last executing test programs: 5m49.898723842s ago: executing program 2 (id=169): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xffffff00}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff250000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m49.898274613s ago: executing program 2 (id=170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000034070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5m49.829764698s ago: executing program 2 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x148, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x730}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1f, 0x13, [{0x4, 0x1}, {0x9}, {0x1}, {0x18}, {0x12}, {0x6, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x9, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0xb, 0x1}, {0x18}, {0x1f, 0x1}, {0x24, 0x1}, {0x16}, {0x30, 0x1}, {0x3}, {0x36}, {0x24, 0x1}, {0x3}, {0x24}, {0xc}, {0x19, 0x1}, {0x60, 0x1}, {0x0, 0x1}, {0x1}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x401, 0x7, 0x81]}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0xc}, {0x12, 0x1}, {0x24, 0x1}, {0x5}, {0x1, 0x1}, {0x12}, {0x1b, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xbc, 0xac, "b99274756e437aa14e82ff26898f8ae963e17dfcab845d9c26e292dbb16333e0dd61b904da55471aae2b7395aa647443597e5c7ec4f8c2d1134ca2201d66f8e9a93b75daadd34684a4368cc30b70aecb9837358a1904813a322d2c6550e101489f8ca419bc7a8be7860c5f9f5b36bceadcb17577836a924807e45054cb24009d7d8f393c7f52868a19d851eb8ff8034d58052e862c7d70eeb0c7d125c60f8cadb2424ec05f36f3126c2ab99ced292cc7493465953f6f20d5"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x68f}]}, 0x148}, 0x1, 0x0, 0x0, 0x40801}, 0x4004000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, '\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x7, 0x4, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x4, 0x81, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x9, 0x1, 0x8, 0x1, 0x4, 0x401, 0x8000, 0x8, 0xffff, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x401, 0x1ff, 0x10000, 0xee, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x2, 0x8000000000000003, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0x77, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x4, 0x8000, 0x100080, 0x10007f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0x0, 0x4, 0x200005e997b8e, 0x1, 0x0, 0x6, 0x4, 0x100, 0x1000000006, 0x6, 0x6, 0x0, 0xffffffffffffff95, 0x80000000000a, 0x108000001, 0xcc7c, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x4, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec1, 0x1, 0x5, 0xfff, 0x8, 0x80]}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 5m49.82941706s ago: executing program 2 (id=173): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) r3 = dup3(r2, r0, 0x80000) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x4, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) socket$alg(0x26, 0x5, 0x0) 5m49.680520155s ago: executing program 2 (id=175): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fchmod(0xffffffffffffffff, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x8}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0, r6}, 0x14) 5m49.380006789s ago: executing program 2 (id=179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xffffff00}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff250000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m49.357934286s ago: executing program 32 (id=179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xffffff00}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff250000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m2.190581231s ago: executing program 4 (id=831): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6(0xa, 0x80003, 0x6) r2 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) close(0x3) (async) fremovexattr(r2, &(0x7f0000000100)=@known='security.selinux\x00') r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000140)={0x0, "4ff88a2de3b33d9c3d1953b1c239a5a2aab996cb9a5ae96c26323b4f0558449d", 0x5, 0x0, 0x9, 0xc53, 0x4, 0x3, 0x2, 0x7ff}) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa110101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x0, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xa}}, './file0\x00'}) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) 5m1.300445238s ago: executing program 4 (id=833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff0010926f6dd43e2d2500b708000064320000978af0ff00000000bfa100010000000007010000bfa4000000000000070400"/88, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000760000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='stusb160x 0x48\x00', 0xf) write(r3, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r3, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000000)={{0x2, 0x4, 0x100, 0xfffffff7, 0x7}, &(0x7f0000000300)=[{}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff0010926f6dd43e2d2500b708000064320000978af0ff00000000bfa100010000000007010000bfa4000000000000070400"/88, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000760000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) (async) write(r3, &(0x7f0000000200)='stusb160x 0x48\x00', 0xf) (async) write(r3, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) (async) write(r3, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) (async) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) (async) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000000)={{0x2, 0x4, 0x100, 0xfffffff7, 0x7}, &(0x7f0000000300)=[{}]}) (async) 5m1.10331599s ago: executing program 4 (id=839): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x3, 0x1}}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0xd2a) 5m1.10259841s ago: executing program 4 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = gettid() syz_pidfd_open(r1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) ftruncate(r0, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000180)) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) write(r3, 0x0, 0x72) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd40700001000000095000000000000002ba72804605789bfbc7174159805d30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc162619b3af8a4e825d922c65e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bf3d6b2e28f90c52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d350100c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64dc4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a7e008f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d054c744fd06a57f7bcb8fb58c512d0884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637c335892b420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072da00f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce6459200000067c38a656d326cff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b52f79a3f7306436762dd1a08ce023e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac3ffff1ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d0dbaec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f6eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032bd2649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a604e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b0104000000000000a4c0a1d44d9dfd82896f5623e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f330a5e05b59db781cf9cf33752836fff6fcbf379332357c47f3597e084d0779b3cbfb312925a8151e338eca2c80600000000ac5992a4c7ec0b741f117f628562c3b27483ad6d733ffcbfca0ba805af95f8985901b0b8f918efa139e984fe872f22f5f094e3fbdf45ec2076710d8c787156b3e05774ac977c3db6288d252b2a73c84a07d73f9721e52f5b5d331ebb7db0a03be93fd96d7355405e954b8d6d0efcd6c37d869086efe15e30b7b6b2b37647e265a62fccfeb16f12f109dc5e405b53d1737b7a2620943affaa2eb07585e23e0513df2f83218f9f3ed9ba3026bcfbe5e9b36ab5b052886227827b983c0fe8da495f1ea7b5c35e42ff83f6e5e5a71ba3000000000000000000f73ffcd0c92a30304d5142441978012e2e6e1c45c28713fa5354f1fd124598688dffa0890dc8c6b4d9732347896d17d4efe12c20c706dcd4601135c553713cc4000a6690a2eed2e680db50589a659a240afc2c1eaa381a4135933a8d7abff2a7882ff50eabbe493ae54f71473eb65fe8e850f36d096a9c7dfd8fd2a35234bef2ba4755e10489b2508e4a9d911135b6c802e16e23fc7a3c3c0f5939b842bca82db931e5ba180f1eed5f539371105aee1d06af045892e18eb5dfd361f6d89fff0b82da98fa7aa90fe92b59887fda0ed8d375ba13fe3f63e69e417c89e31fdf55b9c2e9e0398c661d4c4ce0804971f3"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) mount$bind(&(0x7f0000000040)='./file0/../file1\x00', &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x2, 0x0) 5m1.038803203s ago: executing program 4 (id=844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000400)={r2, @in={{0x2, 0xce23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000002c0)=0x84) (async, rerun: 64) r3 = syz_io_uring_setup(0x21b7, &(0x7f0000000400)={0x0, 0x287d, 0x100, 0x3, 0x4e}, &(0x7f0000002200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000002280)=0x0) (rerun: 64) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x800, 0x1}) (async) io_uring_enter(r3, 0x2003, 0xfffffffd, 0x9, 0x0, 0x0) 5m0.680694412s ago: executing program 4 (id=856): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x90) pipe2$9p(&(0x7f0000000000), 0x4080) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) 5m0.590065107s ago: executing program 33 (id=856): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x90) pipe2$9p(&(0x7f0000000000), 0x4080) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) 4m32.110497823s ago: executing program 3 (id=1321): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = userfaultfd(0x80801) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0xfffffffffffffd3f) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x1}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="00030000000100000000", 0xa}, {&(0x7f0000000200)='}', 0x1}], 0x2}, 0x24000008) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r2, 0x10000000005, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4841}, 0x4840) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x3, @remote, 0x101}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x7}, 0x8) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000440)={@dev}, &(0x7f0000000480)=0x14) pwrite64(r3, &(0x7f0000000380)="e54525", 0x3, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)={0x118, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x106, 0x117, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0xc, 0xeb, 0x0, 0x0, @u64=0xffffffff}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r7, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) close_range(r1, r9, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x6, &(0x7f0000000040)=[{0xdf3, 0x6, 0x0, 0x7}, {0x9, 0x1a, 0x1, 0xe}, {0x5, 0x0, 0x60, 0x5}, {0x3, 0x10, 0x3, 0x88}, {0xb7, 0x6, 0x1a, 0xffffffff}, {0x83, 0x8, 0x4, 0x1ff}]}) 4m32.050096233s ago: executing program 3 (id=1322): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x404) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000600)={0xc, 0xff}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000008c0)={0x2, 0x0, @pic={0xf2, 0x8, 0x2, 0x10, 0x3, 0x9, 0x0, 0x9, 0x7, 0x5, 0xf9, 0x4, 0x8, 0xc9, 0x5, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000000)="c4c1916377c5c4c249aeecea012000003a008fe9d0922c1166b8b6008ee00f072e9966ba2000b841d7c63cef0f32f20f01db", 0x32}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaacfb, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000440)={r7, 0x625, 0x3, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x6, 0x1, 0xfffffffa, 0x2, r7}, 0x10) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x4, 0xa}, {0x1, 0x27}, @const={0xfffe, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r9, &(0x7f0000000000), 0xfffffecc) splice(r8, 0x0, r10, 0x0, 0x4ffe6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) 4m31.149534336s ago: executing program 3 (id=1329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000000)={r0, 0x0, 0x7, 0x4, 0xfc6, 0x4}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000000c0)={0x4, 0x1, 0xfffb, 0x1af2}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 4m30.950627219s ago: executing program 3 (id=1332): socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x20000000, 0x8002) r1 = socket$alg(0x26, 0x5, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6c5820fae9d6dcd3292ea54a6beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x21) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) fcntl$dupfd(r0, 0x406, r1) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) 4m30.859202485s ago: executing program 3 (id=1336): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x40402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000240)={0x0, 0x9, 0x6, &(0x7f0000000200)={0x9, "c95500000000000000000000000500"}}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0x30, 0x0, &(0x7f00000014c0)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003e1f000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb00"/400], 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x4000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @loopback, 0x106}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r7, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 4m27.82973746s ago: executing program 3 (id=1361): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e04060304e9ef78f2269313270a22dc011e612a9becf7d789b08afa4f2914733c6d"], 0x7) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1b) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000340)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x71, 0x8000000000000001, 0xfffffffffffffff8, 0x8}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0x41000, 0xc3ca}}, @nested_vmresume={0x130, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0x8158, 0x3, 0x2}}], 0xc8}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000480)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x20, &(0x7f0000000740)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x1, 0x2, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m12.599845251s ago: executing program 34 (id=1361): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e04060304e9ef78f2269313270a22dc011e612a9becf7d789b08afa4f2914733c6d"], 0x7) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1b) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000340)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x71, 0x8000000000000001, 0xfffffffffffffff8, 0x8}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0x41000, 0xc3ca}}, @nested_vmresume={0x130, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0x8158, 0x3, 0x2}}], 0xc8}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000480)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x20, &(0x7f0000000740)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x1, 0x2, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m59.759230226s ago: executing program 0 (id=1748): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-arm\x00'}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)="0a68898374cf1b354c06a85e82b54f85d95ccb025d8bb2510d70888ca750a526948f765294cafc694c359fe5867486c521e9618cdf0f3945e96eeb8864b9f021a1762884d407f1bf152356a27f04d3982a698c28f5a31a33bd5115c65332bfd9281cf4de0e7312224a8fffbbbf8df8bcc4c76450a860bab0f00222610f7b77a7cb5e0a3dfea046991b310fa6ea631ae6524364e4561fbbbc9cc26ac1dce5ed90907703aa84fda07bd995a65b2fa82b7e3bfd5ed4804c49fffb697c5b91", 0xbd}, {&(0x7f0000000140)="4f520949ee46ff15c2901ebd40ddd0e9084fe2e7ee9a410286f94c5f92e38b972fdbee027f72c07141765d2f3508385cf41ff6f2f0b98761b5af38dd9d00b050363bffd19c20a47147efdd65560bb4214dd23a84c6631975967a454c91f1d7c942a1fa6f9bd8091bf1e4aa86f7dc66157452140ce90cbde0969754a55b357014e26ecf43a861c92b460e00f7fe90952d006ca3596b8cd34b775c", 0x9a}, {&(0x7f0000000200)="856e55bfde67f4cc1798e1bddbba5c0b778171af85203292da17abd78ba5f595c6af918e610c55cf57d043687bd1cb00616b4dc6ef938852a92782d71c879bed871ac0affeeeb9f821a25bab181ddca9c886b17b30e396220e9024f838b0482bda793dc222c87c11b306c26cffea", 0x6e}, {&(0x7f0000000280)="c0f1afcd80ca9460d4d8fb3ebe88a47be07a3fac293cba1d8561b703cc23b3fca52f5f74d5ae6629f5399f6b37044565eb42b3a5715100aefddcd21ae8252bb1bf74e9e2afe72fcb30f139f2d924908647cb2944c1a74c3dd34f4aecbfb656", 0x5f}, {&(0x7f0000000300)="7faa510a0ea1b479320dee1efd7f9fff0084154a1e3da35f71d65d6387bcb0de3ab987dc9e0d14961dc55408445e4da0958af0", 0x33}, {&(0x7f0000000340)="c220521fba94ddbd0a47b18be1c47f7e68a651466861acb09e160026d8b5fc8e4464e077712c6a1c8cd17af0eeeb64099dbab253033684f1820cc4ef73678f43683ca62ebf07a0c120442a3c26e45d13545fadc1de710e69a2aecd700ff20a3430dab3f7f370d523963e04277270dccb64f6c48e61fa1bd8078c50ba0a7f6bdbfaf0090be4a8eb", 0x87}, {&(0x7f0000000400)="bda3907f5b76d9222421c4a808a18c36a7621e5aac07a4cecf46c767ac71e3263f1179f19e4aadf8454e7679c9994c0ec6f22c", 0x33}, {&(0x7f0000000440)="e0f28258af190261704f1b0c2cb0428e3f5a49974b519ae149cf0e6dacd17ccf13f6f08f3d232635dc931ef6760504", 0x2f}], 0x8, &(0x7f0000000500)=[{0x110, 0x10f, 0xffffffc0, "427e5c85fa2bab14f8809b73d00fb67b42fc589a986c4c86b4864de9acfa7c9d899a598afccc603e13c612681533c2c2ba6fdbfb351dcc62da306e404933964d2d34e3c9b34b02c61a1e83796748dff4628fdf99b8562d8c0e16df239231f3fbf6f4123b671ee9e890da5134eea2a1cc22e0086659ec893785b5259f107c42c8ac0fcc71965a615b8726ce7ce3425c28935ed20d91a7d230067f1131ac5d89a0fdd2853a41fd6e718e5208678af940683d2b9c077f8ef24226aea648078d8ba5a40c19f830efd7d98a8afbdc46bdc1ff0207dc3140e05494e3dbb0fc4448e6cdc7f0f75e15baff4d4011a943e41c13fa7209b3612893838811779039"}, {0xe0, 0x0, 0x10, "dfad23abf6c9c921baee2d34b84e5e1fbc325cc3aadf34775cf44f924645594ec2fd25e806f73ab7081e5102cc67791acae0de12c6967e5f52ff6519e0b15998a48912b96b28c725d2a361c351a91ebc8f6014bab40d697f7167b682e1ff544c33eb9756c86b0457b071649c4659a4c9cb9a86a6da780da49f301186c07fd78656a5c3562f158dfce04b6567c12075ccde52dd94eabdef4bd2a091d00401cc984793504baa4d5890bb9cf55d7f4719b30cd7133d2078767c03759918df93faef6316d964b3cdbb786a560a9ad1a8592a"}], 0x1f0}}, {{&(0x7f0000000700)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=[{0xb8, 0x108, 0x0, "e9141823bec3a1da76b80c623ec91b9e40d8f9298f40f46c38b7a1b282e6c161fac8c0e9709978f93272e9f6674ee9cf20b610fe78221ea3abdeb60ce4b9ea33aadbde91abe9a346f5f773a40c33d83248f25ca59c41ffbc7231bd0d8364f89ebe278b6654fcdb96f9d2a5b3ea221522bd494cd4c9d087e0af2d841d20fbb4630f1d796ba0d2e872e43f746581f43a0bbe2742250408de60990ff0accf66599fec81f69ca4e831"}, {0x58, 0x114, 0x2, "30756c7892f871600d5206cf3f352f7169bc57fa2456a9306e3d7e4b8cb1910798e765029b9cb265710f1a18492555a27f38808426e8ccfe04c349fe401766d70b6702bb8592d6b0"}, {0xf8, 0x117, 0xf, "19d393084845b11663a12f2c245516922f51f4e2dd4305a3a706473a4758881cd267a31381be2f3e288acd7af2f8afc04a2403f40eb9a6b76751f1ab51f6f1520d05f953a822fff3b281da2a08f19890f829b5ef39db90b806a6e1e5aa1af0282553774cabc1058436657b10311e5b45011f878cc39bc66dd94f49da0ca86c91fc2c4b8b8f62fc7a144b46aa5477c82d9df8d078db7a2c6ea0463cd825a05df0e4e6f1272f8d50fecfcb73809edb8e402dfbeb415a5d9e1bc7abd2d2f14e31fbd8a6b3256e77d27836f6b71170be098ae5bbac729b73952fbdf04ed8603cb1319d22438dde7fb3"}, {0x50, 0x10b, 0x7fffffff, "fb1492c02a4aa57e28f88133e00e6326c16d8309cae37f8dffcecd3ad67b691e3d55a1d56db358feae743d092269438f145a54bf0918411f26ce4248ec33ab"}, {0xb0, 0x10c, 0x3, "234c22ba702b3bdeaaf57fd0546144029366dfbd66031c92a735e6a350596bee432caf5c32d2a06efb9b1959d3a4e6badfd3aa301d928b2eee5e44eb45985f43d11b8ef5bdfb51f975b9031557a86f00ea0b208eaf9fd829419b47b66448f52288e522b1d1e4eec7ec7f866046d28e2e35cb3d9fefa05922e43c11b4f76e8a9a0c04308b1cc4f4bde70d48c130e9691c1ec6170283b956e1aa8c97cd2c9a06"}, {0x80, 0x113, 0x673c, "c9ae761b8640b90ffdbc527d8a4e1913e8472e0dbdfba709001cd5745eb60939caeeae9d64f9c6d97fc33414745349ff13f1f7bc25c75f2c249a8d7bd4ed621f45609796da40a4bf1ba80124756c092f6ee39e5e4ec66ed5ffaad01a2a3b77b0fb0930062507a84d47"}], 0x388}}], 0x2, 0x4000000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c00), 0x4000, 0x0) writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000c40)="b1013fc0601adf2e1368f07c98c0a50ded1e9c6c751312513c81dbd819c1ef60b21c706b674954c0f7db5e2d93a8f2804c418ef9373f73fe1421761bdb86d427a27d388c0628b8384925f362f266ed05e4e9c14819727fbbb8684932aaa351b759ad7b22107ac476c48a57142fce44e543a606ab1873455b4d5309fbd4", 0x7d}, {&(0x7f0000000cc0)="66136f94d0a6a1d416787624a00124ebe0cd881ee58769e6099cfe29a2f4427633137a7eb50b9ce0fccf5fd26d8da532abe6ed8940b72461b5c5b0ad1bd99736001003aa536d1dc1d3470bdec702a88680d72fb464db8504f51d26f05914fbbf62da54851c2e2301b13a06150b74084952a76d1ced1a4efc12dff7", 0x7b}, {&(0x7f0000000d40)="376106adc6ffa3442dfacd4d7d28223d3b10d2710a58017f40ad715b5423276317854a24b7319f99b2359e5f3c4c0455a09a5531ecc4ccab4be727d699c431af3b9ab633e5de52a22db62ac37da8ed7bf4cfc3bbd70b31ede3980cf35611f47e95dc6329d406e078b650d7475e072dfc9dc7715dc3d3cb807aae81e41807b308f886808b5c6bf30e96ce416f04dadfc20abdfbec73b6675fd4d79f531866c5fa240928f181808c702175ea39271aed", 0xaf}], 0x3) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000e40), 0x80, 0x0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x5) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000f00)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000f80)=0xfffff966) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) syncfs(r4) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000001000)={0x6, 0x2, 0x8, 0x1}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001040)={0x204, 0x4, 0xd000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001480)={0x0, "95d66806694824a3435ceb403f79aced"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002480)={0x3, 0x2, {0x3, @usage=0x9, 0x0, 0x19d4, 0x3, 0x5, 0xa, 0x6, 0x404, @struct={0x800, 0x401}, 0x6, 0x0, [0x3, 0x100000001, 0x0, 0x1ff, 0x1000, 0xb69]}, {0x3, @usage=0x7, r5, 0x7, 0xd0, 0x1, 0xfffffffffffffffd, 0x5, 0x410, @usage=0x442, 0x4, 0x3, [0x2, 0xfffffffffffffffd, 0x0, 0x2, 0x4, 0x7]}, {0xc110, @struct={0x2fda, 0x1}, r6, 0x4, 0x100, 0x4, 0x4, 0x5, 0x8, @usage=0x6, 0xb, 0x0, [0x62a21bda, 0xd8d, 0xfffffffffffffffd, 0xffffffff, 0x9, 0x8]}, {0x6, 0x8, 0x100000000}}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000002c00)={{&(0x7f0000002880)=[{0x6, 0x80000001, 0x6, {0x100, 0x4}, 0x1000, 0x1, 0x9}, {0xfffffffffffffffa, 0x40, 0x1, {0x1, 0x9000000}, 0x8, 0xdae6, 0x80000000}, {0x7, 0x6, 0x7fff, {0x5c1, 0x5}, 0x3, 0xa00000, 0x5}, {0x200, 0x6c, 0x6, {0x5, 0x6}, 0x5, 0xcd, 0x2}, {0x642, 0x2, 0x0, {0x8, 0x2}, 0x1, 0x2, 0x2}, {0x7, 0xe, 0xb, {0x4, 0x7}, 0xc, 0xf, 0x9}, {0xf, 0x7fff, 0x3ac, {0x6, 0x1}, 0x8000000000000000, 0x7, 0x3}], 0x7, 0x40, 0xfff, 0x6a}, {&(0x7f0000002a40)=[{0x4, 0x1}, {0xd, 0x7fffffff}], 0x2, 0x10, 0x40, 0x7}, {&(0x7f0000002a80)=[0xfffffffffffffffd, 0x1000, 0x1000], 0x3, 0x8, 0xfff, 0xfffffffffffffffb}, {&(0x7f0000002ac0)=[{0x4, 0x5, 0xc475, 0x100, 0x3}, {0x8, 0xffffffff, 0x3, 0xffffffffffffffff, 0x2}, {0xe72, 0x4, 0x7132387, 0xa, 0x4}, {0x8, 0x7, 0x9, 0x6, 0x16b}, {0x7, 0x9, 0x6, 0x8, 0x8}, {0x2, 0x10001, 0x1, 0xe6, 0x5f10}], 0x6, 0x28, 0xd0, 0x81}, {&(0x7f0000002bc0)=[0x80, 0x5d8d, 0x2], 0x3, 0x8, 0x200, 0xffffffff80000001}}) r7 = syz_open_dev$midi(&(0x7f0000002c80), 0x9, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000002cc0)) read$rfkill(r4, &(0x7f0000002d00), 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000)={0xc8, 0x0, &(0x7f0000002ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002d40)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0x3, 0x0, 0xe}}, &(0x7f0000002dc0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire_done={0x40106309, 0x3}, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x2}, @dead_binder_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000002e00)={@fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x101, 0x3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000002e80)={0x0, 0x18, 0x30}}, 0x400}], 0x1c, 0x0, &(0x7f0000002fc0)="5005035762b0a0ef71d8fba6d9a1f61160a3704a87fc97414d2e2c6a"}) ioctl$KVM_TDX_GET_CPUID(r2, 0xc008aeba, &(0x7f0000003180)={0x5, 0x0, &(0x7f0000003040)={0x7, 0x0, [{0x80000008, 0x616, 0x2, 0xfc6e, 0xd28, 0x16b, 0xffffffff}, {0x2, 0x8, 0x2, 0x6, 0x9, 0xff, 0x9}, {0x80000007, 0x231, 0x0, 0x3, 0x8, 0x7, 0x1}, {0x2, 0x1, 0x4, 0x8, 0x476, 0xff, 0x5c1}, {0x80000000, 0x1, 0x7, 0xd, 0x1ff, 0x48a, 0xdc}, {0xc0000001, 0xfffffff8, 0x0, 0x3ff, 0x2, 0x100, 0xffff}, {0x80000019, 0x4, 0x4, 0xcd, 0x8, 0xd, 0x1}]}}) accept4$vsock_stream(r2, &(0x7f00000031c0)={0x28, 0x0, 0xffffd8ef, @host}, 0x10, 0x180000) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003200), 0x2, 0x0) read$FUSE(r8, &(0x7f0000003240)={0x2020}, 0x2020) ioctl$XFS_IOC_GETPARENTS(r7, 0xc028583e, &(0x7f0000005300)={{[0xd6, 0x8, 0x7, 0x9]}, 0x0, 0x5, 0x8001, 0x0, &(0x7f0000005280)=[{{@_ha_fsid={[0x5, 0x800]}, {0xffff, 0x13, 0x35d, 0x37}}, 0x2c6d, 0x0, ')@$\x00'}, {{@align=0xf, {0x5, 0x2, 0xa2, 0x469}}, 0x3, 0x0, '\'\':*\x00'}, {{@_ha_fsid={[0x7, 0x8]}, {0x0, 0x7, 0x4, 0x4}}, 0x8000, 0x0, '/dev/cuse\x00'}]}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000005340)=0x1, 0x4) ioctl$MEMREAD(r4, 0xc0404d1a, &(0x7f00000054c0)={0x5, 0xb6, 0x44, &(0x7f0000005380)=""/182, &(0x7f0000005440)=""/68, 0x0, '\x00', {0x9b, 0x2, 0x9}}) 3m59.700026234s ago: executing program 0 (id=1751): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r1, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f00000000c0)={0x8, 0x3, 0x0, 0x6, 0x6}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 3m59.699218435s ago: executing program 0 (id=1752): syz_usb_connect(0x2, 0x3f, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="04"], 0x9) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000200)=0x5) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x18b8, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1898, 0x3, 0x0, 0x1, [{0x42c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x101}, @NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "4fe40c12ac79694f45d37c56e4385c2ff5af182fd9bd8642f7e70914550570bdaa958bc2728e22c0fa400b46eb030d68e7bccfc694223c2d5a3562ee2521d355b022bebe7cf3be57c0c238fde10e16e466b0f7c8e538a3d9b7"}, @NFTA_DATA_VALUE={0x81, 0x1, "aa90d3ddbcc7229fc2bd8aa5f3896707916a046721c5dcedc8a458885b3ce655d4ddaee9898f04ba634e02d0d536b3759c74ff5c994c6f1273c1e5ffd742c0ef628b06c023b5c1500628785bd0c7b877fcd961e936c91636c01ceecc310345d974149ce21162d1c5a09188a639eb0245c954e3499ebb5eae82464cc6e3"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x39, 0x1, "00091d00df6048b811a80ea9c0a185de8cf2487cbac92d4bafff17ff7e1d194b1587820247076b456c63c3a717cf8a7c452eff2c7a"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf2, 0x1, "0b16d563ccab68ae3f7447e1e665c858d878a45c051310b5d7cf032c3a51858333dee6d38292e261eb0fd1df5dccbe2b3e41f429208d98d79734972e0e971016b93c725ce66f520e1aa82ff59502329bc5c3842e69423298ec58facf411c790f17491a92d30d3ecc08459cb20d6f6ea3c72e383b72a4106ae67d0b64d574c3077770b4431c3924a97678b921d03129b3f04b11f5536d29c1a93e89090f0a51433820c45c9e04924b6d822785aa93cfc0eedb2f1a426141b651d38ced4e75af7a11597b5fce57c03852cf1b511990d6bfd12f02e86f3b5c4a2d96a387a026ac21eb08f2b7c490a3f53f2c6cf17203"}]}, @NFTA_SET_ELEM_USERDATA={0x7c, 0x6, 0x1, 0x0, "76d88eec16a02307c0eade012535542a88986fc5f48e5b1104ef7c855b9491a051192c5ed9914fb3d58308783ac1da32559a8c8dd22edaed8ac449eb3ba358be4eb4b42a68b808a481121ea212aa1d9c92fa8299fee4cdc38b55b072b87fbcc1208d6a14f46c44f28a274f8aee8cf8f4e8f380732a11e432"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_XFRM_DIR={0x5}]}}}]}]}, {0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8d, 0x6, 0x1, 0x0, "09031a3f7f871999f3c0b0904aa181e36bf3ed3829652c18f49da6d11f02738fbbf5be4a853c878a84144ae2b0aa486c226e8ea719695cce22333aab2415e31ed3000735a9b67b035c1e3e478908e73ce54cf1af3eb5f50d9bfaf7bbd7a9a1de46a3050149a3e1244d4933d08cb6dfde03f3046866284da59cd26078957a49745e4b95b5141301d2d9"}]}, {0x13d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x11d4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x11a4, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1194, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x1154, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "c6b51c2b1b251801bf9eab07dec90f2b87ee5407194fd3c68ec5ccbc19c66ed6ab694d21dd13a7c195279241acd4f41d0036aad3d59b0e167b7b9b4b74415d46e7a79a05ce6238c2c53ef8fd14d2b282bc3b0fb1b1cd8a3fd1a6e3b7cb428ca97df74734b77051156202702495bffd3e1c44f4180b48795f43642511ecffbdf5fb7bf68f18d6e07cae997a7cd61c71a31b594e398d3bd58c2026b7c46532697bf0794f646117f9a3ecae7f674d971e720ff6734ca4f327288e98ac9516a654dc81f17f064c546586b1629dcace73fcf7ba5aa9a26f13d7c856e71412aec17f1562c748e2ca709ba073a6be157931986a5078f1ea9f9d1fdd5a582349671db97718ff10785fe0ecc31314770d7f52ee98995fb300f9deb06eb231572bc3a0e99c959be3c14c0cd9fb1518b359b40eae61561f945f060f9abbe412a39c1801d7bc7f8bb5ea4688184a5950991f515670e4557bb3a96494af7a875dcbb3f29729ab41c223c3bfb3d621a24b8e123849f427b5825b4bc32febe7d4957078106c2381da81aaec60f38bb988eac8fc88b5da00ba8c8651506be7dc58728aa3b8df1f8be29be068d381fb861c6ac838a8d02557b319df7c7d55b49f750cb0f3f7098cdcbc9533fbd72907710a3e43f5013914e3839b5adbd56f88a032d57881e9a274042c641125a6cc31150fdff0fc4e940d71c5a17c3def656b925c4a4f60f4bfd59d6c991cd20eece752aee60f03276a10bee07e285e1efbb34d3ca88fc081de9e844ead73b5d3d2b81228304e7859bfd7520ce616a1866977077f69b7b29c84d19a8012e445f31e2007a489200207db66ab643fe2f155f87d8aafbcb34f7cef6d379972a6cece7d966e183365aa7c02c2b09995ca3d12937a64e66f07a8d8a61fa09103a4385f6bf0810f67d61d4d048a24b885547f876f0a063523353c3ee6fbc2a8549155b3892dac1b51709e756b61dcc7f24c92355ec1cc2c0021937b357aa34efb4e96ecce6b17a2e53045b2f547a921b1ad3f4350884bd62f5030f4bf2f0f5e792a73b2b6eb373aad514e9d5a458f5d7b9d9e607b58523cc7a3552eb810fdeb1505de54e8085840dcb29df71232e594dfe5c1c6361476eb5a7b25a97c4692af5f8574b3848264b0da735e347ed558def850e3c8aa9a0ef93c42fd39d9d53a1a54c8e011210aebae3d7f30e434ef211371fd83e313fb7b60c7d2871fc1527eab75b841d242bc919e27c933a26b8806964d73a0ad7eec499f6f5e294b669f584c7c57164aec8f907d9ac8bcb6870775bf2562aa48f927d593b204ee1e24c109b06d6f9b08a0ba6357ce438792afcb513d5bfdf6ea6203b50ae70463359f16a29eeab50c460c7f6318bb125adc6f5c3026a94712c5d7b540ac135e41b2d677212acb9e0e33cf0a11359e2cd9e5cfc0e99be5cb7bde999244a9c4500a2dbde6282a3ee3711f5c0175bc04ff4c26540fc317ca92823309887e64f1cfaaa683efef7ac8dbbdeacea81fb52e4f7d5ebe5fca2d093a5be43b24b43a285c5d00a88202bcf01df6affabfaaeee9399091464b9bdb9792b8457db46636fe9e74f0b9d25bbb2f440b70cb65a9616fcbfaf2307f32fdd3d3d63d8590f83a2de84b1140efd6b40a02467266911479eee7b8e822b9ab3e621ddd7fc2f40ef9354d654187218788a36b56c86901cb5fb4b50bca84d02649925fc594862a6a200a1ebf7600e665c3e42acc7480d11ce96f918165f850b0386828c8a0c07166d32063eb00fb0fed33cae2a67db659c4a78230ac453cfa2fa77f4b267d3dd53f346adb6abfe191693e2d3b7e040b46ae951a63c6758f99ad1a76d019cfe0282e76de977b81a1f75dbf65617e519f202b649537829fed2d10a128071f0d73197e4e055f443d8dcebe44587ced11cf725f618c76fab74638e07d5a8f7e71084cfc71923f6748a14437b1e175e7a04ed5f443e99b9587229e673ba0f00b4284415004dd95757639c22f928348865abfea40d3ae8c1ccae799cece04edcbf10c748a51bbeb2092be5cd30006422fff89ada24c7965319931a935f985274e69c4e46193323bd4cc1c037c9b01d431085017c891ea3dc12aff067db23684d84a60c9708b4798dde804509c2d8f7f72b52f50ef019cdd19720871cf1396752aa0a48cec77ab714fd10646aa9d161b53c638a12c0e77f16e1a8a32cfc43c2325e107c150959a7d99668b313897d08316254f4441e9883874eaded11e070678275607dfcd3ec3d6ea58160f57dc3f363aee18844f1d7bde4513fe7769a30fd35a87a4141c24b296a4b79d6e631e61cbafda737e090071de66bb57655c014364a8f129cc3ae5139341197711182f165edad9eaa4f67f545bf333d604f038cdde2cc17f7425692f0b8dc54dea56beecfa9cc5b1b762748a4b7d67dd5a376a92be88adb3f0e4a1eaee55ea6b8d64643e919719ce6d46d15e2c2e044c4f014f6ed712b7984852f679364f0219d5ba87b57df63edc75435e730081ffa1af8fff4a6dfe34a93e4a244e011ea19490f9727eec3d94a170eba12db73bd4a22d8f3dfddcafdaf1a2c1372c37686e00eff6b4ef0897a5b223aac0271be391b63b6aa1bf9923d797b517614c73396ffacc05e8e9adf5deb0cc86506f6f1c265346b6d72765b478c457b9baf9e59e26a567b696de8ed766ce52a93687790c33514b89daef7a9b9003a1f4e798ec6007b3b525c263c1b547115430cf1d95332f4687b24137366c4ef369f2fcde98988102944848b5baeffc33ded5b1e029c3d3fe2d67b04d6a6ba512ad29f4b4f2941eac140b19df7a5fd682a833cd3c80757889d2c8055549d31c5a1f712466d4a368c77be28498f431d2a1d91b00839600379be8a4bf74806e03b267c7fe4a9492405c74af96427a6d88e24c8ac48a7f9a504bc98a7f99cc56017803031ddd018458d81ec891122ee4fff2b933ac75ee6167757da22c39c753f86f23aff2590404e8e25268fa20324e532786b6b33e66e641e1cadf9b5d144d9a6a9d4432c1be40236dfde4cdf27b2cec19f16531ab67ff2959742bf2ba036fdf281ee844b420df986589e35a5d059fead4448b7c200cd73fd8d1bc2c3a8a18bd27df92f3a607ee4a3e9e64f177712584d243876ddb23ac96f96b37581c104294114f03884884e16142614cc87cfd44df231bad9ad31aaeec8408164e7d886b89a3bd8e46617e99ec89a102df633023bdc0519ec57f5a08796cb7b4af63c5b5b146c7424b0c105b4d21f1a690b911461fbb15db524ac7fc709a93df4255ca282178c6ed75b2e06906ddaf2ec81031e5256fbfd5624a0b06d1a8d96e366824e57d4844b0ace2c5f07b3d300557aa2f052f6eb28123f2da04a5977151b3671f66f79172ab04b55d077bd1db3c5e889ba8ef0a563e71eafd93e250fd3ae1aaa2561d8edb28926814d5001850291bfb51a92203d2df0f5f98b296d4cf2ba2f380dd36a0eca5d8f0597cd20bdebaa6d92f69c889ae2f0263c22e4190f5758c572ce9e9db8bfd80537a4a51fdaf0216e6f47710e6ba868a0155b832accc3b3b42188d478117034587332162a1aaca7a1032d07dddd38cabdc94aedf743ce23915cf7e1726b34e7c5e18dc0a0db5006a6a53c2e98f1c782274cfe4597b88a2f4fa25b658cce40a9044dee6a884a5acbfbcb4a1abc9ac9329f52758f2d9a5b48312e44d4044e0e33b36ed74ce4c8a5e062b9af6875764453442e3fc8b63e1ef7ad81833b89735b1cbb8851a601a4707932ed5a748441c3635844fad52455b5bd62ade9d21f20d741b736f566b01188e4d108fa148d7c2889e81ca7c4b7eba7c62e24e4a1945b2c43814638095e83dca4bd542d404bd57a0e43ed79b5e9ceb7918bb26cad365cde0f1c0a3e59c3e74c36808831803da41bca8e753a3a3c629a2bc1a56d39f2fcffe3aabe1ed1ebc8f269841e203618c0c9424525e72fa345ed6040529f0f75c70c732b3cadeed7ed82e5aaa3b53505aad212a9f0aaed576450d1c7aace7d33992a4c1a7553026bac7511ff13f04d9737a7fddaaf2ca6ab09bf42a47273e446858f3f5a88e14e294dc8518b336a20d92e2a663963e66e086013ac2cbe04b3d4e99af51449e301d7d0a71a88b1e37efcd7287fb92b4f5b4f4f98a5d5e57f6200f3191e815ed568b0273246b0810040ce1c770be277a40ff456f4ff771f50cea8d876f6a637145b97b83122792e87eb8ccc7d6b712190918063af1326a3b3a6576685c554146526c39d94902b36315d42aa33ecbef5486359979566d0a5ea0a7de03d424bdbd54bbf3ef459d0ec378d6710edf5ed25e77c1eee7321a191e19a44e32e5857ecf317ed8ee05af346ef179a58b722af5e10b6fe2f364868694242fdc572e74a4e95bac84785bf410f1bcce8dbf1da6176088dcf3f50394387e8685f077bf0611cb556c157a15045d18a41b18f403cf89566e881e77159be7314dc8c1e15e047b72497495866ba4158ecadb59c7bc242128f8aba620ff6bce427604d3d803ccda795c795aa1b84712ff02c0cca35b86106ee03030b7f73650555148edc403a6ac9b488d89a3767a92687d644ed2bbb24d5ffda99a6afeea3fc6a015ed7d938e3c2d7a23600ece1f0712847e81ad9de0a5ef9997c894b074e1508508e29ebfb23a45bf884e28c666fcaba6776966a155ef3908d276705127ec58ddbe893647f4c253f360feb833075ded23d6fbee16245c192dcd695206c0d6fe425747867c33ceda7d4ae4a65b6c099f98ff70980015c8478d22d62735754ae490eb9d8cfac988047e456c1a8e45773be01392859b126584c689cbeb7f1a2d4d10018cdf27b79a6843ec614dd1c0d63b82a876e20bfe0e2a48bfb9a3a3e650fc61036efe89647a514fb373f840f0aad31cea7e53b5adbea5e40d154ecb006f50446a18c09803152450740cb6cfaa6df263e42a942799e5137bce8ec465425bdda5ccfdfd2400507e7c7bb40b13890977b56e887579264331e26e1cea6b2d77fe3294af1295b3cefc7a9c0bec00b885e55d66cf525ce62c7b4404f79d1f385c099534ffd9d104c635f284558997e4106b11a9855fed590dcc6bfa9befea9e4397529a3e5844576baf8567a6b254ba24ecd36cfb86526b87551017c43a1365cbaa47760245bdbdd31c0381121bc44439c3ba02fa7cebcd2800c56c2c9f34a76490df2f45770a19e196029e77d09ab3891fc6b68cfe0a1d98a6d726e0c6d35855fa6a5effa557afe86ad6cd381597b4d70dcaeec38ca5a0c4022e42a9778c786f31590d613e59c6791411f9882b522818146b5c5f1c90225a84ac6fec2151b7dcbbbb24c58998a30c2e871155fa687bd025b9fe93ba224528492a239bb377e2cc7f7b89468b41539f9fab3c10d5327d2c79befe370a99a621ae2cab530223510ed62d4b2bd3f908817508cea86e17b1a0d96de306bb8b1f64c4de8def5374d7aab181ff2719ee2a8787efcb096a0ff1b0c816d347dc39e94605474efb5727350ba9f4b60aba388db147de5e3f8ba010117121b1dda49aacf7dbee7af26343b09d168144384170ae201b61c42460a692948767db1d5b9c67320f646cf07e9171b2cb770d3c0932d9f716f0bbcd3c33ddf8edfadbf700ba1ff7758dadf46e8ae19868f8687bbd562da443479b5c37bc03b45045eb92fd51be4b3f9ddce4074580752815f73c87d32a8a9e710ebdbee227f25f633207d187a7cd55ee41b4f9e0b977312928fc1d1f9c9778fc9e1bdca322b5e86afadcfc3900f883adc18adbd5a1ce71e3d7bfd00eafca7223396123ad"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x20, 0x1, "aec007a3269b7e7a8b16fcb40ffeea29e722a53462b30717b8760a1e"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_BITWISE_DATA={0x3c, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x194, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc3, 0x1, "6d00b796a4de71fca0608890ab26e5fe8b3b806752d33e5d1c72c03896fa3647abd57fa678da0742bbf9499626d48a234b2007e68e6b869842bea3d6d29070487321a9dfce5eeb48af82880e407a465277b319c238f1deb5a98bdfce37bc1078c64064a480dbdc31868c50c225c585923e3742f1c81ecf22fb1b2de72edc600ea1fbb44c713fdb06d0c7acd1d952ba94b2b745ee28cd3fdb2ecf408e752250318c50736e3c7585e113be4849d6d656f2b16a50f13d768d630c2193dce14696"}, @NFTA_DATA_VALUE={0xcb, 0x1, "09eea5ffa251f1e420ae772b6077fb14c2088699bd8ae0b89610da20bb6e67e0aef92966a1ac8c5772c0e52289ce0244528c4fdecb0005c5ad94635c4c1e0627aac4814e12d2d1c02b71a002c292b1f9799cf9527b4a08e41a62d905db7b309d895f3a2b853874b60d393f4fc5b39ab4d6c6ab0acc1be2b688644f5bf816b55f66c905fc8e8623847a10010e2d9892a25b57baba8800594040c7fad4f9e491e5418fe749a9a6c3bc4c1c7ae622778aa85d4333123d027142952689d5444354fe7b9a0289bf35ba"}]}, @NFTA_SET_ELEM_USERDATA={0x4f, 0x6, 0x1, 0x0, "bd3b2d53a5013bb012927a5dfb0894250345060a965e62e86d15632cf9e432c8ee8e39b2a8e37f65eda37c76c030567c155c8f2fc19fc9cf1d638ef326e6739d6a08ddd6ba82e929d77eb6"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc719}]}]}]}], {0x14, 0x10}}, 0x1940}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x424) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 3m57.918617857s ago: executing program 0 (id=1775): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000380)='./file0/file0/file0\x00', 0x1) 3m57.912757227s ago: executing program 0 (id=1776): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x2810) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008001100010000001400030067656e65766531"], 0x50}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r7}, &(0x7f0000001a40), &(0x7f0000001bc0)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000009, 0x12, r0, 0x180000000) 3m57.75040641s ago: executing program 0 (id=1778): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYBLOB="f5af24bd7000000000000700000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 3m57.708537343s ago: executing program 35 (id=1778): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYBLOB="f5af24bd7000000000000700000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 3m16.912085462s ago: executing program 5 (id=2232): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x926}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='exfat\x00', 0x400080, &(0x7f00000001c0)='discard') r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r8, &(0x7f0000000600), 0xfec8) recvmmsg(r8, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}, 0x8000}], 0x1, 0x2129, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000000)={0x3ebec579e50f574b, 0x0, {[0xb5cb, 0x9, 0x0, 0x33b5, 0x1, 0x3ff, 0x693, 0x4]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0xc0046209, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000005}) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 3m14.331814571s ago: executing program 5 (id=2234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x62, &(0x7f0000000200)=0x32, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x1, 0xfe, 0x2, &(0x7f0000000000)={0x22, "271e6c5d59ed71c24ac5b072d56010b62db2500454e1fe22469c29274cf254a6da"}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRESDEC, @ANYRESHEX=r3, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRES64=r3], 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) syz_emit_ethernet(0xae, &(0x7f00000000c0)=ANY=[@ANYBLOB="03a4ff78dfa874b6b1aaaaaaaaaaaa0180c200000096dd60081f2000783afffe800081cd32000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000004000001260004000101fe906d17efe3"], 0x0) 3m14.330966419s ago: executing program 5 (id=2235): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x4, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x2c}, {0x0, 0x0, 0x4, 0x0, 0x8000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d4, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x0, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x491}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0c00238ca6aac5bd1f0d2ec4"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$inet6(0xa, 0x80003, 0x6) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x4, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x2c}, {0x0, 0x0, 0x4, 0x0, 0x8000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d4, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x0, 0x7}}, 0xe8) (async) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x491}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0c00238ca6aac5bd1f0d2ec4"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) (async) socket$key(0xf, 0x3, 0x2) (async) 3m14.201870039s ago: executing program 5 (id=2241): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000300)={0x1, 0xff}, 0x2) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000000080)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x102) 3m13.971211701s ago: executing program 5 (id=2244): r0 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e8f7109242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc24202fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2b30900000000000900000000000000338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945d59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c23be434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1a44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000", 0x1000}}, 0xb6b) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000200)={0x1f, @any, 0x2}, 0xa) shutdown(r3, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 3m13.801564327s ago: executing program 5 (id=2246): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r1 = socket(0x2b, 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000002fe719b73e98eeb71464541fb3e4d2"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e20, 0x3ffe, @loopback, 0x8}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpid() fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x0, 0x2, 0x7ff, 0x9, r5}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000101478f0f2c057a972e9687400010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a010300000000020000000900010073797a30000000000900030073797a32000000001400e745b7000011000140f24e5310cd5638b8241601f932bae70b02c91e366deafb3dace63ceaa9ef85a45e70954a6b04d7815bccdff29b84022b85476a5a65f2d46c84bfb384a92dd6a156ecb20a5275968874a880e7a3907cff919d10e6632c67287554887020e71a6650fdb6189ef39d3828a427a3bb5b157fa8ebb17e10246f14b7"], 0x7c}}, 0x880) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x8, @sdr={0x3432564e, 0xfffff001}}) set_mempolicy(0x3, 0x0, 0x1) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x15e, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d10c6a41d1000000000fff50000000000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 3m13.727130016s ago: executing program 36 (id=2246): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r1 = socket(0x2b, 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000002fe719b73e98eeb71464541fb3e4d2"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e20, 0x3ffe, @loopback, 0x8}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpid() fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x0, 0x2, 0x7ff, 0x9, r5}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000101478f0f2c057a972e9687400010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a010300000000020000000900010073797a30000000000900030073797a32000000001400e745b7000011000140f24e5310cd5638b8241601f932bae70b02c91e366deafb3dace63ceaa9ef85a45e70954a6b04d7815bccdff29b84022b85476a5a65f2d46c84bfb384a92dd6a156ecb20a5275968874a880e7a3907cff919d10e6632c67287554887020e71a6650fdb6189ef39d3828a427a3bb5b157fa8ebb17e10246f14b7"], 0x7c}}, 0x880) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x8, @sdr={0x3432564e, 0xfffff001}}) set_mempolicy(0x3, 0x0, 0x1) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x15e, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d10c6a41d1000000000fff50000000000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 1m34.934879089s ago: executing program 1 (id=3199): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$sock(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x200) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x101) r5 = socket$kcm(0x2, 0xa, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012"], 0x50}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="03000800010000000000140000004500003814000000000190780a010100ac1414aa040090780000000045000000fffc001100110000ac1414aa7f0000017f596458c1e3b6dd5b01be092ad6e1ade1cf1d9053e2cec6c51b8a33561c01"], 0x46) 1m34.817483174s ago: executing program 1 (id=3200): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600140000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x0, 0x10}]}]}, 0xfc}}, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m34.69699812s ago: executing program 1 (id=3201): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000240)=0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = syz_open_dev$mtd(&(0x7f0000000000), 0xa442, 0x2) ioctl$MEMGETREGIONCOUNT(r3, 0x80044d07, &(0x7f0000000040)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900010073797a30000000000900020073797a3019"], 0xc0}}, 0x0) 1m34.636026549s ago: executing program 1 (id=3202): sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000000) (async) socket(0x10, 0x3, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) (async) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) (async) chroot(&(0x7f0000001140)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085000000c0000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac5a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3f0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b251fb555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce5e911453b9e35e5b2a0390ebeb084988880a7b07435188680ce166b8858f00876c191fd4df2c32440ddcce4410199080009ad86d35168a442cfb9d399172c436a744649c810ce30505348d6f7bc87f0c202ab626acfaf0c732a3536fd46796b1bb6a2217834db8066789735a67dc95c679d02e0eaf743911bde21ffe0b6ccda73dee5694020544392d0538a8075706b26b2680555bd5dd1b4e2f59275c02372ff99d5f1066d018016c43541c6374be429d483f513c84a7dc1aced670625a93082a9bfaa86b2aa73ada8945b088d9ec0aa549a8ec8e50060fcace5e89ee1ffc1dc0f8a87"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) 1m34.517373541s ago: executing program 1 (id=3203): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x700}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000081, 0x0, 0x8}]}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x8, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) close_range(r1, 0xffffffffffffffff, 0x0) 1m34.516492783s ago: executing program 1 (id=3204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000080000000000000000000004000000ffffffffc300000000000000950000000000000036aad99f06afbfb984779daa401b5481b117a419acaca69fb26abef4f60f8c3e8433fd0d06b998935c9c56ad0bce0e2d24a996d10df8095c0ea673767192e1d30bb3"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc, 0x2, 0x0, 0x0, 0x40000000}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1b, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="f8ff07ff03000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000090000000400"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x6, 0xa, 0xa, 0x20, 0x10}, @map_fd={0x18, 0xe, 0x1, 0x0, r4}], &(0x7f00000001c0)='GPL\x00', 0x1, 0x99, &(0x7f00000003c0)=""/153, 0x40f00, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x6, 0x7, 0xff00000}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[r5, r6], &(0x7f0000000680)=[{0x1, 0x3, 0x5, 0x6}, {0x0, 0x1, 0x4, 0x7}, {0x0, 0x5, 0x8, 0xa}, {0x4, 0x3, 0x2, 0x1}], 0x10, 0x8}, 0x94) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x4, 0xfff1}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4801, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x2}, {}, {0xa, 0x27}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x1b, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1m34.398707821s ago: executing program 37 (id=3204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000080000000000000000000004000000ffffffffc300000000000000950000000000000036aad99f06afbfb984779daa401b5481b117a419acaca69fb26abef4f60f8c3e8433fd0d06b998935c9c56ad0bce0e2d24a996d10df8095c0ea673767192e1d30bb3"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc, 0x2, 0x0, 0x0, 0x40000000}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1b, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="f8ff07ff03000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000090000000400"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x6, 0xa, 0xa, 0x20, 0x10}, @map_fd={0x18, 0xe, 0x1, 0x0, r4}], &(0x7f00000001c0)='GPL\x00', 0x1, 0x99, &(0x7f00000003c0)=""/153, 0x40f00, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x6, 0x7, 0xff00000}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[r5, r6], &(0x7f0000000680)=[{0x1, 0x3, 0x5, 0x6}, {0x0, 0x1, 0x4, 0x7}, {0x0, 0x5, 0x8, 0xa}, {0x4, 0x3, 0x2, 0x1}], 0x10, 0x8}, 0x94) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x4, 0xfff1}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4801, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x2}, {}, {0xa, 0x27}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x1b, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2.753991623s ago: executing program 7 (id=4117): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x200402, &(0x7f0000000040)={@align=0x100, {0x4, 0x8, 0x1, 0x9}}, 0x10001, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x10}) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x13c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20044800) getsockopt$sock_buf(r0, 0x1, 0x5, &(0x7f0000000680)=""/29, &(0x7f00000006c0)=0x1d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x7fffffff, 0x0}, 0x8) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0xffffffffffffffff, 0x9, 0x10}, 0xc) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x20, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0xa, 0x2, 0x7, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0x4, 0xf9, &(0x7f0000000840)=""/249, 0x41000, 0x20, '\x00', 0x0, @fallback=0x20, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r0, 0x4, &(0x7f0000000a40)=[r0, r0, r6, r0, r0, r7, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x3, 0x5, 0x8, 0xb}, {0x0, 0x4, 0xd, 0x8}, {0x5, 0x3, 0xb, 0x6}, {0x3, 0x5, 0x7, 0xc}], 0x10, 0x400}, 0x94) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000b80)={0x7fff, 0x8080000, 0x1, r0, 0x4}) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000bc0)={r0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000d00)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1b, 0x7, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x1, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x3}, @exit, @ldst={0x1, 0x2, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x8}]}, &(0x7f0000000c40)='syzkaller\x00', 0x5, 0x42, &(0x7f0000000c80)=""/66, 0x40f00, 0x1e, '\x00', r10, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r0, 0x8, 0x0, &(0x7f0000000d40)=[{0x5, 0x1, 0x2, 0xe}, {0x2, 0x1, 0x4, 0x5}, {0x2, 0x4, 0x0, 0x8}, {0x1, 0x2, 0xa, 0x1}, {0x2, 0x4, 0x1, 0x9}, {0x0, 0x5, 0x6}, {0x1, 0x4, 0xf, 0xb}, {0x3, 0x1, 0x9, 0x3}], 0x10, 0x80000000}, 0x94) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r9) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8f23b595ddce1a0f}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, r11, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb8, 0x7f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000fc0)={'wlan0\x00'}) sendmsg$nl_netfilter(r0, &(0x7f0000001280)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1c8, 0x13, 0x2, 0x301, 0x70bd2b, 0x25dfdbfb, {0x3, 0x0, 0x4}, [@nested={0xcd, 0x4a, 0x0, 0x1, [@nested={0x4, 0xbe}, @typed={0x8, 0x11f, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="573242dfa47f5060dea9c75e1e21986eb1cebe948a401638f6ecee7706461a1b417e6efa12b7d9f9d1316de194128af967577ecd69ef3d0eaedcff76d2b06bbc3d43c27a08088abbefdabcb2d78fe4f712615085bbf043b83208dd334a921e6513b50748fd895cfca33d4b63b20ec52bcc9103ea16434f2d56007b07d6aa9fccd2698cd50827f95fbd70489b2a624692560be69d9c278eeb40c27f096085f416d12c9329b0a09a6c8bf637b263474e10c82e812409", @nested={0x4, 0x7e}, @nested={0x4, 0x32}]}, @typed={0x8, 0xa1, 0x0, 0x0, @uid=0xee01}, @nested={0x14, 0x15e, 0x0, 0x1, [@nested={0x4, 0x9f}, @typed={0x8, 0x35, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3e}}, @nested={0x4, 0x92}]}, @typed={0x8, 0x110, 0x0, 0x0, @str='^+)\x00'}, @generic="4f4d0a61eb906aef44303b51e8c5d50153d6d1ac83dc4f5c70d5574967c4a88f98b381096d35bf8158ed4b084c3a7e218ce545f4f5cce985a4fb5adc0857deb78143aea365baffa7d3f6116013a9291ed2a43634ec105bfbd4c7413542bb4257bfd2ebdee99fc41989d9947bd94ee2a1a3b3954d85cb9f17c9c5fe2a71c8f606b5459a0d2922e80c457a8a8fa78b634c40a4626d3f643ec176c44baceb978157c79d15f28815853ba50a2d63444e6a28e37db4b6a6c242a1bce070", @typed={0x4, 0xca}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8040}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r9) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xd0, r12, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000001500)={0x3, 0x0, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) read$nci(r0, &(0x7f0000001540)=""/209, 0xd1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)=@o_path={&(0x7f0000001640)='./file0\x00', 0x0, 0x4000, r8}, 0x18) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001a00)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001840)={0x144, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.561774441s ago: executing program 7 (id=4119): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x6200, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000540)={{0x8, 0x2, &(0x7f0000000480)=[{0x2, 0x0, 0x7}, {0xfb, 0x0, 0x9}]}, 0x51, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f0000000580)={r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x28180, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, 0x1, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3e}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x40000) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES32=r4], 0x94}}, 0x0) creat(0x0, 0x32) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) socket$packet(0x11, 0x3, 0x300) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000005c0)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @generic={{0x13, 0x4, 0x1, 0x4, 0xa1, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x47, 0x3, 0x4, [{@broadcast, 0xf4}, {@loopback}]}, @timestamp={0x44, 0xc, 0x9, 0x0, 0x8, [0xff, 0xa]}, @noop, @ssrr={0x89, 0x13, 0x43, [@remote, @local, @rand_addr=0x64010101, @private=0xa010102]}, @ra={0x94, 0x4}]}}, "d184154fef4cbb835a66930ff036d41aca8f7ac1f3487259e2175aaf9b9c307f1e2d14f655d84591f6b07c588cd6e53ca59d279971d6af2400911cf7548b442094509212d90dde4562284570606b1ef887ae96a9c2"}}}}, 0x0) 1.632268939s ago: executing program 7 (id=4130): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) mount(&(0x7f0000000080)=@md0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='smb3\x00', 0x208001, 0x0) accept$alg(r0, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x40601, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x5]}, {0x9360, 0x0, 0x8, 0x7fff}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x5bd}) r2 = io_uring_setup(0x748, &(0x7f0000000280)={0x0, 0x29b6, 0x200, 0x2, 0x156, 0x0, r1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r1, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x11, r4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r5, r2, 0x2) read$char_usb(r5, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="70000000251e00000059001a80c26e7616c1fe4af939d097333a747a1f9b729d43ff6a950f5d527e262491894c42363ae8f70ff33a2f96b6e38af4b80ae841ba327d12238d00d3b6ba6b95fa7766cca2047d85f33245ab744326748c272b01b00069000000"], 0x70}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) 1.04907008s ago: executing program 8 (id=4140): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_proto_private(r1, 0x89a2, &(0x7f00000001c0)="d73a") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000ad00000095", @ANYRESOCT=r0, @ANYRES64, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xef) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x8, 0x3, 0xffff, @vifc_lcl_addr=@multicast1, @private=0xa010100}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/240) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8) fchdir(r7) mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(&(0x7f00000004c0)='./file0/file0\x00', 0xa003, 0x3) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000340)={0x1, 'erspan0\x00', {}, 0xfff7}) rmdir(&(0x7f0000000280)='./file0/file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 912.135066ms ago: executing program 8 (id=4143): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01ffffff7f00000000006700080008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c4"], 0x30}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f00000004c0)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@bcast, @rose, @null, @null, @bcast, @rose, @default, @default]}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/231, 0xe7}], 0x1, &(0x7f0000000400)=""/152, 0x98}, 0x42) 862.183382ms ago: executing program 8 (id=4145): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$tcp_congestion(r0, &(0x7f0000000180)='scalable\x00', 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x602c0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000100)) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, r5, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91, 0x4}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@local}]}, 0x28}], 0x1}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x6bf1c2d5adba8c32}) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) close(0x3) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = socket(0x400000000010, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xa4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x2c, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket(0x10, 0x3, 0x0) 862.077398ms ago: executing program 8 (id=4146): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x4, 0x0, 0x1, 0xff, 0x0, 0x1}, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') 779.561909ms ago: executing program 8 (id=4148): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x4, 0x100, 0x81, 0x540000, r3}) (async) signalfd(r1, 0x0, 0x0) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x8, 0x2, 0xd, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8320, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x48000) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000001c0)={[0x85, 0x6, 0x0, 0x0, 0x10003, 0x3d, 0x400200cc4, 0xffd, 0x4, 0x9, 0x8001, 0x4, 0x2, 0x800, 0x6a, 0x8d], 0x8000000, 0x2011c0}) (async) r9 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x9, @vbi={0x9, 0xfffff2ed, 0x3, 0x59555956, [0x9, 0x4], [0x8, 0x1], 0x108}}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) connect$pppoe(r4, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) 652.259923ms ago: executing program 9 (id=4152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0xad, 0x2, 0x1, 0x0, 0xf7}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000480)=ANY=[@ANYBLOB="89000000060000001906000000000000030000000000000033192aac706ea8276e88955e00c26efec603d1a8156612f34434a8fd35f7bc979fe501f2ca4c74be7717e35152b8834c2d14c130829186b627ad684b2d426b705333a5d9d06e75adf843403a7c6145dce766d821105fe7951e7d0000000088702a6d16233ca035556560065edc979d1078b1221c00565a43aa80279f61e327b22ed45ef90059eca98f6575d3641bda6b7f6788836dfb1138d82383721c1711efee651038669d22086a754fc8a1a9d2bb24e11eee"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x60) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x1, 0x0, 0xf, 0x9, 0x2d, 0xd, 0x6, 0x3, 0x8, 0x8, 0x7, 0xff, 0x2}, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x8882, 0xa1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x7ea00, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r8, r8, &(0x7f0000000000)=0x8, 0x4) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466bfbaf80c0cf2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601800000", 0x69}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x8) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r9, &(0x7f0000000180)=""/23, 0x17, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="66ba200066b8000066efb8010000000f01c1c44265b7e1c74424008df30000c74424020eec0000c7442406000000000f011424c403b96dfb00c4e10ddff1f3450f5846cf0f20e035000002000f22e0672e66400f38819e008000000f20e035040000000f22e0", 0x66}], 0x1, 0x11, 0x0, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="14010000300001000000000000000000010100800c00000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b355c72dc91265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec5875470100000050351dc076eb43d9621dc08cfa9c1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad75475ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820000000c44f438f363e3fbbce8ac4b8df1ec3e4a9a8403061b0afbda63b0dc34ef7fa49ef70e7e97a6b87b"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 652.093289ms ago: executing program 8 (id=4153): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03daa0f4bd00", [0x7f, 0x9]}}) 491.466955ms ago: executing program 6 (id=4155): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1004007e09000000004000"}) ioctl$TCGETA(r1, 0x5405, &(0x7f0000002680)) syz_open_pts(r1, 0x0) (async) syz_open_pts(r1, 0x0) close(0x3) r2 = socket$inet6(0xa, 0x80000, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0xe35, &(0x7f00000001c0)={0x0, 0xb4ce, 0x800, 0x2, 0x10}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000380)=@in6={0xa, 0x4e20, 0x4, @loopback, 0x5}}) syz_io_uring_setup(0xf00, &(0x7f0000000100)={0x0, 0xa6fe, 0x1000, 0x3, 0x200404e}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_setup(0xf00, &(0x7f0000000100)={0x0, 0xa6fe, 0x1000, 0x3, 0x200404e}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x2}}) (async) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x2}}) syz_io_uring_submit(r4, 0x0, r9, &(0x7f0000001c40)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r2, &(0x7f0000000000)="19aa8548a53f7ee23f317155baa9dd9afafb27e9499fbc7a199a550a3e138cd24d756feb3a1ba9fa340e", &(0x7f00000002c0)="1e7b3e630db88efe1b43b67f291ec8985d9ae7ce04700550dde98d61e7bf0afda3a3356e6ae8213306cce7ec0741240eabbce37e10d34557c1c0ce72673d212c87f7d1a5630c2bdb9721c256efb2f16b9c4ea274480cff100b36fba053d4a0bf0f026a68ec87b331d54cab28059d6cec408452b6911bcbca586f623e5420079a1f3c1b5deb06", 0x86, 0x8001, 0x1, {0x0, 0x0, 0x8}}) (async) syz_io_uring_submit(r4, 0x0, r9, &(0x7f0000001c40)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r2, &(0x7f0000000000)="19aa8548a53f7ee23f317155baa9dd9afafb27e9499fbc7a199a550a3e138cd24d756feb3a1ba9fa340e", &(0x7f00000002c0)="1e7b3e630db88efe1b43b67f291ec8985d9ae7ce04700550dde98d61e7bf0afda3a3356e6ae8213306cce7ec0741240eabbce37e10d34557c1c0ce72673d212c87f7d1a5630c2bdb9721c256efb2f16b9c4ea274480cff100b36fba053d4a0bf0f026a68ec87b331d54cab28059d6cec408452b6911bcbca586f623e5420079a1f3c1b5deb06", 0x86, 0x8001, 0x1, {0x0, 0x0, 0x8}}) r10 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002780), 0x0, 0x0) readahead(r10, 0x7, 0x200) (async) readahead(r10, 0x7, 0x200) readv(r10, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) r11 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x10000, 0x40, &(0x7f0000000080)="1f11d9", 0x3, 0xd8e1, 0x0, 0x0, 0x0, 0x3, 0x0}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000c00)={0x0, &(0x7f00000004c0)=[@uexit={0x0, 0x18, 0x1}, @nested_load_syzos={0x136, 0x179, {0x0, 0xe5a, [@rdmsr={0x66, 0x18, {0x411}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x4, 0x6f}}, @nested_load_syzos={0x136, 0x20, {0x2, 0x8}}, @wr_drn={0x68, 0x20, {0x3, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x1, 0x5ff8}}, @code={0xa, 0x61, {"c4a1f970ce95b9800000c00f3235000100000f3066baf80cb8dce10b8cef66bafc0c66ed18fbc4c27d236107440f211f66baf80cb8d35dc584ef66bafc0cb08ceec4216311c8460fc74a8d660f2d69f9"}}, @cpuid={0x64, 0x18, {0xfffffff7, 0x1}}]}}, @out_dx={0x6a, 0x28, {0xcb82, 0x5}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host_nat=0x6c10, 0x3, 0x2}}, @code={0xa, 0x7e, {"440f666874660febfe66b8e0000f00d048b800a00000000000000f23c00f21f83503000e000f23f8b9800000c00f3235000100000f3066baf80cb8844d5e85ef66bafc0cedb9800000c00f3235000100000f30f0400fc1a661000000410f01c3440f20c0350c000000440f22c0"}}, @nested_load_syzos={0x136, 0x158, {0x0, 0x4, [@nested_load_syzos={0x136, 0x20, {0x1, 0xdd}}, @set_irq_handler={0xc8, 0x20, {0x4f, 0x2}}, @nested_load_syzos={0x136, 0x20, {0x2}}, @cpuid={0x64, 0x18, {0x0, 0x5ec6}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0xc6df, 0x5, 0x40}}, @nested_load_syzos={0x136, 0x20, {0x3, 0x6}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x1, 0xa500000, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x1}]}}, @code={0xa, 0x59, {"c4c3a97ce3e8470f219f36740066450f2cfdb805000000b92b0000000f01c10f09c4a135e8e48f2a7810470000000000b91b030000b820ae0000ba000000000f30b9e20000000f32"}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x7b, 0x2, 0x2, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0xfec00000, 0x9fd7}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x424, 0x401, 0x6, 0x6}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x4a, 0x6, 0x7, 0x2}}, @set_irq_handler={0xc8, 0x20, {0x99, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @nested_create_vm={0x12d, 0x18, 0x3}, @uexit={0x0, 0x18, 0xe83}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x29, 0x1, 0x0, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8, 0xb, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x840, 0x4}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x963, 0x3}}, @code={0xa, 0x6a, {"8f085886b90400000000c744240058000000c7442402209e0000ff1c24470ffe59aa43c11629450f01d1c744240006000000c744240209000000c7442406000000000f011c24470f0051faf3400f09f33e0f0b66b8f8008ee8"}}, @enable_nested={0x12c, 0x18}], 0x702}) (async) r12 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000c00)={0x0, &(0x7f00000004c0)=[@uexit={0x0, 0x18, 0x1}, @nested_load_syzos={0x136, 0x179, {0x0, 0xe5a, [@rdmsr={0x66, 0x18, {0x411}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x4, 0x6f}}, @nested_load_syzos={0x136, 0x20, {0x2, 0x8}}, @wr_drn={0x68, 0x20, {0x3, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x1, 0x5ff8}}, @code={0xa, 0x61, {"c4a1f970ce95b9800000c00f3235000100000f3066baf80cb8dce10b8cef66bafc0c66ed18fbc4c27d236107440f211f66baf80cb8d35dc584ef66bafc0cb08ceec4216311c8460fc74a8d660f2d69f9"}}, @cpuid={0x64, 0x18, {0xfffffff7, 0x1}}]}}, @out_dx={0x6a, 0x28, {0xcb82, 0x5}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host_nat=0x6c10, 0x3, 0x2}}, @code={0xa, 0x7e, {"440f666874660febfe66b8e0000f00d048b800a00000000000000f23c00f21f83503000e000f23f8b9800000c00f3235000100000f3066baf80cb8844d5e85ef66bafc0cedb9800000c00f3235000100000f30f0400fc1a661000000410f01c3440f20c0350c000000440f22c0"}}, @nested_load_syzos={0x136, 0x158, {0x0, 0x4, [@nested_load_syzos={0x136, 0x20, {0x1, 0xdd}}, @set_irq_handler={0xc8, 0x20, {0x4f, 0x2}}, @nested_load_syzos={0x136, 0x20, {0x2}}, @cpuid={0x64, 0x18, {0x0, 0x5ec6}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0xc6df, 0x5, 0x40}}, @nested_load_syzos={0x136, 0x20, {0x3, 0x6}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x1, 0xa500000, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x1}]}}, @code={0xa, 0x59, {"c4c3a97ce3e8470f219f36740066450f2cfdb805000000b92b0000000f01c10f09c4a135e8e48f2a7810470000000000b91b030000b820ae0000ba000000000f30b9e20000000f32"}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x7b, 0x2, 0x2, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0xfec00000, 0x9fd7}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x424, 0x401, 0x6, 0x6}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x4a, 0x6, 0x7, 0x2}}, @set_irq_handler={0xc8, 0x20, {0x99, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @nested_create_vm={0x12d, 0x18, 0x3}, @uexit={0x0, 0x18, 0xe83}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x29, 0x1, 0x0, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8, 0xb, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x840, 0x4}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x963, 0x3}}, @code={0xa, 0x6a, {"8f085886b90400000000c744240058000000c7442402209e0000ff1c24470ffe59aa43c11629450f01d1c744240006000000c744240209000000c7442406000000000f011c24470f0051faf3400f09f33e0f0b66b8f8008ee8"}}, @enable_nested={0x12c, 0x18}], 0x702}) socket$can_raw(0x1d, 0x3, 0x1) (async) r13 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r13, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r14}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "0000fb00"}, 0x10}}, 0x4000040) (async) sendmsg$can_raw(r13, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r14}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "0000fb00"}, 0x10}}, 0x4000040) ioctl$KVM_GET_XSAVE(r12, 0x9000aea4, &(0x7f0000005800)) read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r15) 422.316808ms ago: executing program 9 (id=4156): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = mq_open(&(0x7f0000000a80)='\'\xf5@$*\x00', 0x40, 0xb, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0xe8, 0x0, 'queue1\x00'}) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507060000", @ANYRES8=r0, @ANYRES32=r2, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x4, 0x6c2, 0x57, 0x5}) 421.707146ms ago: executing program 7 (id=4157): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0xd9b5, 0x0, 0xffffffffffffffff}) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@multicast, @remote, @void, {@mpls_uc={0x8864}}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_DISALLOCATE(r1, 0x5608) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000151401"], 0x20}, 0x1, 0x0, 0x0, 0x4000880}, 0x4004080) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r0, 0x4068aea3, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000240)={0x10b141, 0x2, 0x10}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r3) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r2, 0x0, 0x0, 0x800) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@assoc={0x18, 0x117, 0x4, 0x110}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 342.237903ms ago: executing program 9 (id=4158): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0xada2, 0x0, 'queue0\x00', 0x5b92}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0xada2, 0x0, 'queue0\x00', 0x5b92}) readv(r2, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) (async) readv(r2, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r3, 0x6f50, 0x8) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x9, 0x0, 0x0, 0x9}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 339.217977ms ago: executing program 6 (id=4159): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000c00)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f00000003c0)=ANY=[]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x4, 0x4, 0x4, 0x2, 0x0, 0x1, 0x8001}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) 229.034851ms ago: executing program 7 (id=4160): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x20000000, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 228.650352ms ago: executing program 6 (id=4161): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x20, r2, 0x0) r3 = dup(r1) write$binfmt_elf64(r3, &(0x7f00000006c0)=ANY=[], 0x178) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0009"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) fanotify_init(0x200, 0x0) (async) memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) (async) dup(r1) (async) fanotify_mark(r0, 0x1, 0x20, r2, 0x0) (async) dup(r1) (async) write$binfmt_elf64(r3, &(0x7f00000006c0)=ANY=[], 0x178) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0) (async) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0009"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) 227.532173ms ago: executing program 6 (id=4162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) syz_fuse_handle_req(r2, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999a0dde3, 0x1, 0x41, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_fuse_handle_req(r2, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1000001, {0x8, 0x3d, 0x0, {0x1, 0x7fffffffffffffff, 0x0, 0x1000, 0x11, 0xfffffffffffffffd, 0x1009ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x3, 0xee01, 0x0, 0x10, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f000000db40)="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", 0x2000, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x10001, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x1000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x95}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xf}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x34}}, 0x4004800) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b01b4550182185f57586b3"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'ipvlan0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x6, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffd, 0x0, 0xfff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4011}, 0x20000000) (async) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$HIDIOCGDEVINFO(r8, 0x801c4803, &(0x7f00000000c0)=""/118) (async, rerun: 64) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)={0x2e, 0x4, 0x0, {0x4, 0x80000000, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) (async, rerun: 32) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0x3, 0x4}}, 0x28) (rerun: 32) 222.565302ms ago: executing program 9 (id=4163): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000b40)='attr/current\x00') read$eventfd(r3, 0x0, 0x0) 132.194252ms ago: executing program 6 (id=4164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x12bc}, 0x1, 0x0, 0x0, 0x40000020}, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000001100)={0x3, 0x10, [0x0, 0x0, 0x0, 0x0]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) unshare(0x2c020400) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00158008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) fstat(r5, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r8, 0x3ba0, &(0x7f0000000180)={0x48}) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1f4, r7, 0x208, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x13}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb033}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_BEARER={0x140, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf6b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @local, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @loopback, 0xbe1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80000001, @private1, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x9800}, 0x11) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x34, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="73f709bc3af2f691beec8278d642ba898b3d5b7b6e87e02bcbdf7fa2235c49883f580d909152444efab7cfc2db9990383754cd94d403000000000000002d47c3e302e8eaecc15bb6baf0246d6ca695f90062c14154a64bf9f52ea3b499a376d4a37dbb3610b1c75f64b25dec3db43395fb33ca731c4a58faa498afe98abe5e2b05154f73fc1834ddde9b44b80d1f"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 131.78012ms ago: executing program 9 (id=4165): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000000, 0xa, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 71.889439ms ago: executing program 7 (id=4166): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000002c0)={'bridge0\x00', 0x9}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x6, 0x2}}], 0x20}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x800000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) chdir(&(0x7f0000000100)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x1, 0x3, 0x5, 0x6, 0x3, 0x4, {0x1, 0x6, 0xff, 0x4, 0x100, 0x4, 0x8, 0x7ffffffd, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000140)={0x10001, 0x0, {[0x0, 0x0, 0x0, 0x1000]}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000480)="400fd44b0936f3400f09653e430f381c0ec421b9f495915c0000b9800000c00f3235001000000f30362ef2470f70f078c4017d299b76c03e0b460f01ca66b834018ed867f30f1efb", 0x48}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x10) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r10 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x52800) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x8891}, 0x4000800) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0xa, 0x0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) 707.451µs ago: executing program 6 (id=4167): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SYNC_REGS(r0, 0x4068aea3, &(0x7f0000000040)) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/8, 0x8}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f0000000140)=""/239, 0xef}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f00000003c0)=""/95, 0x5f}], 0x8, 0x7fff, 0x3ff) (async) fremovexattr(r0, &(0x7f00000004c0)=@known='trusted.syz\x00') setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000500)={{0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, {0xa, 0x4e24, 0xe, @empty, 0x6d5fb411}, 0x0, {[0x7, 0x8, 0x9b5, 0x2, 0x3, 0x4, 0x8, 0x6]}}, 0x5c) (async) ioctl$RTC_PIE_ON(r0, 0x7005) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/121, 0x79}], 0x1, 0x6, 0xfffffe00) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x16a5) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000007c0)={0xd43, 0x80, {0x0}, {0xee00}, 0xffffffffffffffc0, 0x36b}) (async) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = socket$inet6(0xa, 0x800, 0x9) (async) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) (async) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0xa00, 0x0) r9 = getpgid(0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) sendmsg$unix(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)="624a36018d5764949b7489be276833110997ac227630838bbc8f5b37f4a45254ff70e200513003", 0x27}, {&(0x7f0000000680)="8efbfd83a23af0392e3ee2afab951457f775e6b86f1ec8099120a8cded64ae5ac71e2986e36163b1907e3bcbe058592b3d1a3afef71d57e55b198e71157030f9304e9abd8b437429f8a4550826ae51eb562e6be13940f15b162dc4a3", 0x5c}, {&(0x7f0000000700)="87b2ed034ad9e81a41b5f3329a1c4b3fa1e68bca0834889d69fa", 0x1a}, {&(0x7f0000000740)="a239cf47c6cb76c29c0655d0f98980f73e", 0x11}], 0x4, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x34, 0x1, 0x1, [r5, r1, r6, r1, r1, r0, r7, r8, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r12}}}], 0x78, 0xc010}, 0x4000000) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000b80)={[0x80, 0x0, 0x80000001, 0x4000000040000, 0x0, 0x8, 0x80000000, 0x6, 0x9, 0x81, 0x10001, 0x616, 0x7, 0x200, 0x18, 0x1], 0x4000, 0x810c0}) (async) io_uring_enter(0xffffffffffffffff, 0x142e, 0x6dc0, 0x8, &(0x7f0000000c40)={[0xd8f]}, 0x8) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) write$tcp_congestion(r8, &(0x7f0000000c80)='veno\x00', 0x5) (async) fremovexattr(r11, &(0x7f0000000cc0)=@known='trusted.overlay.opaque\x00') r13 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000d00), 0x303080, 0x0) ioctl$OCFS2_IOC_RESVSP64(r13, 0x4030582a, &(0x7f0000000d40)={0x2, 0x2, 0x6, 0xf, 0x1}) (async) r14 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r14, 0x84, 0x20, &(0x7f0000000d80)=0x9, 0x4) (async) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f00000011c0)={0x0, "408785923ceda8f1e93f2332403d6ddc"}) 0s ago: executing program 9 (id=4168): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460201085501000000000000000300060000ffffff9e0100003800000b09010000090000000900200001000700070001010000000003000000030000007f000000010000000600000000040000ff7f00007f000000"], 0x58) close(r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x47b, 0x2) readv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/179, 0xb3}], 0x1) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="000000002a46f2c7a2a853779ab62615878dc8a1f221f3a9d4030ae480081ccb4efb70e17d2f4d63304de6ff8ed1b2e5bbf744", @ANYRES16=r1, @ANYBLOB="000028bd7000fddbdf25120000003400098008000200d203000008000100001000000800020005000000080001000200000008000200ff0100000800020007000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x580c7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc01000000000000000800000000000010000280050001"], 0x58}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000100)={[0x3]}, &(0x7f0000000140), 0x8) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ] Dev loop5: unable to read RDB block 7 [ 326.830230][T17418] loop5: unable to read partition table [ 326.833796][T17422] bond1: (slave batadv0): Device is not bonding slave [ 326.834459][T17418] loop5: partition table beyond EOD, [ 326.836085][T17422] bond1: option active_slave: invalid value (batadv0) [ 326.841087][T17418] truncated [ 326.841332][T17422] bond1 (unregistering): Released all slaves [ 326.844674][T17418] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 327.025745][T17441] 8021q: adding VLAN 0 to HW filter on device bond6 [ 327.054087][T17441] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 327.358089][ T5884] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 327.418076][ T5785] net_ratelimit: 79 callbacks suppressed [ 327.418096][ T5785] bond1: (slave gretap1): failed to get link speed/duplex [ 327.422166][ T5785] bond1: (slave dummy0): failed to get link speed/duplex [ 327.510990][ T5884] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.514458][ T5884] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.517509][ T5884] usb 12-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 327.520494][ T5884] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.524903][ T5884] usb 12-1: config 0 descriptor?? [ 327.539174][ T5785] bond1: (slave gretap1): failed to get link speed/duplex [ 327.544679][ T5785] bond1: (slave dummy0): failed to get link speed/duplex [ 327.588197][ T7308] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 327.648231][ T5785] bond1: (slave gretap1): failed to get link speed/duplex [ 327.651320][ T5785] bond1: (slave dummy0): failed to get link speed/duplex [ 327.738119][ T7308] usb 14-1: Using ep0 maxpacket: 8 [ 327.741271][ T7308] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.744789][ T7308] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.748120][ T7308] usb 14-1: config 0 interface 0 has no altsetting 0 [ 327.750388][ T7308] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 327.753929][ T7308] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.758507][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 327.761061][ T7308] usb 14-1: config 0 descriptor?? [ 327.761392][T16385] bond1: (slave dummy0): failed to get link speed/duplex [ 327.868036][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 327.870287][T16385] bond1: (slave dummy0): failed to get link speed/duplex [ 328.003023][T17490] ksmbd: Unknown IPC event: 3, ignore. [ 328.058223][ T5748] Bluetooth: hci3: sending frame failed (-49) [ 328.064482][ T5092] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 328.171005][T17471] fuse: Bad value for 'fd' [ 328.175201][ T7308] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 328.177351][ T7308] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 328.180465][ T7308] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 328.182633][ T7308] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 328.184820][ T7308] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 328.187291][ T7308] mcp2221 0003:04D8:00DD.0011: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 328.378426][ T5086] usb 14-1: USB disconnect, device number 2 [ 328.567970][ T5092] Bluetooth: hci1: command 0x0c1a tx timeout [ 328.949704][T17517] netlink: 'syz.9.3395': attribute type 1 has an invalid length. [ 328.963165][T17517] bond1: entered promiscuous mode [ 328.964983][T17517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.978006][T17517] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 328.981807][T17517] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 328.984945][T17517] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 329.006203][T17518] netlink: 'syz.6.3396': attribute type 4 has an invalid length. [ 329.152730][T17527] Process accounting resumed [ 329.227285][ T5092] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 329.503163][T17562] __nla_validate_parse: 5 callbacks suppressed [ 329.503176][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3407'. [ 329.511854][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 329.511865][ T42] audit: type=1400 audit(1784923658.412:1756): avc: denied { kexec_image_load } for pid=17563 comm="syz.9.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 329.535595][T17564] tmpfs: Bad value for 'mpol' [ 329.727749][T17570] bridge0: port 3(syz_tun) entered blocking state [ 329.729851][T17570] bridge0: port 3(syz_tun) entered forwarding state [ 329.734127][T17570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.738631][T17570] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.763201][T17570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.766428][T17570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.773459][T17570] veth1_vlan: left promiscuous mode [ 329.775862][T17570] veth0_vlan: left promiscuous mode [ 329.778447][T17570] veth0_vlan: entered promiscuous mode [ 329.781356][T17570] veth1_vlan: entered promiscuous mode [ 329.785899][T17570] veth1_macvtap: left promiscuous mode [ 329.789328][T17570] veth0_macvtap: left promiscuous mode [ 329.793923][T17570] veth0_macvtap: entered promiscuous mode [ 329.797634][T17570] veth1_macvtap: entered promiscuous mode [ 329.806312][T17570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.811566][T17570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.815754][T17570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.821372][T17570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 329.849318][T17570] geneve2: left promiscuous mode [ 329.854159][T17570] bond2: left promiscuous mode [ 329.857600][T17570] bond3: left promiscuous mode [ 329.859723][T17570] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.878217][ T41] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 329.886680][T10559] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.889769][T10559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.895237][T10559] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.898339][T10559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.912615][T17578] xt_hashlimit: size too large, truncated to 1048576 [ 330.027897][ T41] usb 14-1: Using ep0 maxpacket: 8 [ 330.032727][ T41] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 330.036577][ T41] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 330.039549][ T41] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.043564][ T41] usb 14-1: config 0 descriptor?? [ 330.074607][ T5884] usbhid 12-1:0.0: can't add hid device: -71 [ 330.076868][ T5884] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 330.080972][ T5884] usb 12-1: USB disconnect, device number 23 [ 330.257050][ T41] iowarrior 14-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 330.380264][ T42] audit: type=1400 audit(1784923659.282:1757): avc: denied { getopt } for pid=17602 comm="syz.6.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 330.735094][T17629] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3424'. [ 330.990016][T17657] overlayfs: failed to clone upperpath [ 331.021891][T17659] netlink: 'syz.8.3434': attribute type 63 has an invalid length. [ 331.024388][T17659] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3434'. [ 331.027117][T17659] gretap0: entered allmulticast mode [ 331.035588][ T42] audit: type=1400 audit(1784923659.932:1758): avc: denied { write } for pid=17658 comm="syz.8.3434" name="/" dev="9p" ino=78395377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 331.045036][ T42] audit: type=1400 audit(1784923659.932:1759): avc: denied { add_name } for pid=17658 comm="syz.8.3434" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 331.055314][ T42] audit: type=1400 audit(1784923659.932:1760): avc: denied { create } for pid=17658 comm="syz.8.3434" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 331.063110][ T42] audit: type=1400 audit(1784923659.942:1761): avc: denied { read write } for pid=17658 comm="syz.8.3434" name="file1" dev="9p" ino=78395419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 331.070156][ T42] audit: type=1400 audit(1784923659.942:1762): avc: denied { open } for pid=17658 comm="syz.8.3434" path="/316/file0/file1" dev="9p" ino=78395419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 331.093873][ T5736] usb 14-1: USB disconnect, device number 3 [ 331.097211][ T42] audit: type=1400 audit(1784923659.992:1763): avc: denied { create } for pid=17668 comm="syz.6.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 331.109128][ T42] audit: type=1400 audit(1784923659.992:1764): avc: denied { read write } for pid=11769 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.120758][ T42] audit: type=1400 audit(1784923659.992:1765): avc: denied { open } for pid=11769 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.259310][T17689] FAULT_INJECTION: forcing a failure. [ 331.259310][T17689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.265340][T17689] CPU: 3 UID: 0 PID: 17689 Comm: syz.8.3438 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.265367][T17689] Tainted: [L]=SOFTLOCKUP [ 331.265372][T17689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 331.265379][T17689] Call Trace: [ 331.265383][T17689] [ 331.265388][T17689] dump_stack_lvl+0x100/0x190 [ 331.265416][T17689] should_fail_ex.cold+0x5/0xa [ 331.265430][T17689] _copy_from_iter+0x1f4/0x1690 [ 331.265451][T17689] ? __asan_memset+0x23/0x50 [ 331.265464][T17689] ? __pfx__copy_from_iter+0x10/0x10 [ 331.265482][T17689] ? __pfx___alloc_skb+0x10/0x10 [ 331.265537][T17689] netlink_sendmsg+0x808/0xda0 [ 331.265568][T17689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.265582][T17689] ? selinux_socket_sendmsg+0x198/0x2f0 [ 331.265600][T17689] ____sys_sendmsg+0xa4d/0xbe0 [ 331.265615][T17689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.265626][T17689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.265647][T17689] ___sys_sendmsg+0x190/0x1e0 [ 331.265664][T17689] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.265680][T17689] ? __lock_acquire+0x49f/0x1a40 [ 331.265693][T17689] ? get_pid_task+0x106/0x250 [ 331.265723][T17689] __sys_sendmsg+0x160/0x210 [ 331.265736][T17689] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.265761][T17689] do_syscall_64+0x115/0x870 [ 331.265772][T17689] ? clear_bhb_loop+0x40/0x90 [ 331.265785][T17689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.265796][T17689] RIP: 0033:0x7f5da439de99 [ 331.265806][T17689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.265816][T17689] RSP: 002b:00007f5da51bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.265827][T17689] RAX: ffffffffffffffda RBX: 00007f5da4625fa0 RCX: 00007f5da439de99 [ 331.265834][T17689] RDX: 0000000020004000 RSI: 0000200000000000 RDI: 0000000000000005 [ 331.265840][T17689] RBP: 00007f5da51bf090 R08: 0000000000000000 R09: 0000000000000000 [ 331.265847][T17689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.265853][T17689] R13: 00007f5da4626038 R14: 00007f5da4625fa0 R15: 00007ffc0f04f8c8 [ 331.265866][T17689] [ 331.405349][T17706] netlink: 'syz.6.3448': attribute type 39 has an invalid length. [ 331.413985][T17706] bridge0: port 3(syz_tun) entered disabled state [ 331.429494][T17706] syz_tun (unregistering): left allmulticast mode [ 331.431534][T17706] syz_tun (unregistering): left promiscuous mode [ 331.433496][T17706] bridge0: port 3(syz_tun) entered disabled state [ 331.746907][T17727] fuse: Bad value for 'fd' [ 331.857253][T17727] smpboot: CPU 1 is now offline [ 331.921147][T17727] smpboot: CPU 3 is now offline [ 332.004844][T17733] FAULT_INJECTION: forcing a failure. [ 332.004844][T17733] name failslab, interval 1, probability 0, space 0, times 0 [ 332.010140][T17733] CPU: 2 UID: 0 PID: 17733 Comm: syz.9.3456 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.010159][T17733] Tainted: [L]=SOFTLOCKUP [ 332.010163][T17733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 332.010169][T17733] Call Trace: [ 332.010173][T17733] [ 332.010178][T17733] dump_stack_lvl+0x100/0x190 [ 332.010195][T17733] should_fail_ex.cold+0x5/0xa [ 332.010207][T17733] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 332.010225][T17733] should_failslab+0xc2/0x120 [ 332.010239][T17733] kmem_cache_alloc_noprof+0x91/0x6a0 [ 332.010267][T17733] ? skb_clone+0x190/0x400 [ 332.010282][T17733] skb_clone+0x190/0x400 [ 332.010295][T17733] netlink_deliver_tap+0xaed/0xcc0 [ 332.010315][T17733] netlink_unicast+0x62b/0x850 [ 332.010327][T17733] ? __pfx_netlink_unicast+0x10/0x10 [ 332.010348][T17733] netlink_sendmsg+0x8b0/0xda0 [ 332.010361][T17733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.010373][T17733] ? selinux_socket_sendmsg+0x198/0x2f0 [ 332.010391][T17733] ____sys_sendmsg+0xa4d/0xbe0 [ 332.010406][T17733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.010418][T17733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.010440][T17733] ___sys_sendmsg+0x190/0x1e0 [ 332.010457][T17733] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.010473][T17733] ? __lock_acquire+0x49f/0x1a40 [ 332.010486][T17733] ? get_pid_task+0x106/0x250 [ 332.010537][T17733] __sys_sendmsg+0x160/0x210 [ 332.010551][T17733] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.010571][T17733] do_syscall_64+0x115/0x870 [ 332.010584][T17733] ? clear_bhb_loop+0x40/0x90 [ 332.010597][T17733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.010608][T17733] RIP: 0033:0x7fc47179de99 [ 332.010618][T17733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.010628][T17733] RSP: 002b:00007fc4725ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.010639][T17733] RAX: ffffffffffffffda RBX: 00007fc471a25fa0 RCX: 00007fc47179de99 [ 332.010646][T17733] RDX: 0000000020004000 RSI: 0000200000000000 RDI: 0000000000000005 [ 332.010653][T17733] RBP: 00007fc4725ea090 R08: 0000000000000000 R09: 0000000000000000 [ 332.010659][T17733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.010666][T17733] R13: 00007fc471a26038 R14: 00007fc471a25fa0 R15: 00007fff1fbc19e8 [ 332.010680][T17733] [ 332.010759][T17733] netlink: 'syz.9.3456': attribute type 1 has an invalid length. [ 332.098687][T17735] netlink: 'syz.8.3457': attribute type 1 has an invalid length. [ 332.211314][T17745] syzkaller0: entered promiscuous mode [ 332.212997][T17745] syzkaller0: entered allmulticast mode [ 332.416511][T17759] IPv6: NLM_F_CREATE should be specified when creating new route [ 332.419561][T17759] netlink: 'syz.6.3465': attribute type 1 has an invalid length. [ 332.558046][ T6209] wlan1: Trigger new scan to find an IBSS to join [ 332.732236][T17765] netlink: 'syz.7.3466': attribute type 4 has an invalid length. [ 334.533316][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3467'. [ 334.538733][T11939] net_ratelimit: 71 callbacks suppressed [ 334.538745][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 334.543678][T17771] netlink: 'syz.6.3467': attribute type 10 has an invalid length. [ 334.553781][T11939] bond1: (slave dummy0): failed to get link speed/duplex [ 334.556068][T17771] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3467'. [ 334.660449][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 334.660462][ T42] audit: type=1400 audit(1784923663.563:1776): avc: denied { allowed } for pid=17776 comm="syz.7.3470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 334.668025][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 334.673857][T16385] bond1: (slave dummy0): failed to get link speed/duplex [ 334.690937][ T42] audit: type=1400 audit(1784923663.593:1777): avc: denied { ioctl } for pid=17778 comm="syz.9.3472" path="socket:[91020]" dev="sockfs" ino=91020 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 334.798626][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 334.800913][T16385] bond1: (slave dummy0): failed to get link speed/duplex [ 334.907644][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 334.910068][T11939] bond1: (slave dummy0): failed to get link speed/duplex [ 335.027942][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 335.033325][T11939] bond1: (slave dummy0): failed to get link speed/duplex [ 335.114666][T17813] fuse: fd is not a fuse device [ 335.142603][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3474'. [ 335.316545][ T42] audit: type=1400 audit(1784923664.213:1778): avc: denied { append } for pid=17831 comm="syz.7.3479" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 335.326866][T17832] loop5: detected capacity change from 0 to 7 [ 335.334671][T17832] Dev loop5: unable to read RDB block 7 [ 335.336506][T17832] loop5: AHDI p2 p4 [ 335.340347][T17832] loop5: partition table partially beyond EOD, truncated [ 335.340594][ T42] audit: type=1400 audit(1784923664.223:1779): avc: denied { nlmsg_write } for pid=17831 comm="syz.7.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 335.342717][T17832] loop5: p4 start 254 is beyond EOD, truncated [ 335.598046][T10558] wlan1: Trigger new scan to find an IBSS to join [ 335.629101][ T42] audit: type=1400 audit(1784923664.533:1780): avc: denied { bind } for pid=17845 comm="syz.9.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.638748][ T42] audit: type=1400 audit(1784923664.533:1781): avc: denied { connect } for pid=17845 comm="syz.9.3484" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.693310][T17839] overlayfs: refusing to follow metacopy origin for (/file1) [ 335.782337][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 335.811074][T17852] tipc: Enabling of bearer rejected, failed to enable media [ 336.439001][T17867] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3489'. [ 336.449274][T17867] unsupported nlmsg_type 40 [ 336.455635][ T42] audit: type=1400 audit(1784923665.353:1782): avc: denied { read } for pid=17864 comm="syz.7.3489" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 336.466495][T17854] loop5: detected capacity change from 0 to 7 [ 336.472037][ T42] audit: type=1400 audit(1784923665.353:1783): avc: denied { open } for pid=17864 comm="syz.7.3489" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 336.483231][T17854] Dev loop5: unable to read RDB block 7 [ 336.488195][T17854] loop5: unable to read partition table [ 336.492017][T17854] loop5: partition table beyond EOD, truncated [ 336.501524][T17854] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 337.581233][ T42] audit: type=1400 audit(1784923666.483:1784): avc: denied { sys_admin } for pid=17880 comm="syz.9.3493" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 337.639655][T17892] fuse: fd is not a fuse device [ 338.387071][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 338.653740][ T820] wlan1: Trigger new scan to find an IBSS to join [ 338.823346][ T42] audit: type=1400 audit(1784923667.723:1785): avc: denied { create } for pid=17922 comm="syz.6.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 338.824104][T17923] netlink: 'syz.6.3503': attribute type 15 has an invalid length. [ 338.833082][T17923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3503'. [ 338.836003][T17923] netlink: 'syz.6.3503': attribute type 15 has an invalid length. [ 338.838859][T17923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3503'. [ 338.843702][T17923] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3503'. [ 339.096120][T17933] tipc: Started in network mode [ 339.101171][T17933] tipc: Node identity 2007ff, cluster identity 4711 [ 339.108210][T17933] tipc: Node number set to 2099199 [ 339.175112][T17913] loop5: detected capacity change from 0 to 7 [ 339.182122][T17913] Dev loop5: unable to read RDB block 7 [ 339.184076][T17913] loop5: unable to read partition table [ 339.186019][T17913] loop5: partition table beyond EOD, truncated [ 339.188470][T17913] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 339.578192][T10565] wlan1: Creating new IBSS network, BSSID 9a:7e:f8:c3:7a:e2 [ 339.600288][T17942] netlink: 'syz.7.3512': attribute type 1 has an invalid length. [ 339.647504][T11939] net_ratelimit: 81 callbacks suppressed [ 339.647519][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 339.651645][T11939] bond1: (slave dummy0): failed to get link speed/duplex [ 339.742692][T17947] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3513'. [ 339.756671][T17949] /dev/nullb0: Can't lookup blockdev [ 339.759137][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 339.759157][T11939] bond1: (slave dummy0): failed to get link speed/duplex [ 339.784356][T17951] sctp: [Deprecated]: syz.8.3515 (pid 17951) Use of int in maxseg socket option. [ 339.784356][T17951] Use struct sctp_assoc_value instead [ 339.793298][T17949] netlink: 'syz.6.3514': attribute type 1 has an invalid length. [ 339.796505][T17949] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3514'. [ 339.800060][T17951] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20002 [ 339.806094][T17949] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.808497][T17949] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.905571][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 339.921784][T11939] bond1: (slave dummy0): failed to get link speed/duplex [ 339.941639][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 339.941651][ T42] audit: type=1400 audit(1784923668.843:1791): avc: denied { accept } for pid=17959 comm="syz.6.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 339.955408][T17960] loop5: detected capacity change from 0 to 7 [ 339.967513][T17960] Dev loop5: unable to read RDB block 7 [ 339.974776][T17960] loop5: unable to read partition table [ 339.978605][T17960] loop5: partition table beyond EOD, truncated [ 340.005741][T17960] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 340.035783][T17962] syz_tun: entered allmulticast mode [ 340.052044][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 340.054991][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 340.178564][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 340.198283][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 340.358291][T17967] tipc: Started in network mode [ 340.365095][T17967] tipc: Node identity 2007ff, cluster identity 4711 [ 340.371897][T17967] tipc: Node number set to 2099199 [ 340.477729][T17969] overlayfs: failed to clone upperpath [ 340.675251][T17953] syz_tun: left allmulticast mode [ 340.872113][T17971] netlink: 'syz.7.3522': attribute type 1 has an invalid length. [ 341.144580][T17981] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3525'. [ 341.148883][T17981] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3525'. [ 341.153068][T17982] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3525'. [ 341.156806][T17985] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3525'. [ 341.245101][T17990] xt_socket: unknown flags 0x4c [ 341.263686][ T42] audit: type=1326 audit(1784923670.163:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17988 comm="syz.7.3528" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe77e59de99 code=0x0 [ 341.357384][ T7308] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 341.507261][ T7308] usb 13-1: Using ep0 maxpacket: 32 [ 341.509766][ T7308] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 341.509798][ T7308] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 341.509816][ T7308] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.509834][ T7308] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 341.516895][ T7308] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 341.516911][ T7308] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.516921][ T7308] usb 13-1: Product: syz [ 341.516930][ T7308] usb 13-1: Manufacturer: syz [ 341.516937][ T7308] usb 13-1: SerialNumber: syz [ 341.527123][ C2] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 341.550860][ T7308] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input52 [ 341.747905][ T7308] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 341.752864][ T7308] (id 0x00) [ 341.808266][ T7308] rc_core: IR keymap rc-imon-pad not found [ 341.811745][ T7308] Registered IR keymap rc-empty [ 341.814912][ T7308] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 341.821981][ T7308] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 341.948562][ T7308] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 341.952802][ T7308] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input53 [ 341.959374][ T7308] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:19> initialized [ 342.067711][T18014] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3535'. [ 342.077560][T18014] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3535'. [ 342.142238][ T10] usb 13-1: USB disconnect, device number 19 [ 342.189960][ T42] audit: type=1400 audit(1784923671.083:1793): avc: denied { prog_load } for pid=18015 comm="syz.7.3536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 342.255404][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3538'. [ 342.261122][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3538'. [ 342.373153][T18029] tipc: Cannot configure node identity twice [ 342.884149][ T42] audit: type=1400 audit(1784923671.783:1794): avc: denied { map_create } for pid=18041 comm="syz.9.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 342.905468][ T42] audit: type=1400 audit(1784923671.793:1795): avc: denied { map_read map_write } for pid=18041 comm="syz.9.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 342.952813][T18048] netlink: 'syz.9.3548': attribute type 1 has an invalid length. [ 342.981277][ T42] audit: type=1400 audit(1784923671.883:1796): avc: denied { create } for pid=18043 comm="syz.8.3544" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 343.091635][ T42] audit: type=1400 audit(1784923671.993:1797): avc: denied { watch watch_reads } for pid=18057 comm="syz.7.3551" path="/424" dev="tmpfs" ino=2316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 343.132933][ T42] audit: type=1400 audit(1784923672.033:1798): avc: denied { ioctl } for pid=18061 comm="syz.9.3552" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=94722 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 343.149689][T18058] nvme_fabrics: missing parameter 'transport=%s' [ 343.155626][T18058] nvme_fabrics: missing parameter 'nqn=%s' [ 343.193229][T18065] netlink: 'syz.9.3552': attribute type 4 has an invalid length. [ 343.234580][T18067] netlink: 'syz.7.3553': attribute type 9 has an invalid length. [ 343.286834][ T42] audit: type=1400 audit(1784923672.183:1799): avc: denied { prog_run } for pid=18070 comm="syz.9.3554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 343.436616][ T42] audit: type=1400 audit(1784923672.333:1800): avc: denied { ioctl } for pid=18077 comm="syz.9.3557" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x744d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 343.642094][T18087] binder: 18086:18087 ioctl c0306201 200000000540 returned -22 [ 343.700318][T18092] binder: 18086:18092 ioctl c0306201 200000000640 returned -22 [ 343.927808][ T41] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 343.940475][T18100] netlink: 'syz.8.3564': attribute type 1 has an invalid length. [ 344.001696][T18106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4432 sclass=netlink_route_socket pid=18106 comm=syz.6.3567 [ 344.063948][T18110] netlink: 'syz.6.3568': attribute type 58 has an invalid length. [ 344.075597][T18110] autofs: Unknown parameter 'Ȫˆ.Tg³Móø8' [ 344.078192][ T41] usb 12-1: Using ep0 maxpacket: 8 [ 344.085194][ T41] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 344.098772][ T41] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 344.107613][ T41] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 344.115700][ T41] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 344.125997][ T41] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.137199][ T41] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 344.144806][ T41] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.348110][T18125] --map-set only usable from mangle table [ 344.362178][ T41] usb 12-1: usb_control_msg returned -32 [ 344.364356][ T41] usbtmc 12-1:16.0: can't read capabilities [ 344.506629][T18132] netlink: 'syz.9.3575': attribute type 1 has an invalid length. [ 344.592453][ T5092] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 344.617110][T18139] block nbd8: Cannot use ioctl interface on a netlink controlled device. [ 344.657212][T16053] net_ratelimit: 74 callbacks suppressed [ 344.657226][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 344.665231][T16053] bond1: (slave dummy0): failed to get link speed/duplex [ 344.778242][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 344.794739][T16053] bond1: (slave dummy0): failed to get link speed/duplex [ 344.817701][T18148] syz_tun: entered allmulticast mode [ 344.948216][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 344.954097][T16385] bond1: (slave dummy0): failed to get link speed/duplex [ 345.077386][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 345.080516][T16385] bond1: (slave dummy0): failed to get link speed/duplex [ 345.123751][T18153] No such timeout policy "syz1" [ 345.187569][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 345.189875][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 345.320834][ T41] usb 12-1: USB disconnect, device number 24 [ 345.423667][T18137] syz_tun: left allmulticast mode [ 345.588282][T18160] hpfs: Bad magic ... probably not HPFS [ 345.596643][T18160] hpfs: Bad magic ... probably not HPFS [ 345.756802][T18167] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 345.882875][T18171] netlink: 'syz.7.3587': attribute type 1 has an invalid length. [ 346.108881][T18175] netlink: 'syz.8.3589': attribute type 21 has an invalid length. [ 346.113286][T18175] cgroup: none used incorrectly [ 346.157436][T18181] fuse: Bad value for 'fd' [ 346.287615][T18185] syz_tun: entered allmulticast mode [ 346.458354][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 346.458401][ T42] audit: type=1400 audit(1784923675.283:1810): avc: denied { mount } for pid=18183 comm="syz.9.3592" name="/" dev="hugetlbfs" ino=95289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 346.480749][T18190] __nla_validate_parse: 7 callbacks suppressed [ 346.480763][T18190] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3593'. [ 346.489556][T18189] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3593'. [ 346.489990][ T42] audit: type=1400 audit(1784923675.393:1811): avc: denied { map } for pid=18188 comm="syz.8.3593" path="socket:[95297]" dev="sockfs" ino=95297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 346.538697][ T42] audit: type=1400 audit(1784923675.443:1812): avc: denied { create } for pid=18192 comm="syz.8.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 346.598216][T18197] netlink: 'syz.9.3594': attribute type 1 has an invalid length. [ 346.622466][T18197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.654265][T18197] tipc: Enabled bearer , priority 10 [ 346.658699][ T42] audit: type=1326 audit(1784923675.563:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18193 comm="syz.9.3594" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47179de99 code=0x7fc00000 [ 346.713968][T18203] netlink: 'syz.9.3596': attribute type 1 has an invalid length. [ 346.908082][T18177] syz_tun: left allmulticast mode [ 347.031407][T18207] loop5: detected capacity change from 0 to 7 [ 347.040652][T18207] Dev loop5: unable to read RDB block 7 [ 347.043697][T18207] loop5: unable to read partition table [ 347.045629][T18207] loop5: partition table beyond EOD, truncated [ 347.051028][T18207] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 347.098235][ T9] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 347.258657][ T9] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 347.270744][ T9] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 347.283069][ T9] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 347.294728][ T9] usb 14-1: config 0 interface 0 has no altsetting 0 [ 347.303244][ T9] usb 14-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 347.313087][ T9] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.324310][ T9] usb 14-1: Product: syz [ 347.326292][ T9] usb 14-1: Manufacturer: syz [ 347.329254][ T9] usb 14-1: SerialNumber: syz [ 347.338684][ T9] usb 14-1: config 0 descriptor?? [ 347.360452][ T42] audit: type=1400 audit(1784923676.253:1814): avc: denied { relabelfrom } for pid=18221 comm="syz.7.3604" name="" dev="pipefs" ino=95189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 347.363641][T18222] netlink: 'syz.7.3604': attribute type 30 has an invalid length. [ 347.415641][T18224] netlink: 'syz.7.3604': attribute type 30 has an invalid length. [ 347.552965][ T9] input: syz syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input54 [ 347.562828][ T5129] synaptics_usb 14-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 347.567285][ T42] audit: type=1400 audit(1784923676.463:1815): avc: denied { read } for pid=5129 comm="acpid" name="mouse2" dev="devtmpfs" ino=4235 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 347.578759][ T42] audit: type=1400 audit(1784923676.463:1816): avc: denied { open } for pid=5129 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=4235 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 347.588077][ T5129] synaptics_usb 14-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 347.619397][ T5129] synaptics_usb 14-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 347.626782][ T5129] synaptics_usb 14-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 347.665254][T15485] synaptics_usb 14-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 347.735514][ T5129] synaptics_usb 14-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 347.745135][ T5129] synaptics_usb 14-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 347.753072][ T42] audit: type=1400 audit(1784923676.653:1817): avc: denied { read } for pid=18204 comm="syz.9.3597" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 347.765017][ T5129] synaptics_usb 14-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 347.770950][ T42] audit: type=1400 audit(1784923676.653:1818): avc: denied { open } for pid=18204 comm="syz.9.3597" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 347.813437][T18205] synaptics_usb 14-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 347.835262][T18236] syz_tun: entered allmulticast mode [ 348.051852][ T7308] usb 14-1: USB disconnect, device number 4 [ 348.374273][T16053] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 348.392802][T18251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.405355][T18250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.461113][T18273] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 348.463434][T18233] syz_tun: left allmulticast mode [ 348.707245][T18298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18298 comm=syz.7.3622 [ 348.721825][T18298] netlink: 'syz.7.3622': attribute type 1 has an invalid length. [ 348.775805][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3622'. [ 348.800221][T18298] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.806055][T18303] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3624'. [ 348.818409][ T42] audit: type=1400 audit(1784923677.703:1819): avc: denied { write } for pid=18301 comm="syz.9.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 348.838760][T18295] sit1: entered promiscuous mode [ 348.936013][T18309] netlink: 'syz.6.3626': attribute type 10 has an invalid length. [ 348.942894][T18309] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3626'. [ 349.164056][T18317] syz_tun: entered allmulticast mode [ 349.405353][T18322] ªªªªªªI¡§å!qƒú: renamed from lo (while UP) [ 349.589836][T18338] fuse: fd is not a fuse device [ 349.591969][T18338] syz.6.3635 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 349.597928][ T1180] wlan1: Trigger new scan to find an IBSS to join [ 349.719835][T18289] loop5: detected capacity change from 0 to 7 [ 349.729328][T18289] Dev loop5: unable to read RDB block 7 [ 349.733194][T18289] loop5: unable to read partition table [ 349.748257][T18289] loop5: partition table beyond EOD, truncated [ 349.750458][T18289] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 349.757576][T16385] net_ratelimit: 75 callbacks suppressed [ 349.757587][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 349.762562][T16385] bond1: (slave dummy0): failed to get link speed/duplex [ 349.803338][T18312] syz_tun: left allmulticast mode [ 349.877109][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 349.884627][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 349.952359][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3638'. [ 349.959345][T18350] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3638'. [ 350.007473][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 350.012276][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 350.104133][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3642'. [ 350.110102][T18363] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 350.514697][T18360] 8021q: adding VLAN 0 to HW filter on device bond8 [ 350.547244][T18360] bond7: (slave bond8): Enslaving as an active interface with an up link [ 350.564588][T18380] bond7 (unregistering): (slave bond8): Releasing backup interface [ 350.584193][T18380] bond7 (unregistering): Released all slaves [ 350.627343][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 350.630709][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 350.737940][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 350.741149][T16385] bond1: (slave dummy0): failed to get link speed/duplex [ 350.769300][T18378] loop5: detected capacity change from 0 to 7 [ 350.774850][T18378] Dev loop5: unable to read RDB block 7 [ 350.778293][T18378] loop5: unable to read partition table [ 350.780270][T18378] loop5: partition table beyond EOD, truncated [ 350.785388][T18378] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 351.064810][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3658'. [ 351.078803][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3658'. [ 351.135293][T18413] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.138368][T18413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.141180][T18413] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.143382][T18413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.390610][T18438] netlink: 'syz.8.3665': attribute type 1 has an invalid length. [ 351.445776][T18435] netlink: 'syz.8.3665': attribute type 10 has an invalid length. [ 351.619580][T18438] bond7: option mode: invalid value (14) [ 351.690813][T18438] bond7 (unregistering): Released all slaves [ 351.703708][T18435] dummy0: entered promiscuous mode [ 351.729885][T18443] ±ÿ speed is unknown, defaulting to 1000 [ 351.732644][T18443] sit0 speed is unknown, defaulting to 1000 [ 351.863395][T18452] xt_hashlimit: size too large, truncated to 1048576 [ 351.867076][T18453] xt_hashlimit: size too large, truncated to 1048576 [ 351.893955][T18443] xfrm0 speed is unknown, defaulting to 1000 [ 351.941080][T18452] netlink: 'syz.8.3668': attribute type 21 has an invalid length. [ 351.946807][T18452] __nla_validate_parse: 4 callbacks suppressed [ 351.946819][T18452] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3668'. [ 352.365932][T18466] tipc: Enabling of bearer rejected, failed to enable media [ 352.473808][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 352.473819][ T42] audit: type=1400 audit(1784923681.374:1824): avc: denied { getopt } for pid=18474 comm="syz.6.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 352.483305][T18478] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 352.682138][T18488] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3675'. [ 353.711168][T18458] loop5: detected capacity change from 0 to 7 [ 353.744837][T18458] Dev loop5: unable to read RDB block 7 [ 353.758618][T18458] loop5: unable to read partition table [ 353.767173][T18458] loop5: partition table beyond EOD, truncated [ 353.783876][T18458] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 353.943471][ T42] audit: type=1400 audit(1784923682.844:1825): avc: denied { sqpoll } for pid=18522 comm="syz.6.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 353.959615][T18525] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18525 comm=syz.6.3689 [ 353.971561][T18523] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18523 comm=syz.6.3689 [ 353.986992][T18523] netlink: 'syz.6.3689': attribute type 1 has an invalid length. [ 354.062823][ T42] audit: type=1400 audit(1784923682.964:1826): avc: denied { map } for pid=18530 comm="syz.7.3691" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 354.222441][T18551] xt_CT: No such helper "pptp" [ 354.367234][T18560] netlink: 'syz.7.3700': attribute type 10 has an invalid length. [ 354.432222][T18565] netlink: 'syz.9.3701': attribute type 1 has an invalid length. [ 354.488154][ T9] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 354.601428][ T42] audit: type=1400 audit(1784923683.504:1827): avc: denied { mount } for pid=18569 comm="syz.6.3704" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 354.637105][ T8962] wlan1: Trigger new scan to find an IBSS to join [ 354.658101][ T9] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 354.661551][ T9] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 354.667304][ T9] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 354.675440][ T9] usb 13-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 354.679074][ T9] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.683340][ T9] usb 13-1: Product: syz [ 354.684686][ T9] usb 13-1: Manufacturer: syz [ 354.688634][ T9] usb 13-1: SerialNumber: syz [ 354.698869][ T9] usb 13-1: config 0 descriptor?? [ 354.777603][T11939] net_ratelimit: 58 callbacks suppressed [ 354.777616][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 354.789105][T11939] bond1: (slave dummy0): failed to get link speed/duplex [ 354.896528][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 354.902943][T11939] bond1: (slave dummy0): failed to get link speed/duplex [ 354.908846][ T9] adutux 13-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 355.016898][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 355.020675][T11939] bond1: (slave dummy0): failed to get link speed/duplex [ 355.126733][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 355.131164][T11939] bond1: (slave dummy0): failed to get link speed/duplex [ 355.159976][ T7308] usb 13-1: USB disconnect, device number 20 [ 355.248722][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 355.252284][T11939] bond1: (slave dummy0): failed to get link speed/duplex [ 355.549947][T18563] loop5: detected capacity change from 0 to 7 [ 355.555331][T18563] Dev loop5: unable to read RDB block 7 [ 355.559731][T18563] loop5: unable to read partition table [ 355.561612][T18563] loop5: partition table beyond EOD, truncated [ 355.564998][T18563] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 355.570060][ T8962] wlan1: Creating new IBSS network, BSSID 76:d5:9e:f7:86:20 [ 356.168220][ T42] audit: type=1400 audit(1784923685.064:1828): avc: denied { bind } for pid=18584 comm="syz.9.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 356.186489][ T42] audit: type=1400 audit(1784923685.074:1829): avc: denied { listen } for pid=18584 comm="syz.9.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 356.217676][ T42] audit: type=1326 audit(1784923685.074:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18584 comm="syz.9.3715" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc47179de99 code=0x0 [ 356.494081][ T42] audit: type=1400 audit(1784923685.394:1831): avc: denied { shutdown } for pid=18602 comm="syz.6.3713" lport=48771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.514804][T18610] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3714'. [ 356.788738][T18623] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.3721'. [ 356.794140][T18623] veth0_to_bond: default FDB implementation only supports local addresses [ 356.838972][T18625] loop5: detected capacity change from 0 to 7 [ 356.841491][T18625] Dev loop5: unable to read RDB block 7 [ 356.843718][T18625] loop5: unable to read partition table [ 356.845683][T18625] loop5: partition table beyond EOD, truncated [ 356.848745][T18625] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 357.040787][ T42] audit: type=1400 audit(1784923685.944:1832): avc: denied { append } for pid=18629 comm="syz.9.3724" name="0:0:0:0" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 357.057291][ T42] audit: type=1400 audit(1784923685.954:1833): avc: denied { ioctl } for pid=18629 comm="syz.9.3724" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=724 ioctlcmd=0x2271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 357.293350][T18645] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3729'. [ 357.297904][T18645] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3729'. [ 357.303779][T18645] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3729'. [ 357.309884][T18647] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 357.321915][T18647] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 357.359842][T18652] loop5: detected capacity change from 0 to 7 [ 357.363814][T18652] Dev loop5: unable to read RDB block 7 [ 357.365642][T18652] loop5: unable to read partition table [ 357.367983][T18652] loop5: partition table beyond EOD, truncated [ 357.370476][T18652] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 357.417249][T18654] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.666063][ T42] audit: type=1400 audit(1784923686.564:1834): avc: denied { mount } for pid=18661 comm="syz.6.3735" name="/" dev="ramfs" ino=97398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 357.713426][ T42] audit: type=1804 audit(1784923686.614:1835): pid=18662 uid=60928 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.3735" name="bus" dev="ramfs" ino=97404 res=1 errno=0 [ 357.722089][T18665] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3736'. [ 357.724994][T18665] bridge_slave_1: left allmulticast mode [ 357.727603][T18665] bridge_slave_1: left promiscuous mode [ 357.729992][T18665] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.737315][T18665] bridge_slave_0: left allmulticast mode [ 357.739913][T18665] bridge_slave_0: left promiscuous mode [ 357.742777][T18665] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.856952][ T42] audit: type=1400 audit(1784923686.754:1836): avc: denied { bind } for pid=18667 comm="syz.7.3737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 357.902794][T18672] Device name not specified. [ 357.902794][T18672] [ 357.933443][ T42] audit: type=1400 audit(1784923686.834:1837): avc: denied { write } for pid=18671 comm="syz.7.3738" name="/" dev="9p" ino=78395377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 357.949834][ T42] audit: type=1400 audit(1784923686.844:1838): avc: denied { associate } for pid=18671 comm="syz.7.3738" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 358.389782][ T42] audit: type=1400 audit(1784923687.294:1839): avc: denied { write } for pid=18688 comm="syz.9.3743" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 358.972449][ T42] audit: type=1400 audit(1784923687.874:1840): avc: denied { write } for pid=18702 comm="syz.8.3749" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 358.980784][ T42] audit: type=1400 audit(1784923687.874:1841): avc: denied { map } for pid=18702 comm="syz.8.3749" path="pipe:[96255]" dev="pipefs" ino=96255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 358.994269][T18708] overlayfs: failed to clone upperpath [ 359.310393][T18713] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 359.314131][ T5092] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 359.796305][T16385] net_ratelimit: 81 callbacks suppressed [ 359.796319][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 359.800363][T16385] bond1: (slave dummy0): failed to get link speed/duplex [ 359.906403][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 359.908973][T11939] bond1: (slave dummy0): failed to get link speed/duplex [ 360.013405][T18722] loop5: detected capacity change from 0 to 7 [ 360.016322][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 360.018604][T11939] bond1: (slave dummy0): failed to get link speed/duplex [ 360.030630][T18722] Dev loop5: unable to read RDB block 7 [ 360.035570][T18722] loop5: unable to read partition table [ 360.041398][T18722] loop5: partition table beyond EOD, truncated [ 360.046794][T18722] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 360.127058][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 360.129420][T11939] bond1: (slave dummy0): failed to get link speed/duplex [ 360.238359][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 360.241351][T16385] bond1: (slave dummy0): failed to get link speed/duplex [ 360.627669][ T7308] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 360.724216][ T5092] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 360.787039][ T7308] usb 12-1: Using ep0 maxpacket: 32 [ 360.796855][ T7308] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 360.801668][ T7308] usb 12-1: config 0 has no interface number 0 [ 360.808355][ T7308] usb 12-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 360.817610][ T7308] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.825054][ T7308] usb 12-1: Product: syz [ 360.828681][ T7308] usb 12-1: Manufacturer: syz [ 360.831615][ T7308] usb 12-1: SerialNumber: syz [ 360.845353][ T7308] usb 12-1: config 0 descriptor?? [ 360.853390][ T7308] usb 12-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 360.861595][ T7308] usb 12-1: selecting invalid altsetting 1 [ 360.864670][ T7308] usb 12-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 360.882726][ T7308] usb 12-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 360.887166][ T7308] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 360.890026][ T7308] usb 12-1: media controller created [ 360.897913][ T7308] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.201027][T18776] process '/newroot/588/file0' started with executable stack [ 361.291377][ T7308] usb 12-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 361.380805][ T7308] usb 12-1: USB disconnect, device number 25 [ 361.553942][T18793] netlink: 'syz.6.3776': attribute type 3 has an invalid length. [ 361.870810][T18806] netlink: 'syz.7.3781': attribute type 1 has an invalid length. [ 361.939510][T18806] 8021q: adding VLAN 0 to HW filter on device bond5 [ 361.991604][T18808] bond5: (slave gretap2): making interface the new active one [ 361.994588][T18808] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 362.143339][T18808] bond5 (unregistering): (slave gretap2): Releasing active interface [ 362.171140][T18808] bond5 (unregistering): Released all slaves [ 362.633590][T18814] program syz.7.3783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.768262][T18820] geneve1: entered promiscuous mode [ 362.771391][T18820] batadv0: entered promiscuous mode [ 362.773969][T18820] debugfs: 'hsr0' already exists in 'hsr' [ 362.776406][T18820] Cannot create hsr debugfs directory [ 362.783860][T18820] geneve1: left promiscuous mode [ 362.795777][T18820] batadv0: left promiscuous mode [ 363.000207][T18830] tmpfs: Bad value for 'mpol' [ 363.022020][T18839] autofs: Unknown parameter '' [ 363.208365][T18845] binder_alloc: 18843: binder_alloc_buf, no vma [ 363.213798][T18849] binder_alloc: binder_alloc_mmap_handler: 18843 200000ffe000-200001000000 already mapped failed -16 [ 363.227288][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.237084][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.242243][T18849] binder_alloc: binder_alloc_mmap_handler: 18843 200000ffe000-200001000000 already mapped failed -16 [ 363.248531][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.253552][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.257177][T18849] binder_alloc: binder_alloc_mmap_handler: 18843 200000ffe000-200001000000 already mapped failed -16 [ 363.260896][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.362221][ T42] audit: type=1400 audit(1784923692.264:1842): avc: denied { mount } for pid=18857 comm="syz.9.3797" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 363.390446][ T42] audit: type=1400 audit(1784923692.294:1843): avc: denied { unmount } for pid=16759 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 363.623661][T18850] ±ÿ speed is unknown, defaulting to 1000 [ 363.630089][T18850] sit0 speed is unknown, defaulting to 1000 [ 363.728025][T18850] xfrm0 speed is unknown, defaulting to 1000 [ 363.955502][T18850] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.958025][T18850] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.960721][T18850] bridge_slave_0: entered allmulticast mode [ 363.963742][T18850] bridge_slave_0: entered promiscuous mode [ 363.967662][T18850] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.969982][T18850] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.972867][T18850] bridge_slave_1: entered allmulticast mode [ 363.979067][T18850] bridge_slave_1: entered promiscuous mode [ 363.998260][T18850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.014208][T18850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.034181][T18850] team0: Port device team_slave_0 added [ 364.038656][T18850] team0: Port device team_slave_1 added [ 364.053509][T18850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.055781][T18850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.064089][T18850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.069062][T18850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.071940][T18850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.080365][T18850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.106210][T18850] hsr_slave_0: entered promiscuous mode [ 364.108643][T18850] hsr_slave_1: entered promiscuous mode [ 364.111029][T18850] debugfs: 'hsr0' already exists in 'hsr' [ 364.112837][T18850] Cannot create hsr debugfs directory [ 364.244711][T18850] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.249508][T18850] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.274759][T18887] netlink: 2048 bytes leftover after parsing attributes in process `syz.8.3801'. [ 364.277985][T18887] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3801'. [ 364.340727][T18850] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.344227][T18850] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.467899][T18850] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.475929][T18850] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.550116][T18850] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.553381][T18850] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.728569][T18850] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 364.732839][T18850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.735788][T18850] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 364.746473][T18850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.750153][T18850] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 364.759134][T18850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.762771][T18850] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 364.768312][T18850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.820856][T18850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.836982][T18850] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.844353][T10565] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.846629][T10565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.858564][T10565] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.860840][T10565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.873901][ T5785] net_ratelimit: 67 callbacks suppressed [ 364.873912][ T5785] bond1: (slave gretap1): failed to get link speed/duplex [ 364.879076][ T5092] Bluetooth: hci0: command 0x0c1a tx timeout [ 364.881057][ T5785] bond1: (slave dummy0): failed to get link speed/duplex [ 364.996094][ T5785] bond1: (slave gretap1): failed to get link speed/duplex [ 364.998340][ T5785] bond1: (slave dummy0): failed to get link speed/duplex [ 365.106779][ T5785] bond1: (slave gretap1): failed to get link speed/duplex [ 365.109657][ T5785] bond1: (slave dummy0): failed to get link speed/duplex [ 365.124741][T18850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.226373][ T5785] bond1: (slave gretap1): failed to get link speed/duplex [ 365.228880][ T5785] bond1: (slave dummy0): failed to get link speed/duplex [ 365.293013][T18850] veth0_vlan: entered promiscuous mode [ 365.300505][T18850] veth1_vlan: entered promiscuous mode [ 365.325709][T18850] veth0_macvtap: entered promiscuous mode [ 365.330666][T18850] veth1_macvtap: entered promiscuous mode [ 365.340629][T18850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.349087][T18850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.355431][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.359178][ T5092] Bluetooth: hci3: command tx timeout [ 365.363266][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.370319][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.379461][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.432021][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 365.450316][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 365.518865][T10565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.527481][T10565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.545420][T10558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.548682][T10558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.565755][ T42] audit: type=1400 audit(1784923694.464:1844): avc: denied { mounton } for pid=18850 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 365.573906][ T42] audit: type=1400 audit(1784923694.474:1845): avc: denied { mounton } for pid=18850 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 365.611756][T18913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.627181][T18915] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 365.630022][T18915] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 365.633293][T18913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.633358][T18915] overlayfs: failed to set uuid (397/file1, err=-13); falling back to uuid=null. [ 365.678687][T18913] netlink: 'syz.7.3809': attribute type 10 has an invalid length. [ 365.692506][T18913] team0: Port device veth0 added [ 365.700779][ T42] audit: type=1400 audit(1784923694.604:1846): avc: denied { bind } for pid=18916 comm="syz.9.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 365.707757][ T42] audit: type=1400 audit(1784923694.604:1847): avc: denied { listen } for pid=18916 comm="syz.9.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 365.866890][T18910] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 365.902868][ T42] audit: type=1400 audit(1784923694.804:1848): avc: denied { create } for pid=18935 comm="syz.9.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 365.920586][ T42] audit: type=1400 audit(1784923694.814:1849): avc: denied { setopt } for pid=18935 comm="syz.9.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 366.027594][T18910] usb 12-1: Using ep0 maxpacket: 8 [ 366.035195][T18910] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 366.044936][T18910] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.053138][T18910] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.058091][T18910] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.064351][T18910] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.072676][T18910] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.077952][T18910] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.307220][T18910] usb 12-1: usb_control_msg returned -71 [ 366.315002][T18910] usbtmc 12-1:16.0: can't read capabilities [ 366.328362][T18910] usb 12-1: USB disconnect, device number 26 [ 366.556043][ T7308] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 366.633905][ T42] audit: type=1400 audit(1784923695.534:1850): avc: denied { create } for pid=18983 comm="syz.8.3822" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 366.683179][T18988] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3823'. [ 366.707226][ T7308] usb 11-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 366.717279][ T7308] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.721076][ T7308] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.725093][ T7308] usb 11-1: Product: 《 [ 366.728123][ T7308] usb 11-1: Manufacturer: ä°Š [ 366.730944][ T7308] usb 11-1: SerialNumber: ࡃ [ 366.950000][ T7308] usb 11-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 366.967439][ T7308] usb 11-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 366.973926][ T7308] usb 11-1: unit 5 not found! [ 367.001222][T18992] kvm: user requested TSC rate below hardware speed [ 367.033342][ T7308] usb 11-1: USB disconnect, device number 21 [ 367.050835][T15111] udevd[15111]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.347248][T19004] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 367.437424][ T5092] Bluetooth: hci3: command tx timeout [ 367.646569][T19012] netlink: 'syz.9.3830': attribute type 1 has an invalid length. [ 367.651524][T19012] netlink: 'syz.9.3830': attribute type 12 has an invalid length. [ 367.654941][T19012] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3830'. [ 367.700323][T19012] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 367.890155][T19034] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 368.199451][T19012] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 368.204789][T19012] overlayfs: failed to look up (tracing) for ino (-66) [ 368.404936][ T42] audit: type=1400 audit(1784923697.305:1851): avc: denied { write } for pid=19044 comm="syz.7.3842" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 368.475942][ T848] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 368.517844][ T42] audit: type=1400 audit(1784923697.425:1852): avc: denied { append } for pid=19053 comm="syz.7.3845" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 368.560382][T19056] input: syz0 as /devices/virtual/input/input55 [ 368.606975][ T42] audit: type=1400 audit(1784923697.515:1853): avc: denied { ioctl } for pid=5129 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4269 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 368.637065][ T848] usb 11-1: Using ep0 maxpacket: 8 [ 368.646384][ T848] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.657242][ T848] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 368.660885][ T848] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.671727][ T848] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.680491][ T848] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 368.698120][ T848] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.805556][ T42] audit: type=1400 audit(1784923697.705:1854): avc: denied { load_policy } for pid=19066 comm="syz.9.3849" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 368.814616][T19067] SELinux: ebitmap start bit (202309632) is beyond the end of the bitmap (1472) [ 368.818902][T19067] SELinux: invalid class [ 368.824494][T19073] netlink: 'syz.7.3850': attribute type 1 has an invalid length. [ 368.824738][T19067] SELinux: failed to load policy [ 368.861736][T19073] 8021q: adding VLAN 0 to HW filter on device bond5 [ 368.915369][ T848] usb 11-1: GET_CAPABILITIES returned 0 [ 368.919392][ T848] usbtmc 11-1:16.0: can't read capabilities [ 369.136080][ T9] usb 11-1: USB disconnect, device number 22 [ 369.516218][ T5092] Bluetooth: hci3: command tx timeout [ 369.899639][ T12] net_ratelimit: 72 callbacks suppressed [ 369.899655][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 369.903665][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 370.016931][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 370.020000][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 370.070157][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 370.126029][ T5785] bond1: (slave gretap1): failed to get link speed/duplex [ 370.128272][ T5785] bond1: (slave dummy0): failed to get link speed/duplex [ 370.245660][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 370.251876][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 370.377094][ T5785] bond1: (slave gretap1): failed to get link speed/duplex [ 370.379397][ T5785] bond1: (slave dummy0): failed to get link speed/duplex [ 370.445790][T19108] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 370.955442][ T42] audit: type=1326 audit(1784923699.855:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19113 comm="syz.7.3863" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe77e59de99 code=0x0 [ 371.056972][ T42] audit: type=1326 audit(1784923699.955:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19113 comm="syz.7.3863" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe77e59de99 code=0x0 [ 371.178464][T19121] block nbd7: Cannot use ioctl interface on a netlink controlled device. [ 371.182837][T19121] block nbd7: Cannot use ioctl interface on a netlink controlled device. [ 371.645797][ T5092] Bluetooth: hci3: command tx timeout [ 371.906070][T19134] block nbd9: Cannot use ioctl interface on a netlink controlled device. [ 371.920812][ T8962] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 371.931723][T19133] block nbd9: Cannot use ioctl interface on a netlink controlled device. [ 371.935201][T19135] block nbd9: NBD_DISCONNECT [ 371.943213][ T8066] block nbd9: Wrong magic (0x25609513) [ 371.958418][ T8013] block nbd9: Disconnected due to user request. [ 371.960233][T19135] block nbd9: Send disconnect failed -32 [ 371.983369][T19135] block nbd9: Send disconnect failed -32 [ 372.220740][ T42] audit: type=1400 audit(1784923701.125:1857): avc: denied { mmap_zero } for pid=19140 comm="syz.8.3872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 372.485075][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 372.494519][ T42] audit: type=1400 audit(1784923701.395:1858): avc: denied { module_load } for pid=19158 comm="syz.7.3878" path="/504/file1" dev="tmpfs" ino=2743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 372.501956][T19159] Invalid ELF header len 18 [ 372.757377][T19096] loop5: detected capacity change from 0 to 7 [ 372.785931][T19096] Dev loop5: unable to read RDB block 7 [ 372.796236][T19096] loop5: unable to read partition table [ 372.808063][T19167] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 372.812167][T19167] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 372.815954][T19096] loop5: partition table beyond EOD, truncated [ 372.822683][T19096] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 373.539854][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3886'. [ 373.666896][T19195] /dev/sg0: Can't lookup blockdev [ 373.817260][T19197] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3890'. [ 373.825837][T19197] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 373.937213][T19200] tmpfs: Bad value for 'mpol' [ 374.059666][T19199] loop5: detected capacity change from 0 to 7 [ 374.063250][T19199] Dev loop5: unable to read RDB block 7 [ 374.065058][T19199] loop5: unable to read partition table [ 374.067298][T19199] loop5: partition table beyond EOD, truncated [ 374.071149][T19199] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 374.371574][ T42] audit: type=1400 audit(1784923703.265:1859): avc: denied { setopt } for pid=19209 comm="syz.6.3895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 374.573530][T19227] netlink: 'syz.7.3902': attribute type 1 has an invalid length. [ 374.650175][T19227] 8021q: adding VLAN 0 to HW filter on device bond6 [ 374.655682][T19231] syz_tun: entered allmulticast mode [ 374.682566][T19227] binder: 19226:19227 ioctl c0306201 0 returned -14 [ 374.955919][T18910] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 374.958492][ T12] net_ratelimit: 202 callbacks suppressed [ 374.958509][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 374.966850][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 375.095803][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 375.098378][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 375.125348][ T1046] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 375.127532][T18910] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 375.131465][T18910] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 375.137538][T18910] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 375.143351][T18910] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.153788][T19223] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 375.160181][T18910] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.206782][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 375.210088][T16385] bond1: (slave dummy0): failed to get link speed/duplex [ 375.275930][ T1046] usb 12-1: Using ep0 maxpacket: 32 [ 375.280132][T19219] syz_tun: left allmulticast mode [ 375.315405][ T5785] bond1: (slave gretap1): failed to get link speed/duplex [ 375.318499][ T5785] bond1: (slave dummy0): failed to get link speed/duplex [ 375.329074][ T1046] usb 12-1: unable to get BOS descriptor or descriptor too short [ 375.338027][ T1046] usb 12-1: string descriptor 0 read error: -22 [ 375.340098][ T1046] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 375.344335][ T1046] usb 12-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 375.352002][ T1046] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 375.362661][ T1046] dw2102: su3000_power_ctrl: 1, initialized 0 [ 375.367708][ T1046] dvb-usb: bulk message failed: -22 (2/0) [ 375.372623][ T9] usb 14-1: USB disconnect, device number 5 [ 375.379972][ T5092] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 375.398837][ T1046] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 375.404169][ T1046] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 375.416407][ T1046] usb 12-1: media controller created [ 375.419906][ T1046] dvb-usb: bulk message failed: -22 (6/0) [ 375.438617][ T1046] dw2102: i2c transfer failed. [ 375.445466][ T1046] dvb-usb: bulk message failed: -22 (6/0) [ 375.450326][ T1046] dw2102: i2c transfer failed. [ 375.452941][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 375.457994][T16385] bond1: (slave dummy0): failed to get link speed/duplex [ 375.458339][ T1046] dvb-usb: bulk message failed: -22 (6/0) [ 375.463635][ T1046] dw2102: i2c transfer failed. [ 375.466552][ T1046] dvb-usb: bulk message failed: -22 (6/0) [ 375.475392][ T1046] dw2102: i2c transfer failed. [ 375.477078][ T1046] dvb-usb: bulk message failed: -22 (6/0) [ 375.479994][ T1046] dw2102: i2c transfer failed. [ 375.481519][ T1046] dvb-usb: bulk message failed: -22 (6/0) [ 375.483290][ T1046] dw2102: i2c transfer failed. [ 375.484742][ T1046] dvb-usb: MAC address: 02:02:02:02:02:02 [ 375.494945][ T1046] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.499577][T19229] loop5: detected capacity change from 0 to 7 [ 375.506614][T19229] Dev loop5: unable to read RDB block 7 [ 375.508623][T19229] loop5: unable to read partition table [ 375.510967][T19229] loop5: partition table beyond EOD, truncated [ 375.517737][T19229] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 375.521548][ T1046] dvb-usb: bulk message failed: -22 (3/0) [ 375.528257][ T1046] dw2102: command 0x0e transfer failed. [ 375.538562][ T1046] dvb-usb: bulk message failed: -22 (3/0) [ 375.542889][ T1046] dw2102: command 0x0e transfer failed. [ 375.567443][ T42] audit: type=1400 audit(1784923704.475:1860): avc: denied { read } for pid=19238 comm="syz.6.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 375.601903][ T42] audit: type=1400 audit(1784923704.505:1861): avc: denied { name_bind } for pid=19241 comm="syz.6.3906" src=20009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 375.611058][ T42] audit: type=1400 audit(1784923704.505:1862): avc: denied { accept } for pid=19241 comm="syz.6.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 375.618095][ T42] audit: type=1400 audit(1784923704.505:1863): avc: denied { bind } for pid=19241 comm="syz.6.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 375.627060][ T42] audit: type=1400 audit(1784923704.515:1864): avc: denied { bpf } for pid=19232 comm="syz.7.3903" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 375.641857][ T42] audit: type=1400 audit(1784923704.515:1865): avc: denied { getopt } for pid=19232 comm="syz.7.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 375.778433][T19252] syzkaller0: entered promiscuous mode [ 375.780245][T19252] syzkaller0: entered allmulticast mode [ 375.855505][ T1046] dvb-usb: bulk message failed: -22 (3/0) [ 375.861260][ T1046] dw2102: command 0x0e transfer failed. [ 375.865376][ T1046] dvb-usb: bulk message failed: -22 (3/0) [ 375.870477][ T1046] dw2102: command 0x0e transfer failed. [ 375.873741][ T1046] dvb-usb: bulk message failed: -22 (1/0) [ 375.878732][ T1046] dw2102: command 0x51 transfer failed. [ 375.890465][T19233] dvb-usb: bulk message failed: -22 (22/0) [ 375.900729][T19233] dw2102: i2c transfer failed. [ 375.941117][ T1046] DVB: Unable to find symbol ds3000_attach() [ 375.943247][ T1046] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 375.949124][T19258] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3911'. [ 375.985346][ T1046] rc_core: IR keymap rc-su3000 not found [ 375.987734][ T1046] Registered IR keymap rc-empty [ 375.990822][ T1046] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 376.013162][ T1046] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input57 [ 376.021088][ T1046] dvb-usb: schedule remote query interval to 150 msecs. [ 376.024200][ T1046] dw2102: su3000_power_ctrl: 0, initialized 1 [ 376.026438][ T1046] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 376.030592][ T1046] usb 12-1: USB disconnect, device number 27 [ 376.061159][ T1046] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 376.225720][ T10] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 376.276681][T19264] syz_tun: entered allmulticast mode [ 376.385800][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 376.447751][ T10] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.481986][ T10] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.508437][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 376.523264][ T10] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 376.533089][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.551338][ T10] usb 11-1: config 0 descriptor?? [ 376.617963][T19266] bond1: (slave dummy0): Releasing backup interface [ 376.630753][T19266] batman_adv: batadv0: Adding interface: dummy0 [ 376.632889][T19266] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.643596][T19266] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 376.648495][T19266] CIFS mount error: No usable UNC path provided in device string! [ 376.648495][T19266] [ 376.651803][T19266] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 376.774407][T19276] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 376.907638][T19261] syz_tun: left allmulticast mode [ 376.970230][ T10] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 376.976384][ T10] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 376.980788][ T10] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 376.981176][T19283] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3919'. [ 376.985651][ T10] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 376.988506][ T10] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 376.991161][ T10] mcp2221 0003:04D8:00DD.0012: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 377.014408][ T42] audit: type=1400 audit(1784923705.915:1866): avc: denied { module_request } for pid=19284 comm="syz.9.3920" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 377.118535][T19291] netlink: 'syz.9.3922': attribute type 1 has an invalid length. [ 377.178272][T19256] bond1: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 377.183562][ T42] audit: type=1400 audit(1784923706.085:1867): avc: denied { append } for pid=19255 comm="syz.6.3910" name="001" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 377.185737][ T7308] usb 11-1: USB disconnect, device number 23 [ 377.490374][ T5092] Bluetooth: hci0: Malformed LE Event: 0x0d [ 377.773372][ T42] audit: type=1400 audit(1784923706.675:1868): avc: denied { perfmon } for pid=19308 comm="syz.6.3926" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 378.046480][T19313] syz_tun: entered allmulticast mode [ 378.304057][T19315] x_tables: duplicate underflow at hook 2 [ 378.310793][T19315] vlan2: entered promiscuous mode [ 378.312510][T19315] syz_tun: entered promiscuous mode [ 378.314442][T19315] vlan2: entered allmulticast mode [ 378.330643][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.335275][T19315] syz_tun: entered allmulticast mode [ 378.641609][T19310] syz_tun: left allmulticast mode [ 378.701578][T19334] netlink: 'syz.9.3934': attribute type 2 has an invalid length. [ 378.760872][T19334] : entered promiscuous mode [ 378.969703][T19349] netlink: 'syz.9.3938': attribute type 39 has an invalid length. [ 379.163188][T19345] loop5: detected capacity change from 0 to 7 [ 379.171417][T19345] Dev loop5: unable to read RDB block 7 [ 379.176831][T19345] loop5: unable to read partition table [ 379.188647][T19345] loop5: partition table beyond EOD, truncated [ 379.206924][T19345] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 379.237766][T19360] dlm: no locking on control device [ 379.675095][T19364] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 379.679407][T19364] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 379.711698][T19364] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 379.718393][T19364] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 379.784473][T19364] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.795467][T19364] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 379.965148][ T5736] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 380.015633][T16053] net_ratelimit: 47 callbacks suppressed [ 380.015646][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 380.116424][ T5736] usb 12-1: Using ep0 maxpacket: 8 [ 380.120891][ T5736] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 380.125538][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 380.131069][ T5736] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 380.140374][ T5736] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 380.145894][ T5736] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 380.153567][ T5736] usb 12-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 380.158411][ T5736] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.162593][ T5736] usb 12-1: Product: syz [ 380.165928][ T5736] usb 12-1: Manufacturer: syz [ 380.170094][ T5736] usb 12-1: SerialNumber: syz [ 380.175421][ T5736] usb 12-1: config 0 descriptor?? [ 380.178787][T19377] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 380.245237][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 380.356958][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 380.387489][ T5736] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 380.397958][ T5736] input: Griffin SoundKnob as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input58 [ 380.446379][T19396] bond0: invalid NS target ff69:6e66:696e:6962:616e:642f:7264:6d61 specified for addition [ 380.452129][T19396] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 380.466988][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 380.538489][T19398] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3956'. [ 380.575118][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 380.591246][T19377] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3947'. [ 380.598419][T19377] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3947'. [ 380.609297][T19377] netlink: 'syz.7.3947': attribute type 1 has an invalid length. [ 380.613568][T19377] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3947'. [ 380.754216][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 380.754227][ T42] audit: type=1326 audit(1784923709.655:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19401 comm="syz.9.3958" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc47179de99 code=0x0 [ 380.785120][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 380.861411][T19389] loop5: detected capacity change from 0 to 7 [ 380.866739][T19389] Dev loop5: unable to read RDB block 7 [ 380.871337][T19389] loop5: unable to read partition table [ 380.873372][T19389] loop5: partition table beyond EOD, truncated [ 380.882355][T19389] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 380.933057][ C2] powermate: config urb returned -71 [ 380.937572][ C2] powermate: config urb returned -71 [ 380.939566][ C2] powermate: config urb returned -71 [ 380.941450][ T7308] usb 12-1: USB disconnect, device number 28 [ 380.943343][ C2] powermate: config urb returned -71 [ 380.943362][ C2] powermate 12-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 380.945376][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 381.065134][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 381.153221][ T42] audit: type=1400 audit(1784923710.045:1872): avc: denied { mounton } for pid=19418 comm="syz.8.3964" path="/430/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 381.166348][T19419] usb 1-1: USB disconnect, device number 3 [ 381.175247][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 381.218565][T19420] xt_cgroup: invalid path, errno=-2 [ 381.321362][ T42] audit: type=1400 audit(1784923710.215:1873): avc: denied { unmount } for pid=13425 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 381.426184][T19424] ipvlan0: entered promiscuous mode [ 381.428129][T19424] ipvlan0: entered allmulticast mode [ 381.429977][T19424] veth0_vlan: entered allmulticast mode [ 381.508619][T19426] loop5: detected capacity change from 0 to 7 [ 381.512664][T19426] Dev loop5: unable to read RDB block 7 [ 381.515309][T19426] loop5: unable to read partition table [ 381.518183][T19426] loop5: partition table beyond EOD, truncated [ 381.520992][T19426] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 385.065552][T16385] net_ratelimit: 34 callbacks suppressed [ 385.065568][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 385.185577][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 385.305478][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 385.414972][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 385.524887][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 385.634970][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 385.744942][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 385.854952][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 385.964882][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 386.075775][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 390.094812][T16385] net_ratelimit: 35 callbacks suppressed [ 390.094832][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 390.215288][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 390.324653][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 390.434746][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 390.544652][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 390.654673][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 390.764703][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 390.874675][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 390.984660][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 391.094695][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 395.205013][T16385] net_ratelimit: 36 callbacks suppressed [ 395.205033][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 395.315333][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 395.424473][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 395.534669][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 395.645001][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 395.690704][T19431] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 395.754506][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 395.761861][T19449] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3974'. [ 395.776932][T19431] cramfs: wrong magic [ 395.788375][T19449] input input59: cannot allocate more than FF_MAX_EFFECTS effects [ 395.864281][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 395.891463][T19457] loop5: detected capacity change from 0 to 7 [ 395.900934][T19457] Dev loop5: unable to read RDB block 7 [ 395.907176][T19457] loop5: unable to read partition table [ 395.909613][T19459] xt_cgroup: invalid path, errno=-2 [ 395.912878][T19457] loop5: partition table beyond EOD, truncated [ 395.920841][T19457] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 395.975510][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 395.982673][ T1046] hid-generic 0006:7FFFFFFF:0008.0013: unknown main item tag 0x0 [ 395.988099][ T1046] hid-generic 0006:7FFFFFFF:0008.0013: unknown main item tag 0x0 [ 395.991104][ T1046] hid-generic 0006:7FFFFFFF:0008.0013: unknown main item tag 0x0 [ 395.993693][ T1046] hid-generic 0006:7FFFFFFF:0008.0013: unknown main item tag 0x0 [ 395.997290][ T1046] hid-generic 0006:7FFFFFFF:0008.0013: unknown main item tag 0x0 [ 395.999807][ T1046] hid-generic 0006:7FFFFFFF:0008.0013: unknown main item tag 0x0 [ 396.002455][ T1046] hid-generic 0006:7FFFFFFF:0008.0013: unknown main item tag 0x0 [ 396.005369][ T1046] hid-generic 0006:7FFFFFFF:0008.0013: unknown main item tag 0x0 [ 396.007872][ T1046] hid-generic 0006:7FFFFFFF:0008.0013: unknown main item tag 0x0 [ 396.010403][ T1046] hid-generic 0006:7FFFFFFF:0008.0013: unknown main item tag 0x0 [ 396.021820][ T1046] hid-generic 0006:7FFFFFFF:0008.0013: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 396.044638][ T9] usb 1-1: new high-speed USB device number 4 using ehci-pci [ 396.084471][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 396.096335][T19462] fido_id[19462]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 396.194391][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 396.230658][ T9] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 396.234684][ T9] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 396.238260][ T9] usb 1-1: Product: QEMU USB Tablet [ 396.240389][ T9] usb 1-1: Manufacturer: QEMU [ 396.242048][ T9] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 396.265391][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0014/input/input60 [ 396.356956][ T9] hid-generic 0003:0627:0001.0014: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 396.370001][T19455] usb 1-1: USB disconnect, device number 4 [ 396.631262][T19471] fido_id[19471]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.7/usb1/report_descriptor': No such file or directory [ 396.703280][T19476] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 396.904710][ T9] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 396.984681][ T7308] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 397.054851][ T9] usb 11-1: device descriptor read/64, error -71 [ 397.134321][ T7308] usb 14-1: Using ep0 maxpacket: 8 [ 397.138553][ T7308] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 397.143442][ T7308] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 397.147547][ T7308] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.154012][ T7308] usb 14-1: config 0 descriptor?? [ 397.304616][ T9] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 397.343102][T19489] loop5: detected capacity change from 0 to 7 [ 397.348858][T19489] Dev loop5: unable to read RDB block 7 [ 397.351308][T19489] loop5: unable to read partition table [ 397.353954][T19489] loop5: partition table beyond EOD, truncated [ 397.358586][T19489] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 397.372998][ T7308] iowarrior 14-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 397.455811][ T9] usb 11-1: device descriptor read/64, error -71 [ 397.576305][ T9] usb usb11-port1: attempt power cycle [ 397.592963][T19496] bridge_slave_1: left promiscuous mode [ 397.595404][T19496] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.601580][T19496] bridge_slave_0: left allmulticast mode [ 397.603408][T19496] bridge_slave_0: left promiscuous mode [ 397.606222][T19496] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.725844][T19501] can0: slcan on ttyS3. [ 397.774962][T19500] can0 (unregistered): slcan off ttyS3. [ 397.914476][ T9] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 397.934649][ T9] usb 11-1: device descriptor read/8, error -71 [ 398.065663][ T42] audit: type=1400 audit(1784923726.966:1874): avc: denied { read write } for pid=19516 comm="syz.8.3997" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 398.078918][ T42] audit: type=1400 audit(1784923726.966:1875): avc: denied { open } for pid=19516 comm="syz.8.3997" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 398.091946][ T42] audit: type=1400 audit(1784923726.976:1876): avc: denied { getopt } for pid=19516 comm="syz.8.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 398.106551][T19514] loop5: detected capacity change from 0 to 7 [ 398.110319][T19514] Dev loop5: unable to read RDB block 7 [ 398.112281][T19514] loop5: unable to read partition table [ 398.114294][T19514] loop5: partition table beyond EOD, truncated [ 398.116453][T19514] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 398.205130][ T9] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 398.224827][ T9] usb 11-1: device descriptor read/8, error -71 [ 398.260955][T19524] team0: entered promiscuous mode [ 398.262666][T19524] team_slave_0: entered promiscuous mode [ 398.265127][T19524] team_slave_1: entered promiscuous mode [ 398.323246][T19530] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4003'. [ 398.326614][T19530] Unknown options in mask b7f2 [ 398.329509][ T42] audit: type=1400 audit(1784923727.226:1877): avc: denied { wake_alarm } for pid=19529 comm="syz.8.4003" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 398.345256][ T9] usb usb11-port1: unable to enumerate USB device [ 398.357487][T19532] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4004'. [ 398.369326][ T42] audit: type=1400 audit(1784923727.266:1878): avc: denied { read write } for pid=19527 comm="syz.7.4001" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 398.376855][ T42] audit: type=1400 audit(1784923727.266:1879): avc: denied { open } for pid=19527 comm="syz.7.4001" path="/546/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 398.503600][T19542] overlayfs: missing 'workdir' [ 398.632775][T19549] cgroup2: Unknown parameter 'euid' [ 398.671054][ T42] audit: type=1400 audit(1784923727.566:1880): avc: denied { getopt } for pid=19550 comm="syz.8.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 399.132871][T19528] orangefs_mount: mount request failed with -4 [ 399.283083][ T42] audit: type=1400 audit(1784923728.176:1881): avc: denied { read } for pid=19558 comm="syz.7.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 399.288080][T16053] tipc: Subscription rejected, illegal request [ 399.471781][ T42] audit: type=1400 audit(1784923728.366:1882): avc: denied { read } for pid=19563 comm="syz.7.4015" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 399.478960][ T42] audit: type=1400 audit(1784923728.366:1883): avc: denied { open } for pid=19563 comm="syz.7.4015" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 399.511155][T19567] /dev/sg0: Can't lookup blockdev [ 399.709542][T19584] xt_cgroup: invalid path, errno=-2 [ 399.714720][T19585] netlink: 200 bytes leftover after parsing attributes in process `syz.7.4020'. [ 399.771359][ T5736] usb 14-1: USB disconnect, device number 6 [ 399.954437][T19600] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4026'. [ 399.957315][T19600] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4026'. [ 399.961323][T19600] loop5: detected capacity change from 0 to 2640 [ 399.973007][T19600] buffer_io_error: 11 callbacks suppressed [ 399.973018][T19600] Buffer I/O error on dev loop5, logical block 0, async page read [ 399.981759][T19600] Buffer I/O error on dev loop5, logical block 0, async page read [ 399.984704][T19600] Buffer I/O error on dev loop5, logical block 0, async page read [ 399.987012][T19600] Buffer I/O error on dev loop5, logical block 0, async page read [ 399.989540][T19600] Buffer I/O error on dev loop5, logical block 0, async page read [ 399.992922][T19600] Buffer I/O error on dev loop5, logical block 0, async page read [ 399.995714][T19600] Buffer I/O error on dev loop5, logical block 0, async page read [ 399.998202][T19600] Buffer I/O error on dev loop5, logical block 0, async page read [ 400.000537][T19600] ldm_validate_partition_table(): Disk read failed. [ 400.002499][T19600] Buffer I/O error on dev loop5, logical block 0, async page read [ 400.006436][T19600] Buffer I/O error on dev loop5, logical block 0, async page read [ 400.009141][T19600] Dev loop5: unable to read RDB block 0 [ 400.011082][T19600] loop5: unable to read partition table [ 400.018862][T19600] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 400.070222][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4027'. [ 400.218393][T19618] loop5: detected capacity change from 0 to 7 [ 400.222675][T19618] loop5: p1 < > p3 p4 [ 400.225429][T19618] loop5: partition table partially beyond EOD, truncated [ 400.231041][T19618] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 400.254341][T11939] net_ratelimit: 37 callbacks suppressed [ 400.254357][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 400.364242][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 400.474356][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 400.500450][T19628] loop5: detected capacity change from 0 to 1 [ 400.504944][T19628] ldm_validate_privheads(): Disk read failed. [ 400.508879][T19628] Dev loop5: unable to read RDB block 1 [ 400.510747][T19628] loop5: AHDI p2 p3 [ 400.511998][T19628] loop5: partition table partially beyond EOD, truncated [ 400.516035][T19628] loop5: p3 start 335544320 is beyond EOD, truncated [ 400.584486][T16385] bond1: (slave gretap1): failed to get link speed/duplex [ 400.610556][T19633] XFS (nbd8): SB validate failed with error -5. [ 400.698684][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 400.740596][T19640] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4037'. [ 400.803945][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 400.914058][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 400.947534][T19649] netlink: 'syz.9.4040': attribute type 1 has an invalid length. [ 400.962559][T19649] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4040'. [ 400.966550][T19649] bond3: entered promiscuous mode [ 400.972816][T19649] bridge1: entered promiscuous mode [ 400.983431][T19649] bond3: (slave bridge1): making interface the new active one [ 400.988185][T19649] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 400.994049][ T9] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 401.024354][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 401.146033][ T9] usb 13-1: Using ep0 maxpacket: 32 [ 401.150098][ T9] usb 13-1: config 1 interface 0 altsetting 19 bulk endpoint 0x82 has invalid maxpacket 8 [ 401.152908][ T9] usb 13-1: config 1 interface 0 altsetting 19 bulk endpoint 0x3 has invalid maxpacket 64 [ 401.159409][ T9] usb 13-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.163742][ T9] usb 13-1: config 1 interface 0 has no altsetting 0 [ 401.169116][ T9] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.172034][ T9] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.173941][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 401.176779][ T9] usb 13-1: Product: syz [ 401.178453][ T9] usb 13-1: Manufacturer: syz [ 401.180019][ T9] usb 13-1: SerialNumber: syz [ 401.183683][T19640] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 401.186997][T19640] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 401.283956][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 401.404073][ T9] cdc_ether 13-1:1.0: probe with driver cdc_ether failed with error -71 [ 401.414853][ T9] usb 13-1: USB disconnect, device number 21 [ 401.522246][T19675] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4047'. [ 401.663895][T19681] loop5: detected capacity change from 0 to 7 [ 401.686763][T19681] Dev loop5: unable to read RDB block 7 [ 401.688690][T19681] loop5: unable to read partition table [ 401.690695][T19681] loop5: partition table beyond EOD, truncated [ 401.692755][T19681] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 401.736427][T19683] Cannot find set identified by id 65534 to match [ 402.043421][T19705] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4060'. [ 402.062997][T19705] 8021q: adding VLAN 0 to HW filter on device bond7 [ 402.204114][T19713] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 402.265322][ T8228] Bluetooth: hci4: Frame reassembly failed (-84) [ 402.301279][T19719] sctp: [Deprecated]: syz.9.4063 (pid 19719) Use of int in maxseg socket option. [ 402.301279][T19719] Use struct sctp_assoc_value instead [ 402.340120][T19721] 9p: Bad value for 'rfdno' [ 402.342372][T19721] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4064'. [ 402.345485][T19721] netlink: 'syz.9.4064': attribute type 7 has an invalid length. [ 402.347989][T19721] netlink: 'syz.9.4064': attribute type 8 has an invalid length. [ 402.350430][T19721] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4064'. [ 402.417952][T19708] loop5: detected capacity change from 0 to 7 [ 402.427186][T19708] Dev loop5: unable to read RDB block 7 [ 402.429147][T19708] loop5: unable to read partition table [ 402.431062][T19708] loop5: partition table beyond EOD, truncated [ 402.439818][T19708] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 402.542239][T19730] tmpfs: Unknown parameter 'u' [ 402.580568][T19728] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.583144][T19728] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.622337][T19728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.632477][T19728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.686792][T16053] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.689600][T16053] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.692342][T16053] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.696925][T16053] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.701138][T16053] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.705429][T16053] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.713777][T16053] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.716503][T16053] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.264286][T19734] netlink: 'syz.6.4067': attribute type 9 has an invalid length. [ 403.266808][T19734] netlink: 19 bytes leftover after parsing attributes in process `syz.6.4067'. [ 403.307065][T19736] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 403.311923][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 403.311933][ T42] audit: type=1400 audit(1784923732.206:1907): avc: denied { relabelto } for pid=19735 comm="syz.6.4068" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 403.335462][ T42] audit: type=1400 audit(1784923732.216:1908): avc: denied { associate } for pid=19735 comm="syz.6.4068" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 403.459662][ T42] audit: type=1400 audit(1784923732.356:1909): avc: denied { write } for pid=19748 comm="syz.9.4073" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 403.483115][ T42] audit: type=1400 audit(1784923732.376:1910): avc: denied { create } for pid=19750 comm="syz.7.4074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 403.498471][T19753] netlink: 'syz.6.4075': attribute type 12 has an invalid length. [ 403.500848][ T42] audit: type=1400 audit(1784923732.396:1911): avc: denied { setopt } for pid=19750 comm="syz.7.4074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 403.508003][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4074'. [ 403.513068][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4074'. [ 403.521125][T19751] [U]  [ 403.525999][ T42] audit: type=1400 audit(1784923732.426:1912): avc: denied { map } for pid=19750 comm="syz.7.4074" path="socket:[105519]" dev="sockfs" ino=105519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 403.533582][ T42] audit: type=1400 audit(1784923732.426:1913): avc: denied { read } for pid=19750 comm="syz.7.4074" path="socket:[105519]" dev="sockfs" ino=105519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 403.597224][T19759] loop5: detected capacity change from 0 to 7 [ 403.599949][T19759] Dev loop5: unable to read RDB block 7 [ 403.601787][T19759] loop5: unable to read partition table [ 403.603646][T19759] loop5: partition table beyond EOD, truncated [ 403.606361][T19759] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 403.675450][ T42] audit: type=1400 audit(1784923732.566:1914): avc: denied { watch } for pid=19763 comm="syz.7.4078" path="/572/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 403.686627][T19765] fuse: Unknown parameter 'fsmagic' [ 403.720211][T19770] usb usb8: usbfs: process 19770 (syz.7.4080) did not claim interface 0 before use [ 403.767919][T19770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19770 comm=syz.7.4080 [ 403.880908][T19787] netlink: 'syz.9.4083': attribute type 11 has an invalid length. [ 403.881951][T19788] netlink: 4388 bytes leftover after parsing attributes in process `syz.9.4083'. [ 403.889638][T19788] netlink: 4388 bytes leftover after parsing attributes in process `syz.9.4083'. [ 403.987505][T19797] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 403.993356][ T42] audit: type=1400 audit(1784923732.886:1915): avc: denied { cmd } for pid=19795 comm="iou-wrk-19797" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 404.080518][ T42] audit: type=1400 audit(1784923732.977:1916): avc: denied { getopt } for pid=19800 comm="syz.9.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 404.132323][T19801] loop5: detected capacity change from 0 to 7 [ 404.140563][T19801] Dev loop5: unable to read RDB block 7 [ 404.147621][T19801] loop5: unable to read partition table [ 404.157775][T19801] loop5: partition table beyond EOD, truncated [ 404.164237][T19801] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 404.238273][ T5748] Bluetooth: hci4: command 0x1003 tx timeout [ 404.242663][ T5092] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 404.466432][T19827] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 404.495279][T18910] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 404.545288][T19828] kvm: user requested TSC rate below hardware speed [ 404.613454][T19832] loop5: detected capacity change from 0 to 7 [ 404.616444][T19832] Dev loop5: unable to read RDB block 7 [ 404.618531][T19832] loop5: unable to read partition table [ 404.620485][T19832] loop5: partition table beyond EOD, truncated [ 404.626316][T19832] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 404.654149][T18910] usb 11-1: Using ep0 maxpacket: 32 [ 404.659887][T18910] usb 11-1: unable to get BOS descriptor or descriptor too short [ 404.666462][T18910] usb 11-1: config 14 has an invalid interface number: 57 but max is 1 [ 404.671363][T18910] usb 11-1: config 14 has an invalid interface number: 228 but max is 1 [ 404.677011][T18910] usb 11-1: config 14 has no interface number 0 [ 404.683224][T18910] usb 11-1: config 14 has no interface number 1 [ 404.686596][T18910] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 404.689958][T18910] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 404.694467][T18910] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 404.698184][T18910] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 404.701771][T18910] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 404.706406][T18910] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 404.714993][T18910] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 404.720438][T18910] usb 11-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.727893][T18910] usb 11-1: config 14 interface 57 has no altsetting 0 [ 404.730582][T18910] usb 11-1: config 14 interface 228 has no altsetting 0 [ 404.736039][T18910] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 404.739366][T18910] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.742482][T18910] usb 11-1: Product: syz [ 404.744550][T18910] usb 11-1: Manufacturer: syz [ 404.746229][T18910] usb 11-1: SerialNumber: syz [ 404.821109][T19839] macvlan0: entered promiscuous mode [ 404.826929][T19839] netlink: 'syz.7.4101': attribute type 1 has an invalid length. [ 404.835620][T19839] netlink: 'syz.7.4101': attribute type 2 has an invalid length. [ 404.841172][T19842] netlink: 'syz.7.4101': attribute type 1 has an invalid length. [ 404.844977][T19842] netlink: 'syz.7.4101': attribute type 2 has an invalid length. [ 405.156497][T18910] legousbtower 11-1:14.57: interrupt endpoints not found [ 405.314110][ T12] net_ratelimit: 35 callbacks suppressed [ 405.314131][ T12] bond1: (slave gretap1): failed to get link speed/duplex [ 405.379568][T19853] ip6t_srh: unknown srh match flags 4015 [ 405.424020][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 405.553903][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 405.562822][ T7308] libceph: connect (1)[c::]:6789 error -101 [ 405.568881][ T7308] libceph: mon0 (1)[c::]:6789 connect error [ 405.586939][T18910] legousbtower 11-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 405.590854][T18910] legousbtower 11-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 405.598247][ T7308] libceph: connect (1)[c::]:6789 error -101 [ 405.603238][ T7308] libceph: mon0 (1)[c::]:6789 connect error [ 405.663885][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 405.717767][T19857] ceph: No mds server is up or the cluster is laggy [ 405.784357][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 405.809846][T19849] overlayfs: statfs failed on './file0' [ 405.815860][T19867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.893739][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 406.014019][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 406.123825][T11939] bond1: (slave gretap1): failed to get link speed/duplex [ 406.178267][T19898] usb 11-1: Couldn't submit interrupt_out_urb -90 [ 406.208809][T19904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19904 comm=syz.8.4118 [ 406.213289][T19904] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 406.244332][T16053] bond1: (slave gretap1): failed to get link speed/duplex [ 406.290999][T19908] loop5: detected capacity change from 0 to 7 [ 406.299278][T19908] Dev loop5: unable to read RDB block 7 [ 406.305015][T19908] loop5: unable to read partition table [ 406.314089][T19908] loop5: partition table beyond EOD, truncated [ 406.319711][T19908] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 406.449640][ T7308] usb 11-1: USB disconnect, device number 28 [ 406.457252][ T7308] legousbtower 11-1:14.228: LEGO USB Tower #-160 now disconnected [ 406.507021][T19916] __nla_validate_parse: 4 callbacks suppressed [ 406.507033][T19916] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4122'. [ 406.561871][T19919] netlink: 'syz.8.4123': attribute type 21 has an invalid length. [ 406.728637][T19923] 9p: Could not find request transport: fl [ 407.168079][T19937] CIFS: VFS: UNC: path must begin with // or \\ [ 407.170177][T19937] Malformed UNC in devname [ 407.170177][T19937] [ 407.172458][T19937] CIFS: VFS: Malformed UNC in devname [ 407.246578][T19935] loop5: detected capacity change from 0 to 7 [ 407.249283][T19935] Dev loop5: unable to read RDB block 7 [ 407.251122][T19935] loop5: unable to read partition table [ 407.253072][T19935] loop5: partition table beyond EOD, truncated [ 407.257299][T19935] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 407.424774][T19943] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4133'. [ 407.435688][T18910] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 407.595152][T18910] usb 12-1: Using ep0 maxpacket: 32 [ 407.599922][T18910] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 407.610245][T18910] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 407.614761][T18910] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 407.617828][T18910] usb 12-1: Product: syz [ 407.619639][T18910] usb 12-1: Manufacturer: syz [ 407.621567][T18910] usb 12-1: SerialNumber: syz [ 407.630847][T18910] usb 12-1: config 0 descriptor?? [ 407.634086][T19937] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 407.638224][T18910] hub 12-1:0.0: bad descriptor, ignoring hub [ 407.640858][T18910] hub 12-1:0.0: probe with driver hub failed with error -5 [ 407.807784][T19964] loop5: detected capacity change from 0 to 7 [ 407.825280][T19964] Dev loop5: unable to read RDB block 7 [ 407.828062][T19964] loop5: unable to read partition table [ 407.833358][T19964] loop5: partition table beyond EOD, truncated [ 407.846214][T19964] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 407.907858][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4143'. [ 408.107042][T20002] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 408.211269][T20008] netlink: 244 bytes leftover after parsing attributes in process `syz.9.4152'. [ 408.255680][T20012] overlayfs: conflicting options: userxattr,metacopy=on [ 408.464675][T18910] usb 12-1: USB disconnect, device number 29 [ 408.708474][T20056] netlink: 4376 bytes leftover after parsing attributes in process `syz.6.4164'. [ 408.719423][T20056] netlink: 4376 bytes leftover after parsing attributes in process `syz.6.4164'. [ 408.738670][T20058] SELinux: invalid class [ 408.739700][T20056] netlink: 'syz.6.4164': attribute type 1 has an invalid length. [ 408.746425][T20058] SELinux: failed to load policy [ 408.848887][T20070] ================================================================== [ 408.851366][T20070] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x34d9/0x4160 [ 408.853897][T20070] Write of size 1 at addr ffffc9000579a000 by task vivid-000-vid-c/20070 [ 408.856895][T20070] [ 408.858008][T20070] CPU: 0 UID: 0 PID: 20070 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 408.858025][T20070] Tainted: [L]=SOFTLOCKUP [ 408.858029][T20070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 408.858036][T20070] Call Trace: [ 408.858041][T20070] [ 408.858046][T20070] dump_stack_lvl+0x100/0x190 [ 408.858063][T20070] print_report+0x13d/0x4b0 [ 408.858078][T20070] ? _raw_spin_lock_irqsave+0x52/0x60 [ 408.858100][T20070] ? tpg_fill_plane_buffer+0x34d9/0x4160 [ 408.858113][T20070] kasan_report+0xdf/0x1c0 [ 408.858128][T20070] ? tpg_fill_plane_buffer+0x34d9/0x4160 [ 408.858160][T20070] tpg_fill_plane_buffer+0x34d9/0x4160 [ 408.858180][T20070] ? tpg_calc_text_basep+0x22d/0x2c0 [ 408.858195][T20070] vivid_fillbuff+0x963/0x3ff0 [ 408.858208][T20070] ? __lock_acquire+0x49f/0x1a40 [ 408.858224][T20070] ? __pfx_vivid_fillbuff+0x10/0x10 [ 408.858234][T20070] ? __lock_acquire+0x49f/0x1a40 [ 408.858250][T20070] ? v4l2_ctrl_request_setup+0x45a/0xa60 [ 408.858267][T20070] ? lockdep_hardirqs_on+0x78/0x100 [ 408.858279][T20070] ? vivid_thread_vid_cap_tick+0x81b/0x1470 [ 408.858290][T20070] vivid_thread_vid_cap_tick+0x81b/0x1470 [ 408.858302][T20070] vivid_thread_vid_cap+0x454/0xd70 [ 408.858315][T20070] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 408.858326][T20070] ? do_raw_spin_lock+0x128/0x260 [ 408.858341][T20070] ? find_held_lock+0x2b/0x80 [ 408.858357][T20070] ? __kthread_parkme+0xbb/0x230 [ 408.858375][T20070] ? rcu_is_watching+0x12/0xc0 [ 408.858391][T20070] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 408.858408][T20070] ? lockdep_hardirqs_on+0x78/0x100 [ 408.858422][T20070] ? __kthread_parkme+0x18c/0x230 [ 408.858438][T20070] ? kthread+0x13a/0x450 [ 408.858447][T20070] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 408.858457][T20070] kthread+0x370/0x450 [ 408.858467][T20070] ? __pfx_kthread+0x10/0x10 [ 408.858477][T20070] ret_from_fork+0x72b/0xd50 [ 408.858492][T20070] ? __pfx_ret_from_fork+0x10/0x10 [ 408.858507][T20070] ? __switch_to+0x800/0x10f0 [ 408.858518][T20070] ? __pfx_kthread+0x10/0x10 [ 408.858528][T20070] ret_from_fork_asm+0x1a/0x30 [ 408.858546][T20070] [ 408.858550][T20070] [ 408.923255][T20070] The buggy address belongs to a vmalloc virtual mapping [ 408.925433][T20070] Memory state around the buggy address: [ 408.927154][T20070] ffffc90005799f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.929598][T20070] ffffc90005799f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.932059][T20070] >ffffc9000579a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 408.934543][T20070] ^ [ 408.935809][T20070] ffffc9000579a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 408.938290][T20070] ffffc9000579a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 408.940739][T20070] ================================================================== [ 408.972655][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4168'. [ 408.973155][T20070] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 408.973169][T20070] CPU: 0 UID: 0 PID: 20070 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 408.973186][T20070] Tainted: [L]=SOFTLOCKUP [ 408.973191][T20070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 408.973198][T20070] Call Trace: [ 408.973202][T20070] [ 408.973206][T20070] dump_stack_lvl+0x100/0x190 [ 408.973222][T20070] vpanic+0x552/0x970 [ 408.973232][T20070] ? __pfx_vpanic+0x10/0x10 [ 408.973243][T20070] ? mark_held_locks+0x40/0x70 [ 408.973257][T20070] ? tpg_fill_plane_buffer+0x34d9/0x4160 [ 408.973272][T20070] panic+0xd1/0xe0 [ 408.973281][T20070] ? __pfx_panic+0x10/0x10 [ 408.973291][T20070] ? tpg_fill_plane_buffer+0x34d9/0x4160 [ 408.973305][T20070] ? preempt_schedule_common+0x42/0xc0 [ 408.973318][T20070] ? check_panic_on_warn+0x1f/0x90 [ 408.973329][T20070] check_panic_on_warn.cold+0x19/0x34 [ 408.973340][T20070] end_report.part.0+0x3a/0x90 [ 408.973368][T20070] kasan_report.cold+0xe/0x18 [ 408.973385][T20070] ? tpg_fill_plane_buffer+0x34d9/0x4160 [ 408.973400][T20070] tpg_fill_plane_buffer+0x34d9/0x4160 [ 408.973420][T20070] ? tpg_calc_text_basep+0x22d/0x2c0 [ 408.973435][T20070] vivid_fillbuff+0x963/0x3ff0 [ 408.973448][T20070] ? __lock_acquire+0x49f/0x1a40 [ 408.973469][T20070] ? __pfx_vivid_fillbuff+0x10/0x10 [ 408.973480][T20070] ? __lock_acquire+0x49f/0x1a40 [ 408.973496][T20070] ? v4l2_ctrl_request_setup+0x45a/0xa60 [ 408.973513][T20070] ? lockdep_hardirqs_on+0x78/0x100 [ 408.973525][T20070] ? vivid_thread_vid_cap_tick+0x81b/0x1470 [ 408.973536][T20070] vivid_thread_vid_cap_tick+0x81b/0x1470 [ 408.973549][T20070] vivid_thread_vid_cap+0x454/0xd70 [ 408.973562][T20070] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 408.973573][T20070] ? do_raw_spin_lock+0x128/0x260 [ 408.973588][T20070] ? find_held_lock+0x2b/0x80 [ 408.973604][T20070] ? __kthread_parkme+0xbb/0x230 [ 408.973619][T20070] ? rcu_is_watching+0x12/0xc0 [ 408.973635][T20070] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 408.973652][T20070] ? lockdep_hardirqs_on+0x78/0x100 [ 408.973663][T20070] ? __kthread_parkme+0x18c/0x230 [ 408.973679][T20070] ? kthread+0x13a/0x450 [ 408.973689][T20070] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 408.973703][T20070] kthread+0x370/0x450 [ 408.973713][T20070] ? __pfx_kthread+0x10/0x10 [ 408.973723][T20070] ret_from_fork+0x72b/0xd50 [ 408.973738][T20070] ? __pfx_ret_from_fork+0x10/0x10 [ 408.973753][T20070] ? __switch_to+0x800/0x10f0 [ 408.973763][T20070] ? __pfx_kthread+0x10/0x10 [ 408.973773][T20070] ret_from_fork_asm+0x1a/0x30 [ 408.973792][T20070] [ 408.976526][T20070] Kernel Offset: disabled VM DIAGNOSIS: 20:08:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a36b15 RDI=ffffffff9ba05b40 RBP=ffffffff9ba05b00 RSP=ffffc90006f2f1c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000074697257 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b6f8238 R15=ffffffff85a36ab0 RIP=ffffffff85a36b3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dde000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff417cb7fe8 CR3=000000003ea75000 CR4=00352ef0 DR0=000000000000000b DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000fef802fe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002000 0000000000041000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000000000 0000000001000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2a061276 00007ffe2a06127c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe77e634492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe77e6344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe77e634636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe77e6344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe77e7f05f8 00007fe77e7f05c8 00007fe77e7f0600 00007fe77e7f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b57eaa RDX=ffff88801ee82540 RSI=ffffffff81b57ece RDI=ffff88801ee82540 RBP=0000000000000001 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000 RIP=ffffffff81b57ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d5ede000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001040 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000004 DR1=0000000000000010 DR2=000000007fffdffd DR3=0000000000001000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=0000000000000007 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008001800180010 0018000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00008f0000509120 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000800000509120 0000800000509120 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00008e0000509120 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00008e0000509120 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00008e0000509120 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00008f0000509120 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002300000022 0000002100000020 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff00ff00ff00ff 00ff00ff00ff00ff ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f0f0f0f0f0f0f0f 0f0f0f0f0f0f0f0f ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000400000004 0000000400000004 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00008f0000509120 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000adc0de ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5da45f05f8 00007f5da45f05c8 00007f5da45f0600 00007f5da45f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff8bb4dfe0 RDX=0000000000000003 RSI=0000000000000001 RDI=ffff88802b088000 RBP=ffffffff8d4ef3c0 RSP=ffffc90006907408 R8 =0000000000000005 R9 =0000000000000001 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=000000000000000a R14=0000000000000005 R15=ffffc90006907650 RIP=ffffffff820a557b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fde000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f272ec34eb8 CR3=00000000518ac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 00000000000000e8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000b68 000000000002c498 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b57eaa RDX=ffff88801eeea540 RSI=ffffffff81b57ece RDI=ffff88801eeea540 RBP=0000000000000003 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=0000000000000000 RIP=ffffffff81b57ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60de000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc4725a7ff8 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000008 DR1=0000000000000007 DR2=0000000000000004 DR3=0000000000000008 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000101 Opmask01=0000000000000000 Opmask02=0000000000003000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005609adf8e880 00005609adf8e880 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464646464646464 6464646464646464 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75075f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75075f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ff000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f05040405196946 45585e4445490519 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e584b49054e445f 45590518041b101b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6166303030306e 65762c3638783a65 7079743a75706300 5341494c41444f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 505c5b0d0d0d0d53 584b110b05450758 4d444907484d5e00 5341494c41444f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3432302c36313230 2c453032302c4330 32302c423032302c 413032302c393032 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c323832302c4635 32302c443532302c 423532302c413532 302c413432302c34 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000