last executing test programs: 5m52.571760154s ago: executing program 1 (id=226): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r0, &(0x7f0000000740)=[{0x0, 0xfdc5}, {&(0x7f0000000500)=""/97, 0x61}], 0x2, 0x7fff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='-cpu'], 0x5) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) 5m52.450126899s ago: executing program 1 (id=227): write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:anacron_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0xa}, 0x57) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x5, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x49b5e351, 0xfffffffffffffffc, 0xe8de, 0xfffffffffffffff9, 0x9, 0x1ff, 0x9, 0x1, 0x8, 0x80000000, 0x4, 0x2, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x1, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x10000001, 0x8, 0x8000000000000000, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0x400000c58e, 0x3, 0xfff, 0xfffffffffffffffe, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x4, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x4, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0xffffffffffffffff, 0x3, 0x100, 0x4, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7b, 0x8, 0x0, 0x6, 0x6, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0x1, 0x0, 0x80]}) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000080)={0xe7, ""/231}) 5m52.449328709s ago: executing program 1 (id=228): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)='\n', 0x1}], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private=0x2, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) unshare(0x20000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') 5m51.580491784s ago: executing program 1 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x9, 0x1, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3, 0x8}, {0xb, 0xffff}, {0xfff3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x11) (async, rerun: 64) r6 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000001514"], 0x18}}, 0x0) 5m51.501194023s ago: executing program 1 (id=250): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x18) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) ptrace(0x10, r0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e"], 0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ptrace$poke(0x21, r0, 0x0, 0x0) (async) ptrace$poke(0x21, r0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20) (async) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0xedaa7000) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0xedaa7000) listen(r4, 0x5) accept4(r4, 0x0, 0x0, 0x80800) 5m51.292145901s ago: executing program 1 (id=251): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) syz_clone3(&(0x7f0000000700)={0x4010400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={r1, r1, 0x4, 0x9, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f0000000080)=[r1, r1, r1], &(0x7f0000000100)=[0x801], 0x3}) 5m36.260979639s ago: executing program 32 (id=251): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) syz_clone3(&(0x7f0000000700)={0x4010400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={r1, r1, 0x4, 0x9, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f0000000080)=[r1, r1, r1], &(0x7f0000000100)=[0x801], 0x3}) 5m31.509983502s ago: executing program 0 (id=442): syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="e90c610faca20180830d00000800450000240000e0000011907800000000000000000000000000109078a20c000100000000"], 0x0) socket(0xa, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x29, 0x24, 0x0, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) syz_emit_ethernet(0x35, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x0, 0xf, 0x0, @opaque="edf1df4edc119c"}}}}}, 0x0) 5m31.43181892s ago: executing program 0 (id=443): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_score_adj\x00') (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r1, &(0x7f00000017c0)=[{&(0x7f0000000040)="273eebfe167c0e923301b61c42cb1d11f41d00bdab2aae0e00005a56", 0x1c}], 0x1) write$6lowpan_enable(r0, &(0x7f0000000340)='1', 0x1) write$6lowpan_enable(r0, &(0x7f00000002c0)='1', 0x1) (async) socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./control\x00', 0x40000000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064d1, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) (async) clock_settime(0x0, &(0x7f0000000040)={r2, r3+60000000}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = io_uring_setup(0x7ede, &(0x7f00000001c0)={0x0, 0xa99f, 0x2, 0x0, 0x3d9}) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) prctl$PR_SET_SECUREBITS(0x1c, 0x0) r7 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) listen(r6, 0xa1) (async) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_macvtap\x00', @link_local}) 5m31.38155247s ago: executing program 0 (id=444): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x1, 0x5, 0x0, '\x00', {0x7ff, 0xad4, 0x4, 0x8, r3, r4, 0x7000, '\x00', 0x8000000000000000, 0x4, 0x9, 0x6, {0x6, 0x6}, {0x5}, {0x100000000, 0x9}, {0x8, 0xa04}, 0x4, 0x800007, 0x4, 0x3}}}}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@newsa={0x114, 0x10, 0x300, 0x70bd27, 0x25dfdbfb, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e23, 0x4, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x3a, 0x0, r3}, {@in6=@remote, 0x4d2, 0x32}, @in6=@private1, {0x7, 0x9, 0x100000001, 0x2, 0x4, 0x2, 0xfff, 0x3}, {0x80000001, 0x100, 0x2, 0x3}, {0x2, 0x580, 0x6}, 0x70bd25, 0x3506, 0xa, 0x1, 0xff, 0x7a}, [@srcaddr={0x14, 0xd, @in6=@mcast1}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tfcpad={0x8, 0x16, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r5, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r7]) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 5m31.331785909s ago: executing program 0 (id=445): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000b80)={0x80000000, 0x0, &(0x7f0000000b00)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000001380)={r2}) (async) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sendfile(r3, r3, 0x0, 0x24002de8) (async) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x39, 0x1a, r0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30040000002c5d2d00030a0102000000000000000001000000090001"], 0xc0}}, 0x0) (async, rerun: 32) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) (async, rerun: 32) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="b805000000b9009800ea0f01d91f790066ba6100ec66b86bc266ef66ba420066b8e20066ef0f29902cbb0000460f2159666666440f38826b410f7842280f07b8010000000f01d9f265d9a6f3ffffff", 0x4f}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r0, 0x0) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 5m31.330057293s ago: executing program 0 (id=447): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r0, 0xedaa7000) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001040)={0x1, 0x3251}, 0x8) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000804000/0x1000)=nil) (async) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000001080)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) 5m31.169998322s ago: executing program 0 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000014d564b00000000ff"]) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000200360002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_clone(0x4205400, 0x0, 0xfffffe5a, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b8f1ffffff0f23d00f21f86635000000030f23f8f20f35660f6e2dba4300b8ee29ef66b91a08000066b80000000066ba000000000f30660f38809c7b14260ff7df666636d86e7266b9800000c00f326635004000000f30f30f1c4400", 0x5d}], 0x1, 0x62, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x880) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m23.490696888s ago: executing program 2 (id=566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) shutdown(0xffffffffffffffff, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x40010022) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r2, &(0x7f00000004c0)="3a25f648ba840ef4e64316d731b70cef6ea6dd83601ce129701c94af8cbfcbf382416ae7f2695f3af587ff0ba9cc7ea0e866e5662927105ff7c3bacf500a3c323c4ebe4a79e0e5a8b5f98c7e8dcdade7c66ec41e7144e775cfd057ecbf15a08bf4354d274f3ad21c153f86e7f18345288ecc24948890d2c5024bd5853c6b6da03b15db60d4f648", 0x87) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xce, 0x7, 0x22, 0x1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7800, 0x9, 0x1}}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x4040080) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000100)={0x401, 0x50, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r5, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e20, @broadcast}}) 5m22.639415189s ago: executing program 2 (id=575): pipe(0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="55006cc8ed247f5f00f601b2a4a2809302060000ff41fd01040400000a001200020028000000197f3324baac341b61130000f2ff00000100"/69, 0x45}], 0x1, 0x0, 0x0, 0x7a000000}, 0x20080080) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000095000000000000001000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c40)="88b0", 0x2}}, 0x24044044) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000140)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newtaction={0x12c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x118, 0x1, [@m_mirred={0x114, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0xa4, 0xe, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0x4, 0x5, 0x2}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x20009, 0x20000000, 0x8cab, 0xc5d9}, 0x4, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x9, 0x3, 0x8, 0x5}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x5, 0x3, 0x3, 0x6}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x4, 0x100, 0x7}, 0x4, r11}}]}, {0x48, 0x6, "6ad0ff5c8f2d186f18425d7657ff0e5b1bb39953fbce5098334d256a1d447a3c731ab9582cec12070956b06ef99a9bdeb07ab6c8957008439ed1870270319482d8b1c7b0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x12c}, 0x1, 0x2b1e, 0x0, 0x2004844}, 0x0) 5m22.31167814s ago: executing program 2 (id=581): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(r1) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r2, 0x0) (async) accept4(r2, 0x0, 0x0, 0x80800) 5m21.441561061s ago: executing program 2 (id=588): syz_io_uring_setup(0x7667, &(0x7f0000000100)={0x0, 0x0, 0x13580, 0x0, 0x184}, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f00000000c0)={0x1, 0x200, 0x7}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000001400)="8da6", 0x2) 5m19.771727129s ago: executing program 2 (id=619): socket$alg(0x26, 0x5, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) syz_emit_ethernet(0x56, &(0x7f0000005900)=ANY=[@ANYBLOB="aaaaaaaaaaaa8f064ab6bf7c86dd606410a60020000020010000000000000000000000000001fe8000000000000000000000000000aa0003000000000000050200000710"], 0x0) 5m19.771066502s ago: executing program 2 (id=620): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x18}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x5, 0x3, 0x3, 0x2008, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r1, 0x3, 0x0, 0x6, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="7c369efdfffffd5b564d0993b18e263df2895e2b0a88f14282d4d90310293d7c1f3d4d3146b12e53e53a84ba638e7f13", 0x30) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000880)={{r3}, 0x0, 0x12, @inherit={0x58, &(0x7f0000000080)={0x1, 0x2, 0xebbe, 0xfffffffffffffff8, {0x15, 0x6, 0x7, 0x5, 0x2}, [0x5, 0x2]}}, @subvolid=0x2}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m15.280928756s ago: executing program 33 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000014d564b00000000ff"]) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000200360002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_clone(0x4205400, 0x0, 0xfffffe5a, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b8f1ffffff0f23d00f21f86635000000030f23f8f20f35660f6e2dba4300b8ee29ef66b91a08000066b80000000066ba000000000f30660f38809c7b14260ff7df666636d86e7266b9800000c00f326635004000000f30f30f1c4400", 0x5d}], 0x1, 0x62, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x880) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m4.715727195s ago: executing program 34 (id=620): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x18}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x5, 0x3, 0x3, 0x2008, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r1, 0x3, 0x0, 0x6, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="7c369efdfffffd5b564d0993b18e263df2895e2b0a88f14282d4d90310293d7c1f3d4d3146b12e53e53a84ba638e7f13", 0x30) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000880)={{r3}, 0x0, 0x12, @inherit={0x58, &(0x7f0000000080)={0x1, 0x2, 0xebbe, 0xfffffffffffffff8, {0x15, 0x6, 0x7, 0x5, 0x2}, [0x5, 0x2]}}, @subvolid=0x2}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m56.831230679s ago: executing program 6 (id=826): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x1000000}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) 4m56.321107112s ago: executing program 6 (id=832): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x12100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0xfff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x2000a804) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 4m56.261120802s ago: executing program 6 (id=835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x1d0, 0x98, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x25f, 0x0, 0x40000000, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = fanotify_init(0x8, 0x800) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010800000000000300000000000005000400008000000900020073797a31000000000c0007800500150000000000050005000a000000050001000600000013000300686173683a6e65742c6966616365"], 0x58}}, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) 4m56.199680774s ago: executing program 6 (id=839): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x1, 0x3, 0x0, &(0x7f0000000640)) add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000270e00"/20, @ANYRES32=0x0, @ANYBLOB="2a130200b7580000140012800b00010067656e65766500000400028008002000070cf0ce"], 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000002140)=@newtaction={0x288c, 0x30, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{0x230, 0x1, [@m_bpf={0x78, 0x16, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x45, 0x6, "fc6402e4c830eff3ea5c001dd0f65bdacdc2db931cd643eba6f98c66d449f02c55a226c49c49a9bf540e1628ee0078b16fcb9dc3246a6f5746a5afbe8134455441"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x60, 0xc, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x8, 0x1, 0x400, 0x3}}]}, {0x1f, 0x6, "06e61961ada639ac6e00e36f74e24a9c2c386d8e971c4c173252e0"}, {0xc, 0x7, {0xb3165b27fc2c24eb, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0xf4, 0x1df6, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xbd, 0x6, "db487cdd85ea61e51cf9d107baf2ede38b2736e1569e15b9ab9ef848f5a0f7fabbf9ddc2933d8d2a57bb1efb66d15ae73954ff6b7f9053ee2a98f6e529d9df7131c5fd4c4dce804deee45f2beb6e38ffb5ee49e5b63479469dd305b2cf44ecd4fc5aa0f93880ae4f809d5a9fabc8f6a9c85434871e66a71d5555fdd71738229b18d5ab371892fbedf17b53a203c0e2353dff499308cb430c1a6335a9ea3374730b9b6780236e701957b8711ce7c3933575654f54b01b7f79ce"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x60, 0x10, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x400, 0xd, 0x1, 0xfffffffa, 0x3bec}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x2648, 0x1, [@m_ct={0x1084, 0x1e, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "573183e01d8cc697164141f4cba9eeb9"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "b51f55f66da11116e07bcc54738b80f9"}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x109c, 0x6, 0x0, 0x0, {{0xb}, {0x1060, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1ff, 0x10, 0x9, 0xd96, 0x7f, 0xffff, 0xc, 0xedc6, 0x7, 0x1, 0x3, 0x1, 0xfffffffa, 0x1800, 0x0, 0x5, 0x6, 0x7, 0x4, 0xffff0001, 0xb19b, 0x4, 0x4, 0x9, 0x4, 0x8c55c67, 0x9, 0x2, 0xc0000000, 0x7, 0x9, 0x3, 0xea, 0x6, 0x0, 0xfffffffc, 0xa, 0x7fff, 0x2, 0x800, 0x8, 0xffffffff, 0x1, 0x27b9, 0x5, 0x0, 0x7, 0x2, 0xfffffffb, 0x42e9, 0xb54e, 0x8, 0x1000, 0xaf6, 0x7, 0x6, 0x3ff, 0x22, 0xfffffffd, 0x100, 0x7, 0x1, 0xf6e2, 0x3, 0x6, 0x2, 0xa, 0x2, 0x70, 0x3899, 0x2, 0x0, 0x5, 0x0, 0x3c2, 0xfffffffb, 0x1, 0x9, 0x8b, 0x0, 0x400, 0x3, 0x2, 0x6, 0xf, 0x1, 0xe, 0x7fff, 0x0, 0x3, 0x4, 0x5, 0x5, 0x6, 0x9, 0x1398, 0xfffffff8, 0x8f, 0xde72, 0x9, 0x2, 0x7, 0x6, 0x7fff, 0x2, 0x8, 0x9, 0x4, 0x5, 0xaa, 0x300, 0x5, 0x7, 0x1, 0x6, 0x100, 0x719c, 0x401, 0xffff, 0x5, 0xd, 0x7, 0xc4, 0x2, 0x40, 0x35c4, 0x4, 0x0, 0xffff37f7, 0x0, 0x6, 0x5, 0x81ef, 0xbbd, 0xb, 0x18, 0x4d, 0x0, 0xcd6, 0xfffffffe, 0x8001, 0x5, 0x7f, 0xfc000000, 0x5, 0xffffff01, 0x1b5b, 0xe02, 0x6725, 0x7fff, 0x8, 0x4, 0x8, 0xff, 0x81, 0x3, 0x8cb, 0x10001, 0x8000, 0x5, 0x5, 0x7, 0x9, 0x30938faf, 0x8, 0x5, 0x4, 0x4, 0x8, 0x800, 0x9, 0x7, 0x225f, 0x7, 0xfffffffb, 0x10000, 0x2, 0x8, 0xfffffffe, 0x9, 0x1000, 0x0, 0x8, 0x5, 0x4, 0xede, 0x9, 0x5, 0x4, 0x4, 0x1, 0x2, 0x8b, 0x8000, 0x5, 0x4ace, 0x3ff, 0x1, 0x1000, 0x1, 0x9, 0x3, 0x4, 0x1, 0x91, 0x1, 0xac, 0xffff, 0x80, 0x6, 0x0, 0x9, 0x1, 0x2, 0x2, 0x5, 0x1, 0x40, 0x80, 0xb5, 0x0, 0x0, 0x7f, 0xffff, 0xfffff051, 0x100, 0x5, 0x6, 0x7ff, 0x7, 0x3, 0x5, 0x2, 0x757a, 0x2, 0x1, 0x7, 0xc, 0x0, 0x4, 0x4, 0x1, 0x9ce, 0x0, 0x8, 0x1, 0x9, 0x0, 0x9, 0x5, 0x8, 0x0, 0x9, 0x194, 0xa60]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x4, 0x4, 0x8000, 0x101, 0x6, 0x1, 0x8, 0x7, 0x3, 0xb04, 0x3, 0x80, 0xffff, 0x3, 0xff5e, 0xa, 0x80000000, 0x5, 0xfffffffa, 0x1, 0x51e, 0xc03, 0x2, 0x3, 0x7, 0x7fff, 0x5bb, 0x8, 0x8, 0x1, 0x1, 0x5, 0x1, 0x2, 0x8, 0x6, 0x4, 0x0, 0x4b3, 0x8000, 0xf6d3, 0x8, 0x3, 0x3, 0x7, 0xd5, 0xfff, 0xc0, 0x6, 0x2, 0x6, 0x6, 0xb, 0x6, 0x1a, 0x7, 0x9, 0x9, 0x4, 0xc1, 0x3, 0x13, 0x7, 0xfffffff8, 0x1000, 0x4a6, 0x8, 0x6, 0x7de, 0x7, 0x5, 0x0, 0x2, 0xffff, 0x4, 0x80, 0x1, 0x1, 0x10, 0x8, 0x64, 0x2, 0x2, 0x0, 0x4, 0x8, 0x2, 0xfffffffe, 0xd2d, 0x5, 0x0, 0x8, 0xff, 0x18aced60, 0x2, 0x0, 0x0, 0x6, 0x3, 0x1, 0xffffffff, 0x4, 0x1, 0x4, 0x2f0, 0x3, 0x3, 0x5, 0xb0be, 0x0, 0x1ff, 0x2, 0x3, 0x1, 0x5, 0xfffffffe, 0x3, 0x0, 0x2c, 0x100, 0x7fff, 0xfe5, 0x911, 0x4, 0x401, 0x10001, 0xf, 0x5, 0xffffff27, 0xb, 0x3, 0x40b70dda, 0x4, 0x2, 0x2, 0x720, 0x6, 0x0, 0x6, 0x8, 0x9, 0x7, 0x8, 0xef00, 0x0, 0x3, 0x80, 0x7f, 0x3ff, 0xfffffffe, 0x1ff, 0x3, 0x6, 0x4, 0x6, 0xc0000, 0x1ff, 0x5, 0x0, 0x6, 0x3559, 0x5, 0x40, 0x3, 0x5, 0x2, 0xce, 0x0, 0x0, 0x6, 0x2000000, 0x930, 0x4bf, 0x3, 0xfffffffc, 0x5, 0x289, 0xf, 0x4, 0x3, 0x92fe, 0x8, 0xab, 0x7fff, 0xfffffffc, 0xffffb906, 0x8, 0x1000, 0x2, 0xd, 0xf, 0x7, 0x5, 0x8, 0x1, 0x9, 0x80, 0x80000000, 0xfffffff7, 0x4, 0x7, 0xfffffff5, 0x9, 0xa, 0x7, 0x0, 0x8000, 0x74, 0x9, 0x92, 0xfff, 0x8, 0x1, 0xfff00000, 0xb, 0x4, 0xffff0521, 0x6, 0x90f, 0x9, 0x3, 0xf21a, 0xffff, 0x8e, 0x8405, 0xfff, 0x6, 0x515, 0x0, 0x301e, 0x51ca2275, 0x9, 0xd, 0xe337, 0x7, 0x7, 0x0, 0x0, 0x8, 0xfff, 0x81, 0x5, 0x80, 0x27, 0x3, 0xffffffff, 0x1000, 0x2, 0x4, 0x1ff, 0x8, 0x6, 0x7, 0x9, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x98d9, 0x5, 0x3, 0x2, 0x4f66, 0x101, 0x7, 0xfffffff8, 0x8, 0x5000, 0x6, 0x9, 0x4, 0xff, 0x3, 0x0, 0x2, 0x85113e00, 0x6, 0x5, 0xfffffffb, 0xdc6d, 0x4, 0x8, 0x4, 0x5, 0xfffffffa, 0x4000, 0x0, 0x3, 0x0, 0x1, 0x80000000, 0x3, 0xfffffff1, 0x8dd1, 0x8, 0x2, 0xffffffff, 0x49c4db72, 0xf77, 0x6, 0x523f, 0xffffffff, 0x0, 0x401, 0xc, 0x81, 0x0, 0x9, 0x4, 0x4, 0x5, 0x101, 0x3, 0xf, 0x81, 0x1c, 0xafedb8a, 0x8, 0x8, 0x3, 0x9, 0x7, 0x4, 0x800, 0x2, 0x4, 0x1, 0x7fff, 0x7, 0x70, 0x6, 0x8, 0x3, 0x0, 0x5, 0x2, 0x6, 0x9, 0x5, 0x8, 0x5, 0x1, 0x46a, 0xd2, 0x5, 0x5, 0x5a, 0x0, 0x48c95365, 0x80000000, 0x1, 0x3, 0x4, 0x7ff, 0xf18, 0x7f, 0x2, 0x800, 0xfffffff9, 0xdec, 0x3, 0x8, 0xbd, 0x4, 0x2, 0x6, 0x10, 0x7ff, 0x2800000, 0xffff8001, 0x1, 0x5, 0x7, 0x7ca, 0x1, 0x5, 0xd, 0x8, 0x8, 0x0, 0x6e85, 0x32b, 0x7, 0x9, 0x1, 0x3, 0x6, 0x6, 0x3, 0x1, 0x8, 0x7, 0x6, 0x8, 0x250, 0x4, 0x2, 0x5, 0x2, 0x0, 0x2, 0x8, 0x7, 0xf112, 0x4, 0x4, 0x5, 0xffffffff, 0x8, 0x2, 0xffffff80, 0x8, 0x9, 0x9, 0xe, 0xfffffff9, 0x1ff, 0x80000001, 0x0, 0x100, 0xa636, 0xd61f, 0x8, 0x8, 0x4, 0x8, 0x961, 0x3, 0x2, 0x8, 0x5, 0x64, 0xf9b7, 0x101, 0x0, 0x12, 0x5f, 0x6, 0x1, 0xfffff153, 0x8, 0x1000, 0x8, 0xcc, 0x8001, 0x1, 0x6, 0x8, 0x0, 0x9, 0x3, 0x0, 0x10001, 0xbf4, 0x100, 0xffffffff, 0x5, 0x7ffd, 0x5, 0x5, 0xffff14d1, 0x6, 0x800, 0x6, 0x8, 0x5, 0x80000001, 0xd0e7, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5, 0x9, 0x1ff, 0x1, 0x80, 0xe, 0x1, 0x0, 0xffff, 0x2, 0x5, 0x5a0d, 0x7, 0x1ff, 0xb, 0xd6d, 0x1, 0x4, 0xeefb, 0x80000000, 0xfffffffd, 0x0, 0xfffffffc, 0x6, 0x8, 0x7b0a, 0x2000, 0x0, 0x9c5, 0xffff, 0xfffffffb, 0x1, 0x1, 0x8, 0x0, 0x6, 0x9, 0x8, 0xfffff001, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3d}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x8, 0x2, 0xfff, 0x5, 0x5, 0x7, 0x1, 0x1, 0x5, 0x2, 0x2, 0x9a, 0xa9f, 0x4, 0x2a72, 0x6, 0x0, 0x0, 0xfffffff8, 0x8, 0x0, 0x0, 0x7, 0x5, 0x53d, 0x7f, 0x4000000, 0x523, 0x2, 0x800, 0xe4, 0x4, 0x7ff, 0x6, 0x1, 0x7, 0x7, 0xd4, 0x0, 0xa, 0xfffffffd, 0x1, 0x5, 0x81, 0x7, 0x3, 0x5, 0x9, 0x10000, 0x3, 0x1, 0x3, 0xfffff000, 0x7, 0xbe, 0x6, 0x8000, 0x8, 0x1, 0x400, 0x6, 0x6, 0x9, 0x4, 0x8000, 0x80000001, 0x6, 0x80000000, 0x6, 0x3, 0x1ff, 0x7, 0x5, 0x1, 0xffffffff, 0xfff, 0x9, 0x8, 0x5, 0x6, 0x6, 0xeb9, 0x1, 0x8, 0x6242, 0x8, 0x685c, 0x3, 0xfffffff8, 0x99f, 0x7ff, 0x4, 0x48bd, 0x9, 0x3, 0x3ff, 0x3c, 0x1, 0xfffff36c, 0x12a00, 0x8, 0x1, 0x8, 0xe19, 0x3, 0x4, 0x1, 0x7f, 0x5, 0x1, 0x6, 0x6, 0x6, 0x2, 0x2, 0x29f6, 0x6, 0x4, 0x3, 0x9, 0x7fffffff, 0x1, 0x9, 0x6d4, 0x3, 0x3, 0x2, 0x2, 0x101, 0x2, 0x1, 0x10000, 0x8, 0xfffffffe, 0x4, 0x4, 0x6, 0x6, 0x6, 0x5, 0xeb, 0x56a, 0x9, 0x1000, 0x4, 0x62, 0x20ed, 0x4, 0x1, 0x80000001, 0x3, 0xc5f, 0x87, 0x1, 0x1, 0x3, 0x200, 0x9, 0x3, 0x10000, 0x3, 0x100, 0x5, 0x4, 0x8001, 0xde9d, 0x6, 0x2, 0x4, 0x5, 0xe, 0x3, 0x2, 0xce3, 0xe, 0x9ee4, 0x5, 0xfffffff8, 0x7f, 0x5, 0x80000000, 0xf, 0x1, 0x1, 0xd4, 0xd0, 0x1, 0x7fffffff, 0xbb7, 0x80000001, 0x6, 0x8, 0x400, 0x4, 0x3ff, 0x4, 0x1, 0x4, 0xfffffff9, 0x0, 0x84f8, 0x80, 0x6, 0x6aaf60e1, 0xe, 0x3, 0x2, 0x3ffcdfdd, 0xffff0000, 0x0, 0x1, 0xfffffffe, 0xffffff81, 0x5, 0x2, 0x8, 0x1, 0x4, 0x4f7c, 0x3, 0x0, 0xc, 0x700, 0x7, 0x2, 0xda50, 0x40, 0x5, 0xb9, 0x9, 0xa0, 0x6, 0x8, 0x0, 0x6, 0x8, 0x8, 0x81, 0x8, 0x3, 0x5, 0x5, 0x8, 0x6cf9, 0x8, 0x9, 0xa, 0x2, 0x3, 0x3, 0xf796, 0x2, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]]}, {0x12, 0x6, "7ebd17dcb06f7a6f935ee8472f19"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0xf4, 0x19, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x401, 0xfffffff9, 0x2, 0x0, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x1, 0x5, 0x3, 0x4}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x60, 0x6, "b96444d47edaf682a5f8d6bf9d956944ed5acf2bc65f45f1e215b624bdef0043c524b198e2263b5d9af9b4ddbb605e8786ed0f0f78a958e54dda25560e5622f10f7b8bd88a2a122100545d7219e039ebfada60eb764beb39dba33956"}, {0xc, 0x7, {0x1, 0x9e10252ad887294c}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xac, 0x1c, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x6, 0xffffffffffffffff, 0x10000, 0x7}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_SMAC={0xa, 0x4, @random="06de6060ba39"}]}, {0x17, 0x6, "eb0f76cba4ccb0812bf18292302f006fd26fd6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x140, 0x3, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8000, 0x1, 0x80000000, 0x8}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x90, 0x3, 0x5, 0xb96}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xed, 0x8, 0x10000000, 0x2, 0xe}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7576e6e1, 0x0, 0x6, 0xc2, 0x9}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x1, 0x3, 0x7, 0x1}, 0x1c}}]}, {0x85, 0x6, "530baaac059b4062630bfc754a526509e2053b75d7da146275252cf8ff0e0594c07d5be57d74a31b4525320b2ba20f8d52abfde9b7b0d826ddc7f339c758c671161dcae0dbb2c44ab1f4b3528c01a610ff24ddec87dc230ea1f657eebc5393f86b57af517460c257e07f6105ad7818240801b75a231872bc78130c832b65922318"}, {0xc}, {0xc, 0x8, {0x2, 0x5}}}}, @m_sample={0x120, 0x6, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x400}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0xaa, 0x6, "5a565c3a8e95ef1127ffb2f0232bb014aec75349d554ad1eeeadfd4c2c92c27b51c1b89b8400c4af87f76aced1992813006e87ff2ad1be5ad736c16a7ef758b1273bf1a6701cb7dd93e111cc1a4065ff962cf7ad22b298ea0df7f9b7373685e1d7ee549f20a33140b82713c7b5d1d42fec1eef1a7a63d2fdc41209b90cf663548630d2f565b5e6d09eebb96760654a755e44bc4bfc1ca928dfa1e1009b4819a7bcc13b6e1b91"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x124, 0xe, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2ad, 0x0, 0x4, 0x100}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0xfffffffc, 0x7, 0x7, 0x3}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5d, 0x8, 0x8, 0x4}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0x4, 0x80000001, 0x2}, 0x3}}]}, {0x78, 0x6, "88b984c23aa7cc4bb50b6ec5c712f15723d9c8c9fc0aa03199be564f437537f12cec0dc6eb01e40edebb23dacb5b036630aaa06153e3ba9196a1355fbef4c6638a334bbf4a05374d9eed37519cd7b209163b712006604b94b6238f0620c01e72db2aa158844fc7767883dcb4823a039b84800aaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x288c}}, 0x24000001) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000001400a59500000000000000000a00000041532df441be3acd5afbea6eaa9a4671d2ace0afaea91ffdae70d6ebef540864c7ef66d5fa9972b0", @ANYRES32=r8, @ANYBLOB="14000200ff020000000000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}}, 0x24}}, 0x0) 4m56.196609323s ago: executing program 6 (id=843): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000000100000006"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmsg(r7, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10002) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x35, &(0x7f00000a2000)={0x5, &(0x7f00000001c0)=[{0x6}, {0x8, 0xc2, 0x80, 0x6}, {0x0, 0x1, 0x0, 0x200}, {0x6, 0xb, 0xed, 0x6}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x58de, 0xb, 0x1, {0x1, @win={{0x0, 0x400, 0x38dd8efc, 0x8}, 0x7, 0xff, &(0x7f0000000180)={{0x1000, 0xec81, 0xfffff8a4, 0x9}}, 0x8, &(0x7f0000000240)="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", 0x2}}, 0x22}) fcntl$setlease(r2, 0x400, 0x2) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1, 0x470bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x88c0}, 0x80) 4m55.780872307s ago: executing program 6 (id=849): socket$nl_generic(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/161, 0xa1, 0x12100, &(0x7f0000000140)=@l2={0x1f, 0x5, @any, 0x4, 0x2}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x7c}}, 0x0) 4m55.740356302s ago: executing program 35 (id=849): socket$nl_generic(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/161, 0xa1, 0x12100, &(0x7f0000000140)=@l2={0x1f, 0x5, @any, 0x4, 0x2}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x7c}}, 0x0) 4m43.579059924s ago: executing program 3 (id=1025): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x8, @broadcast, 0x4e23, 0x3, 'rr\x00', 0x1e, 0x8, 0x39}, 0x2c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x1e000000, &(0x7f0000000780)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2, 0x3a, '', 0x3a, '$#()\'$', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x46, 0x43]}, 0x31) 4m43.470838564s ago: executing program 3 (id=1031): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x7800, 0x4000000, 0x0, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x0, 0x0, 0xfe, 0x4, 0x0, @local, @local}}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0x7, 0x3, 0x4033, 0x6, 0x8, 0x3, 0x2, 0x3}}) 4m40.731300799s ago: executing program 3 (id=1080): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x2}}, 0xfffffffffffffe0e) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000400)={&(0x7f0000000380)=[r3], 0x0, 0x2f, 0x1, 0xa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0x4008032, 0xffffffffffffffff, 0x97224000) dup3(r2, r0, 0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x400, 0x100) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000080), 0x4) ioctl$SNDCTL_TMR_TEMPO(r4, 0xc0045405, &(0x7f00000001c0)=0x15c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026f90000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570d338f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee905000000d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d00000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac00"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0xfffffffffffffd05) 4m40.671289655s ago: executing program 3 (id=1082): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b40)="7ad1391fe3f2de73e35a1181b2e4ee670069a67ad709862b86bd2d6fa6ecd367667af912f3aeedeeb5ac07db7e2727ca", 0x30}], 0x1, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34040001) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0x4, 0x8, 0xa4, 0x3, 0x3, 0xb69, 0xc1, 0x4, 0x1, 0x20000003, 0x40000008, 0x20101, 0x80000000, 0x9, 0x3, 0xa, 0x1, 0xfffffffd, 0x401, 0x6, 0x9, 0x2, 0x4, 0x5, 0x66c, 0x200, 0x3, 0x0, 0xe, 0x5, 0x100, 0x3, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11003, 0x8, 0x7, 0xfffffffd, 0x4, 0x1, 0x7b, 0x3ff, 0xa, 0xfffffffb, 0xf, 0x9, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x2, 0x180000, 0x7, 0x8b, 0x7, 0x2af, 0xf5, 0xffffffff, 0x2, 0x6, 0x9, 0x4, 0x7, 0x9, 0x1, 0x4, 0x0, 0x8, 0x752, 0x5, 0x4, 0x0, 0x10001, 0x2, 0xfffffffd, 0x6, 0x8, 0x8, 0x8, 0xffffffff, 0x5, 0x2, 0x80, 0xc, 0x5, 0x0, 0x81, 0x2000b, 0x5, 0x400, 0x6, 0x22, 0x8, 0x4, 0xd9a, 0x800809, 0x0, 0x3ff, 0x4, 0x2, 0x5, 0x8, 0x0, 0x80000000, 0xb57, 0x0, 0x3, 0x4, 0x49b1, 0x401, 0x8, 0xd0a, 0x401, 0x1, 0x200, 0xc5d, 0x2]}}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x818098, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000001340)={0x5, {{0xa, 0x4e20, 0x7f, @dev={0xfe, 0x80, '\x00', 0xe}, 0x10001}}}, 0x88) futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = epoll_create1(0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000014c0)=ANY=[], 0x11) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80020, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=bind=static:0']) close_range(r5, r5, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000012c0)={{0x2, 0x4e20, @loopback}, {0x306, @random="1b5176f6a1e9"}, 0xe6, {0x2, 0x4e21, @local}, 'geneve1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611018000000000066000000000000009100000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x10, 0x0, 0x0, {}, [{0x42, 0x1, [@m_skbedit={0x50, 0x5, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xffffffffffffffd8}}}]}]}, 0x68}}, 0x0) 4m39.75663945s ago: executing program 3 (id=1091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x7, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x8000) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0xeeef0000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="0f01df0faeee0f72f400f20f017746660f3881590a66b825018ee80faeed66baf80cb8688f0783ef66bafc0ced66b81a008ed80fc71e", 0x36}], 0x1, 0x0, 0x0, 0x0) eventfd2(0xf9, 0x80000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m39.420897196s ago: executing program 3 (id=1095): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006272695a676500200c00028005002b0003000000"], 0x3c}}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c880}, 0x24040080) 4m39.379832169s ago: executing program 36 (id=1095): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006272695a676500200c00028005002b0003000000"], 0x3c}}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c880}, 0x24040080) 2m57.689936853s ago: executing program 7 (id=1727): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=0x41424344], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='0.:H/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0x10}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f0000000240)={0xa, 0x2, 0x2, {0x46, 0x13, 0xfffb, 0xf7168000}}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) r9 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r9, &(0x7f0000000000)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1, 0x3, 0x0) r10 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000080)="9e", 0x1}], 0x1}}], 0x1, 0x4000050) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2m57.489811481s ago: executing program 7 (id=1728): socket(0x10, 0x5, 0x7) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[], 0x0) r2 = dup(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/65, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f0000000580)=[{&(0x7f00000001c0)="f3cf76e8fc646f9fc7ee", 0xa}, {&(0x7f0000000380)="fff4bf84a653ddd395821cf64445924d69b98edb236648b9da91a95996d4ca34bb0d4008b3e7480a50555cf6c5a3a7d60a36314a4829b74fdf784f60008b19a8b73e2e7dde54d02683c39d67feec7a868d1c5958c4026e647054ae2ca4c3e61c26e125c45adce8beb9804db3af4d65501fc88b1508d06a75c4675519a1f6183e0b525df81a6d63242690a6c8281e3b5c1dd9e4e642410900fbab371637580cb4b80f8e75da3762225616e0efa34bfeaad7f629760d838af6c38b90994af150b1b8fd1221648c2a979a7f42c9571f3617faabca97b7619fc1eb841568e918c05f2ab17daf", 0xe4}, {&(0x7f0000000480)="b1a7c41c511e1ebf2827a17692ad2758864ade1e4a22662f3d1cb615717e4830e811d03ea533a9672718b2034fcb5fb2698d487b334d5d1b3301c8aa135e76524feca9eb327ec6183f774e35d2369b3120807e098b819840b9f8a313af564f1db0fb7ac1e47672b0a134412f3f514f93", 0x70}, {&(0x7f0000000500)="d3b45e5b2869b0bdcd81f9386d2edd3c2f6216d32970acd3ba1a2ccd3e30e95552deda0bba8747dcc2f22bb2878f47584938a3ea676619add952e2d08305c729f341003777b26128173f", 0x4a}, {&(0x7f0000000700)="d9c0e86a73337d96158c7cbc329e3768e9c06b78e7fb60ae1abacf1cbcb182a2893e494ce05f99f28368af0f7a4535b692e731dcb308d59bc51ba50e6fde40812608af71bfde57d34d4559f7096bbf8c295d2972563f0edf74945635c40cac3c936e2177647ccc719175689b5899691dabf9cd25dd0ae4331a0fb42bd2a0532799203595710fdb7e568ed7ead8aa6d", 0x8f}, {&(0x7f0000000800)="5be02737b9f31ae753dbe636f1a5a4698da7e0f41a26896c0397e3263f4b821f9a41b02da757b095f4c6d5932f232993964017faf1a991233f98f0e841f248bf8696c637e107e47eeddb6e0274d88e85454c178282e2c5bd79270a1ce202670897b949c3bd921fa4482bb8a6b2f707c86591f12d7abe05cfba80dc428f7e002d6e150e361999bdf6b140170f87f621690e1e273460b0cee346e4258c1bf866f19362eed678d8fed5", 0xa8}], 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) eventfd2(0xffffffff, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffffffffffea4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x44099) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1b, 0x10, &(0x7f0000000300)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r6}, 0x18) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r2, 0x0, 0x0, 0x2}, 0xfe42) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) 2m57.440276182s ago: executing program 7 (id=1729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1520, 0x1298, 0x1298, 0xffffffff, 0x0, 0x1180, 0x1488, 0x1488, 0xffffffff, 0x1488, 0x1488, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10d8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1580) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r8, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r9, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2000) 2m55.439964665s ago: executing program 7 (id=1740): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) syz_clone(0x80800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2m55.346731269s ago: executing program 7 (id=1742): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r0, &(0x7f0000000180)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x8, {0x0, 0x5, 0x9, 0x4}}, 0x7) (async) write$nci(r0, &(0x7f0000000180)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x8, {0x0, 0x5, 0x9, 0x4}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04030b00c800aaaa93aaaa1101"], 0xe) syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x22882) 2m53.110192585s ago: executing program 7 (id=1761): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x80000000}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x10, 0x700, 0x6, 0xb0f, {{0x3c, 0x4, 0x0, 0x3, 0xf0, 0x64, 0x0, 0x4, 0x4, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x35}, 0xfffffffa}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x8}, {@loopback, 0x9}]}, @end, @end, @timestamp_prespec={0x44, 0x4c, 0x46, 0x3, 0x0, [{@private=0xa010101, 0x40}, {@local, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7}, {@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb3}, {@rand_addr=0x64010102, 0x4}, {@multicast2, 0x9}, {@multicast1, 0x39}, {@private=0xa010102, 0x10001}]}, @end, @cipso={0x86, 0x66, 0xffffffffffffffff, [{0x1, 0x3, '5'}, {0x0, 0xa, "d90603e6a71e8f38"}, {0x0, 0xf, "a368416ba5d1b92492fc5804ee"}, {0x7, 0xf, "508a7fcf4d14fd1b104c62f8d9"}, {0x5, 0x8, "2a78d7b4237c"}, {0x2, 0x9, "f645a2177cc3b5"}, {0x2, 0x12, "2a04f27c584cb7bc27f7a52403f5a6a5"}, {0x7, 0x12, "56b29fcf7d2d541d4e38906967b081a5"}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x0, 0xd, 0x6, 0x1, 0x4, 0x8000000000000008}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @generic={0x0, 0xa, 0x5, 0xa, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x60, &(0x7f0000000340)=""/96, 0x41000, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x2, 0x8a80, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000005c0)=[{0x3, 0x5, 0x7, 0x3}, {0x1, 0x3, 0x4, 0x3}, {0x3, 0x5, 0x0, 0x6}, {0x4, 0x5, 0x1, 0xa}, {0x2, 0x1, 0x10, 0x1}], 0x10, 0x996, @void, @value}, 0x94) 2m53.052479551s ago: executing program 37 (id=1761): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x80000000}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x10, 0x700, 0x6, 0xb0f, {{0x3c, 0x4, 0x0, 0x3, 0xf0, 0x64, 0x0, 0x4, 0x4, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x35}, 0xfffffffa}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x8}, {@loopback, 0x9}]}, @end, @end, @timestamp_prespec={0x44, 0x4c, 0x46, 0x3, 0x0, [{@private=0xa010101, 0x40}, {@local, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7}, {@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb3}, {@rand_addr=0x64010102, 0x4}, {@multicast2, 0x9}, {@multicast1, 0x39}, {@private=0xa010102, 0x10001}]}, @end, @cipso={0x86, 0x66, 0xffffffffffffffff, [{0x1, 0x3, '5'}, {0x0, 0xa, "d90603e6a71e8f38"}, {0x0, 0xf, "a368416ba5d1b92492fc5804ee"}, {0x7, 0xf, "508a7fcf4d14fd1b104c62f8d9"}, {0x5, 0x8, "2a78d7b4237c"}, {0x2, 0x9, "f645a2177cc3b5"}, {0x2, 0x12, "2a04f27c584cb7bc27f7a52403f5a6a5"}, {0x7, 0x12, "56b29fcf7d2d541d4e38906967b081a5"}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x0, 0xd, 0x6, 0x1, 0x4, 0x8000000000000008}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @generic={0x0, 0xa, 0x5, 0xa, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x60, &(0x7f0000000340)=""/96, 0x41000, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x2, 0x8a80, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000005c0)=[{0x3, 0x5, 0x7, 0x3}, {0x1, 0x3, 0x4, 0x3}, {0x3, 0x5, 0x0, 0x6}, {0x4, 0x5, 0x1, 0xa}, {0x2, 0x1, 0x10, 0x1}], 0x10, 0x996, @void, @value}, 0x94) 2m9.299097044s ago: executing program 4 (id=1237): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) syz_emit_vhci(&(0x7f00000017c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x51, 0xc8}}}, 0x6) chdir(&(0x7f0000000280)='./file0\x00') prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r1, 0x82081fc) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) mount$tmpfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x444, &(0x7f0000000300)={[{@huge_within_size}], [{@obj_user={'obj_user', 0x3d, '\n:*-#!,\xb3\'{'}}, {@euid_eq={'euid', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}, {@subj_type={'subj_type', 0x3d, 'tmpfs\x00'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, ')\')@@-'}}]}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r2, 0x800000) 1m41.482520327s ago: executing program 4 (id=1237): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) syz_emit_vhci(&(0x7f00000017c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x51, 0xc8}}}, 0x6) chdir(&(0x7f0000000280)='./file0\x00') prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r1, 0x82081fc) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) mount$tmpfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x444, &(0x7f0000000300)={[{@huge_within_size}], [{@obj_user={'obj_user', 0x3d, '\n:*-#!,\xb3\'{'}}, {@euid_eq={'euid', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}, {@subj_type={'subj_type', 0x3d, 'tmpfs\x00'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, ')\')@@-'}}]}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r2, 0x800000) 1m19.982225451s ago: executing program 4 (id=1237): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) syz_emit_vhci(&(0x7f00000017c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x51, 0xc8}}}, 0x6) chdir(&(0x7f0000000280)='./file0\x00') prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r1, 0x82081fc) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) mount$tmpfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x444, &(0x7f0000000300)={[{@huge_within_size}], [{@obj_user={'obj_user', 0x3d, '\n:*-#!,\xb3\'{'}}, {@euid_eq={'euid', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}, {@subj_type={'subj_type', 0x3d, 'tmpfs\x00'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, ')\')@@-'}}]}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r2, 0x800000) 49.040541659s ago: executing program 4 (id=1237): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) syz_emit_vhci(&(0x7f00000017c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x51, 0xc8}}}, 0x6) chdir(&(0x7f0000000280)='./file0\x00') prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r1, 0x82081fc) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) mount$tmpfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x444, &(0x7f0000000300)={[{@huge_within_size}], [{@obj_user={'obj_user', 0x3d, '\n:*-#!,\xb3\'{'}}, {@euid_eq={'euid', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}, {@subj_type={'subj_type', 0x3d, 'tmpfs\x00'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, ')\')@@-'}}]}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r2, 0x800000) 43.754077534s ago: executing program 4 (id=1237): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) syz_emit_vhci(&(0x7f00000017c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x51, 0xc8}}}, 0x6) chdir(&(0x7f0000000280)='./file0\x00') prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r1, 0x82081fc) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) mount$tmpfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x444, &(0x7f0000000300)={[{@huge_within_size}], [{@obj_user={'obj_user', 0x3d, '\n:*-#!,\xb3\'{'}}, {@euid_eq={'euid', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}, {@subj_type={'subj_type', 0x3d, 'tmpfs\x00'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, ')\')@@-'}}]}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r2, 0x800000) 21.674888307s ago: executing program 4 (id=1237): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) syz_emit_vhci(&(0x7f00000017c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x51, 0xc8}}}, 0x6) chdir(&(0x7f0000000280)='./file0\x00') prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r1, 0x82081fc) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) mount$tmpfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x444, &(0x7f0000000300)={[{@huge_within_size}], [{@obj_user={'obj_user', 0x3d, '\n:*-#!,\xb3\'{'}}, {@euid_eq={'euid', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}, {@subj_type={'subj_type', 0x3d, 'tmpfs\x00'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, ')\')@@-'}}]}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r2, 0x800000) 3.640394779s ago: executing program 5 (id=2508): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010000000000000000000e"], 0x14}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20020, &(0x7f0000000100)=ANY=[@ANYBLOB='uid<', @ANYRESDEC=0x0, @ANYBLOB="2c00b66ee853d9d809a95112606ffb8c07f3c4647b7a5941ce95981377e451afc33a175d13af3a2511b679c2520b945a49e6f5a357bb1122622da94a703e6082ef53cc253af213c217a9f625430305e8705f7e2782694688c15b1f72aaaa230f1d4a67e67e7c927e3949d1b260804d000bbe8593ad4184ed31534e1e8b34ca4831b433f047ed1284007035ce926a84cd9d614c6f64"]) 3.395889298s ago: executing program 5 (id=2510): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x40) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0100001800010000000000000000001d0100001500030000000000000000007fa5bf073cff73aa010000001e010600fd00ff000071ec6d721744cd529f07f76cf8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c79224d13d6af5b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed1804000000000000008949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c005c8d586b2a88d81866930fca15c804000000b2ea0000944f289aecc7d1d9dad20d3e074160e243c5d58b3a20e34462ca8a8cac25d0acf893f6a18691b31d560b5f5e9480b28500939d817cf11e263f5d2e0b0b9f78110d7fa19595e8ab80be5bd6cf4c1fc0f944aabef27fdf9e9c4b60d99380b3f2de9d1e4b527201b6f6643a228baa39f9108711b4872f75899a11193e2a860cb6d0ce9074860aa0e101d3971d20700ad6ed01edc89687d0b8758497"], 0x14c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.96780986s ago: executing program 8 (id=2514): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x70bd29, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}}, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000006c00)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0xa0842, 0x8) pwritev(r5, &(0x7f00000001c0)=[{&(0x7f00000000c0)='-', 0x1}], 0x1, 0x8, 0x41aa) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000640)={@local, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0xa, 0x6, "3932a3", 0x28, 0x6, 0x1, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @payload_named={{{{{0x28, 0x0, 0x0, 0x1, 0x0, 0xa, 0x3, 0x2, 0x85b5, 0x0, 0x1, 0x4, 0x16475f0d6f0e1032, 0x2, 0x100, 0x0, 0x1, 0x4e20, 0x4e22}, 0xfffffc8b, 0x1}, 0x2, 0x2}}}}}}}}, 0x0) 2.725229339s ago: executing program 9 (id=2515): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="987de9d03475fd4a3f37ab832969a065b29b41c50926f420ffc39af4d3c13f06d9f9526428165ee695aa1e78fda299c85dc83d28d167771ae52838743302570771", 0x41) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000580)={0xdd, 0xc75, 0x6, 0x5, 0x15, "0fbf106d39c389df02c0a537b5c3f4a9662330"}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006d00)=@newsa={0x144, 0x10, 0x413, 0x0, 0x0, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x0, 0x7, 0x4e24, 0x0, 0x2, 0x0, 0x20}, {@in6=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x100000, 0x4, 0x0, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_aead={0x51, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x28, 0x60, "5a4340b052"}}]}, 0x144}}, 0x804) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r4, 0x339, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x100, 0x0}, 0x8) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000004c0)={@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {&(0x7f00000003c0)=""/216, 0xfffffffffffffe94}, &(0x7f0000000280), 0x4}, 0xa0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6, 0xffffffffffffffff, 0x500}, 0x57) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) 2.427998878s ago: executing program 8 (id=2516): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0xc0, 0x33565348, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3}}) 2.366772178s ago: executing program 9 (id=2517): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x80002, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6c060180) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7, 0x0, 0x3}, 0x18) setitimer(0x1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="c00000001300e999000000000000000000000000000002ac1e000100000000000000000000000000000000000004000a00600000000000a3949021666dfe9dab143141e5eec746034b22ff7d6920b2be99636ceff9e93a568df41b8bfafd978bdedbf7542b96f01a840dbc0df3e09df85261713bd184808993c4c1041536ab9cac7956f022a5594c00341cb12eb8e940b80786abab05d5f1f99ceba92d13b3e5b344a15ab8c7262e112b7ee0a8eade58ff1a0d80"], 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r9, &(0x7f0000002240)={0x2020}, 0x2020) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.175462712s ago: executing program 8 (id=2518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r2, 0x1, 0x70bd29, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}}, {0x14, 0x2, @in={0x2, 0xfffc, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)={0x54, r2, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbf7, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) r3 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000400)=0x0) timer_create(0x1, &(0x7f0000000440)={0x0, 0xe, 0x1, @tid=r4}, &(0x7f0000000480)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x3fb, 0x1, 0x70bd25, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x4) getsockopt$sock_int(r5, 0x1, 0x28, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000300)) mq_notify(r6, &(0x7f00000004c0)={0x0, 0x18, 0x2, @tid=r4}) 1.829982744s ago: executing program 8 (id=2519): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x34, r0, 0x701, 0x0, 0x0, {{}, {@val={0x6, 0x1, 0xc}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}]}, 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x12}, 0x4}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000880)="4a6ce325c10a599f69329ed4f030837815f58248b030a1a96af761079a59eed55b0f300e27d43c0fe7b7db9be1ab69502017757fc7c3ffd180d92a97dda0454ac81956ad855b365917c7c595ec4afaa4de65e066c94a531ac59b", 0x5a}, {&(0x7f0000000440)="559e56c4b10139cf91aa8388d9a35498572f12a1d6e2d0d32b1f210076e012ee0c77f0eea5b5cd0124a3dcee35bd00048a84606b46ba53092e2c29f3bb09346d4edeac71db41baac1063a9df7d0cfbae60b40d3e2f8f6c312a660d20ca8f2c993026212966877332f049e4766edc974079a9aa5804740035c7623ad70a400406bb11582dba9c43fb96e4edd85ea66e1445ddca0fb1f7bd", 0x97}, {&(0x7f0000000500)="71b2be54996481a2acc3bfbe771caf22a180b7eef8", 0x15}, {&(0x7f0000000840)="9e55886ae1eec89b8b5a68141411bab10b10b801e1bac5ec974e745e23ae65d3e928019d3e62d6d135df5b9462df0c82334624b5", 0x34}, {&(0x7f0000000580)="20d70695a2b4f0a99e4ff5cb463314532fcc9cf639b5988717ca4974a447f5e3794b964970679f94761caa26270fbae2763a6dd4c4f48f7424fb87301382982a6cc2efec07a27c9e4bfd3e82e3c4a7acf9026d1038581f42e6e177773397ce73ab597ed1fe8a19d1a8f5c05d3ccc475397443da810206f0564a113e42fdf08e59843165a092bafb52d19e3d5ee0976b5c71dbd8e17bdd3f6192aa4f1cad6095aaae8a1b593ba3f5a7bf771390b681ad58694958db4f3e81baa22da7fb6b84048b75e3c53aa07", 0xc6}], 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000000000000280000000000000029000000370000002b0100000000000001010001050000000000000000000000180000000000000029000000360000005e000000000000002000000300000000290000003600000008000000000000000103000000000000"], 0x78}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x400}, 0x8) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r3, 0x80084524, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="746f2c63616368653d8265616461686561642c6361c86865744c673d6d6f756e7404000000"]) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x24e) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 1.619343165s ago: executing program 5 (id=2520): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r0, 0x2282, &(0x7f0000000040)={0xa1, 0x3, 0xfe}) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000001380)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0xa, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001a", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc0c4) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) (async) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b0028"], 0x28}}, 0x0) 1.388865922s ago: executing program 8 (id=2521): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1100000004000000040000000c", @ANYRES64=r1, @ANYRES16=r0], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1100000004000000040000000c", @ANYRES64=r1, @ANYRES16=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rmdir(0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1642, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000240)=@arm64={0xb3, 0x4f, 0xff, '\x00', 0xfffffffffffffff9}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e07090908"], 0xa) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000fffb0000002c0000002c00000009000000070000000000000e0300000000000000070000000000000e0100000000000000000000000000000202000000000000000000002e00"], 0x0, 0x4d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r0, 0x32, 0x1, 0xdaec, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES8, @ANYRESDEC=0x0, @ANYRES32=r2, @ANYBLOB, @ANYBLOB="1a0000000400000000000000f9b543c437835bb302ee3ff38d20e6d998be13b0a03ef5d8f344bf4c0e5860c86c94ce0da3630231aac97a19b7223197d2209943345324c50d28b07ceccccf0bf541961555ec2eb3c9a7dbe364c44aea99697ab7e586b775b4872997ad9c087b747f09ab7dc0bfbc315355e37382814d8f29da1d620ccc36dc8f31adf66d3acafcc605f5e71dadb0e7125505e15eb72036544cb719a48f43cab6893991c19dc28ba459a2c26b"], 0x20) getpgid(0x0) (async) r7 = getpgid(0x0) syz_open_procfs(r7, &(0x7f00000004c0)='task\x00') (async) r8 = syz_open_procfs(r7, &(0x7f00000004c0)='task\x00') r9 = openat(r8, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x80) fcntl$setlease(r9, 0x400, 0x1) (async) fcntl$setlease(r9, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x20240, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) 569.494529ms ago: executing program 5 (id=2522): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xaea3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r4, @ANYRES32=0x0, @ANYBLOB="000000000140060030001280080001006873720024000280050007000100000008000100", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r3], 0x50}}, 0x0) 568.44487ms ago: executing program 9 (id=2523): r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000380)={'bond0\x00', @random="c156b019b6c6"}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}}, 0x88) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_emit_ethernet(0x46, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x640101b8, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}, "a815a23da43974ff"}}}}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000700000000000a"], 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000140)={r7, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000580)={r7, 0x1, 0x6, @local}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x7ff, 0x8, 0x6}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x68, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000811}, 0x40) 474.678283ms ago: executing program 8 (id=2524): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd2b, 0xa6, {0x0, 0x0, 0x0, r1, {0xfff3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x500, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0xb, 0x7}, {0x6, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r7 = eventfd(0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x84}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delrng={0x10, 0x14, 0x1, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$KVM_HYPERV_EVENTFD(r5, 0xc048aec8, &(0x7f0000000240)={0x200005, r7, 0x4000202}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x3c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) 190.206208ms ago: executing program 9 (id=2525): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="11"], 0x11) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x550}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}, 0x1, 0x0, 0x0, 0x28c16562e159cd74}, 0x4) 189.488563ms ago: executing program 5 (id=2526): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x300, 0x33565348, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3}}) 110.921526ms ago: executing program 9 (id=2527): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01]) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0xfffffe65}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0xe5ba, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3f, 0x800, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000100)={@mcast1, 0x0}, &(0x7f0000000140)=0x14) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e40, 0x0, 0x0, 0x0, 0x51}, [@generic={0x37, 0x6, 0x5, 0x7, 0x5}, @alu={0x4, 0x0, 0x5, 0xa, 0x6, 0xfffffffffffffff4, 0x10}, @ldst={0x3, 0x2, 0x6, 0x2, 0x4, 0xc, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0xf1, &(0x7f0000000280)=""/241, 0x40f00, 0x5c, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0x5, 0x101}, 0x10, 0x10d22, r1, 0x1, 0x0, &(0x7f0000000400)=[{0x5, 0x1, 0xe, 0xc}], 0x10, 0x9, @void, @value}, 0x94) read$FUSE(r1, &(0x7f0000004540)={0x2020}, 0x2020) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01]) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0xfffffe65}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0xe5ba, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3f, 0x800, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000100)={@mcast1}, &(0x7f0000000140)=0x14) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e40, 0x0, 0x0, 0x0, 0x51}, [@generic={0x37, 0x6, 0x5, 0x7, 0x5}, @alu={0x4, 0x0, 0x5, 0xa, 0x6, 0xfffffffffffffff4, 0x10}, @ldst={0x3, 0x2, 0x6, 0x2, 0x4, 0xc, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0xf1, &(0x7f0000000280)=""/241, 0x40f00, 0x5c, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0x5, 0x101}, 0x10, 0x10d22, r1, 0x1, 0x0, &(0x7f0000000400)=[{0x5, 0x1, 0xe, 0xc}], 0x10, 0x9, @void, @value}, 0x94) (async) read$FUSE(r1, &(0x7f0000004540)={0x2020}, 0x2020) (async) 345.171µs ago: executing program 5 (id=2528): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) r1 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x98000004, 0x0}, 0x0, 0x8, &(0x7f0000000200)) rt_sigsuspend(&(0x7f0000000000), 0x8) tkill(r1, 0x16) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x0) 0s ago: executing program 9 (id=2529): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x34, r0, 0x701, 0x0, 0x0, {{}, {@val={0x6, 0x1, 0xc}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}]}, 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x12}, 0x4}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000880)="4a6ce325c10a599f69329ed4f030837815f58248b030a1a96af761079a59eed55b0f300e27d43c0fe7b7db9be1ab69502017757fc7c3ffd180d92a97dda0454ac81956ad855b365917c7c595ec4afaa4de65e066c94a531ac59b", 0x5a}, {&(0x7f0000000440)="559e56c4b10139cf91aa8388d9a35498572f12a1d6e2d0d32b1f210076e012ee0c77f0eea5b5cd0124a3dcee35bd00048a84606b46ba53092e2c29f3bb09346d4edeac71db41baac1063a9df7d0cfbae60b40d3e2f8f6c312a660d20ca8f2c993026212966877332f049e4766edc974079a9aa5804740035c7623ad70a400406bb11582dba9c43fb96e4edd85ea66e1445ddca0fb1f7bd", 0x97}, {&(0x7f0000000500)="71b2be54996481a2acc3bfbe771caf22a180b7eef8", 0x15}, {&(0x7f0000000840)="9e55886ae1eec89b8b5a68141411bab10b10b801e1bac5ec974e745e23ae65d3e928019d3e62d6d135df5b9462df0c82334624b5", 0x34}, {&(0x7f0000000580)="20d70695a2b4f0a99e4ff5cb463314532fcc9cf639b5988717ca4974a447f5e3794b964970679f94761caa26270fbae2763a6dd4c4f48f7424fb87301382982a6cc2efec07a27c9e4bfd3e82e3c4a7acf9026d1038581f42e6e177773397ce73ab597ed1fe8a19d1a8f5c05d3ccc475397443da810206f0564a113e42fdf08e59843165a092bafb52d19e3d5ee0976b5c71dbd8e17bdd3f6192aa4f1cad6095aaae8a1b593ba3f5a7bf771390b681ad58694958db4f3e81baa22da7fb6b84048b75e3c53aa07", 0xc6}], 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000000000000280000000000000029000000370000002b0100000000000001010001050000000000000000000000180000000000000029000000360000005e000000000000002000000300000000290000003600000008000000000000000103000000000000"], 0x78}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x400}, 0x8) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r3, 0x80084524, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="746f2c63616368653d8265616461686561642c6361c86865744c673d6d6f756e7404000000"]) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x24e) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 59][T13290] ? bpf_lsm_capable+0x9/0x10 [ 286.716970][T13290] ? security_capable+0x7e/0x260 [ 286.716985][T13290] ? ns_capable+0xd7/0x110 [ 286.717001][T13290] genl_rcv_msg+0x55c/0x800 [ 286.717018][T13290] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.717035][T13290] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 286.717052][T13290] ? __lock_acquire+0xaa4/0x1ba0 [ 286.717073][T13290] netlink_rcv_skb+0x16a/0x440 [ 286.717087][T13290] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.717104][T13290] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.717126][T13290] ? __pfx_down_read+0x10/0x10 [ 286.717143][T13290] ? netlink_deliver_tap+0x1ae/0xd30 [ 286.717160][T13290] genl_rcv+0x28/0x40 [ 286.717175][T13290] netlink_unicast+0x53d/0x7f0 [ 286.717193][T13290] ? __pfx_netlink_unicast+0x10/0x10 [ 286.717213][T13290] netlink_sendmsg+0x8d1/0xdd0 [ 286.717238][T13290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.717264][T13290] ____sys_sendmsg+0xa95/0xc70 [ 286.717282][T13290] ? copy_msghdr_from_user+0x10a/0x160 [ 286.717294][T13290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.717317][T13290] ___sys_sendmsg+0x134/0x1d0 [ 286.717331][T13290] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.717363][T13290] __sys_sendmsg+0x16d/0x220 [ 286.717376][T13290] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.717390][T13290] ? __x64_sys_futex+0x1e0/0x4c0 [ 286.717410][T13290] ? rcu_is_watching+0x12/0xc0 [ 286.717428][T13290] do_syscall_64+0xcd/0x260 [ 286.717447][T13290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.717459][T13290] RIP: 0033:0x7f55e898e969 [ 286.717471][T13290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.717482][T13290] RSP: 002b:00007f55e67f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.717496][T13290] RAX: ffffffffffffffda RBX: 00007f55e8bb5fa0 RCX: 00007f55e898e969 [ 286.717503][T13290] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 286.717510][T13290] RBP: 00007f55e8a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 286.717516][T13290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.717523][T13290] R13: 0000000000000000 R14: 00007f55e8bb5fa0 R15: 00007ffee4ca5038 [ 286.717539][T13290] [ 286.763940][ T40] audit: type=1400 audit(1747922472.640:46937): avc: denied { transfer } for pid=13295 comm="syz.9.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 286.792527][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.973682][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1977'. [ 287.023421][T13313] sp0: Synchronizing with TNC [ 287.047825][ T68] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.135319][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.173597][ T68] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.180319][ T68] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.185082][ T68] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.188952][ T68] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.222939][T13314] lo speed is unknown, defaulting to 1000 [ 287.297981][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1984'. [ 287.405760][ T40] audit: type=1400 audit(1747922473.300:46938): avc: denied { create } for pid=13334 comm="syz.9.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 287.474300][ T7538] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.484171][ T40] audit: type=1326 audit(1747922473.380:46939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.9.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfa58e969 code=0x50000 [ 287.499901][ T40] audit: type=1326 audit(1747922473.390:46940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.9.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfa58e969 code=0x50000 [ 287.507631][ T40] audit: type=1326 audit(1747922473.390:46941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.9.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfa58e969 code=0x50000 [ 287.519336][ T40] audit: type=1326 audit(1747922473.390:46942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.9.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfa58e969 code=0x50000 [ 287.528896][ T40] audit: type=1326 audit(1747922473.390:46943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.9.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfa58e969 code=0x50000 [ 287.548118][ T40] audit: type=1326 audit(1747922473.390:46944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.9.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfa58e969 code=0x50000 [ 287.557521][ T40] audit: type=1326 audit(1747922473.390:46945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.9.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfa58e969 code=0x50000 [ 287.566988][ T40] audit: type=1326 audit(1747922473.390:46946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.9.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfa58e969 code=0x50000 [ 287.570286][ T7538] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.577296][ T40] audit: type=1326 audit(1747922473.390:46947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.9.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfa58e969 code=0x50000 [ 287.599229][T13314] chnl_net:caif_netlink_parms(): no params data found [ 287.686238][ T7538] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.779780][T13346] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1988'. [ 287.783266][T13314] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.785621][T13314] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.788310][T13314] bridge_slave_0: entered allmulticast mode [ 287.794486][T13314] bridge_slave_0: entered promiscuous mode [ 287.962891][T13346] team0: Port device team_slave_1 removed [ 287.972339][T13314] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.975009][T13314] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.977686][T13314] bridge_slave_1: entered allmulticast mode [ 287.982625][T13314] bridge_slave_1: entered promiscuous mode [ 288.069190][T13314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.079029][T13314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.216536][T13314] team0: Port device team_slave_0 added [ 288.233498][T13314] team0: Port device team_slave_1 added [ 288.314215][T13314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.317504][T13314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.336682][T13314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.342826][ T7538] bridge_slave_1: left allmulticast mode [ 288.345013][ T7538] bridge_slave_1: left promiscuous mode [ 288.347818][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.355027][ T7538] bridge_slave_0: left allmulticast mode [ 288.358045][ T7538] bridge_slave_0: left promiscuous mode [ 288.361385][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.773100][ T7538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.779659][ T7538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.786737][ T7538] bond0 (unregistering): Released all slaves [ 288.801517][T13314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.804657][T13314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.815538][T13314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.959511][T13314] hsr_slave_0: entered promiscuous mode [ 288.963350][T13314] hsr_slave_1: entered promiscuous mode [ 288.965934][T13314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.968760][T13314] Cannot create hsr debugfs directory [ 289.270719][ T5951] Bluetooth: hci3: command tx timeout [ 289.307241][ T7538] hsr_slave_0: left promiscuous mode [ 289.309779][ T7538] hsr_slave_1: left promiscuous mode [ 289.323947][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.326379][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.332146][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.334837][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.376562][ T7538] veth1_macvtap: left promiscuous mode [ 289.378387][ T7538] veth0_macvtap: left promiscuous mode [ 289.380329][ T7538] veth1_vlan: left promiscuous mode [ 289.383374][ T7538] veth0_vlan: left promiscuous mode [ 290.474532][ T7538] team0 (unregistering): Port device team_slave_1 removed [ 290.638666][ T7538] team0 (unregistering): Port device team_slave_0 removed [ 290.708995][T13364] can: request_module (can-proto-0) failed. [ 291.080802][ T1469] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 291.230653][ T1469] usb 10-1: device descriptor read/64, error -71 [ 291.256508][T13389] netlink: 'syz.8.1998': attribute type 4 has an invalid length. [ 291.259754][T13389] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1998'. [ 291.350707][ T68] Bluetooth: hci3: command tx timeout [ 291.470871][ T1469] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 291.525310][T13389] : renamed from bond0 (while UP) [ 291.613472][ T1469] usb 10-1: device descriptor read/64, error -71 [ 291.642988][T13398] sctp: [Deprecated]: syz.9.2002 (pid 13398) Use of int in maxseg socket option. [ 291.642988][T13398] Use struct sctp_assoc_value instead [ 291.721265][ T1469] usb usb10-port1: attempt power cycle [ 291.938362][T13314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 291.946118][T13314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.956221][T13314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 291.965820][T13314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 292.035544][T13314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.055692][T13314] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.070806][ T1469] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 292.074556][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.076922][ T7544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.086882][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.089174][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.092732][ T1469] usb 10-1: device descriptor read/8, error -71 [ 292.285059][T13314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.340635][ T1469] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 292.362159][ T1469] usb 10-1: device descriptor read/8, error -71 [ 292.400948][T13398] syz.9.2002 (13398): drop_caches: 1 [ 292.423503][T13398] syz.9.2002 (13398): drop_caches: 1 [ 292.427938][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2011'. [ 292.473511][ T1469] usb usb10-port1: unable to enumerate USB device [ 292.520694][T13314] veth0_vlan: entered promiscuous mode [ 292.528369][T13314] veth1_vlan: entered promiscuous mode [ 292.559729][T13314] veth0_macvtap: entered promiscuous mode [ 292.569511][T13314] veth1_macvtap: entered promiscuous mode [ 292.585948][T13314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.597558][T13314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.606109][T13314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.609725][T13314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.614269][T13314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.617752][T13314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.680334][ T7554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.683894][ T7554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.704807][ T7538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.707908][ T7538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.790820][ T68] Bluetooth: hci0: command 0x1407 tx timeout [ 292.791329][ T5951] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 292.810121][ T40] kauditd_printk_skb: 41820 callbacks suppressed [ 292.810132][ T40] audit: type=1400 audit(1747922478.700:88768): avc: denied { getopt } for pid=13459 comm="syz.8.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 293.708142][ T40] audit: type=1400 audit(1747922479.600:88769): avc: denied { bind } for pid=13474 comm="syz.9.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 293.748732][T13477] CIFS: Unable to determine destination address [ 293.752031][T13477] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2024'. [ 293.781619][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2024'. [ 293.812259][T13479] openvswitch: netlink: Key 19 has unexpected len 0 expected 4 [ 293.816702][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2025'. [ 293.896778][T13488] cgroup: subsys name conflicts with all [ 293.929296][T13490] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 293.933759][T13490] overlayfs: missing 'lowerdir' [ 294.071161][T13499] netlink: 'syz.5.2031': attribute type 32 has an invalid length. [ 294.392665][T13520] 9p: Unknown access argument 18446744073709551615: -34 [ 294.446321][T13521] lo: entered promiscuous mode [ 294.482519][ T7544] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.001063][T13509] lo: left promiscuous mode [ 296.013985][T13531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13531 comm=syz.9.2039 [ 296.030407][T13527] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 296.038897][T13535] xt_l2tp: v2 doesn't support IP mode [ 296.041576][ T40] audit: type=1400 audit(1747922481.940:88770): avc: denied { read } for pid=13534 comm="syz.5.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 296.057127][T13532] netlink: 596 bytes leftover after parsing attributes in process `syz.8.2040'. [ 296.091086][ T7544] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.102377][T13527] netlink: 'syz.8.2040': attribute type 29 has an invalid length. [ 296.120017][T13537] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2043'. [ 296.143474][ T68] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.151524][ T68] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.156032][ T68] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.160267][ T68] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.176272][ T68] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.183882][ T7544] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.213910][T13541] lo speed is unknown, defaulting to 1000 [ 296.229643][T13550] netlink: 'syz.5.2046': attribute type 11 has an invalid length. [ 296.232382][T13550] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2046'. [ 296.244691][T13552] binder: 13551:13552 ioctl 40089413 2000000000c0 returned -22 [ 296.267204][T13554] netlink: 'syz.5.2048': attribute type 12 has an invalid length. [ 296.318602][T13561] netlink: 'syz.5.2050': attribute type 1 has an invalid length. [ 296.323634][T13561] netlink: 'syz.5.2050': attribute type 2 has an invalid length. [ 296.326389][T13562] netlink: 'syz.5.2050': attribute type 1 has an invalid length. [ 296.327328][ T7544] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.331328][T13562] netlink: 'syz.5.2050': attribute type 2 has an invalid length. [ 296.336149][T13562] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2050'. [ 296.593297][T13585] 9pnet_virtio: no channels available for device 127.0.0.1 [ 296.604714][ T40] audit: type=1400 audit(1747922482.500:88771): avc: denied { connect } for pid=13584 comm="syz.8.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 296.726259][ T7544] bridge_slave_1: left allmulticast mode [ 296.728721][ T7544] bridge_slave_1: left promiscuous mode [ 296.740976][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.746939][ T7544] bridge_slave_0: left allmulticast mode [ 296.749387][ T7544] bridge_slave_0: left promiscuous mode [ 296.756592][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.997589][ T40] audit: type=1400 audit(1747922482.890:88772): avc: denied { setopt } for pid=13588 comm="syz.9.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 297.158905][T13593] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 297.162773][ T7544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.168706][ T7544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.172774][ T7544] bond0 (unregistering): Released all slaves [ 297.217084][T13541] chnl_net:caif_netlink_parms(): no params data found [ 297.339615][T13541] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.343561][T13541] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.346343][T13541] bridge_slave_0: entered allmulticast mode [ 297.349543][T13541] bridge_slave_0: entered promiscuous mode [ 297.355865][T13541] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.359110][T13541] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.361593][T13541] bridge_slave_1: entered allmulticast mode [ 297.367612][T13541] bridge_slave_1: entered promiscuous mode [ 297.410436][T13541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.415265][T13541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.462547][ T40] audit: type=1400 audit(1747922483.350:88773): avc: denied { ioctl } for pid=13605 comm="syz.8.2058" path="socket:[67883]" dev="sockfs" ino=67883 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 297.469299][T13541] team0: Port device team_slave_0 added [ 297.506348][ T40] audit: type=1400 audit(1747922483.400:88774): avc: denied { write } for pid=13605 comm="syz.8.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 297.506445][T13541] team0: Port device team_slave_1 added [ 297.545937][ T5951] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 297.557037][T13541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.559833][T13541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.568232][T13541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.573904][T13541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.576391][T13541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.584433][T13541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.590324][T13615] 9pnet_fd: p9_fd_create_tcp (13615): problem binding to privport [ 297.596928][T13615] 9pnet_fd: p9_fd_create_tcp (13615): problem binding to privport [ 297.694049][T13541] hsr_slave_0: entered promiscuous mode [ 297.696813][T13541] hsr_slave_1: entered promiscuous mode [ 297.699485][T13541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.703045][T13541] Cannot create hsr debugfs directory [ 297.715134][ T834] libceph: connect (1)[c::]:6789 error -101 [ 297.717596][ T834] libceph: mon0 (1)[c::]:6789 connect error [ 297.761011][ T7544] hsr_slave_0: left promiscuous mode [ 297.764062][ T7544] hsr_slave_1: left promiscuous mode [ 297.766624][ T7544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.769579][ T7544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.773062][ T7544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.776134][ T7544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.802610][ T7544] veth1_macvtap: left promiscuous mode [ 297.804830][ T7544] veth0_macvtap: left promiscuous mode [ 297.807120][ T7544] veth1_vlan: left promiscuous mode [ 297.809215][ T7544] veth0_vlan: left promiscuous mode [ 297.834191][T13635] overlay: Bad value for 'workdir' [ 297.891029][T13636] binder: 13633:13636 ioctl 89e7 200000000140 returned -22 [ 297.982475][ T834] libceph: connect (1)[c::]:6789 error -101 [ 297.984563][ T834] libceph: mon0 (1)[c::]:6789 connect error [ 298.241147][ T5951] Bluetooth: hci3: command tx timeout [ 298.491229][ T834] libceph: connect (1)[c::]:6789 error -101 [ 298.493939][ T834] libceph: mon0 (1)[c::]:6789 connect error [ 298.575329][ T7544] team0 (unregistering): Port device team_slave_1 removed [ 298.656509][ T7544] team0 (unregistering): Port device team_slave_0 removed [ 299.632662][T13645] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2068'. [ 299.643891][T13622] ceph: No mds server is up or the cluster is laggy [ 299.871784][T13664] 9pnet_fd: Insufficient options for proto=fd [ 300.129921][T13680] netlink: 'syz.8.2080': attribute type 10 has an invalid length. [ 300.150747][T13680] bridge0: port 4(team0) entered blocking state [ 300.153685][T13680] bridge0: port 4(team0) entered disabled state [ 300.158928][T13680] team0: entered allmulticast mode [ 300.168196][T13680] team_slave_0: entered allmulticast mode [ 300.174564][T13680] team0: entered promiscuous mode [ 300.176834][T13680] team_slave_0: entered promiscuous mode [ 300.180435][T13680] bridge0: port 4(team0) entered blocking state [ 300.183423][T13680] bridge0: port 4(team0) entered forwarding state [ 300.211061][T13541] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 300.217464][T13541] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 300.224076][T13541] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 300.229904][T13541] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 300.283917][T13541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.297853][T13541] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.306367][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.308621][ T7544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.316509][ T7539] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.318733][ T7539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.320701][ T5951] Bluetooth: hci3: command tx timeout [ 300.485114][T13541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.548780][T13707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.632177][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2086'. [ 300.636796][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2086'. [ 300.714261][T13541] veth0_vlan: entered promiscuous mode [ 300.721039][T13541] veth1_vlan: entered promiscuous mode [ 300.737668][T13723] dvmrp1: entered allmulticast mode [ 300.752751][T13541] veth0_macvtap: entered promiscuous mode [ 300.757935][T13541] veth1_macvtap: entered promiscuous mode [ 300.785645][T13541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.796220][T13541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.803977][T13541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.807345][T13541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.810757][T13541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.814419][T13541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.936798][ T7539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.944881][ T7539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.957905][T13751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.969741][ T7555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.972439][ T7555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.019837][T13753] SELinux: ebitmap: truncated map [ 301.022534][ T40] audit: type=1400 audit(1748446774.925:88775): avc: denied { ioctl } for pid=13752 comm="syz.8.2099" path="socket:[68761]" dev="sockfs" ino=68761 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 301.029032][T13753] SELinux: failed to load policy [ 301.772192][ T5951] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 301.775016][ T5951] Bluetooth: hci1: Injecting HCI hardware error event [ 301.778177][ T5951] Bluetooth: hci1: hardware error 0x00 [ 301.866286][ T40] audit: type=1400 audit(1748446775.741:88776): avc: denied { getopt } for pid=13763 comm="syz.9.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 301.923417][T13767] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 301.925870][T13767] UDF-fs: Scanning with blocksize 2048 failed [ 301.929674][T13767] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 301.932020][T13767] UDF-fs: Scanning with blocksize 4096 failed [ 302.361774][T13788] syzkaller0: entered promiscuous mode [ 302.367452][T13788] syzkaller0: entered allmulticast mode [ 302.410900][T13788] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 302.484444][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.683871][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.732478][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.921813][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.955255][T13795] QAT: Invalid ioctl -2144835806 [ 302.986487][T13795] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2113'. [ 302.995320][T13795] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 303.264232][T13801] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 303.474555][T13807] netlink: 'syz.9.2116': attribute type 1 has an invalid length. [ 303.486360][T13796] loop6: detected capacity change from 0 to 524287999 [ 303.577300][ T7555] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.914011][ T5951] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 305.118007][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.408942][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.436500][T13821] openvswitch: netlink: Tunnel attr 7947 out of range max 16 [ 305.462151][ T7555] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.709927][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.713413][ T68] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.739118][ T68] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.764481][ T68] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.769891][ T68] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.776690][ T68] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.937737][ T7555] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.008353][T13844] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20003 [ 306.067649][T13834] lo speed is unknown, defaulting to 1000 [ 306.173796][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.235360][ T7555] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.383978][T13858] bridge0: entered promiscuous mode [ 306.393365][T13858] macvlan1: entered promiscuous mode [ 306.461871][T13864] netlink: 'syz.5.2130': attribute type 10 has an invalid length. [ 306.473299][T13864] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2130'. [ 306.494306][T13864] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 306.762401][ T7555] bridge_slave_1: left allmulticast mode [ 306.764901][ T7555] bridge_slave_1: left promiscuous mode [ 306.768641][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.848530][ T7555] bridge_slave_0: left allmulticast mode [ 306.853642][ T7555] bridge_slave_0: left promiscuous mode [ 306.861149][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.043581][ T40] audit: type=1326 audit(1748446780.775:88777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13881 comm="syz.5.2135" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55e898e969 code=0x0 [ 307.336533][T13900] binder: Bad value for 'max' [ 307.400626][T13901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13901 comm=syz.9.2138 [ 307.521517][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.605811][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.848768][ T68] Bluetooth: hci3: command tx timeout [ 308.111281][ T7555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.145541][ T7555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.151184][ T7555] bond0 (unregistering): Released all slaves [ 308.457726][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.505774][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.601992][ T40] audit: type=1400 audit(1748446782.302:88778): avc: denied { bind } for pid=13909 comm="syz.9.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 308.714060][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2141'. [ 308.717953][T13912] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2141'. [ 308.721793][T13912] netlink: 'syz.9.2141': attribute type 20 has an invalid length. [ 308.755923][T13914] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2142'. [ 308.806238][T13834] chnl_net:caif_netlink_parms(): no params data found [ 308.952376][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.108213][T13929] tmpfs: Cannot change global quota limit on remount [ 309.278449][T13932] netlink: 'syz.5.2147': attribute type 1 has an invalid length. [ 309.482832][T13834] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.536883][T13834] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.540742][T13834] bridge_slave_0: entered allmulticast mode [ 309.580971][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.594155][T13834] bridge_slave_0: entered promiscuous mode [ 309.600750][T13834] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.609575][T13834] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.614784][T13834] bridge_slave_1: entered allmulticast mode [ 309.657431][T13834] bridge_slave_1: entered promiscuous mode [ 309.760138][ T7555] hsr_slave_0: left promiscuous mode [ 309.763739][ T7555] hsr_slave_1: left promiscuous mode [ 309.766853][ T7555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.769913][ T7555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.810838][ T7555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.823880][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2149'. [ 309.827139][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2149'. [ 309.843958][ T7555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.944210][ T7555] veth1_macvtap: left promiscuous mode [ 309.947165][ T7555] veth0_macvtap: left promiscuous mode [ 309.956434][ T7555] veth1_vlan: left promiscuous mode [ 309.963667][ T7555] veth0_vlan: left promiscuous mode [ 309.975629][ T68] Bluetooth: hci3: command tx timeout [ 310.118952][T13949] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 310.342333][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.020297][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.513037][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.733835][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.806948][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.937710][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.086855][ T68] Bluetooth: hci3: command tx timeout [ 312.188223][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.223945][T13958] program syz.9.2152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.235828][T13959] program syz.9.2152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.260192][T13959] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2152'. [ 312.331919][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.543042][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.577741][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.847153][ T7555] team0 (unregistering): Port device team_slave_1 removed [ 314.040999][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.076978][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.207049][ T68] Bluetooth: hci3: command tx timeout [ 314.352108][ T7555] team0 (unregistering): Port device team_slave_0 removed [ 315.046920][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.295973][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.393784][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.081986][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.721677][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.055005][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.105320][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.682566][T13834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.725790][T13834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.782005][ T40] audit: type=1400 audit(1748446791.342:88779): avc: denied { listen } for pid=13962 comm="syz.8.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 318.076242][T13968] bond1: entered promiscuous mode [ 318.079841][T13968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.109737][T13971] veth1_macvtap: left promiscuous mode [ 318.123222][T13971] macsec0: entered promiscuous mode [ 318.125703][T13971] macsec0: entered allmulticast mode [ 318.150740][T13973] veth1_macvtap: entered promiscuous mode [ 318.210946][T13973] veth1_macvtap: entered allmulticast mode [ 318.231664][T13973] macsec0: left promiscuous mode [ 318.245482][T13973] macsec0: left allmulticast mode [ 318.247885][T13973] veth1_macvtap: left allmulticast mode [ 318.292885][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.345846][T13834] team0: Port device team_slave_0 added [ 318.357361][T13834] team0: Port device team_slave_1 added [ 318.688052][T13994] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2162'. [ 318.724886][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.757683][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.762976][T13834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.776393][T13834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.800782][T13834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.812633][T13834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.817298][T13834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.848013][ T40] audit: type=1400 audit(1748446792.400:88780): avc: denied { connect } for pid=13990 comm="syz.5.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 318.850646][T13834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.908717][T13991] ip6t_REJECT: ECHOREPLY is not supported [ 318.976550][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.009721][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.202022][T13834] hsr_slave_0: entered promiscuous mode [ 319.249096][T13834] hsr_slave_1: entered promiscuous mode [ 319.252464][T13834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.255113][T13834] Cannot create hsr debugfs directory [ 319.289118][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.463898][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2171'. [ 319.910192][ T40] audit: type=1326 audit(1748446793.449:88781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.8.2173" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0d918e969 code=0x0 [ 320.261688][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.478278][T14048] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2175'. [ 320.486261][T14048] unsupported nlmsg_type 40 [ 320.683785][ T40] audit: type=1400 audit(1748446794.202:88782): avc: denied { map } for pid=14051 comm="syz.9.2176" path="socket:[70271]" dev="sockfs" ino=70271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 320.737813][ T40] audit: type=1400 audit(1748446794.202:88783): avc: denied { read } for pid=14051 comm="syz.9.2176" path="socket:[70271]" dev="sockfs" ino=70271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 320.759976][ T40] audit: type=1400 audit(1748446794.202:88784): avc: denied { setopt } for pid=14051 comm="syz.9.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 321.062940][T13834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 321.078749][ T1469] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 321.121174][T13834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 321.225905][T13834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 321.262606][T13834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 321.290366][ T1469] usb 14-1: config index 0 descriptor too short (expected 156, got 27) [ 321.299568][ T1469] usb 14-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 321.316493][ T1469] usb 14-1: config 0 interface 0 altsetting 191 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.322476][ T1469] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.336663][ T1469] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x8F has invalid wMaxPacketSize 0 [ 321.359178][ T1469] usb 14-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 321.395600][ T1469] usb 14-1: config 0 interface 0 has no altsetting 0 [ 321.401152][ T1469] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 321.408177][ T1469] usb 14-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 321.415702][ T1469] usb 14-1: Product: syz [ 321.418246][ T1469] usb 14-1: Manufacturer: syz [ 321.420059][ T1469] usb 14-1: SerialNumber: syz [ 321.457772][ T1469] usb 14-1: config 0 descriptor?? [ 321.477000][ T1469] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 321.501575][ T1469] ldusb 14-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 321.519228][T13834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.581004][T13834] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.582141][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.607101][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.607193][ T7544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.636508][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.645367][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.648602][ T7554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.690331][ T1469] usb 14-1: USB disconnect, device number 4 [ 321.698558][ T1469] ldusb 14-1:0.0: LD USB Device #0 now disconnected [ 322.069214][T13834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.520805][T13834] veth0_vlan: entered promiscuous mode [ 322.531746][T14091] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2183'. [ 322.566763][T13834] veth1_vlan: entered promiscuous mode [ 322.675016][T14098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38160 sclass=netlink_route_socket pid=14098 comm=syz.5.2184 [ 322.877057][T14103] fuse: blksize only supported for fuseblk [ 323.084996][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.673091][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.008645][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.012229][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.273655][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.525649][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.593634][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.997594][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.181654][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.329769][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.995102][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.153343][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.185641][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.369629][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.475072][T13834] veth0_macvtap: entered promiscuous mode [ 329.504514][T13834] veth1_macvtap: entered promiscuous mode [ 329.573502][T13834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.583523][T13834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.625135][T13834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.642348][T13834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.649273][T13834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.652840][T13834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.792559][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.822662][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.851037][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.883761][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.888054][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.031957][ T40] audit: type=1400 audit(1748446803.486:88785): avc: denied { create } for pid=14137 comm="syz.8.2198" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 330.105082][ T40] audit: type=1400 audit(1748446803.566:88786): avc: denied { rmdir } for pid=14137 comm="syz.8.2198" name="control" dev="9p" ino=35913962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.114722][T14138] Cannot find map_set index 0 as target [ 330.157176][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.393842][T14147] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 330.398058][T14147] overlayfs: failed to set xattr on upper [ 330.400526][T14147] overlayfs: ...falling back to redirect_dir=nofollow. [ 330.407027][T14147] overlayfs: ...falling back to index=off. [ 330.410512][T14147] overlayfs: ...falling back to uuid=null. [ 330.413940][T14147] overlayfs: ...falling back to xino=off. [ 330.416876][T14147] overlayfs: conflicting lowerdir path [ 330.752370][T14166] program syz.5.2205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.354869][T14191] openvswitch: netlink: IP tunnel TTL not specified. [ 331.773048][ T7539] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.917827][ T7539] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.195483][ T7539] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.332425][ T7539] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.412883][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.666132][ T7539] bridge_slave_1: left allmulticast mode [ 332.668707][ T7539] bridge_slave_1: left promiscuous mode [ 332.671385][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.688591][ T7539] bridge_slave_0: left allmulticast mode [ 332.691118][ T7539] bridge_slave_0: left promiscuous mode [ 332.703405][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.822899][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.871221][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.905153][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.253637][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.901566][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.933702][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.997923][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.997977][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.045685][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.070439][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.120758][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.136697][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.183124][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.588242][ T7539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.673659][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.694175][ T7539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.709686][T14236] nfs4: Unknown parameter '“Lo“ý˜& V D' [ 334.741053][ T7539] bond0 (unregistering): Released all slaves [ 334.868285][T14216] lo speed is unknown, defaulting to 1000 [ 335.045070][T14248] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2221'. [ 335.521565][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.736271][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.789515][ T40] audit: type=1400 audit(1748446809.231:88787): avc: denied { listen } for pid=14260 comm="syz.9.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 335.915610][T14216] chnl_net:caif_netlink_parms(): no params data found [ 336.041521][ T7539] hsr_slave_0: left promiscuous mode [ 336.049560][ T7539] hsr_slave_1: left promiscuous mode [ 336.052703][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.055845][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.078413][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.082335][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.259273][ T7539] veth1_macvtap: left promiscuous mode [ 336.261920][ T7539] veth0_macvtap: left promiscuous mode [ 336.274061][ T7539] veth1_vlan: left promiscuous mode [ 336.276980][ T7539] veth0_vlan: left promiscuous mode [ 336.286244][ T40] audit: type=1400 audit(1748446809.720:88788): avc: denied { map } for pid=14268 comm="syz.8.2227" path="/proc/sys/net/ipv4/vs/sync_threshold" dev="proc" ino=72812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 336.295873][ T68] Bluetooth: hci3: command tx timeout [ 336.314596][T14269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.353839][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.366297][T14269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.559204][ T5978] usb 13-1: new low-speed USB device number 13 using dummy_hcd [ 336.790306][ T5978] usb 13-1: device descriptor read/64, error -71 [ 337.070103][ T5978] usb 13-1: new low-speed USB device number 14 using dummy_hcd [ 337.181516][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.222111][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.224520][ T5978] usb 13-1: device descriptor read/64, error -71 [ 337.364641][ T5978] usb usb13-port1: attempt power cycle [ 337.572952][T14275] netlink: 'syz.9.2229': attribute type 1 has an invalid length. [ 337.581777][T14275] netlink: 'syz.9.2229': attribute type 2 has an invalid length. [ 337.641577][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.740642][ T5978] usb 13-1: new low-speed USB device number 15 using dummy_hcd [ 337.763642][ T5978] usb 13-1: device descriptor read/8, error -71 [ 337.877145][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.944231][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.038016][ T5978] usb 13-1: new low-speed USB device number 16 using dummy_hcd [ 338.080313][ T5978] usb 13-1: device descriptor read/8, error -71 [ 338.203836][ T5978] usb usb13-port1: unable to enumerate USB device [ 338.382686][ T68] Bluetooth: hci3: command tx timeout [ 338.602041][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.804576][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.957649][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.454152][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.569438][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.112208][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.210767][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.309245][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.469154][ T68] Bluetooth: hci3: command tx timeout [ 340.533483][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.627858][ T7539] team0 (unregistering): Port device team_slave_1 removed [ 340.932971][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.981985][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.148935][ T7539] team0 (unregistering): Port device team_slave_0 removed [ 341.468956][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.872216][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.192177][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.453489][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.527284][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.628867][ T68] Bluetooth: hci3: command tx timeout [ 342.676526][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.852728][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.006149][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.303064][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.753550][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.193461][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.322261][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.448544][T14288] xt_TPROXY: Can be used only with -p tcp or -p udp [ 344.572895][T14216] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.580336][T14216] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.585630][T14216] bridge_slave_0: entered allmulticast mode [ 344.595594][T14216] bridge_slave_0: entered promiscuous mode [ 344.637353][T14216] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.641700][T14216] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.650556][T14298] overlayfs: conflicting lowerdir path [ 344.677445][T14216] bridge_slave_1: entered allmulticast mode [ 344.697108][T14216] bridge_slave_1: entered promiscuous mode [ 344.709707][T14298] overlay: Unknown parameter 'obj_role' [ 344.778241][T14298] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2234'. [ 345.013401][T14216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.019360][ T5977] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 345.042048][T14216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.114815][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.143946][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.219445][ T5977] usb 14-1: Using ep0 maxpacket: 8 [ 345.259234][ T5977] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 345.263164][ T5977] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 345.268545][ T5977] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 345.337528][T14315] gfs2: gfs2 mount does not exist [ 345.349641][ T5977] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.385087][ T5977] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 345.406559][ T5977] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.408382][T14216] team0: Port device team_slave_0 added [ 345.490179][T14216] team0: Port device team_slave_1 added [ 345.554908][T14315] NILFS (nbd8): device size too small [ 345.580794][T14321] nbd8: detected capacity change from 0 to 4294967296 [ 345.598176][T14322] block nbd8: shutting down sockets [ 345.680674][ T5977] usb 14-1: GET_CAPABILITIES returned 0 [ 345.684988][T14216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.689266][ T5977] usbtmc 14-1:16.0: can't read capabilities [ 345.694497][T14216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.725457][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.752668][T14216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.754488][T14216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.754505][T14216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.754539][T14216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.843159][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.880694][ C3] blk_print_req_error: 24 callbacks suppressed [ 345.880714][ C3] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.900751][ C3] Buffer I/O error on dev nbd8, logical block 0, async page read [ 345.904386][ C3] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.907387][ T40] audit: type=1400 audit(1748446819.325:88789): avc: denied { write } for pid=14301 comm="syz.9.2235" name="usbtmc0" dev="devtmpfs" ino=3355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 345.908318][ C3] Buffer I/O error on dev nbd8, logical block 1, async page read [ 345.941934][ C3] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.961267][ C3] Buffer I/O error on dev nbd8, logical block 2, async page read [ 345.964897][ C3] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.969427][ C3] Buffer I/O error on dev nbd8, logical block 3, async page read [ 345.989344][T14296] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.997435][T14296] Buffer I/O error on dev nbd8, logical block 0, async page read [ 346.015268][T14296] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 346.020945][T14296] Buffer I/O error on dev nbd8, logical block 1, async page read [ 346.034676][T14296] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 346.039897][T14296] Buffer I/O error on dev nbd8, logical block 2, async page read [ 346.050961][T14296] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 346.066133][T14296] Buffer I/O error on dev nbd8, logical block 3, async page read [ 346.075230][T14296] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 346.084224][T14296] Buffer I/O error on dev nbd8, logical block 0, async page read [ 346.098617][T14216] hsr_slave_0: entered promiscuous mode [ 346.107447][T14296] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 346.125012][T14216] hsr_slave_1: entered promiscuous mode [ 346.127250][T14296] Buffer I/O error on dev nbd8, logical block 1, async page read [ 346.131704][T14216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.152939][T14296] ldm_validate_partition_table(): Disk read failed. [ 346.154267][T14296] Dev nbd8: unable to read RDB block 0 [ 346.155716][T14296] nbd8: unable to read partition table [ 346.193831][T14216] Cannot create hsr debugfs directory [ 346.208850][T14296] ldm_validate_partition_table(): Disk read failed. [ 346.227267][T14296] Dev nbd8: unable to read RDB block 0 [ 346.231056][T14296] nbd8: unable to read partition table [ 346.377402][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.709696][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.725713][ C1] hpet: Lost 1 RTC interrupts [ 346.813163][T14352] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2248'. [ 346.860080][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.895318][ T5346] udevd[5346]: worker [14333] terminated by signal 33 (Unknown signal 33) [ 346.953847][ C1] hpet: Lost 3 RTC interrupts [ 346.972319][ T5346] udevd[5346]: worker [14333] failed while handling '/devices/netdevsim4/net/eth28/queues/tx-0' [ 346.997496][ C1] hpet: Lost 1 RTC interrupts [ 347.230741][ C1] hpet: Lost 1 RTC interrupts [ 347.281716][ C1] hpet: Lost 1 RTC interrupts [ 347.461755][ C1] hpet: Lost 1 RTC interrupts [ 347.671204][T14371] gfs2: gfs2 mount does not exist [ 347.718103][ C1] hpet: Lost 1 RTC interrupts [ 347.761457][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.792471][T14216] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 347.824731][T14216] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 347.856184][ T5977] usb 14-1: USB disconnect, device number 5 [ 347.909500][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.910615][T14216] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 347.930853][T14373] nbd5: detected capacity change from 0 to 4294967296 [ 347.941406][T14371] block nbd5: shutting down sockets [ 348.046520][T14376] ldm_validate_partition_table(): Disk read failed. [ 348.050793][T14376] Dev nbd5: unable to read RDB block 0 [ 348.084756][T14216] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 348.087865][T14376] nbd5: unable to read partition table [ 348.105117][T14376] NILFS (nbd5): unable to read superblock [ 348.133468][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.159297][T14330] ldm_validate_partition_table(): Disk read failed. [ 348.182146][T14330] Dev nbd5: unable to read RDB block 0 [ 348.187011][T14330] nbd5: unable to read partition table [ 348.206495][T14382] netlink: 'syz.9.2257': attribute type 1 has an invalid length. [ 348.232641][T14330] ldm_validate_partition_table(): Disk read failed. [ 348.237552][T14382] netlink: 'syz.9.2257': attribute type 2 has an invalid length. [ 348.268698][T14330] Dev nbd5: unable to read RDB block 0 [ 348.277433][T14383] netlink: 'syz.9.2257': attribute type 1 has an invalid length. [ 348.287642][T14383] netlink: 'syz.9.2257': attribute type 2 has an invalid length. [ 348.296415][T14330] nbd5: unable to read partition table [ 348.357968][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2258'. [ 348.364844][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2258'. [ 348.381191][T14216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.400742][T14385] smc: net device bond0 applied user defined pnetid SYZ2 [ 348.434685][T14216] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.493897][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.498554][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.526764][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.532896][ T7555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.705377][T14398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14398 comm=syz.8.2262 [ 348.748139][T14399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14399 comm=syz.8.2262 [ 348.768516][T14395] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.785763][ T40] audit: type=1400 audit(1748446822.170:88790): avc: denied { listen } for pid=14393 comm="syz.5.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 348.821297][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.104031][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2264'. [ 349.110084][T14410] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2264'. [ 349.178174][T14216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.205682][ T40] audit: type=1400 audit(1748446822.599:88791): avc: denied { read } for pid=5331 comm="acpid" name="mouse3" dev="devtmpfs" ino=3361 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 349.281921][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.396798][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.453470][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.073374][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.155189][T14216] veth0_vlan: entered promiscuous mode [ 350.220405][T14216] veth1_vlan: entered promiscuous mode [ 350.339279][T14216] veth0_macvtap: entered promiscuous mode [ 350.361516][T14445] gfs2: gfs2 mount does not exist [ 350.383805][T14216] veth1_macvtap: entered promiscuous mode [ 350.441433][T14216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.460672][T14216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.487450][T14216] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.491396][T14216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.505687][T14216] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.521560][T14216] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.554815][T14448] nbd9: detected capacity change from 0 to 4294967296 [ 350.560969][T14445] block nbd9: shutting down sockets [ 350.589695][T14377] ldm_validate_partition_table(): Disk read failed. [ 350.649533][T14377] Dev nbd9: unable to read RDB block 0 [ 350.653503][T14377] nbd9: unable to read partition table [ 350.666697][T14377] ldm_validate_partition_table(): Disk read failed. [ 350.675746][T14377] Dev nbd9: unable to read RDB block 0 [ 350.692735][T14377] nbd9: unable to read partition table [ 350.722799][ T7554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.725784][ T7554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.747539][ T9095] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 350.781960][ T7554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.790698][ T7554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.800847][T14451] ldm_validate_partition_table(): Disk read failed. [ 350.804431][T14451] Dev nbd9: unable to read RDB block 0 [ 350.807972][T14451] nbd9: unable to read partition table [ 350.853911][T14451] NILFS (nbd9): unable to read superblock [ 350.952420][ T9095] usb 13-1: Using ep0 maxpacket: 16 [ 350.982793][ T9095] usb 13-1: config 0 has no interfaces? [ 351.022717][ T9095] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.061715][ T9095] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 351.068052][ T9095] usb 13-1: SerialNumber: syz [ 351.079468][ T9095] usb 13-1: config 0 descriptor?? [ 351.108239][T14455] netlink: 'syz.9.2274': attribute type 1 has an invalid length. [ 351.117067][T14455] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2274'. [ 351.295955][T14438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.300568][T14438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.351245][ T9095] usb 13-1: USB disconnect, device number 17 [ 351.637928][ T9754] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 351.761768][ T5941] Bluetooth: hci3: command 0x0405 tx timeout [ 351.796820][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.799744][ T9754] usb 10-1: device descriptor read/64, error -71 [ 352.010238][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.163203][ T9754] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 352.180916][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.317682][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 352.317700][ T40] audit: type=1400 audit(1748446825.725:88794): avc: denied { set_context_mgr } for pid=14477 comm="syz.8.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 352.328757][ T40] audit: type=1400 audit(1748446825.735:88795): avc: denied { call } for pid=14477 comm="syz.8.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 352.343466][ T9754] usb 10-1: device descriptor read/64, error -71 [ 352.375799][ T40] audit: type=1400 audit(1748446825.775:88796): avc: denied { watch watch_reads } for pid=14480 comm="syz.9.2284" path="pipe:[72461]" dev="pipefs" ino=72461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 352.495307][ T9754] usb usb10-port1: attempt power cycle [ 352.848562][ T7554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.880882][ T9754] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 352.933396][ T9754] usb 10-1: device descriptor read/8, error -71 [ 353.032212][ T7554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.227814][ T9754] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 353.232894][ T7554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.253030][ T9754] usb 10-1: device descriptor read/8, error -71 [ 353.344739][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.383055][ T7554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.386350][ T9754] usb usb10-port1: unable to enumerate USB device [ 353.754696][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.796945][ T7554] bridge_slave_1: left allmulticast mode [ 353.801650][ T7554] bridge_slave_1: left promiscuous mode [ 353.813334][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.849519][ T7554] bridge_slave_0: left allmulticast mode [ 353.861672][ T7554] bridge_slave_0: left promiscuous mode [ 353.865639][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.889382][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.186959][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.225298][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.302880][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.678721][T14490] Invalid logical block size (2) [ 355.061892][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.073447][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.090445][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.097720][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.126446][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.205904][ T7554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.226314][ T7554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.237584][ T7554] bond0 (unregistering): Released all slaves [ 355.297852][T14520] efs: device does not support 512 byte blocks [ 355.301784][T14520] device does not support 512 byte blocks [ 355.301784][T14520] [ 355.421417][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.482397][T14505] lo speed is unknown, defaulting to 1000 [ 355.596933][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.705363][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.909399][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.007271][T14541] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 356.013514][T14540] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2300'. [ 356.140116][T14543] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2299'. [ 356.145167][T14543] tipc: Invalid UDP bearer configuration [ 356.145274][T14543] tipc: Enabling of bearer rejected, failed to enable media [ 356.657499][ T7554] hsr_slave_0: left promiscuous mode [ 356.662120][ T7554] hsr_slave_1: left promiscuous mode [ 356.691416][ T7554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.695108][ T7554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.716893][ T7554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.719392][ T7554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.786286][ T7554] veth1_macvtap: left promiscuous mode [ 356.789392][ T7554] veth0_macvtap: left promiscuous mode [ 356.792002][ T7554] veth1_vlan: left promiscuous mode [ 356.794964][ T7554] veth0_vlan: left promiscuous mode [ 357.219900][ T68] Bluetooth: hci3: command tx timeout [ 358.817296][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.890087][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.145074][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.244091][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.281053][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.295503][ T68] Bluetooth: hci3: command tx timeout [ 359.333242][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.125401][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.834023][ T7554] team0 (unregistering): Port device team_slave_1 removed [ 361.004383][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.092064][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.126987][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.208675][ T7554] team0 (unregistering): Port device team_slave_0 removed [ 361.369904][ T68] Bluetooth: hci3: command tx timeout [ 361.837578][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.092148][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.325290][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.460208][ T68] Bluetooth: hci3: command tx timeout [ 363.558950][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.661632][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.693954][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.450008][T14505] chnl_net:caif_netlink_parms(): no params data found [ 364.510618][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.564228][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.877281][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.889026][T14505] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.895309][T14505] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.899405][T14505] bridge_slave_0: entered allmulticast mode [ 364.907803][T14505] bridge_slave_0: entered promiscuous mode [ 364.918996][T14505] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.923499][T14505] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.926820][T14505] bridge_slave_1: entered allmulticast mode [ 364.934051][T14505] bridge_slave_1: entered promiscuous mode [ 365.097894][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.145254][T14505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.160080][T14505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.345532][T14505] team0: Port device team_slave_0 added [ 365.356720][T14505] team0: Port device team_slave_1 added [ 365.473977][T14505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.491284][T14505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.508805][T14505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.521369][T14505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.540147][T14505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.553080][T14505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.664841][T14505] hsr_slave_0: entered promiscuous mode [ 365.675047][T14505] hsr_slave_1: entered promiscuous mode [ 365.679842][T14505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.683976][T14505] Cannot create hsr debugfs directory [ 365.961404][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.265292][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.361621][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.904049][T14505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 366.911050][T14505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 366.963530][T14505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 366.977563][T14505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 367.127418][T14505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.199038][T14505] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.219034][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.223040][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.238116][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.242993][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.583532][T14505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.072263][T14505] veth0_vlan: entered promiscuous mode [ 368.107342][T14505] veth1_vlan: entered promiscuous mode [ 368.148005][T14505] veth0_macvtap: entered promiscuous mode [ 368.180844][T14505] veth1_macvtap: entered promiscuous mode [ 368.226430][T14505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.250369][T14505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.315090][T14505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.319678][T14505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.326577][T14505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.331025][T14505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.423687][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.512854][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.541370][ T7554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.551316][ T7554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.572180][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.579951][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.374261][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.457680][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.599757][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.620883][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.806229][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.052647][ T1150] bridge_slave_1: left allmulticast mode [ 372.056890][ T1150] bridge_slave_1: left promiscuous mode [ 372.061344][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.111960][ T1150] bridge_slave_0: left allmulticast mode [ 372.118925][ T1150] bridge_slave_0: left promiscuous mode [ 372.122170][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.688063][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 372.738400][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 372.764600][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 372.771321][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.792039][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 373.147568][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.207737][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.252030][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.416879][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.465141][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.473689][ T1150] bond0 (unregistering): Released all slaves [ 373.548714][T14588] lo speed is unknown, defaulting to 1000 [ 373.913237][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.180124][T14588] chnl_net:caif_netlink_parms(): no params data found [ 374.374753][ T1150] hsr_slave_0: left promiscuous mode [ 374.405778][ T1150] hsr_slave_1: left promiscuous mode [ 374.426838][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.430855][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.439199][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.443754][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.505235][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.566287][ T1150] veth1_macvtap: left promiscuous mode [ 374.569059][ T1150] veth0_macvtap: left promiscuous mode [ 374.571819][ T1150] veth1_vlan: left promiscuous mode [ 374.575641][ T1150] veth0_vlan: left promiscuous mode [ 374.897350][ T5941] Bluetooth: hci3: command tx timeout [ 375.403619][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.635758][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.457157][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.517207][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.777150][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.975551][ T5941] Bluetooth: hci3: command tx timeout [ 376.997567][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.121938][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.237164][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.283811][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.482481][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.150533][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.369789][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.410294][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.526763][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 378.652439][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.942552][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 379.071157][ T5941] Bluetooth: hci3: command tx timeout [ 379.572163][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.098795][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.181847][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.357741][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.085122][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.141539][ T68] Bluetooth: hci3: command tx timeout [ 381.505151][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.665277][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.969088][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.048916][T14588] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.052677][T14588] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.055743][T14588] bridge_slave_0: entered allmulticast mode [ 382.059366][T14588] bridge_slave_0: entered promiscuous mode [ 382.063079][T14588] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.081916][T14588] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.087150][T14588] bridge_slave_1: entered allmulticast mode [ 382.105948][T14588] bridge_slave_1: entered promiscuous mode [ 382.153169][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.301183][T14588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.311201][T14588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.522287][ T68] Bluetooth: hci0: command 0x1407 tx timeout [ 382.597322][T14588] team0: Port device team_slave_0 added [ 382.631379][T14588] team0: Port device team_slave_1 added [ 382.753516][T14588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.756166][T14588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.774991][T14588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.781533][T14588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.784909][T14588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.794889][T14588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.939601][T14588] hsr_slave_0: entered promiscuous mode [ 382.943650][T14588] hsr_slave_1: entered promiscuous mode [ 382.957746][T14588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.960862][T14588] Cannot create hsr debugfs directory [ 383.639421][T14603] netlink: 'syz.9.2307': attribute type 1 has an invalid length. [ 383.655633][T14603] 9p: Unknown Cache mode or invalid value ‚eadahead [ 384.107975][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.133067][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.449088][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.770795][T14588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 384.795445][T14588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 384.807061][T14588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 384.883740][T14588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 385.080315][T14588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.118703][T14588] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.142677][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.157507][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.190544][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.204334][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.267003][T14643] netlink: 'syz.8.2320': attribute type 1 has an invalid length. [ 385.293742][T14643] 9p: Unknown Cache mode or invalid value ‚eadahead [ 385.334391][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.404020][T14637] lo speed is unknown, defaulting to 1000 [ 385.555608][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.570136][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.653079][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.749491][T14588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.822575][ T40] audit: type=1326 audit(1748446859.198:88797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14654 comm="syz.8.2323" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0d918e969 code=0x0 [ 386.429644][T14588] veth0_vlan: entered promiscuous mode [ 386.449444][T14588] veth1_vlan: entered promiscuous mode [ 386.506304][T14672] netlink: 'syz.5.2326': attribute type 7 has an invalid length. [ 386.607979][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.628175][T14588] veth0_macvtap: entered promiscuous mode [ 386.689773][T14672] : entered promiscuous mode [ 386.766622][T14588] veth1_macvtap: entered promiscuous mode [ 386.965086][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.043344][T14588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.078482][T14588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.123388][T14588] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.130394][T14588] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.149343][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.167375][T14588] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.172990][T14588] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.467408][T11011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.475729][T11011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.489109][ T40] audit: type=1400 audit(1748446860.858:88798): avc: denied { getopt } for pid=14691 comm="syz.9.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 387.584117][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.597995][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.772489][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2334'. [ 387.776059][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2334'. [ 387.809049][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.033077][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.203667][T14716] netlink: 'syz.5.2337': attribute type 3 has an invalid length. [ 388.324813][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2339'. [ 388.354990][T14720] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 388.361157][T14722] support for cryptoloop has been removed. Use dm-crypt instead. [ 388.367746][ T40] audit: type=1400 audit(1748446861.758:88799): avc: denied { relabelto } for pid=14719 comm="syz.5.2340" name="afs" dev="tmpfs" ino=2823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 388.382555][ T40] audit: type=1400 audit(1748446861.768:88800): avc: denied { associate } for pid=14719 comm="syz.5.2340" name="afs" dev="tmpfs" ino=2823 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 388.501590][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.506229][ T40] audit: type=1400 audit(1748446861.888:88801): avc: denied { unlink } for pid=8352 comm="syz-executor" name="afs" dev="tmpfs" ino=2823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 388.531803][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.596011][T14735] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2345'. [ 388.749086][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.983339][ T7555] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.005812][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.525225][ T7555] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.663933][ T7555] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.771805][ T7555] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.144472][ T7555] bridge_slave_1: left allmulticast mode [ 390.147040][ T7555] bridge_slave_1: left promiscuous mode [ 390.150737][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.196994][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.211991][ T7555] bridge_slave_0: left allmulticast mode [ 390.214000][ T7555] bridge_slave_0: left promiscuous mode [ 390.216069][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.575279][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.737082][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.813026][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.206706][T14758] overlayfs: missing 'lowerdir' [ 391.506619][T14766] gfs2: not a GFS2 filesystem [ 391.640687][ T68] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 391.660010][ T68] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 391.703115][ T68] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 391.720242][ T68] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 391.727023][ T68] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 391.751195][ T7555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.763064][ T7555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.773809][ T7555] bond0 (unregistering): Released all slaves [ 391.955570][T14769] lo speed is unknown, defaulting to 1000 [ 392.169000][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.198606][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.235070][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.289014][T14784] bio_check_eod: 2 callbacks suppressed [ 392.289033][T14784] syz.5.2356: attempt to access beyond end of device [ 392.289033][T14784] loop5: rw=0, sector=1, nr_sectors = 1 limit=0 [ 392.309166][T14784] qnx4: unable to read the superblock [ 392.379786][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2355'. [ 392.416988][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.449046][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.587185][T14796] xt_hashlimit: size too large, truncated to 1048576 [ 392.605034][T14797] xt_hashlimit: size too large, truncated to 1048576 [ 392.749413][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.792979][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.152929][T14813] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2362'. [ 393.156446][T14813] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2362'. [ 393.286635][T14769] chnl_net:caif_netlink_parms(): no params data found [ 393.387966][ T40] audit: type=1400 audit(1748446866.768:88802): avc: denied { read } for pid=14817 comm="syz.9.2364" dev="sockfs" ino=76353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 393.536979][ T7555] hsr_slave_0: left promiscuous mode [ 393.580383][ T7555] hsr_slave_1: left promiscuous mode [ 393.605982][ T7555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.609996][ T7555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.617964][T14830] fuse: Bad value for 'user_id' [ 393.620473][ T7555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.637949][T14830] fuse: Bad value for 'user_id' [ 393.659641][ T7555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.869204][ T5941] Bluetooth: hci3: command tx timeout [ 393.871294][ T7555] veth1_macvtap: left promiscuous mode [ 393.893773][ T7555] veth0_macvtap: left promiscuous mode [ 393.903239][ T7555] veth1_vlan: left promiscuous mode [ 393.910631][ T7555] veth0_vlan: left promiscuous mode [ 394.072498][T14839] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2368'. [ 394.130938][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.372418][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.756199][ T40] audit: type=1400 audit(1748446868.137:88803): avc: denied { read write } for pid=14843 comm="syz.5.2370" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 394.801120][ T40] audit: type=1400 audit(1748446868.137:88804): avc: denied { open } for pid=14843 comm="syz.5.2370" path="/dev/usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 394.817460][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.905583][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.961263][ T5941] Bluetooth: hci3: command tx timeout [ 396.428655][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.801330][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.349031][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.400331][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.509070][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.619833][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.804952][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.860997][ T7555] team0 (unregistering): Port device team_slave_1 removed [ 397.900267][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.021768][ T5941] Bluetooth: hci3: command tx timeout [ 398.104991][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.245778][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.305682][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.414583][ T7555] team0 (unregistering): Port device team_slave_0 removed [ 398.452379][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.725097][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.003535][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.050914][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.488246][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.584898][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.696995][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.136265][ T5941] Bluetooth: hci3: command tx timeout [ 400.453058][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.742914][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.830352][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.883811][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.940963][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.448964][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.492963][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.772963][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.832947][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.277999][T14839] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 402.299218][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.334386][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.568992][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.741068][T14769] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.744394][T14769] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.747788][T14769] bridge_slave_0: entered allmulticast mode [ 402.777918][T14769] bridge_slave_0: entered promiscuous mode [ 402.801143][T14870] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2376'. [ 402.831094][T14769] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.834589][T14769] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.845422][T14870] program syz.9.2376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.854642][T14769] bridge_slave_1: entered allmulticast mode [ 402.861665][T14769] bridge_slave_1: entered promiscuous mode [ 403.000008][T14882] netlink: 'syz.8.2379': attribute type 10 has an invalid length. [ 403.084191][T14769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.095422][T14769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.217184][ T5941] Bluetooth: Wrong link type (-22) [ 403.249375][T14892] ptrace attach of "/syz-executor exec"[12495] was attempted by "/syz-executor exec"[14892] [ 403.326025][T14769] team0: Port device team_slave_0 added [ 403.331566][T14769] team0: Port device team_slave_1 added [ 403.343785][T14892] overlayfs: workdir and upperdir must be separate subtrees [ 403.353398][T14896] syz.5.2384 uses old SIOCAX25GETINFO [ 403.588684][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.658863][T14899] 9p: Unknown Cache mode or invalid value ‚eadahead [ 403.679478][T14898] netlink: 'syz.5.2385': attribute type 1 has an invalid length. [ 403.715056][T14901] mac80211_hwsim hwsim43 `ëÿÿ: renamed from wlan1 (while UP) [ 403.764582][T14769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.767624][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.849669][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.852722][T14769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.855924][T14769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.870672][T14905] mmap: syz.9.2388 (14905): VmData 37462016 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 403.913507][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.939509][T14769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.129218][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2392'. [ 404.176514][T14911] rdma_rxe: rxe_newlink: failed to add lo [ 404.193072][T14918] netlink: 'syz.8.2393': attribute type 1 has an invalid length. [ 404.203988][T14769] hsr_slave_0: entered promiscuous mode [ 404.207528][T14769] hsr_slave_1: entered promiscuous mode [ 404.212316][T14769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.216489][T14769] Cannot create hsr debugfs directory [ 404.250316][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.307541][T14918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.365278][T14928] Sensor A: ================= START STATUS ================= [ 404.369816][T14928] Sensor A: Test Pattern: 75% Colorbar [ 404.372707][T14928] Sensor A: Show Information: All [ 404.376686][T14928] Sensor A: Vertical Flip: false [ 404.380620][T14928] Sensor A: Horizontal Flip: false [ 404.383952][T14928] Sensor A: Brightness: 255 [ 404.385993][T14928] Sensor A: Contrast: 128 [ 404.389181][T14928] Sensor A: Hue: 127 [ 404.391582][T14928] Sensor A: Saturation: 128 [ 404.396064][T14928] Sensor A: ================== END STATUS ================== [ 404.403765][T14923] bond0: (slave veth5): Enslaving as an active interface with a down link [ 404.495846][T14924] bridge0: port 3(dummy0) entered disabled state [ 404.531677][T14924] dummy0: left allmulticast mode [ 404.534382][T14924] dummy0: left promiscuous mode [ 404.537971][T14924] bridge0: port 3(dummy0) entered disabled state [ 404.546620][T14934] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2397'. [ 404.579944][T14924] bond0: (slave dummy0): making interface the new active one [ 404.603160][T14924] dummy0: entered promiscuous mode [ 404.606649][T14924] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 405.073020][T14951] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 405.250902][T14957] netlink: 'syz.8.2404': attribute type 2 has an invalid length. [ 405.361485][T14966] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 405.401317][T14966] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 405.510377][T14972] overlayfs: workdir and upperdir must be separate subtrees [ 405.566490][ T40] audit: type=1400 audit(1748446878.927:88805): avc: denied { bind } for pid=14971 comm="syz.8.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 406.348846][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.382743][T14769] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 406.435855][T14769] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 406.461164][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.477436][T14769] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 406.519848][T14769] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 406.708181][T14769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.773495][T14769] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.810564][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.813577][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.834246][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.837496][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.267918][T15012] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 407.414072][T14769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.419498][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.819238][T15037] can0: slcan on ptm0. [ 407.824863][T15044] netlink: 'syz.9.2428': attribute type 1 has an invalid length. [ 407.863126][T15044] 9p: Unknown Cache mode or invalid value ‚eadahead [ 408.027452][T15037] can0 (unregistered): slcan off ptm0. [ 408.070181][T14769] veth0_vlan: entered promiscuous mode [ 408.089485][T14769] veth1_vlan: entered promiscuous mode [ 408.165616][T14769] veth0_macvtap: entered promiscuous mode [ 408.176095][T15049] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.217878][T14769] veth1_macvtap: entered promiscuous mode [ 408.222742][T15056] netlink: 124 bytes leftover after parsing attributes in process `syz.8.2431'. [ 408.227588][T15056] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2431'. [ 408.255219][T14769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.264477][T14769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.273484][T14769] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.277495][T14769] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.299801][T14769] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.304453][T14769] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.520833][ T7555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.524453][ T7555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.638981][ T7539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.642332][ T7539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.898649][T15067] block nbd0: server does not support multiple connections per device. [ 408.932127][T15067] block nbd0: shutting down sockets [ 409.124204][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.151890][T15076] 9p: Unknown Cache mode or invalid value ‚eadahead [ 409.194429][T15077] hugetlbfs: Bad value for 'mode' [ 409.249289][T15073] netlink: 'syz.9.2437': attribute type 1 has an invalid length. [ 409.294001][ T40] audit: type=1400 audit(1748446882.687:88806): avc: denied { mounton } for pid=15074 comm="syz.8.2436" path="/487/file0" dev="hugetlbfs" ino=78977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 409.354998][T15075] efs: device does not support 512 byte blocks [ 409.377909][T15075] device does not support 512 byte blocks [ 409.377909][T15075] [ 409.634730][T15092] binder: BC_ACQUIRE_RESULT not supported [ 409.637174][T15092] binder: 15091:15092 ioctl c0306201 200000000100 returned -22 [ 409.968168][T15101] 9p: Unknown Cache mode or invalid value fs [ 410.126448][T15098] 9pnet_fd: p9_fd_create_tcp (15098): problem connecting socket to 127.0.0.1 [ 410.161549][T15098] 9pnet_fd: p9_fd_create_tcp (15098): problem connecting socket to 127.0.0.1 [ 410.171469][T15106] 9p: Unknown Cache mode or invalid value ‚eadahead [ 410.217116][T15098] 9pnet_fd: p9_fd_create_tcp (15098): problem connecting socket to 127.0.0.1 [ 410.281856][T15098] 9pnet_fd: p9_fd_create_tcp (15098): problem connecting socket to 127.0.0.1 [ 410.368874][T15098] 9pnet_fd: p9_fd_create_tcp (15098): problem connecting socket to 127.0.0.1 [ 410.386972][T15098] 9pnet_fd: p9_fd_create_tcp (15098): problem connecting socket to 127.0.0.1 [ 410.409616][T15098] 9pnet_fd: p9_fd_create_tcp (15098): problem connecting socket to 127.0.0.1 [ 410.437649][T15098] 9pnet_fd: p9_fd_create_tcp (15098): problem connecting socket to 127.0.0.1 [ 410.500834][T15098] 9pnet_fd: p9_fd_create_tcp (15098): problem connecting socket to 127.0.0.1 [ 410.521188][ T40] audit: type=1400 audit(1748446883.897:88807): avc: denied { mount } for pid=15110 comm="syz.5.2449" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 410.537685][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.553782][T15098] 9pnet_fd: p9_fd_create_tcp (15098): problem connecting socket to 127.0.0.1 [ 410.570205][ T40] audit: type=1400 audit(1748446883.947:88808): avc: denied { unmount } for pid=15110 comm="syz.5.2449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 410.618037][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.773896][T15120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.785968][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2451'. [ 410.803137][T15120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.807229][T15120] netlink: 'syz.8.2452': attribute type 1 has an invalid length. [ 410.811653][T15120] netlink: 12562 bytes leftover after parsing attributes in process `syz.8.2452'. [ 411.067651][T15124] netlink: 'syz.5.2454': attribute type 1 has an invalid length. [ 411.070886][T15124] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2454'. [ 411.116875][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.168858][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.204875][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.308852][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.370323][ T1142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.485728][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.531647][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.815105][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.843340][ T1142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.993431][ T1142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.180666][ T1142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.555037][ T1142] bridge_slave_1: left allmulticast mode [ 412.558488][ T1142] bridge_slave_1: left promiscuous mode [ 412.563595][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.586120][ T1142] bridge_slave_0: left allmulticast mode [ 412.590713][ T1142] bridge_slave_0: left promiscuous mode [ 412.596561][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.120871][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.329231][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.384878][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.400554][T15134] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 413.427959][T15135] 9p: Unknown Cache mode or invalid value ‚eadahead [ 413.431674][T15134] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 413.456903][T15134] overlayfs: failed to get uuid (490/file1, err=-13); falling back to uuid=null. [ 413.460071][T15137] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000004' [ 413.565604][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.587757][ T68] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 413.600875][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.624603][ T68] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 413.703743][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2458'. [ 413.709474][ T68] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 413.769083][ T68] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 413.775065][T15143] netlink: 160 bytes leftover after parsing attributes in process `syz.8.2458'. [ 413.783695][ T68] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.833023][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.876754][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.083440][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.103004][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.110665][ T1142] bond0 (unregistering): Released all slaves [ 414.129834][T15132] netlink: 'syz.9.2456': attribute type 1 has an invalid length. [ 414.159639][T15131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.291879][T15139] lo speed is unknown, defaulting to 1000 [ 414.470324][T15151] syz_tun: entered allmulticast mode [ 414.479746][T15150] syz_tun: left allmulticast mode [ 414.702208][ T40] audit: type=1400 audit(1748446888.097:88809): avc: denied { read } for pid=15156 comm="syz.8.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 414.865399][T15165] 9p: Unknown Cache mode or invalid value ‚eadahead [ 415.000816][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.104287][T15162] netlink: 'syz.5.2467': attribute type 1 has an invalid length. [ 415.120661][ T40] audit: type=1804 audit(1748446888.507:88810): pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.2468" name="/newroot/494/file0" dev="tmpfs" ino=2681 res=1 errno=0 [ 415.180959][ T40] audit: type=1804 audit(1748446888.567:88811): pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.2468" name="/newroot/494/file0" dev="tmpfs" ino=2681 res=1 errno=0 [ 415.201667][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.290445][T15164] 8021q: adding VLAN 0 to HW filter on device bond3 [ 415.572311][T15184] block device autoloading is deprecated and will be removed. [ 415.629661][T15183] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 415.634494][T15183] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 415.637958][T15183] vhci_hcd vhci_hcd.0: Device attached [ 415.659925][T15185] vhci_hcd: connection closed [ 415.668438][ T1140] vhci_hcd: stop threads [ 415.676873][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.683957][ T1140] vhci_hcd: release socket [ 415.686480][ T1140] vhci_hcd: disconnect device [ 415.947977][ T5941] Bluetooth: hci3: command tx timeout [ 415.963568][T15164] bond3 (unregistering): Released all slaves [ 416.241448][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.290990][ T6169] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 416.321619][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.369835][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.452729][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.482509][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.492603][ T6169] usb 13-1: Using ep0 maxpacket: 32 [ 416.533139][ T6169] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 416.559408][ T6169] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 416.563845][ T6169] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 416.569273][ T6169] usb 13-1: Product: syz [ 416.572001][ T6169] usb 13-1: Manufacturer: syz [ 416.574242][ T6169] usb 13-1: SerialNumber: syz [ 416.619157][T15200] 9p: Unknown Cache mode or invalid value ‚eadahead [ 416.638824][ T6169] usb 13-1: config 0 descriptor?? [ 416.662575][T15199] netlink: 'syz.9.2477': attribute type 1 has an invalid length. [ 416.665001][T15193] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 416.679620][ T6169] hub 13-1:0.0: bad descriptor, ignoring hub [ 416.682372][ T6169] hub 13-1:0.0: probe with driver hub failed with error -5 [ 416.758900][ T1142] hsr_slave_0: left promiscuous mode [ 416.780537][ T1142] hsr_slave_1: left promiscuous mode [ 416.785471][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.789267][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.815889][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.831632][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.048495][ T1142] veth1_macvtap: left promiscuous mode [ 417.057976][ T1142] veth0_macvtap: left promiscuous mode [ 417.072611][ T1142] veth1_vlan: left promiscuous mode [ 417.076319][ T1142] veth0_vlan: left promiscuous mode [ 417.132837][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.232776][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.347796][T15218] netlink: 'syz.5.2482': attribute type 10 has an invalid length. [ 417.372132][T15218] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2482'. [ 417.719676][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.019251][ T5941] Bluetooth: hci3: command tx timeout [ 418.663489][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.724751][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.235229][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.266357][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.317497][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.137994][ T5941] Bluetooth: hci3: command tx timeout [ 420.459757][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.524519][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.081901][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 421.110813][ T1469] usb 13-1: USB disconnect, device number 18 [ 421.537845][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 421.603399][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.649189][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.910112][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.958785][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.016347][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.189108][ T5941] Bluetooth: hci3: command tx timeout [ 422.969355][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.400749][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.433476][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.548974][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.704543][T15214] ip6gretap1: entered promiscuous mode [ 424.708322][T15214] ip6gretap1: entered allmulticast mode [ 424.723366][T15218] bridge0: port 1(dummy0) entered blocking state [ 424.734085][T15218] bridge0: port 1(dummy0) entered disabled state [ 424.739061][T15218] dummy0: entered allmulticast mode [ 424.748159][T15218] dummy0: left allmulticast mode [ 424.757537][T15218] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 424.886013][ T7555] dummy0: left promiscuous mode [ 424.902527][T15139] chnl_net:caif_netlink_parms(): no params data found [ 424.998726][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.031321][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.222954][T15226] tipc: Failed to obtain node identity [ 425.229334][T15226] tipc: Enabling of bearer rejected, failed to enable media [ 425.243496][T15225] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2484'. [ 425.364708][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.692607][T15139] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.697351][T15139] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.715404][T15139] bridge_slave_0: entered allmulticast mode [ 425.742590][T15139] bridge_slave_0: entered promiscuous mode [ 425.748136][T15139] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.763553][T15139] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.768263][T15139] bridge_slave_1: entered allmulticast mode [ 425.773702][T15139] bridge_slave_1: entered promiscuous mode [ 425.805984][ T1469] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 425.957499][T15139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.993786][T15139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.009002][ T1469] usb 10-1: Using ep0 maxpacket: 16 [ 426.031253][ T1469] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.046011][ T1469] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.050437][ T1469] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 426.064724][ T1469] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.161800][ T1469] usb 10-1: config 0 descriptor?? [ 426.220916][T15139] team0: Port device team_slave_0 added [ 426.254707][T15139] team0: Port device team_slave_1 added [ 426.367167][T15139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.371099][T15139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.412364][T15139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.430807][T15139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.442735][T15139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.463478][T15139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.510981][T15245] netlink: 'syz.9.2488': attribute type 1 has an invalid length. [ 426.527815][T15245] 9p: Unknown Cache mode or invalid value ‚eadahead [ 426.595551][ T1469] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:05AC:8241.0009/input/input21 [ 426.606583][T15139] hsr_slave_0: entered promiscuous mode [ 426.610483][T15139] hsr_slave_1: entered promiscuous mode [ 426.614571][T15139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.619489][T15139] Cannot create hsr debugfs directory [ 426.676085][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2489'. [ 426.771569][ T1469] appleir 0003:05AC:8241.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 426.892144][ T1469] usb 10-1: USB disconnect, device number 22 [ 427.035064][T15254] fido_id[15254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/report_descriptor': No such file or directory [ 427.208685][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.749667][T15268] XFS (nullb0): Invalid superblock magic number [ 427.957627][T15286] netlink: 'syz.8.2498': attribute type 1 has an invalid length. [ 427.981776][T15286] 9p: Unknown Cache mode or invalid value ‚eadahead [ 428.091054][T15266] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 428.425316][T15139] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 428.452657][T15139] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 428.483068][T15306] overlayfs: failed to resolve './file0': -2 [ 428.484974][T15139] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 428.526899][T15139] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 428.551550][ T40] audit: type=1400 audit(1748446901.936:88812): avc: denied { execute } for pid=15303 comm="syz.8.2503" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 428.767966][T15139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.782385][T15139] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.828479][ T7554] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.835634][ T7554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.854639][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.872134][ T7554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.990228][T15139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 429.019918][T15139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.050030][T15322] 9p: Unknown Cache mode or invalid value ‚eadahead [ 429.081847][T15320] netlink: 'syz.9.2509': attribute type 1 has an invalid length. [ 429.374126][T15139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.470318][T15335] x_tables: duplicate underflow at hook 1 [ 429.500146][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.713205][T15340] could not allocate digest TFM handle blake2s-160-x86 [ 430.242080][T15139] veth0_vlan: entered promiscuous mode [ 430.268668][T15139] veth1_vlan: entered promiscuous mode [ 430.305167][T15139] veth0_macvtap: entered promiscuous mode [ 430.325462][T15139] veth1_macvtap: entered promiscuous mode [ 430.343411][T15355] tipc: Started in network mode [ 430.356980][T15355] tipc: Node identity ac141425, cluster identity 4711 [ 430.371707][T15355] tipc: New replicast peer: 0.0.0.0 [ 430.379670][T15355] tipc: Enabled bearer , priority 10 [ 430.395729][T15355] tipc: New replicast peer: 172.20.20.170 [ 430.408349][T15139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.422512][T15139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.442027][T15139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.454481][T15139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.465951][T15139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.479599][T15139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.561347][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.802216][T15359] netlink: 'syz.8.2519': attribute type 1 has an invalid length. [ 430.827267][ T7539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.835378][ T7539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.843294][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2517'. [ 430.901226][T15359] 9p: Unknown Cache mode or invalid value ‚eadahead [ 430.908616][T15360] sit0: entered allmulticast mode [ 430.975282][ T7555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.979288][ T7555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.130359][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2517'. [ 431.410660][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.422803][ T9753] tipc: Node number set to 2886997029 [ 431.558598][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2520'. [ 431.579015][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2520'. [ 431.946491][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.141374][T15381] batadv_slave_1: entered promiscuous mode [ 432.144503][T15381] batadv_slave_1: left promiscuous mode [ 432.183247][T15380] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 432.562144][T15396] netlink: 'syz.9.2529': attribute type 1 has an invalid length. [ 432.603898][T15396] 9p: Unknown Cache mode or invalid value ‚eadahead [ 432.606628][T15396] 9pnet: Tag 65535 still in use [ 432.612668][ C3] ------------[ cut here ]------------ [ 432.615792][ C3] refcount_t: underflow; use-after-free. [ 432.618625][ C3] WARNING: CPU: 3 PID: 0 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 432.622480][ C3] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 432.624427][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 432.639196][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 432.644300][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 432.646871][ C3] Code: ff 89 de e8 38 19 ea fc 84 db 0f 85 66 ff ff ff e8 4b 1e ea fc c6 05 1d 75 9c 0b 01 90 48 c7 c7 a0 4e f4 8b e8 a7 ab a9 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 28 1e ea fc 0f b6 1d f8 74 9c 0b 31 [ 432.658248][ C3] RSP: 0018:ffffc900006f8d90 EFLAGS: 00010082 [ 432.668704][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ad4f8 [ 432.682711][ C3] RDX: ffff88801daf0000 RSI: ffffffff817ad505 RDI: 0000000000000001 [ 432.687115][ C3] RBP: ffff88805031f768 R08: 0000000000000001 R09: 0000000000000000 [ 432.691833][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805031f768 [ 432.696069][ C3] R13: ffff888048851000 R14: 0000000000000015 R15: 1ffff1102186680c [ 432.702383][ C3] FS: 0000000000000000(0000) GS:ffff8880d6cda000(0000) knlGS:0000000000000000 [ 432.707359][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.732969][ C3] CR2: 000020000000f000 CR3: 000000002707e000 CR4: 0000000000352ef0 [ 432.736721][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 432.740879][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 432.749268][ C3] Call Trace: [ 432.750614][ C3] [ 432.751777][ C3] p9_req_put+0x1ec/0x250 [ 432.753586][ C3] req_done+0x1dc/0x2e0 [ 432.755382][ C3] ? __pfx_req_done+0x10/0x10 [ 432.757580][ C3] ? __pfx_req_done+0x10/0x10 [ 432.759394][ C3] vring_interrupt+0x31e/0x400 [ 432.761459][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 432.763552][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 432.778227][ C3] handle_irq_event+0xab/0x1e0 [ 432.780143][ C3] handle_edge_irq+0x263/0xd10 [ 432.798255][ C3] __common_interrupt+0xe2/0x250 [ 432.800238][ C3] common_interrupt+0xba/0xe0 [ 432.802325][ C3] [ 432.803589][ C3] [ 432.804962][ C3] asm_common_interrupt+0x26/0x40 [ 432.807497][ C3] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 432.811018][ C3] Code: fb 09 00 00 44 8b 05 49 cb fb 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 ff 77 39 00 fb 65 48 8b 1d 8e cd 1a 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 432.826653][ C3] RSP: 0018:ffffc90000197be0 EFLAGS: 00000206 [ 432.842050][ C3] RAX: 000000000029443f RBX: ffff88801daf0000 RCX: ffffffff81c3097f [ 432.844870][ C3] RDX: 0000000000000000 RSI: ffffffff8dbe4615 RDI: ffffffff8bf4a2a0 [ 432.847855][ C3] RBP: ffffc90000197c28 R08: 0000000000000001 R09: 0000000000000001 [ 432.851086][ C3] R10: ffffffff90852e17 R11: 0000000000000000 R12: ffff88806a739dc0 [ 432.853933][ C3] R13: ffff88804457a440 R14: ffff88802ae38000 R15: ffff88806a73abf0 [ 432.856743][ C3] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 432.858932][ C3] ? __switch_to+0x749/0x1170 [ 432.884744][ C3] __schedule+0x1177/0x5de0 [ 432.886225][ C3] ? get_jiffies_update+0xaa/0x2a0 [ 432.887935][ C3] ? get_jiffies_update+0x13a/0x2a0 [ 432.890029][ C3] ? rcu_needs_cpu+0x71/0xc0 [ 432.891940][ C3] ? __pfx_tick_nohz_next_event+0x10/0x10 [ 432.894088][ C3] ? __pfx___schedule+0x10/0x10 [ 432.895848][ C3] ? asm_sysvec_call_function_single+0x1a/0x20 [ 432.930318][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 432.932609][ C3] ? rcu_is_watching+0x12/0xc0 [ 432.935676][ C3] schedule_idle+0x5c/0x90 [ 432.938000][ C3] do_idle+0x2b6/0x510 [ 432.940202][ C3] ? __pfx_do_idle+0x10/0x10 [ 432.943009][ C3] ? trace_sched_exit_tp+0x31/0x130 [ 432.946446][ C3] cpu_startup_entry+0x4f/0x60 [ 432.950499][ C3] start_secondary+0x21d/0x2b0 [ 432.954185][ C3] ? __pfx_start_secondary+0x10/0x10 [ 432.959298][ C3] common_startup_64+0x13e/0x148 [ 432.963246][ C3] [ 432.965410][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 432.970682][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 432.978269][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 432.984899][ C3] Call Trace: [ 432.986924][ C3] [ 432.988704][ C3] dump_stack_lvl+0x3d/0x1f0 [ 432.992090][ C3] panic+0x71c/0x800 [ 432.996088][ C3] ? __pfx_panic+0x10/0x10 [ 433.000105][ C3] ? show_trace_log_lvl+0x29b/0x3e0 [ 433.002906][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 433.005458][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 433.008221][ C3] check_panic_on_warn+0xab/0xb0 [ 433.010641][ C3] __warn+0xf6/0x3c0 [ 433.013418][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 433.017354][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 433.031301][ C3] report_bug+0x3c3/0x580 [ 433.034406][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 433.037677][ C3] handle_bug+0x184/0x210 [ 433.039946][ C3] exc_invalid_op+0x17/0x50 [ 433.043094][ C3] asm_exc_invalid_op+0x1a/0x20 [ 433.047178][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 433.052817][ C3] Code: ff 89 de e8 38 19 ea fc 84 db 0f 85 66 ff ff ff e8 4b 1e ea fc c6 05 1d 75 9c 0b 01 90 48 c7 c7 a0 4e f4 8b e8 a7 ab a9 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 28 1e ea fc 0f b6 1d f8 74 9c 0b 31 [ 433.071170][ C3] RSP: 0018:ffffc900006f8d90 EFLAGS: 00010082 [ 433.081395][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ad4f8 [ 433.085571][ C3] RDX: ffff88801daf0000 RSI: ffffffff817ad505 RDI: 0000000000000001 [ 433.090742][ C3] RBP: ffff88805031f768 R08: 0000000000000001 R09: 0000000000000000 [ 433.100349][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805031f768 [ 433.103979][ C3] R13: ffff888048851000 R14: 0000000000000015 R15: 1ffff1102186680c [ 433.115091][ C3] ? __warn_printk+0x198/0x350 [ 433.117457][ C3] ? __warn_printk+0x1a5/0x350 [ 433.119824][ C3] p9_req_put+0x1ec/0x250 [ 433.131868][ C3] req_done+0x1dc/0x2e0 [ 433.134010][ C3] ? __pfx_req_done+0x10/0x10 [ 433.136383][ C3] ? __pfx_req_done+0x10/0x10 [ 433.138662][ C3] vring_interrupt+0x31e/0x400 [ 433.141425][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 433.149078][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 433.152350][ C3] handle_irq_event+0xab/0x1e0 [ 433.157455][ C3] handle_edge_irq+0x263/0xd10 [ 433.163180][ C3] __common_interrupt+0xe2/0x250 [ 433.170668][ C3] common_interrupt+0xba/0xe0 [ 433.179481][ C3] [ 433.180688][ C3] [ 433.182038][ C3] asm_common_interrupt+0x26/0x40 [ 433.184842][ C3] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 433.187221][ C3] Code: fb 09 00 00 44 8b 05 49 cb fb 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 ff 77 39 00 fb 65 48 8b 1d 8e cd 1a 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 433.206259][ C3] RSP: 0018:ffffc90000197be0 EFLAGS: 00000206 [ 433.213852][ C3] RAX: 000000000029443f RBX: ffff88801daf0000 RCX: ffffffff81c3097f [ 433.221273][ C3] RDX: 0000000000000000 RSI: ffffffff8dbe4615 RDI: ffffffff8bf4a2a0 [ 433.228567][ C3] RBP: ffffc90000197c28 R08: 0000000000000001 R09: 0000000000000001 [ 433.241400][ C3] R10: ffffffff90852e17 R11: 0000000000000000 R12: ffff88806a739dc0 [ 433.246169][ C3] R13: ffff88804457a440 R14: ffff88802ae38000 R15: ffff88806a73abf0 [ 433.258957][ C3] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 433.263801][ C3] ? __switch_to+0x749/0x1170 [ 433.272359][ C3] __schedule+0x1177/0x5de0 [ 433.274081][ C3] ? get_jiffies_update+0xaa/0x2a0 [ 433.275878][ C3] ? get_jiffies_update+0x13a/0x2a0 [ 433.277715][ C3] ? rcu_needs_cpu+0x71/0xc0 [ 433.279311][ C3] ? __pfx_tick_nohz_next_event+0x10/0x10 [ 433.292903][ C3] ? __pfx___schedule+0x10/0x10 [ 433.294786][ C3] ? asm_sysvec_call_function_single+0x1a/0x20 [ 433.297019][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 433.298950][ C3] ? rcu_is_watching+0x12/0xc0 [ 433.302317][ C3] schedule_idle+0x5c/0x90 [ 433.312887][ C3] do_idle+0x2b6/0x510 [ 433.314713][ C3] ? __pfx_do_idle+0x10/0x10 [ 433.316430][ C3] ? trace_sched_exit_tp+0x31/0x130 [ 433.318431][ C3] cpu_startup_entry+0x4f/0x60 [ 433.320214][ C3] start_secondary+0x21d/0x2b0 [ 433.329633][ C3] ? __pfx_start_secondary+0x10/0x10 [ 433.331672][ C3] common_startup_64+0x13e/0x148 [ 433.333484][ C3] [ 433.337178][ C3] Kernel Offset: disabled [ 433.339110][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:03:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000000080000 RBX=0000000000000001 RCX=ffffc9002d1d5000 RDX=0000000000080000 RSI=ffffffff81af521f RDI=0000000000000005 RBP=ffffc900046ff938 RSP=ffffc900046ff860 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920008dff10 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81af5221 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fcbf83f66c0 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000002707e000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee4ca53c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55e8a11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55e8a11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55e8a11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55e8a11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55e8a11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55e8a11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff8880235cfd90 RCX=1ffff110046b9fb5 RDX=1ffffffff35b17cf RSI=0000000000000004 RDI=ffff8880235cfda8 RBP=ffffc900041f7af8 RSP=ffffc900041f7a10 R8 =0000000000000001 R9 =fffff5200083ef30 R10=0000000000000206 R11=0000000000000000 R12=0000000000000003 R13=ffff888028d72088 R14=ffffffff8b8fcd80 R15=1ffff9200083ef46 RIP=ffffffff84d6bc0c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f711f93e300 ffffffff 00c00000 GS =0000 ffff8880d6ada000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2dbfa8 CR3=000000003814b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000009e8 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656469762f766564 2f01ffffffffffff ffffe70801800304 0000009500000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000106800418 8d82d88a08000100 0000080606012aa8 00080006e8030008 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006e00300080006 d80306080006d003 1feeeeabfc080006 c8030a080006c003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080006b8030008 0006b00300080006 a80306b5b2cd9008 0006a00314800800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0698030008000690 0302080006800300 100002ce10000180 04060074a800236f ZMM24=a13638bfa13638bf a13638bfa13638bf a13638bfa13638bf a13638bfa13638bf a13638bfa13638bf a13638bfa13638bf a13638bfa13638bf a13638bfa13638bf ZMM25=b26c812ab26c812a b26c812ab26c812a b26c812ab26c812a b26c812ab26c812a b26c812ab26c812a b26c812ab26c812a b26c812ab26c812a b26c812ab26c812a ZMM26=2e7624cf2e7624cf 2e7624cf2e7624cf 2e7624cf2e7624cf 2e7624cf2e7624cf 2e7624cf2e7624cf 2e7624cf2e7624cf 2e7624cf2e7624cf 2e7624cf2e7624cf ZMM27=9de4b0059de4b005 9de4b0059de4b005 9de4b0059de4b005 9de4b0059de4b005 9de4b0059de4b005 9de4b0059de4b005 9de4b0059de4b005 9de4b0059de4b005 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6f1000006f100000 6f1000006f100000 6f1000006f100000 6f1000006f100000 6f1000006f100000 6f1000006f100000 6f1000006f100000 6f1000006f100000 info registers vcpu 2 CPU#2 RAX=0000000000204003 RBX=0000000000000002 RCX=ffffffff8b6d3419 RDX=0000000000000000 RSI=ffffffff8dbe4615 RDI=ffffffff8bf4a2a0 RBP=ffffed1003b5b910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801dadc880 R14=ffffffff90852e10 R15=0000000000000000 RIP=ffffffff8b6d1caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556bf54808 CR3=0000000045b0e000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000000c3 DR2=0000000000000000 DR3=0000000000000004 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb967c390 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0d9211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0d9211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0d9211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0d9211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0d9211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0d9211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f9bb5 RDI=ffffffff9adfe5a0 RBP=ffffffff9adfe560 RSP=ffffc900006f8700 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9adfe560 R15=ffffffff854f9b50 RIP=ffffffff854f9bdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000f000 CR3=000000002707e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023746e6576652f 7475706e692f7665 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbfa611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbfa611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbfa611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbfa611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbfa611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbfa611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e756f6d3d674c74 6568c861632c6461 656861646165823d 65686361632c6f74 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000004746e756f 6d3d674c746568c8 61632c6461656861 646165823d656863 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000301 0000000000000008 0000003600000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000005e 0000003600000029 0000000000000018 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07aa533c5eb74840 b8b67fda22aa1be8 f3b48d959486d51a 680b3971f77b5a3f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ba93b5a1e8aa5a09 d6caf1a42a19f6d3 bd178ebd1dc7b576 09eed5e3192db5af ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b095a164398e508 df2fe413a164056f 2010a83d44975347 cc3c5dc0f5a8d119 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8afed17e59ab73ce 97337777e1e6421f 5838106d02f9aca7 c4e3823efd4b9e7c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000