][T18478] vivid-002: RDS Rx I/O Mode: Block I/O [ 391.398385][T18478] vivid-002: Generate RBDS Instead of RDS: false [ 391.401097][T18478] vivid-002: RDS Reception: true [ 391.403267][T18478] vivid-002: RDS Program Type: 0 inactive [ 391.406752][T18478] vivid-002: RDS PS Name: inactive [ 391.409206][T18478] vivid-002: RDS Radio Text: inactive [ 391.411761][T18478] vivid-002: RDS Traffic Announcement: false inactive [ 391.415962][T18478] vivid-002: RDS Traffic Program: false inactive [ 391.418639][T18478] vivid-002: RDS Music: false inactive [ 391.420896][T18478] vivid-002: ================== END STATUS ================== [ 391.448552][ T40] audit: type=1400 audit(2000000190.224:23707): avc: denied { mount } for pid=18477 comm="syz.8.3420" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 391.459816][T18478] vivid-002: ================= START STATUS ================= [ 391.462880][T18478] vivid-002: Radio HW Seek Mode: Bounded [ 391.465433][T18478] vivid-002: Radio Programmable HW Seek: false [ 391.467952][T18478] vivid-002: RDS Rx I/O Mode: Block I/O [ 391.470172][T18478] vivid-002: Generate RBDS Instead of RDS: false [ 391.472651][T18478] vivid-002: RDS Reception: true [ 391.474612][T18478] vivid-002: RDS Program Type: 0 inactive [ 391.476923][T18478] vivid-002: RDS PS Name: inactive [ 391.479335][T18478] vivid-002: RDS Radio Text: inactive [ 391.481547][T18478] vivid-002: RDS Traffic Announcement: false inactive [ 391.484172][T18478] vivid-002: RDS Traffic Program: false inactive [ 391.487069][T18478] vivid-002: RDS Music: false inactive [ 391.489184][T18478] vivid-002: ================== END STATUS ================== [ 391.614983][T18485] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3422'. [ 391.684816][ T40] audit: type=1400 audit(2000000190.454:23708): avc: denied { getopt } for pid=18489 comm="syz.8.3424" lport=40609 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 391.709595][T18493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18493 comm=syz.8.3424 [ 391.743076][T18496] netlink: Unknown conntrack attr (0) [ 391.800586][T18498] Mount JFS Failure: -22 [ 391.808297][ T40] audit: type=1400 audit(2000000190.584:23709): avc: denied { getopt } for pid=18497 comm="syz.8.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 391.890020][T18502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.894302][T18502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.555040][ T5970] hid_parser_main: 27 callbacks suppressed [ 392.555061][ T5970] hid-generic 0005:00B6:0009.0012: unknown main item tag 0x0 [ 392.560765][ T5970] hid-generic 0005:00B6:0009.0012: unknown main item tag 0x0 [ 392.564045][ T5970] hid-generic 0005:00B6:0009.0012: unknown main item tag 0x0 [ 392.567350][ T5970] hid-generic 0005:00B6:0009.0012: unknown main item tag 0x0 [ 392.570491][ T5970] hid-generic 0005:00B6:0009.0012: unknown main item tag 0x0 [ 392.573685][ T5970] hid-generic 0005:00B6:0009.0012: unknown main item tag 0x0 [ 392.577002][ T5970] hid-generic 0005:00B6:0009.0012: unknown main item tag 0x0 [ 392.580157][ T5970] hid-generic 0005:00B6:0009.0012: unknown main item tag 0x0 [ 392.583355][ T5970] hid-generic 0005:00B6:0009.0012: unknown main item tag 0x0 [ 392.588003][ T5970] hid-generic 0005:00B6:0009.0012: unknown main item tag 0x0 [ 392.623241][ T5970] hid-generic 0005:00B6:0009.0012: hidraw0: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 392.682024][T18549] netlink: 'syz.6.3441': attribute type 2 has an invalid length. [ 392.687357][T18544] fido_id[18544]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 393.012320][T18571] ISOFS: Unable to identify CD-ROM format. [ 393.311282][T18591] Bluetooth: MGMT ver 1.23 [ 393.386409][ T40] audit: type=1326 audit(2000000192.164:23710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18594 comm="syz.6.3455" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea26d9c139 code=0x0 [ 393.478021][T18601] syzkaller0: entered promiscuous mode [ 393.480580][T18601] syzkaller0: entered allmulticast mode [ 393.833730][T18610] fuse: Bad value for 'fd' [ 393.848053][T18612] program syz.1.3461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.925103][ T40] audit: type=1400 audit(2000000192.694:23711): avc: denied { module_load } for pid=18615 comm="syz.7.3463" path="/sys/kernel/notes" dev="sysfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 393.962892][ T40] audit: type=1400 audit(2000000192.734:23712): avc: denied { map } for pid=18615 comm="syz.7.3463" path="socket:[95962]" dev="sockfs" ino=95962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 394.025549][T18617] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 394.140438][T18626] sch_tbf: burst 88 is lower than device macsec0 mtu (1482) ! [ 394.144921][T18624] syzkaller0: entered promiscuous mode [ 394.147324][T18624] syzkaller0: entered allmulticast mode [ 394.339626][T18650] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 394.494479][T18669] netlink: 'syz.6.3484': attribute type 7 has an invalid length. [ 394.503096][T18669] netlink: 'syz.6.3484': attribute type 8 has an invalid length. [ 394.578810][T18677] syzkaller0: entered promiscuous mode [ 394.580686][T18677] syzkaller0: entered allmulticast mode [ 394.601076][T18681] netlink: 'syz.6.3487': attribute type 10 has an invalid length. [ 394.626637][T18681] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 394.679007][T18681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.703004][T18681] bond_slave_0: entered promiscuous mode [ 394.706344][T18681] bond_slave_1: entered promiscuous mode [ 394.708878][T18681] syz_tun: entered promiscuous mode [ 394.712586][T18681] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 394.716512][T18681] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 394.720471][T18681] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 394.726269][T18681] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 394.854758][ T40] audit: type=1400 audit(2000000193.624:23713): avc: denied { validate_trans } for pid=18687 comm="syz.7.3490" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 395.109522][T18710] fuse: Bad value for 'fd' [ 395.138601][ T5933] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 395.163354][T18714] syzkaller0: entered promiscuous mode [ 395.169338][T18714] syzkaller0: entered allmulticast mode [ 395.208369][T18717] netlink: 'syz.6.3500': attribute type 11 has an invalid length. [ 395.287375][T18720] __nla_validate_parse: 10 callbacks suppressed [ 395.287393][T18720] netlink: 696 bytes leftover after parsing attributes in process `syz.6.3501'. [ 395.289289][T18723] fuse: Bad value for 'group_id' [ 395.310996][T18723] fuse: Bad value for 'group_id' [ 395.315876][T18723] netlink: zone id is out of range [ 395.348977][ T5933] Bluetooth: hci0: command tx timeout [ 395.419953][T18730] vxcan1 speed is unknown, defaulting to 1000 [ 395.470456][T18733] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 395.789229][T18751] ubi1: attaching mtd1 [ 395.791042][T18751] ubi1 error: ubi_attach_mtd_dev: bad VID header (9) or data offsets (73) [ 395.849519][T18753] syzkaller0: entered promiscuous mode [ 395.851584][T18753] syzkaller0: entered allmulticast mode [ 396.038433][T18766] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3516'. [ 396.087397][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3516'. [ 396.153324][T18770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3519'. [ 396.157381][T18770] netem: invalid attributes len -22 [ 396.159656][T18770] netem: change failed [ 396.222035][T18778] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 396.346397][T18788] syzkaller0: entered promiscuous mode [ 396.348907][T18788] syzkaller0: entered allmulticast mode [ 396.512122][ T40] audit: type=1400 audit(2000000195.284:23714): avc: denied { setopt } for pid=18794 comm="syz.8.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 396.547784][T18803] comedi comedi3: comedi_config --init_data is deprecated [ 396.551196][T18803] comedi comedi3: comedi_config --init_data is deprecated [ 396.594619][T18807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3530'. [ 396.598128][T18807] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3530'. [ 396.673168][T18821] syzkaller0: entered promiscuous mode [ 396.676171][T18821] syzkaller0: entered allmulticast mode [ 396.682333][T18823] overlayfs: failed to clone upperpath [ 396.704116][T18825] xt_hashlimit: max too large, truncated to 1048576 [ 396.778148][T18834] fuse: Bad value for 'group_id' [ 396.780525][T18834] fuse: Bad value for 'group_id' [ 396.851846][ T40] audit: type=1400 audit(2000000195.624:23715): avc: denied { create } for pid=18841 comm="syz.8.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 396.867349][ T40] audit: type=1400 audit(2000000195.644:23716): avc: denied { write } for pid=18841 comm="syz.8.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 396.879063][ T40] audit: type=1400 audit(2000000195.644:23717): avc: denied { read } for pid=18841 comm="syz.8.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 396.889342][ T40] audit: type=1400 audit(2000000195.654:23718): avc: denied { ioctl } for pid=18841 comm="syz.8.3543" path="socket:[96151]" dev="sockfs" ino=96151 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 397.019983][T18859] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 397.125764][T18870] syzkaller0: entered promiscuous mode [ 397.128461][T18870] syzkaller0: entered allmulticast mode [ 397.178842][T18856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3547'. [ 397.181957][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3547'. [ 397.186260][T18856] netlink: 'syz.1.3547': attribute type 19 has an invalid length. [ 397.189847][T18866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.237211][ T40] audit: type=1400 audit(2000000196.014:23719): avc: denied { lock } for pid=18855 comm="syz.1.3547" path="socket:[98170]" dev="sockfs" ino=98170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 397.298045][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3552'. [ 397.380196][T18886] netlink: 'syz.8.3557': attribute type 7 has an invalid length. [ 397.487643][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3559'. [ 397.488768][T18894] 9pnet_virtio: no channels available for device syz [ 397.493857][T18894] 9pnet_virtio: no channels available for device syz [ 397.840080][T18907] syzkaller0: entered promiscuous mode [ 397.842570][T18907] syzkaller0: entered allmulticast mode [ 398.049470][T18916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.298621][T18940] syzkaller0: entered promiscuous mode [ 398.300967][T18940] syzkaller0: entered allmulticast mode [ 398.317898][T18943] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 398.428067][T18952] Mount JFS Failure: -22 [ 398.496482][T18958] program syz.1.3580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.600720][T18973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=70 sclass=netlink_route_socket pid=18973 comm=syz.8.3584 [ 398.840258][T18993] syzkaller0: entered promiscuous mode [ 398.849287][T18993] syzkaller0: entered allmulticast mode [ 398.913881][ T40] audit: type=1400 audit(2000000197.674:23720): avc: denied { create } for pid=18999 comm="syz.6.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 398.935646][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 398.935663][ T40] audit: type=1400 audit(2000000197.714:23722): avc: denied { ioctl } for pid=18999 comm="syz.6.3589" path="socket:[100471]" dev="sockfs" ino=100471 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 398.965148][ T40] audit: type=1400 audit(2000000197.724:23723): avc: denied { setopt } for pid=18999 comm="syz.6.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 399.039752][T19009] netlink: 'syz.8.3593': attribute type 10 has an invalid length. [ 399.053439][T19009] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 399.061074][T19009] netlink: 'syz.8.3593': attribute type 10 has an invalid length. [ 399.235557][ T5933] block nbd1: Receive control failed (result -32) [ 399.249792][ T40] audit: type=1326 audit(2000000198.024:23724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19011 comm="syz.6.3594" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea26d9c139 code=0x0 [ 399.264902][T19030] nbd1: detected capacity change from 0 to 63 [ 399.270614][T13554] block nbd1: Dead connection, failed to find a fallback [ 399.273059][T13554] block nbd1: shutting down sockets [ 399.277385][ T40] audit: type=1400 audit(2000000198.054:23725): avc: denied { setopt } for pid=19034 comm="syz.7.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 399.285238][T13554] blk_print_req_error: 10 callbacks suppressed [ 399.285257][T13554] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.287164][ T40] audit: type=1400 audit(2000000198.054:23726): avc: denied { setattr } for pid=19034 comm="syz.7.3599" name="NETLINK" dev="sockfs" ino=103465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 399.289510][T13554] buffer_io_error: 10 callbacks suppressed [ 399.289524][T13554] Buffer I/O error on dev nbd1, logical block 0, async page read [ 399.314852][T13554] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.318598][T13554] Buffer I/O error on dev nbd1, logical block 1, async page read [ 399.321755][T13554] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.326186][T13554] Buffer I/O error on dev nbd1, logical block 2, async page read [ 399.329456][T13554] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.333244][T13554] Buffer I/O error on dev nbd1, logical block 3, async page read [ 399.342719][T13554] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.349395][T13554] Buffer I/O error on dev nbd1, logical block 0, async page read [ 399.352999][T13554] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.358484][T13554] Buffer I/O error on dev nbd1, logical block 1, async page read [ 399.361436][T13554] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.366121][T13554] Buffer I/O error on dev nbd1, logical block 2, async page read [ 399.369641][T13554] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.373847][T13554] Buffer I/O error on dev nbd1, logical block 3, async page read [ 399.377558][T13554] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.381446][T13554] Buffer I/O error on dev nbd1, logical block 0, async page read [ 399.385233][T13554] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.388905][T13554] Buffer I/O error on dev nbd1, logical block 1, async page read [ 399.392459][T13554] ldm_validate_partition_table(): Disk read failed. [ 399.396468][T13554] Dev nbd1: unable to read RDB block 0 [ 399.400379][T13554] nbd1: unable to read partition table [ 399.406237][T13554] ldm_validate_partition_table(): Disk read failed. [ 399.409432][T13554] Dev nbd1: unable to read RDB block 0 [ 399.412234][T13554] nbd1: unable to read partition table [ 399.461927][T19044] syzkaller0: entered promiscuous mode [ 399.464109][T19044] syzkaller0: entered allmulticast mode [ 399.999402][T19095] tun0: tun_chr_ioctl cmd 1074025675 [ 400.001845][T19095] tun0: persist enabled [ 400.005122][T19095] tun0: tun_chr_ioctl cmd 1074025675 [ 400.010877][T19095] tun0: persist disabled [ 400.071552][T19095] : entered promiscuous mode [ 400.157753][T19111] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.219995][ T40] audit: type=1400 audit(2000000198.994:23727): avc: denied { write } for pid=19112 comm="syz.8.3619" path="socket:[100635]" dev="sockfs" ino=100635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 400.320590][T19111] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 400.409209][T19115] syzkaller0: entered promiscuous mode [ 400.411537][T19115] syzkaller0: entered allmulticast mode [ 400.613748][ T40] audit: type=1400 audit(2000000199.384:23728): avc: denied { ioctl } for pid=19121 comm="syz.1.3622" path="socket:[103567]" dev="sockfs" ino=103567 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 400.648345][T19124] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 400.651671][T19124] overlayfs: missing 'lowerdir' [ 400.659363][ T40] audit: type=1400 audit(2000000199.434:23729): avc: denied { setopt } for pid=19119 comm="syz.7.3621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 402.111046][T19128] __nla_validate_parse: 5 callbacks suppressed [ 402.111074][T19128] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3623'. [ 403.144558][T19125] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3622'. [ 403.221697][T19145] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3627'. [ 403.266899][T19145] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3627'. [ 403.274128][T19155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47961 sclass=netlink_route_socket pid=19155 comm=syz.8.3630 [ 403.305228][T19156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3627'. [ 403.308996][T19156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3627'. [ 403.312668][T19158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.317802][T19158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.382107][T19164] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 403.393249][ T40] audit: type=1400 audit(2000000202.164:23730): avc: denied { getopt } for pid=19162 comm="syz.7.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 403.510562][T19173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.520480][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3636'. [ 403.524349][T19173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3636'. [ 403.534982][T19173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.541194][T19173] bond1: (slave bond0): making interface the new active one [ 403.546300][T19173] bond1: (slave bond0): Enslaving as an active interface with an up link [ 403.552954][T19179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3638'. [ 403.557912][T19179] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3638'. [ 403.562416][T19179] netlink: 'syz.7.3638': attribute type 20 has an invalid length. [ 403.580484][ T74] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.584292][T19179] netlink: 'syz.7.3638': attribute type 20 has an invalid length. [ 403.585165][ T74] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.591524][ T74] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.600898][ T74] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.616617][T19181] syzkaller0: entered promiscuous mode [ 403.619055][T19181] syzkaller0: entered allmulticast mode [ 403.767594][T19186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.771550][T19186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.939278][T19189] XFS (nbd7): SB validate failed with error -5. [ 404.392307][T19217] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 404.398151][T19217] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.415815][T19217] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 404.588714][T19235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.602236][T19235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.861006][T19258] netlink: 'syz.1.3660': attribute type 32 has an invalid length. [ 406.000285][T19331] IPVS: Unknown mcast interface: syzkaller1 [ 406.006115][T19331] siw: device registration error -23 [ 406.026226][T19333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.030073][T19333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.056180][T19334] IPVS: Unknown mcast interface: syzkaller1 [ 406.218138][T19344] MINIX-fs: unable to read superblock [ 406.340860][T19351] loop2: detected capacity change from 0 to 7 [ 406.349268][T13554] Dev loop2: unable to read RDB block 7 [ 406.351820][T13554] loop2: unable to read partition table [ 406.354406][T13554] loop2: partition table beyond EOD, truncated [ 406.358088][ T40] audit: type=1400 audit(2000000205.134:23731): avc: denied { bind } for pid=19348 comm="syz.8.3688" laddr=fe80::a8aa:aaff:feaa:aa10 lport=59155 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 406.372042][T19351] Dev loop2: unable to read RDB block 7 [ 406.374422][T19351] loop2: unable to read partition table [ 406.376809][T19351] loop2: partition table beyond EOD, truncated [ 406.378873][T19351] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 406.455247][ T40] audit: type=1400 audit(2000000205.224:23732): avc: denied { getopt } for pid=19355 comm="syz.1.3691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 406.625821][T19367] tmpfs: Bad value for 'nr_inodes' [ 406.786028][T19376] kthread_run failed with err -4 [ 407.154514][T19407] __nla_validate_parse: 6 callbacks suppressed [ 407.154535][T19407] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3708'. [ 407.258313][T19409] netlink: 'syz.6.3709': attribute type 11 has an invalid length. [ 407.360629][T19414] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3711'. [ 407.364864][T19416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1290 sclass=netlink_route_socket pid=19416 comm=syz.6.3711 [ 407.810576][T19428] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3716'. [ 407.848641][T19432] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3717'. [ 407.852448][T19432] netlink: 43 bytes leftover after parsing attributes in process `syz.8.3717'. [ 407.856863][T19432] netlink: 'syz.8.3717': attribute type 6 has an invalid length. [ 407.856876][T19429] ref_ctr_offset mismatch. inode: 0x198 offset: 0x7 ref_ctr_offset(old): 0x200000000980 ref_ctr_offset(new): 0x24 [ 407.861057][T19432] netlink: 'syz.8.3717': attribute type 5 has an invalid length. [ 407.872204][T19432] netlink: 43 bytes leftover after parsing attributes in process `syz.8.3717'. [ 407.877981][T19435] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3715'. [ 407.878279][T19434] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.3718'. [ 407.920787][T19440] random: crng reseeded on system resumption [ 408.171799][T19439] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 408.452421][T19473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.465369][T19473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.471636][T19473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.483808][T19473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.577841][T19482] overlayfs: missing 'lowerdir' [ 408.661558][T19484] xt_hashlimit: max too large, truncated to 1048576 [ 408.675409][T19484] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 409.029149][T19497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.037637][T19497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.053345][T19498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.061314][T19498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.543236][T19517] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3740'. [ 409.941834][T19528] xt_CONNSECMARK: invalid mode: 0 [ 410.075161][T19534] dlm: plock device version mismatch: kernel (1.2.0), user (4.0.0) [ 410.392393][T19551] netlink: 'syz.7.3750': attribute type 16 has an invalid length. [ 410.402750][T19551] netlink: 63894 bytes leftover after parsing attributes in process `syz.7.3750'. [ 411.046249][T19571] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 411.255221][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.516851][T19590] Cannot find del_set index 4 as target [ 411.521113][T19590] Cannot find del_set index 4 as target [ 411.628918][T19594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.632218][T19595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.632460][T19594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.645379][T19595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.215807][T19610] netlink: 'syz.8.3768': attribute type 1 has an invalid length. [ 412.220288][T19610] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 412.502181][T19627] geneve2: entered promiscuous mode [ 412.688416][T19635] __nla_validate_parse: 6 callbacks suppressed [ 412.688433][T19635] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3776'. [ 412.712862][T19635] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 413.006811][T19646] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3781'. [ 413.122037][ T5933] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 413.134313][T19654] netlink: 'syz.6.3783': attribute type 11 has an invalid length. [ 413.216204][T19657] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3784'. [ 413.220714][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3784'. [ 413.323602][T19663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.335567][T19663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.352324][T19666] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 413.367209][T19671] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3788'. [ 413.419343][T19677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.427872][T19677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.487755][T19683] batadv_slave_1: entered promiscuous mode [ 413.491623][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3793'. [ 413.503156][T19683] team0 (unregistering): Port device team_slave_0 removed [ 413.509492][T19683] team0 (unregistering): Port device team_slave_1 removed [ 413.583136][T19681] batadv_slave_1: left promiscuous mode [ 413.879406][T19698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19698 comm=syz.6.3797 [ 414.090851][T19708] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.3800'. [ 414.283599][T19722] ubi: mtd0 is already attached to ubi0 [ 414.363071][T19727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.375640][T19727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.382161][ T40] audit: type=1400 audit(2000000213.154:23733): avc: denied { mounton } for pid=19723 comm="syz.8.3806" path="/564/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 415.179485][T19751] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (335544320 ns) > initial count (40 ns). Using initial count to start timer. [ 415.224561][T19764] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3815'. [ 415.382181][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3816'. [ 415.710929][T19786] sp0: Synchronizing with TNC [ 415.714754][T19786] sp0: Found TNC [ 415.723164][T19785] [U] ` [ 415.837577][T19788] netlink: 'syz.8.3823': attribute type 2 has an invalid length. [ 415.841111][T19788] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3823'. [ 415.904570][T19789] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 416.375074][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.735842][T19806] loop6: detected capacity change from 0 to 524288000 [ 416.783464][T19817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.785049][T19806] loop6: detected capacity change from 524288000 to 0 [ 416.787202][T19817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.795808][T19809] mkiss: ax0: crc mode is auto. [ 416.977084][T19840] syzkaller0: entered promiscuous mode [ 416.981096][T19840] syzkaller0: entered allmulticast mode [ 417.007600][T19837] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 417.291242][T19845] XFS (nbd7): SB validate failed with error -5. [ 418.180646][T19903] binder: BC_ACQUIRE_RESULT not supported [ 418.182715][T19903] binder: 19902:19903 ioctl c0306201 2000000003c0 returned -22 [ 418.231201][T19907] FAT-fs (sr0): bogus number of reserved sectors [ 418.234278][T19907] FAT-fs (sr0): Can't find a valid FAT filesystem [ 418.493077][T19907] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 418.502278][T19908] FAT-fs (sr0): bogus number of reserved sectors [ 418.505546][T19908] FAT-fs (sr0): Can't find a valid FAT filesystem [ 418.626213][T19908] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 418.661662][ T10] IPVS: starting estimator thread 0... [ 418.744816][T19915] IPVS: using max 45 ests per chain, 108000 per kthread [ 418.763348][T19918] syzkaller0: entered promiscuous mode [ 418.765528][T19918] syzkaller0: entered allmulticast mode [ 418.832049][T19924] fuse: Bad value for 'fd' [ 418.924298][T19928] __nla_validate_parse: 6 callbacks suppressed [ 418.924317][T19928] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3865'. [ 418.982900][T19928] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.987187][T19928] bridge_slave_1: left promiscuous mode [ 418.990735][T19928] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.066972][T19930] bond2: ARP target 4.0.0.0 is already present [ 419.069418][T19930] bond2: option arp_ip_target: invalid value (4) [ 419.074078][T19930] bond2 (unregistering): Released all slaves [ 419.249746][T19935] Cannot find del_set index 0 as target [ 419.264922][T19935] vlan2: entered promiscuous mode [ 419.267051][T19935] bridge0: entered promiscuous mode [ 419.312803][T19940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.316468][T19940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.446193][T19946] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3870'. [ 419.937222][T19957] syzkaller0: entered promiscuous mode [ 419.939623][T19957] syzkaller0: entered allmulticast mode [ 420.005057][T19955] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 420.232591][T19977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3879'. [ 420.290447][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3876'. [ 420.312904][T19986] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 420.356914][T19993] syzkaller0: entered promiscuous mode [ 420.359896][T19993] syzkaller0: entered allmulticast mode [ 420.636763][T20010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 420.705080][T20013] input: syz1 as /devices/virtual/input/input47 [ 420.708374][T20013] input: failed to attach handler leds to device input47, error: -6 [ 420.756687][T20015] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 420.771303][T20015] program syz.7.3891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.789377][T20018] befs: (nbd8): unable to read superblock [ 420.802494][T20019] syzkaller0: entered promiscuous mode [ 420.805325][T20019] syzkaller0: entered allmulticast mode [ 420.853474][T20026] random: crng reseeded on system resumption [ 421.193372][T20050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.202369][T20050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.240022][T20055] netlink: 'syz.7.3906': attribute type 10 has an invalid length. [ 421.243295][T20055] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3906'. [ 421.249140][T20055] batadv0: entered promiscuous mode [ 421.251489][T20055] batadv0: entered allmulticast mode [ 421.256733][T20055] bridge0: port 3(batadv0) entered blocking state [ 421.274874][T20055] bridge0: port 3(batadv0) entered disabled state [ 421.280928][T20055] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 421.645516][T20088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.648483][T20088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.699031][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.915048][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.018590][T20112] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3921'. [ 422.022422][T20112] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3921'. [ 422.026400][T20112] netlink: 'syz.8.3921': attribute type 11 has an invalid length. [ 422.029674][T20112] netlink: 'syz.8.3921': attribute type 7 has an invalid length. [ 422.078910][T20115] syzkaller0: entered promiscuous mode [ 422.081321][T20115] syzkaller0: entered allmulticast mode [ 422.256846][T20119] SELinux: policydb string SE L does not match my string SE Linux [ 422.260489][T20119] SELinux: failed to load policy [ 422.265238][T20119] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 422.269226][T20119] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 422.273762][T20119] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 422.326160][T20122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3925'. [ 422.371549][T20124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.376142][T20124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.398407][T20122] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3925'. [ 422.774460][T20146] Cannot find add_set index 46338 as target [ 422.935629][ T40] audit: type=1400 audit(2000000221.714:23734): avc: denied { append } for pid=20148 comm="syz.1.3934" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 422.970182][T20157] Invalid ELF header type: 2 != 1 [ 423.090781][ T40] audit: type=1400 audit(2000000221.864:23735): avc: denied { accept } for pid=20169 comm="syz.1.3941" path="socket:[106089]" dev="sockfs" ino=106089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 423.157704][T20180] program syz.8.3943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.181680][T20182] syzkaller0: entered promiscuous mode [ 423.184466][T20182] syzkaller0: entered allmulticast mode [ 423.265859][ T40] audit: type=1400 audit(2000000222.044:23736): avc: denied { setattr } for pid=20183 comm="syz.8.3945" path="socket:[106105]" dev="sockfs" ino=106105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 423.312172][T20188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.316969][T20188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.394217][ T40] audit: type=1400 audit(2000000222.164:23737): avc: denied { bind } for pid=20190 comm="syz.8.3947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 423.855280][T20194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=20194 comm=syz.6.3948 [ 423.895064][ T5933] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 423.898176][ T5942] Bluetooth: hci3: command 0x1003 tx timeout [ 424.057238][T20216] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3954'. [ 424.116126][T20220] syzkaller0: entered promiscuous mode [ 424.118559][T20220] syzkaller0: entered allmulticast mode [ 424.343418][ T40] audit: type=1400 audit(2000000223.114:23738): avc: denied { write } for pid=20231 comm="syz.8.3959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 424.545023][T20248] syzkaller0: entered promiscuous mode [ 424.547465][T20248] syzkaller0: entered allmulticast mode [ 424.570076][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.575898][T17726] raw-gadget.0 gadget.8: failed to queue disconnect event [ 424.588031][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 424.595257][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 424.599535][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.603460][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 424.681107][T20249] vxcan1 speed is unknown, defaulting to 1000 [ 424.796943][T20235] syz_tun (unregistering): left allmulticast mode [ 424.957395][T12524] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.031008][T20271] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 425.060975][T12524] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.095572][T20249] chnl_net:caif_netlink_parms(): no params data found [ 425.209244][T12524] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.221441][T20249] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.226018][T20249] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.229292][T20249] bridge_slave_0: entered allmulticast mode [ 425.233506][T20249] bridge_slave_0: entered promiscuous mode [ 425.245315][T20249] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.248529][T20249] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.251796][T20249] bridge_slave_1: entered allmulticast mode [ 425.258060][T20249] bridge_slave_1: entered promiscuous mode [ 425.292351][T12524] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.310948][T20282] NILFS (nbd7): device size too small [ 425.316540][T20249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.324145][T20249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.356023][T20249] team0: Port device team_slave_0 added [ 425.361262][T20249] team0: Port device team_slave_1 added [ 425.376054][T20249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.378768][T20249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.389529][T20249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.395089][T20249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.397187][T20249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.407451][T20249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.445917][T20249] hsr_slave_0: entered promiscuous mode [ 425.449287][T20249] hsr_slave_1: entered promiscuous mode [ 425.452550][T20249] debugfs: 'hsr0' already exists in 'hsr' [ 425.455521][T20249] Cannot create hsr debugfs directory [ 425.719632][ T40] audit: type=1326 audit(2000000224.494:23739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20294 comm="syz.7.3980" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80c299c139 code=0x0 [ 425.814160][T12524] bond2 (unregistering): (slave erspan1): Releasing active interface [ 425.824407][T12524] erspan1 (unregistering): left promiscuous mode [ 425.901877][T12524] bond3 (unregistering): (slave gretap1): Releasing active interface [ 425.990560][T20296] [U] zͻi[27| [ 425.992564][T20296] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 425.998195][T20296] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 426.000847][T20296] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 426.016149][T20296] [U] 8)X)YvxRĻbmbN@ox;JD, [ 426.019150][T20296] [U] *Cn3v7KEXgt_3 [ 426.021516][T20296] [U] D/QazҬEHgE1$_ks=R@ [ 426.023866][T20296] [U] ϼcEv @ [ 426.024118][T12524] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 426.025326][T20296] [U] a% [ 426.025637][T20296] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 426.028827][T12524] bridge1 (unregistering): left promiscuous mode [ 426.029988][T20296] [U] f1p3 [ 426.040835][T20296] [U] N0[L;a_l&kMC [ 426.042603][T20296] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 426.331716][T12524] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 426.379137][T12524] bond0 (unregistering): Released all slaves [ 426.388198][T12524] bond1 (unregistering): Released all slaves [ 426.399872][T12524] bond2 (unregistering): Released all slaves [ 426.410768][T12524] bond3 (unregistering): Released all slaves [ 426.422155][T12524] bond4 (unregistering): Released all slaves [ 426.431424][T12524] bond5 (unregistering): Released all slaves [ 426.444507][T12524] bond6 (unregistering): Released all slaves [ 426.457494][T12524] bond7 (unregistering): Released all slaves [ 426.468848][T12524] bond8 (unregistering): Released all slaves [ 426.553353][T20294] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 [ 426.659143][T12524] tipc: Left network mode [ 426.699423][ T5942] Bluetooth: hci3: command tx timeout [ 426.779844][T20311] vxcan1 speed is unknown, defaulting to 1000 [ 427.142456][T20329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.146931][T20329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.169896][T20327] netlink: 'syz.6.3984': attribute type 4 has an invalid length. [ 427.754065][T12524] hsr_slave_0: left promiscuous mode [ 427.771039][T12524] hsr_slave_1: left promiscuous mode [ 427.854185][ T40] audit: type=1400 audit(2000000226.624:23740): avc: denied { mounton } for pid=20336 comm="syz.7.3987" path="/" dev="tmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 428.036696][T20338] tipc: Enabling of bearer rejected, failed to enable media [ 428.042525][T20249] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 428.047904][T20249] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 428.058025][T20249] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 428.064329][T20249] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 428.070713][T20337] vxcan1 speed is unknown, defaulting to 1000 [ 428.168280][T20249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.193960][T20249] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.201645][T12535] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.204971][T12535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.214926][T12547] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.218169][T12547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.367515][T20352] syz.7.3989(20352): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 428.373766][ T40] audit: type=1400 audit(2000000227.144:23741): avc: denied { getopt } for pid=20350 comm="syz.7.3989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 428.394176][T12524] IPVS: stop unused estimator thread 0... [ 428.472325][T20249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.528599][T20367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.533960][T20367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.668403][T20370] Invalid ELF header type: 0 != 1 [ 428.709575][T20370] netlink: 'syz.7.3993': attribute type 1 has an invalid length. [ 428.712526][T20370] netlink: 'syz.7.3993': attribute type 2 has an invalid length. [ 428.742649][T20249] veth0_vlan: entered promiscuous mode [ 428.755800][T20249] veth1_vlan: entered promiscuous mode [ 428.780960][T20249] veth0_macvtap: entered promiscuous mode [ 428.786138][ T5942] Bluetooth: hci3: command tx timeout [ 428.791629][T20249] veth1_macvtap: entered promiscuous mode [ 428.805835][T20249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.825825][T20249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.864482][T12535] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.868864][T12535] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.873075][T12535] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.879102][T12535] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.992607][T12542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.997037][T12542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.066313][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.075441][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.280785][T20397] binder: binder_mmap: 20396 200000ffe000-200001000000 bad vm_flags failed -1 [ 429.288484][T20397] openvswitch: netlink: Key type 31 is not supported [ 429.813434][T20414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20414 comm=syz.8.4006 [ 429.857298][T20417] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4007'. [ 429.882826][ T40] audit: type=1400 audit(2000000228.654:23742): avc: denied { lock } for pid=20416 comm="syz.1.4007" path="socket:[109878]" dev="sockfs" ino=109878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 429.928059][T20421] input: syz1 as /devices/virtual/input/input50 [ 430.124788][T11733] usb 13-1: new high-speed USB device number 28 using dummy_hcd [ 430.185688][T20430] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 430.262137][T20435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.266217][T20435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.274140][T20434] vxcan1 speed is unknown, defaulting to 1000 [ 430.274937][T11733] usb 13-1: Using ep0 maxpacket: 16 [ 430.279992][T11733] usb 13-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 430.283824][T11733] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.290043][T11733] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.293427][T11733] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 430.299705][T11733] usb 13-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 430.303586][T11733] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.311865][T11733] usb 13-1: config 0 descriptor?? [ 430.745732][T11733] input: HID 0458:5013 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0458:5013.0013/input/input51 [ 430.844284][T11733] input: HID 0458:5013 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0458:5013.0013/input/input52 [ 430.856083][ T5942] Bluetooth: hci3: command tx timeout [ 430.885284][T11733] kye 0003:0458:5013.0013: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.8-1/input0 [ 431.388938][ T40] audit: type=1400 audit(2000000230.164:23743): avc: denied { connect } for pid=20451 comm="syz.1.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 431.533805][T20466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.540714][T20466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.582640][T20469] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 431.592027][T20470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=20470 comm=syz.6.4022 [ 431.871916][T20475] syzkaller0: entered promiscuous mode [ 431.874312][T20475] syzkaller0: entered allmulticast mode [ 431.994840][ T5997] usb 13-1: reset high-speed USB device number 28 using dummy_hcd [ 432.124922][ T5997] usb 13-1: device descriptor read/64, error -32 [ 432.153694][T20477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.159400][T20477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.216289][T20479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4029'. [ 432.305577][T20488] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 432.374923][ T5997] usb 13-1: reset high-speed USB device number 28 using dummy_hcd [ 432.462329][T20500] netlink: 763 bytes leftover after parsing attributes in process `syz.6.4035'. [ 432.515539][ T5997] usb 13-1: device descriptor read/64, error -32 [ 432.592587][T20511] syzkaller0: entered promiscuous mode [ 432.596905][T20511] syzkaller0: entered allmulticast mode [ 432.743990][T20524] xt_hashlimit: size too large, truncated to 1048576 [ 432.765544][ T5997] usb 13-1: reset high-speed USB device number 28 using dummy_hcd [ 432.786670][ T5997] usb 13-1: device descriptor read/8, error -32 [ 432.920356][T20538] ================================================================== [ 432.922969][T20538] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x4f3/0x5d0 [ 432.925524][T20538] Read of size 4 at addr ffff88802f3a883c by task syz.7.4049/20538 [ 432.928797][T20538] [ 432.930511][T20538] CPU: 1 UID: 0 PID: 20538 Comm: syz.7.4049 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.930540][T20538] Tainted: [L]=SOFTLOCKUP [ 432.930546][T20538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 432.930557][T20538] Call Trace: [ 432.930565][T20538] [ 432.930573][T20538] dump_stack_lvl+0x100/0x190 [ 432.930605][T20538] print_report+0x156/0x4c9 [ 432.930630][T20538] ? __virt_addr_valid+0x81/0x620 [ 432.930655][T20538] ? __phys_addr+0xe8/0x180 [ 432.930676][T20538] ? dvb_frontend_release+0x4f3/0x5d0 [ 432.930700][T20538] kasan_report+0xdf/0x1e0 [ 432.930722][T20538] ? dvb_frontend_release+0x4f3/0x5d0 [ 432.930738][T20538] dvb_frontend_release+0x4f3/0x5d0 [ 432.930753][T20538] ? __pfx_dvb_frontend_release+0x10/0x10 [ 432.930767][T20538] __fput+0x3ff/0xb40 [ 432.930779][T20538] task_work_run+0x150/0x240 [ 432.930790][T20538] ? __pfx_task_work_run+0x10/0x10 [ 432.930802][T20538] get_signal+0x1bd/0x21e0 [ 432.930815][T20538] ? __pfx___fput_deferred+0x10/0x10 [ 432.930828][T20538] ? __pfx_get_signal+0x10/0x10 [ 432.930840][T20538] ? do_raw_spin_lock+0x128/0x260 [ 432.930851][T20538] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 432.930863][T20538] arch_do_signal_or_restart+0x91/0x7a0 [ 432.930878][T20538] ? __x64_sys_close_range+0x3ce/0x5d0 [ 432.930888][T20538] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 432.930905][T20538] exit_to_user_mode_loop+0x86/0x4a0 [ 432.930923][T20538] do_syscall_64+0x67c/0xf80 [ 432.930950][T20538] ? clear_bhb_loop+0x40/0x90 [ 432.930962][T20538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.930973][T20538] RIP: 0033:0x7f80c299c139 [ 432.930983][T20538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.930994][T20538] RSP: 002b:00007ffd23bdf108 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 432.931005][T20538] RAX: 0000000000000000 RBX: 00007ffd23bdf1f0 RCX: 00007f80c299c139 [ 432.931011][T20538] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 432.931018][T20538] RBP: 0000000000069954 R08: 0000000000000001 R09: 0000000000000000 [ 432.931024][T20538] R10: 0000001b32420000 R11: 0000000000000246 R12: 00007ffd23bdf230 [ 432.931031][T20538] R13: 00007f80c2c15fac R14: 000000000006998f R15: 00007f80c2c15fa0 [ 432.931041][T20538] [ 432.931045][T20538] [ 432.935130][ T5942] Bluetooth: hci3: command tx timeout [ 432.935351][T20538] Allocated by task 1: [ 433.019790][T20538] kasan_save_stack+0x30/0x50 [ 433.021412][T20538] kasan_save_track+0x14/0x30 [ 433.022964][T20538] __kasan_kmalloc+0xaa/0xb0 [ 433.024423][T20538] dvb_register_device+0x1d6/0x1e60 [ 433.024796][ T5997] usb 13-1: reset high-speed USB device number 28 using dummy_hcd [ 433.026076][T20538] dvb_register_frontend+0x5a8/0x8a0 [ 433.026100][T20538] vidtv_bridge_probe+0x44b/0xa30 [ 433.026110][T20538] platform_probe+0x106/0x1d0 [ 433.026125][T20538] really_probe+0x241/0xa60 [ 433.026133][T20538] __driver_probe_device+0x1de/0x400 [ 433.037024][T20538] driver_probe_device+0x4c/0x1b0 [ 433.038630][T20538] __driver_attach+0x2f4/0x6a0 [ 433.040333][T20538] bus_for_each_dev+0x13e/0x1d0 [ 433.042382][T20538] bus_add_driver+0x305/0x5b0 [ 433.044451][T20538] driver_register+0x1e2/0x360 [ 433.045213][ T5997] usb 13-1: device descriptor read/8, error -32 [ 433.046051][T20538] vidtv_bridge_init+0x38/0x70 [ 433.049810][T20538] do_one_initcall+0x11d/0x760 [ 433.051614][T20538] kernel_init_freeable+0x6e5/0x7a0 [ 433.053831][T20538] kernel_init+0x1f/0x1e0 [ 433.055670][T20538] ret_from_fork+0x754/0xd80 [ 433.057650][T20538] ret_from_fork_asm+0x1a/0x30 [ 433.059689][T20538] [ 433.060728][T20538] Freed by task 20538: [ 433.062522][T20538] kasan_save_stack+0x30/0x50 [ 433.064623][T20538] kasan_save_track+0x14/0x30 [ 433.066721][T20538] kasan_save_free_info+0x3b/0x70 [ 433.068782][T20538] __kasan_slab_free+0x5f/0x80 [ 433.070802][T20538] kfree+0x1f6/0x6b0 [ 433.072488][T20538] dvb_device_put.part.0+0x57/0x90 [ 433.074658][T20538] dvb_generic_release+0xe2/0x160 [ 433.076757][T20538] dvb_frontend_release+0x13d/0x5d0 [ 433.078723][T20538] __fput+0x3ff/0xb40 [ 433.080256][T20538] task_work_run+0x150/0x240 [ 433.082157][T20538] get_signal+0x1bd/0x21e0 [ 433.084092][T20538] arch_do_signal_or_restart+0x91/0x7a0 [ 433.086349][T20538] exit_to_user_mode_loop+0x86/0x4a0 [ 433.088546][T20538] do_syscall_64+0x67c/0xf80 [ 433.090237][T20538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.092282][T20538] [ 433.093047][T20538] The buggy address belongs to the object at ffff88802f3a8800 [ 433.093047][T20538] which belongs to the cache kmalloc-256 of size 256 [ 433.097715][T20538] The buggy address is located 60 bytes inside of [ 433.097715][T20538] freed 256-byte region [ffff88802f3a8800, ffff88802f3a8900) [ 433.102385][T20538] [ 433.103316][T20538] The buggy address belongs to the physical page: [ 433.105882][T20538] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f3a8 [ 433.108901][T20538] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 433.111733][T20538] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 433.114306][T20538] page_type: f5(slab) [ 433.115627][T20538] raw: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 433.118354][T20538] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 433.121448][T20538] head: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 433.124602][T20538] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 433.127314][T20538] head: 00fff00000000001 ffffea0000bcea01 00000000ffffffff 00000000ffffffff [ 433.130160][T20538] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 433.133566][T20538] page dumped because: kasan: bad access detected [ 433.135892][T20538] page_owner tracks the page as allocated [ 433.137790][T20538] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 23430163583, free_ts 0 [ 433.144275][T20538] post_alloc_hook+0x153/0x170 [ 433.145857][T20538] get_page_from_freelist+0x111d/0x3140 [ 433.147693][T20538] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 433.149718][T20538] new_slab+0xa6/0x6d0 [ 433.151162][T20538] refill_objects+0x26b/0x400 [ 433.152844][T20538] __pcs_replace_empty_main+0x19f/0x600 [ 433.154662][T20538] __kmalloc_cache_noprof+0x493/0x6f0 [ 433.154877][ T5997] raw-gadget.5 gadget.8: failed to queue suspend event [ 433.156411][T20538] bus_add_driver+0x92/0x5b0 [ 433.159860][T10875] usb 13-1: USB disconnect, device number 28 [ 433.160904][T20538] driver_register+0x1e2/0x360 [ 433.164935][T20538] usb_register_driver+0x21c/0x3e0 [ 433.166657][T20538] do_one_initcall+0x11d/0x760 [ 433.168760][T20538] kernel_init_freeable+0x6e5/0x7a0 [ 433.169896][ T40] audit: type=1400 audit(2000000231.944:23744): avc: denied { read } for pid=5316 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 433.171136][T20538] kernel_init+0x1f/0x1e0 [ 433.180822][T20538] ret_from_fork+0x754/0xd80 [ 433.181884][ T40] audit: type=1400 audit(2000000231.944:23745): avc: denied { search } for pid=5316 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.182124][T20538] ret_from_fork_asm+0x1a/0x30 [ 433.190849][ T40] audit: type=1400 audit(2000000231.944:23746): avc: denied { search } for pid=5316 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.191875][T20538] page_owner free stack trace missing [ 433.191884][T20538] [ 433.200068][ T40] audit: type=1400 audit(2000000231.944:23747): avc: denied { add_name } for pid=5316 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.201536][T20538] Memory state around the buggy address: [ 433.201550][T20538] ffff88802f3a8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 433.202473][ T40] audit: type=1400 audit(2000000231.944:23748): avc: denied { create } for pid=5316 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 433.209755][T20538] ffff88802f3a8780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 433.209772][T20538] >ffff88802f3a8800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 433.209780][T20538] ^ [ 433.209790][T20538] ffff88802f3a8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 433.209800][T20538] ffff88802f3a8900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 433.209811][T20538] ================================================================== [ 433.224950][T20538] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 433.224965][T20538] CPU: 1 UID: 0 PID: 20538 Comm: syz.7.4049 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.224981][T20538] Tainted: [L]=SOFTLOCKUP [ 433.224985][T20538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 433.224992][T20538] Call Trace: [ 433.224996][T20538] [ 433.225001][T20538] dump_stack_lvl+0x100/0x190 [ 433.225036][T20538] vpanic+0x552/0x970 [ 433.225047][T20538] ? __pfx_vpanic+0x10/0x10 [ 433.225057][T20538] ? __pfx_vprintk_emit+0x10/0x10 [ 433.225072][T20538] ? dvb_frontend_release+0x4f3/0x5d0 [ 433.225087][T20538] panic+0xd1/0xe0 [ 433.225096][T20538] ? __pfx_panic+0x10/0x10 [ 433.225107][T20538] ? dvb_frontend_release+0x4f3/0x5d0 [ 433.225121][T20538] ? preempt_schedule_common+0x42/0xc0 [ 433.225138][T20538] ? check_panic_on_warn+0x1f/0x90 [ 433.225155][T20538] check_panic_on_warn.cold+0x19/0x34 [ 433.225167][T20538] end_report.part.0+0x3a/0x90 [ 433.225183][T20538] kasan_report.cold+0xe/0x18 [ 433.225198][T20538] ? dvb_frontend_release+0x4f3/0x5d0 [ 433.225214][T20538] dvb_frontend_release+0x4f3/0x5d0 [ 433.225230][T20538] ? __pfx_dvb_frontend_release+0x10/0x10 [ 433.225245][T20538] __fput+0x3ff/0xb40 [ 433.225257][T20538] task_work_run+0x150/0x240 [ 433.225269][T20538] ? __pfx_task_work_run+0x10/0x10 [ 433.225281][T20538] get_signal+0x1bd/0x21e0 [ 433.225294][T20538] ? __pfx___fput_deferred+0x10/0x10 [ 433.225309][T20538] ? __pfx_get_signal+0x10/0x10 [ 433.225325][T20538] ? do_raw_spin_lock+0x128/0x260 [ 433.225342][T20538] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 433.225359][T20538] arch_do_signal_or_restart+0x91/0x7a0 [ 433.225382][T20538] ? __x64_sys_close_range+0x3ce/0x5d0 [ 433.225398][T20538] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 433.225425][T20538] exit_to_user_mode_loop+0x86/0x4a0 [ 433.225452][T20538] do_syscall_64+0x67c/0xf80 [ 433.225475][T20538] ? clear_bhb_loop+0x40/0x90 [ 433.225494][T20538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.225512][T20538] RIP: 0033:0x7f80c299c139 [ 433.225528][T20538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.225546][T20538] RSP: 002b:00007ffd23bdf108 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 433.225564][T20538] RAX: 0000000000000000 RBX: 00007ffd23bdf1f0 RCX: 00007f80c299c139 [ 433.225576][T20538] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 433.225587][T20538] RBP: 0000000000069954 R08: 0000000000000001 R09: 0000000000000000 [ 433.225597][T20538] R10: 0000001b32420000 R11: 0000000000000246 R12: 00007ffd23bdf230 [ 433.225608][T20538] R13: 00007f80c2c15fac R14: 000000000006998f R15: 00007f80c2c15fa0 [ 433.225623][T20538] [ 433.228484][T20538] Kernel Offset: disabled VM DIAGNOSIS: 18:18:10 Registers: info registers vcpu 0 CPU#0 RAX=00000107a98d95f4 RBX=ffff88806a423f80 RCX=00000000000006e0 RDX=0000000000000107 RSI=ffff88806a423f80 RDI=0000000000000145 RBP=0000000000000145 RSP=ffffc90006aef9b8 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000019 R14=0000000000000000 R15=ffffed100d4847f5 RIP=ffffffff81b53f45 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f80c387a6c0 ffffffff 00c00000 GS =0000 ffff8880d634d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f80c3878e40 CR3=0000000057b1c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd23bdf496 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd23bdf496 00007ffd23bdf49c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80c2a32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80c2a32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80c2a32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80c2a32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80c2bea498 00007f80c2bea468 00007f80c2bea4a0 00007f80c2bea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85789ee5 RDI=ffffffff9b498940 RBP=ffffffff9b498900 RSP=ffffc90007917570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000032 R14=0000000000000010 R15=ffffffff85789e80 RIP=ffffffff85789f0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555580ad0500 ffffffff 00c00000 GS =0000 ffff8880d644d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2f535d CR3=0000000057b1c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023646e65746e6f 72662f2372657470 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd23bdf496 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd23bdf496 00007ffd23bdf49c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80c2a32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80c2a32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80c2a32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80c2a32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80c2bea4a0 00007f80c2bea480 00007f80c2bea488 00007f80c2bea4b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80c2bea498 00007f80c2bea468 00007f80c2bea4a0 00007f80c2bea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000030d241 RBX=ffff88801eea4900 RCX=ffffffff8b8eec75 RDX=0000000000000000 RSI=ffffffff8de6e8d1 RDI=ffffffff8c1ae9a0 RBP=0000000000000002 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c6795 R10=ffff88806a633cab R11=0000000000000000 R12=ffffed1003dd4920 R13=0000000000000002 R14=ffffffff90d95b10 R15=0000000000000000 RIP=ffffffff8b8ed5df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d654d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2ff23ffc CR3=0000000034f56000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000007042 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=4e8a9024ba302dad 5c900ea1f96e37e8 4e8a9024ba302dad 5c900ea1f96e37e8 4e8a9024ba302dad 5c900ea1f96e37e8 4e8a9024ba302dad 5c900ea1f96e37e8 ZMM18=81d1ffba5ffa4437 9dd0b669502aa4fc 81d1ffba5ffa4437 9dd0b669502aa4fc 81d1ffba5ffa4437 9dd0b669502aa4fc 81d1ffba5ffa4437 9dd0b669502aa4fc ZMM19=4319000000000000 0000000000000005 4319000000000000 0000000000000004 4319000000000000 0000000000000003 4319000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001101000 0380047208005208 000100000008060a 016ed24080808010 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008808080808080 85e4100001f38004 0100000008060801 5af400080001f3f0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080001f3e003 00100001f3d0030f ffffffffffff0401 f3c00305e2100001 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f3b00301e6800401 f3a00300080001f3 90030fffffffffff ff0401f380030380 ZMM25=5838a8d95838a8d9 5838a8d95838a8d9 5838a8d95838a8d9 5838a8d95838a8d9 5838a8d95838a8d9 5838a8d95838a8d9 5838a8d95838a8d9 5838a8d95838a8d9 ZMM26=2f4c09c42f4c09c4 2f4c09c42f4c09c4 2f4c09c42f4c09c4 2f4c09c42f4c09c4 2f4c09c42f4c09c4 2f4c09c42f4c09c4 2f4c09c42f4c09c4 2f4c09c42f4c09c4 ZMM27=e6dcf6cde6dcf6cd e6dcf6cde6dcf6cd e6dcf6cde6dcf6cd e6dcf6cde6dcf6cd e6dcf6cde6dcf6cd e6dcf6cde6dcf6cd e6dcf6cde6dcf6cd e6dcf6cde6dcf6cd ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=dc110000dc110000 dc110000dc110000 dc110000dc110000 dc110000dc110000 dc110000dc110000 dc110000dc110000 dc110000dc110000 dc110000dc110000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=000000000012441f RCX=ffffffff8281c4d6 RDX=ffff888058378000 RSI=ffffffff8281b87d RDI=000000000012441f RBP=0000000000000002 RSP=ffffc900044cf548 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff8281b87d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555581384500 ffffffff 00c00000 GS =0000 ffff8880d664d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fea27b456b8 CR3=0000000026f5c000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000002fefce0 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d69745f656c64 692e7166622e6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4d8cbc46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4d8cbc46 00007ffe4d8cbc4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea26e32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea26e32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea26e32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea26e32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000