last executing test programs: 1m37.200014304s ago: executing program 0 (id=1): r0 = getpid() ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000380)) (async) syz_pidfd_open(r0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x309, @time={0x400, 0x7}, 0x8, {0x8, 0x10}, 0x3}) 1m37.000852557s ago: executing program 0 (id=5): ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000200)={&(0x7f0000000140)=[r0, r1, r2, r3, r4], &(0x7f0000000180)=[0x8001, 0xb0ae, 0x8, 0x6, 0x3904, 0x8, 0x1, 0x20000000, 0x2], 0x0, 0x5, 0x2}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000280)=[{r5, 0x4}, {r6, 0xe360}], 0x2, &(0x7f00000002c0), &(0x7f0000000300)={[0x5]}, 0x8) r7 = fsmount(0xffffffffffffffff, 0x1, 0x5) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000340)={0x0, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000340)={0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(r7, 0xc010644d, &(0x7f00000003c0)={r8, 0x0, &(0x7f0000000380)='/dev/ptmx\x00'}) (async) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(r7, 0xc010644d, &(0x7f00000003c0)={r8, 0x0, &(0x7f0000000380)='/dev/ptmx\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000400)="9c21a3559f4d1c2627b76d2872a11c0a", 0x10) io_setup(0x83a5, &(0x7f0000000440)=0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r12 = eventfd2(0x3, 0x80000) io_submit(r9, 0x3, &(0x7f0000000840)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xa, r11, &(0x7f00000004c0)="53ebe6e1de0dbae647c32f00d1912a007fd9c5b25d0390327f78bbb0e36ce7621cf5ea5849995b7761e40a06e254e0195a963f44811d849ffbc93e0c3d3291d3bb4ddbae1691ab47142092012d43d02e4df0ed5a23575f9c35b87b36f7f3eca8b4c33ed7a087c15618586427d7f3ad462fa2bb67043176c18cb7203f31d05f9894684de2b1ba72b0252f80e446544a0d7e9e3cd9f6637a0054b805a9cba7ef2e88573cd8777d592f8898e4e87af949bba9a96d1823396d8fcd792b8aff62530a3c80f6bf51c5d87d11f33a8a8511c6273b2c5b1c", 0xd4, 0x400, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2, 0x3ff, r6, &(0x7f0000000600)="e6d205bc5fdd4d2062274ba4a06eabd615ee519c6c9057f1fbb7a38394e9421a4b6a5bc23106e8491051b9ac45801f0988e75647834f747874287b5edbe80c5b1fd3c13a6a9835b9411140fcd7d04620d798f05282abbdfc1497560a702b8cba2a7aa9bcc2ff83d7ba79f340a8eff982f0a52a8a19500919ed31cef2282edfa80bb9888ecc2da949d6e76751fcb15ea09c6b8d510cab2e7169969530575384d2d6e9c6b3a80c8c65099aad3898deacdf90b61737121ffdc610d381505bea5d53622d88ee", 0xc4, 0x6, 0x0, 0x1, r12}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0x4, r5, &(0x7f0000000740)="dd5d2ef1e80206689addc9f273ca2f75c33b53afa4378668e7e71c161cbb5eebce33a70f1cfd8d492ee9f4139e0d42d0b01069d1b892cd634d11c1281aceeb0531f57ca3397532f1f3462b7b071a273c1e58056c9cd79b722ac21a238ffe8d6ab324c27009722b971f1b8c1bb06ba9f6560c6bc7e461f17ff1ff5569e47a721a6ea2578681d7aa02d500ec85d594ebe7128628416631ea72d6338c9eb701c2e73bf5dfbd210a891a4bb76ca4fa69507e33029b648130dad43a0ebaa8", 0xbc, 0x4, 0x0, 0x1}]) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000880), 0x200, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r13, 0x3b66, 0x3) ioctl$HIDIOCINITREPORT(r10, 0x4805, 0x0) (async) ioctl$HIDIOCINITREPORT(r10, 0x4805, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) socket$inet6(0xa, 0x5, 0x3) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r11) socket$inet_udplite(0x2, 0x2, 0x88) (async) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$XFS_IOC_FSGEOMETRY_V1(r14, 0x80705864, &(0x7f0000000900)) (async) ioctl$XFS_IOC_FSGEOMETRY_V1(r14, 0x80705864, &(0x7f0000000900)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000980)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r10, 0x3b80, &(0x7f0000000a00)={0x8, r15}) (async) ioctl$IOMMU_DESTROY$hwpt(r10, 0x3b80, &(0x7f0000000a00)={0x8, r15}) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000001a80)={0x8, 0x1, 0x100, 0x10000, 0xffffffff, 0xffffffff, 0x0, 0x800, 0xffffffff, 0xffffff8e, 0x40, 0xa4b, &(0x7f0000000a40)=[0x9fa], 0x1, &(0x7f0000000a80)="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", 0x1000}) ioctl$TUNSETNOCSUM(r11, 0x400454c8, 0x0) (async) ioctl$TUNSETNOCSUM(r11, 0x400454c8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5651f4db}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x72b3d462}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4004) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5651f4db}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x72b3d462}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4004) 1m36.846401894s ago: executing program 0 (id=11): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x1a) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') fanotify_mark(0xffffffffffffffff, 0x441, 0x4800001a, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04230d00c8000102fcd1ca980967216a"], 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x305004, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000080)=""/53, 0x35}, {&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000000100)=""/129, 0x81}, {&(0x7f00000001c0)=""/32, 0x20}], 0x5, 0xffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='oom_score\x00') read$FUSE(r2, &(0x7f0000003240)={0x2020}, 0x2020) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) 1m36.74062244s ago: executing program 0 (id=14): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f0000000280)={0x2, 0xd, 0x6, 0x5, 0x6, 0x7, @lba=0x8, @lba=0x5}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000018940)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x200000017580, 0x2000000175b0, 0x2000000175e0], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000001f7d8eebe641d32c890930308d77c000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000008d3e7fef6aed27246156c97bbd4ddb1a4622da6e2ceddb2ecd58d71994e95c69e951f143900be453bd647575a4d3e0c033616e16e83742e23b5c970cac8b1b4f515f9dc0ec7f2b8d4f39647b39643629726c44b7e3d95d5e21d4b0c2bf564d2b9064bfb7e6f884c5fb932edecd866a43469fba5ee8e71dcfe6972fe0bdd1997378db68a5c9d11621b5042a51ec36b91cb1a59f4f0507adc0499382eab6745956b523ea63e79464321e422dd6cc6c19fa604641d5e6a2faea8e5e4c0cd570a0deb20c8bff36e01f4e0d92c8c809fcc90c5d032a5a480"]}, 0x1ed) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)={0x10, 0x17, 0x1, 0x800000}, 0x10}, {&(0x7f0000000880)={0x3dc, 0x22, 0x400, 0x70bd28, 0x25dfdbfe, "", [@generic="1c516d3d1117187f29a141d01384d7c8f33acc3512f4d01abfccfe7951149300dbaa3056b6dacf7bb62ba9b133e62c3fdec646e42a3f1b6a8d00d92c6bd6d8b2a02c97f457ee6339d372f888aaf457ce63e8b394f0d6de51c0b15d5945ae05edcd40ff63f2c989568e8f9ab908da79c2d95781619b801857d3d8dd4f66a81f0e28f4f3ecf1dbc4225551ad6230f9dcda2116a191b7473bbb099e24e3c02cd15e0573a59a7522db5378d4a373c64ae099868ef211571562aed32d7002bc801e67d11f994ed57be6795fce4a9a15ddecf41baba72b02b4f968a9536082e5dba7d7b896", @generic="200c805f4e4d8bbb18feac0311c3bf5648f8c5ad49ee061df53cb1b016fb32eb47fd750d66e0a884c93c5152a59eccf6440404578f4575390e2ac6576517ca9e84f3dbf8d9643507079fef9ded0c4ba7f980ed3f21bc75cb8ddb1c8f59a34a7e636ec6d1d296457ea97c172ce76fb8d879cccf0094119f8d0f11b53892965c7ad596aca9cbbf48790e6df95ccf35e03c1f560af55a20608a3b801e42a668baa42e4696b70b389e8eb3c7bf8094b3a50b6f6ab0099624d9ec392a0d6899d7beff618319e076f1ea8364d1849eece9ef880dcb1335974a13392ff8", @nested={0x1d4, 0xe9, 0x0, 0x1, [@generic="e89803a9cb9567da056eca2d0904c02086b10e10940a4b8e6db91346ec7c1af6822618a3f954ee636db1d9f057666ccb41b06e5eefba2cce536c89494749840aa3417da2f87d981316eaa7ca5835f80ae69e803fe329b342d10b6f03a01a59d63e0a3ba2444c31b58a6565541b90748e7f8257a544bdfa8850befdb90f8579ae19ed65fe005c43df279f3bc77b70d4c1511486528b9968992481d0f0f9f5704265252464d805f004c7a9514aef5678a745105d0c0e48a38c26ebba0b9a0c359f0c5446b67a5fe4888b93f9c098d4", @generic="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", @nested={0x4, 0x61}]}, @nested={0x3b, 0x143, 0x0, 0x1, [@generic="9889529fc59d4fdcb8126359a3d05053eeb3f1d15a162706f7116397f08f1d4e4023b7f48a5ac7f6498e505e566d82b6abeaeab521ed1f"]}]}, 0x3dc}], 0x2, 0x0, 0x0, 0x40}, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) accept$inet6(r6, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x3, 0x2, 0x5, 0x9, 0xffff, 0x8, 0xac, 0x431}}) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x5, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x1b}, './file1\x00'}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xa}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000200)={r7, 0x5, 0x2}, &(0x7f0000000240)=0x8) 1m21.751707349s ago: executing program 32 (id=14): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f0000000280)={0x2, 0xd, 0x6, 0x5, 0x6, 0x7, @lba=0x8, @lba=0x5}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000018940)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x200000017580, 0x2000000175b0, 0x2000000175e0], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x1ed) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)={0x10, 0x17, 0x1, 0x800000}, 0x10}, {&(0x7f0000000880)={0x3dc, 0x22, 0x400, 0x70bd28, 0x25dfdbfe, "", [@generic="1c516d3d1117187f29a141d01384d7c8f33acc3512f4d01abfccfe7951149300dbaa3056b6dacf7bb62ba9b133e62c3fdec646e42a3f1b6a8d00d92c6bd6d8b2a02c97f457ee6339d372f888aaf457ce63e8b394f0d6de51c0b15d5945ae05edcd40ff63f2c989568e8f9ab908da79c2d95781619b801857d3d8dd4f66a81f0e28f4f3ecf1dbc4225551ad6230f9dcda2116a191b7473bbb099e24e3c02cd15e0573a59a7522db5378d4a373c64ae099868ef211571562aed32d7002bc801e67d11f994ed57be6795fce4a9a15ddecf41baba72b02b4f968a9536082e5dba7d7b896", @generic="200c805f4e4d8bbb18feac0311c3bf5648f8c5ad49ee061df53cb1b016fb32eb47fd750d66e0a884c93c5152a59eccf6440404578f4575390e2ac6576517ca9e84f3dbf8d9643507079fef9ded0c4ba7f980ed3f21bc75cb8ddb1c8f59a34a7e636ec6d1d296457ea97c172ce76fb8d879cccf0094119f8d0f11b53892965c7ad596aca9cbbf48790e6df95ccf35e03c1f560af55a20608a3b801e42a668baa42e4696b70b389e8eb3c7bf8094b3a50b6f6ab0099624d9ec392a0d6899d7beff618319e076f1ea8364d1849eece9ef880dcb1335974a13392ff8", @nested={0x1d4, 0xe9, 0x0, 0x1, [@generic="e89803a9cb9567da056eca2d0904c02086b10e10940a4b8e6db91346ec7c1af6822618a3f954ee636db1d9f057666ccb41b06e5eefba2cce536c89494749840aa3417da2f87d981316eaa7ca5835f80ae69e803fe329b342d10b6f03a01a59d63e0a3ba2444c31b58a6565541b90748e7f8257a544bdfa8850befdb90f8579ae19ed65fe005c43df279f3bc77b70d4c1511486528b9968992481d0f0f9f5704265252464d805f004c7a9514aef5678a745105d0c0e48a38c26ebba0b9a0c359f0c5446b67a5fe4888b93f9c098d4", @generic="c793fee2d3b544d03b103e07fb4ff876491edfab82ebf81a77f50d60c29b0ac99d3161eb658e44b80342a4fb7b6c33fed45a6dd3bf686c4a6eba5924e5e37afce3cb37648d72d57bdfc21a3a9b555248cfbd47a606f67ebcce67b436e2a1afb1723e1213e6383c89d7b469d5ddc2a4de3f06661bc5d5f55085b6b79e344e2b2f6b07ce662e4426e72fdddd4c18fcfcac35afd8cee43bf9d92ef214d8e122d30ab988d309f667866aa72dd6b64df27d924f5bd06084603ea9d233a0acdfe0f941208c78a89e2c895c108a8649450682ae6efa7e8bfb0e1c59b4c430da8e6fd13378c2d0cc343da71aa3292dab0207e337883dffd365b43e59f57a476ff0d6", @nested={0x4, 0x61}]}, @nested={0x3b, 0x143, 0x0, 0x1, [@generic="9889529fc59d4fdcb8126359a3d05053eeb3f1d15a162706f7116397f08f1d4e4023b7f48a5ac7f6498e505e566d82b6abeaeab521ed1f"]}]}, 0x3dc}], 0x2, 0x0, 0x0, 0x40}, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) accept$inet6(r6, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x3, 0x2, 0x5, 0x9, 0xffff, 0x8, 0xac, 0x431}}) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x5, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x1b}, './file1\x00'}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xa}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000200)={r7, 0x5, 0x2}, &(0x7f0000000240)=0x8) 55.191988747s ago: executing program 2 (id=655): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e6c4f61281afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bde843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549381b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x801, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xc}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, 0x0) 55.169313888s ago: executing program 2 (id=656): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x8000, 0x108, 0x1a}, 0x18) (async) r1 = openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x8000, 0x108, 0x1a}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000040)=0x6, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendto$inet6(r3, &(0x7f00000001c0)="dd4d74603e6e06081e0cb9b23e67d1b9c944843baffdcc2d7b52953b1d2bf6ce868f55eef1e88800c9d5391d6329029258bfadfce39df7e820dad71b38ac637883b4f5fe4c9841c2b99617dbef3e826a66dc5ff57e49494b47fe7e499540748acec78b0365739f477b1072ab933e140fe8703e131be883484806ae47908c1762fac7d6f91bed7f64d4b9296e07ee1422208b17269112f350f6e494aefd1406407e809c46e2cd921f287aff89b99b0b7c044380e2c0cfe4ed64556f4ada4ce02171c8c96eda5c58bd6d348b276a9abf2762b57215a1812477cf", 0xd9, 0x4081, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) write(r0, &(0x7f00000004c0)="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", 0xff) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xa6) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xa6) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0xb, 0x6, 0x200, &(0x7f0000000880)="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"}) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) write$sndseq(r3, &(0x7f0000000740)=[{0x5, 0x1, 0xfd, 0x31, @time={0x7, 0x8}, {0xc3, 0x6}, {0xba, 0x5e}, @note={0x1, 0x2, 0x0, 0x80, 0x8}}, {0x5, 0x0, 0x7, 0xc, @tick=0x7fff, {0x2, 0x5}, {0x4, 0x7}, @addr={0x4, 0x1}}, {0x2d, 0x0, 0x5, 0xff, @tick=0x7fff, {0x5, 0x2}, {0xff, 0xff}, @queue={0x3, {0x3, 0x361}}}, {0x0, 0x4, 0x3, 0x57, @time={0x10, 0x8}, {0x8e, 0xf8}, {0xd, 0x5}, @raw8={"908ef3fd1ffb4cae9e4174a2"}}, {0x5, 0xf, 0x4, 0x7f, @time={0xfffffff7, 0x8}, {0x3, 0x5}, {0x53, 0xc}, @ext={0xe3, &(0x7f0000000640)="9b518860cb025364df0cbf4fe97e3290b62fcd9198039f7d08a4d76514d5f404ce88bf2725983f4a6f1087d9b3d7fc30128bb481f4733e9c3152730f8d0afaffeeea3b887af2a7e0d19bbeaf68153918458bed8d8c6dd08f0ac969264d14ac2952dbd163f0494e95d71aa78fc9e3f12d42f7e0a15de0405d70f5463d1845cb81331053928186ec83f572139c927bd6855866869a06f25775f3aaeb793ad289dc31cd110205aed1598f3f0a4c62dc835bd1e2a335686954b4b16892041cd11c2c94c318d81f72c29f60f9e379626f998fc61a8b3136ea69711101ce476c04eaf625a510"}}, {0x2, 0x4, 0x2, 0x56, @tick=0x2, {0x7, 0x7}, {0x80, 0xeb}, @time=@time={0xdd, 0x8}}, {0x2, 0x81, 0x0, 0x0, @time={0x9, 0x2}, {0x9, 0x8}, {0xc8, 0x81}, @raw8={"cfb049749878998245364750"}}], 0xc4) syz_emit_vhci(0x0, 0x200) (async) syz_emit_vhci(0x0, 0x200) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000440)={0x60, 0x1, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x7, &(0x7f00000003c0)=[{0x1, 0x4, 0x6eb}, {0x4, 0x7, 0x3}, {0x1000, 0x3a9800000000000, 0x6}], 0x3, 0x7f, 0x39, 0x5, 0x30, 0x1}) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x5) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0xc0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff000000000000000c020000c008000031b34563a2d1162b00"], 0x0) (async) syz_emit_ethernet(0x1e, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff000000000000000c020000c008000031b34563a2d1162b00"], 0x0) setsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f00000000c0)=0x14, 0x4) 54.1608963s ago: executing program 2 (id=660): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 54.080641586s ago: executing program 2 (id=661): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0xa) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r1, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) r2 = syz_open_procfs(0x0, &(0x7f0000000b40)='attr/current\x00') read$eventfd(r2, 0x0, 0x2a) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e000100000000fdffffffff060000000e7dec9fc39b2d94e104d5", @ANYRES32=0x0, @ANYBLOB="000000000a00020000000000000000000800090004000000"], 0x30}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) connect$unix(r6, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000140)={&(0x7f0000000500)=[{0x2, 0x3211, 0xe1, &(0x7f00000001c0)="f296184b7d536763eb0eb8387cc0956e212d365576ffee6b3821b32b9f899ada4e8066c0f08be1439c76d47bf7e4cef886d89d335de99894d949f2247da03348dd58dfc9c5dd4f36080757bbad8df0ab4be9f30011ab34bbc4caa3c492484174d398619ca244b7424b610af6f51ab059511405087357265a81fe04677fb6491472df4353c0db5b08686a8423e7b9ad359fe27f34fd6bfd5d7e1f07d9f0d73621b050237bc50bf945fa5bb18081ef25a67b0ba3d9aa505d3feb7c21634da67d3b267590bb495147973e9b592eec761ef9ad71bcd9deb7c526cd3900119aabffecdb"}, {0x8, 0x5800, 0x45, &(0x7f0000000080)="1d636422c4799e43a4fb54d615df162c7732aa348fad269c241fc6699084dc47217c79db96d56fe1a59aa5108b61c01858a0f4a2ae29bc08ed23c278f5c4d74841592c66d6"}, {0x1, 0x2400, 0xcc, &(0x7f00000002c0)="b827ff52fc6bf2c21eaa0d88c313f34199c8fa429b89aa2ba6d41e36e08217b26ac600baf5f519e06fda98bdcd97c340c191b9b257eebb38afb2f01627d265862cba11b078f20e165b3e75b344fca27ddd655b4f6a19aed0399fc27684555653fcf064980939764093e774caeedf7909995b0f6aafb77450b4b6e6a1aa21eac43c3601e1ec4ace82eaada83e1da8f06b72fb8ffe3a5b2f9370403a8b5103edb532e9ae79572f1976362e61de7823d31e63438cd27928d67efbabf2ee39d86b2227b5edf665d228fa60090cc0"}, {0x3, 0x85149f4527bc8f35, 0x48, &(0x7f00000003c0)="90361c9973c45d591b2c32aed0c4c2c400ee034fd8a56fe28b820d3b13e7e2187b555dcc56323f039f4d9e28c2191511dabade45916df0122c69cfe14493843e4071127073d2cc2b"}, {0x4, 0x3411, 0xbc, &(0x7f0000000440)="db5a446b3f38a560b238308bef95984b84f071c48904ccee5a8ed0d1d8db388eabbb4c545e2b6b55079b540daee1e5d47e3a4ef81ae64431d96ca29a12e3d89fb71550ea6ffeb30c69bcc3bd7dc40bdd4022a9265243f2801653cb8e2243c608b0a6882d13522ca9c59d1cdb6490dc3d9809710bc6a50920cf2aa752943b4127a7d8d4d453a05269334e84ccb0284b0831d9b6face6fcd33281dda62e343b250a4ff84072f17511e95f20248272748fb4266adc56ff3c62b1f898c2e"}], 0x5}) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x103802) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) getpeername$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfb}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc810}, 0x40000) 53.82046894s ago: executing program 2 (id=662): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="180000005600010500bd7000ffdbc8aa75640000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0xa00, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000014c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001500)=ANY=[@ANYBLOB="34c6e9d7", @ANYRES16=r4, @ANYBLOB="110026bd7000ffdbdf251800000018003080140001800800010001000000050002000300000008000300", @ANYRES32=r5, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x40000e0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = accept4$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x800) close_range(r6, r0, 0x2) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x0, 0x3) syz_emit_ethernet(0x135, &(0x7f0000000300)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @tcp={{0x31, 0x4, 0x2, 0x4, 0x127, 0x66, 0x0, 0x79, 0x6, 0x0, @multicast1, @local, {[@cipso={0x86, 0x15, 0x0, [{0x5, 0xf, "b5485a11391fd050943c8640ad"}]}, @rr={0x7, 0xb, 0x12, [@empty, @private=0xa010100]}, @timestamp_prespec={0x44, 0x4c, 0xef, 0x3, 0x2, [{@rand_addr=0x64010101, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x6}, {@broadcast, 0x6}, {@broadcast, 0x8}, {@remote, 0x72}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xfa7}, {@rand_addr=0x64010101, 0xffffff01}, {@empty, 0x6}, {@private=0xa010100, 0xa2}]}, @timestamp_addr={0x44, 0x44, 0xfa, 0x1, 0x2, [{@multicast2, 0x9}, {@rand_addr=0x64010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010102, 0x7}, {@empty, 0x523}, {@private=0xa010100, 0xb}, {@private=0xa010100, 0x5}, {@private=0xa010101, 0x9}]}]}}, {{0x4e21, 0x4e24, r7, 0x41424344, 0x1, 0x0, 0x7, 0x40, 0x95f1, 0x0, 0x6, {[@mss={0x2, 0x4, 0x4bc}, @eol]}}, {"26cd74eb3f4803bfd36db2d7603d8bd68f6623e484679a5ca91111d0e7f57720544c059bb8b1af7fcbb780a5c2e0907cb7bbd611d4c26fdccd1fd2fb39157563affbbc4fe998a0"}}}}}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) ptrace(0x4207, r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000780)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) 53.420477162s ago: executing program 2 (id=663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc7f253bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x2f, 0xfffffffffffffe7e, 0x1d4}, 0x28) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000580)={0x1f, 0x5, 0x1}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x8000000000000003, 0x207, 0xe, 0xff, 0x3, 0x4, 0x2000000000453, 0x4, 0x3, 0x1b8, 0xf703, 0x5, 0x6, 0x102, 0xae, 0x6ff], 0x80a0000}) (async) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x32, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x1d) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x19) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xfeffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000340)={0x60, 0x1, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fea000/0x1000)=nil, 0x40, &(0x7f00000001c0)=[{0x7, 0x0, 0x7ff}, {0x8, 0x8, 0x9}, {0x0, 0x3, 0x6}], 0x3, 0x4, 0x20, 0x0, 0x22, 0x20}) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$update(0x2, r7, &(0x7f00000003c0)="a10363d669e6694e880c24fc660600707185fef6ea383fc6611be9ec653e073b2f4e0e88fa3e3e38063c7129ff0448f4f0450f0f736d2ab1484eec1cb1f4", 0x3e) 53.363069723s ago: executing program 33 (id=663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc7f253bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x2f, 0xfffffffffffffe7e, 0x1d4}, 0x28) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000580)={0x1f, 0x5, 0x1}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x8000000000000003, 0x207, 0xe, 0xff, 0x3, 0x4, 0x2000000000453, 0x4, 0x3, 0x1b8, 0xf703, 0x5, 0x6, 0x102, 0xae, 0x6ff], 0x80a0000}) (async) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x32, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x1d) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x19) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xfeffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000340)={0x60, 0x1, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fea000/0x1000)=nil, 0x40, &(0x7f00000001c0)=[{0x7, 0x0, 0x7ff}, {0x8, 0x8, 0x9}, {0x0, 0x3, 0x6}], 0x3, 0x4, 0x20, 0x0, 0x22, 0x20}) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$update(0x2, r7, &(0x7f00000003c0)="a10363d669e6694e880c24fc660600707185fef6ea383fc6611be9ec653e073b2f4e0e88fa3e3e38063c7129ff0448f4f0450f0f736d2ab1484eec1cb1f4", 0x3e) 50.780782287s ago: executing program 4 (id=706): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000040)=0xffffffff, 0x4) sendto$inet6(r7, &(0x7f0000000280)="8000398d3b160bd2", 0x8, 0x90, &(0x7f0000000000)={0xa, 0x4e20, 0x77ffffff, @loopback, 0x8001}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r10 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x183901, 0x0) r11 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r11, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x2, {0x8000, 0x8, 0x8, 0x2}}) pwrite64(r10, &(0x7f0000000000)="a5", 0x1, 0x2) 50.778745071s ago: executing program 4 (id=709): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x8040000000000000}) close_range(r2, 0xffffffffffffffff, 0x0) 50.729358056s ago: executing program 4 (id=711): syz_init_net_socket$ax25(0x3, 0x3, 0xcd) 50.667523666s ago: executing program 4 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x1b, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) shutdown(r1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x1170, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [0xffffff00, 0xffffffff, 0x80, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xff0000ff], 'lo\x00', 'vlan0\x00', {}, {0xff}, 0x3a, 0x7, 0x0, 0x20}, 0x0, 0x1108, 0x1170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x1, './cgroup/syz0\x00', 0x4f6, {0xd}}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x10, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x1b, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) (async) shutdown(r1, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x1170, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [0xffffff00, 0xffffffff, 0x80, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xff0000ff], 'lo\x00', 'vlan0\x00', {}, {0xff}, 0x3a, 0x7, 0x0, 0x20}, 0x0, 0x1108, 0x1170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x1, './cgroup/syz0\x00', 0x4f6, {0xd}}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x10, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) (async) 50.610155682s ago: executing program 4 (id=714): bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="06000000040000000700000008000000000000", @ANYRES32=0x0, @ANYBLOB], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x32}, @in=@broadcast, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x200}, {}, {0x8, 0x0, 0x3}, 0x0, 0x0, 0xa, 0x0, 0x2}, 0x0, 0x1}}, 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0xbd9, &(0x7f0000000380)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000140), &(0x7f0000000000)) (async) r3 = syz_io_uring_setup(0xbd9, &(0x7f0000000380)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) accept4(r2, &(0x7f0000000040)=@ethernet={0x0, @random}, &(0x7f00000000c0)=0x80, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 50.290433275s ago: executing program 4 (id=723): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x2}, 0x18}}, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x2e, &(0x7f0000000140)=[{0x3c, '\x00', @st={0x4, [{0x3, @svalue=0xf0}, {0x3, @uvalue=0x9}, {0x1, @uvalue=0xffffffbfffffffff}, {0x2, @svalue=0x7fffffffffffffff}]}, 0x80}]}) 50.197275686s ago: executing program 34 (id=723): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x2}, 0x18}}, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x2e, &(0x7f0000000140)=[{0x3c, '\x00', @st={0x4, [{0x3, @svalue=0xf0}, {0x3, @uvalue=0x9}, {0x1, @uvalue=0xffffffbfffffffff}, {0x2, @svalue=0x7fffffffffffffff}]}, 0x80}]}) 31.967447676s ago: executing program 1 (id=982): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x40010) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0x8}, {0xfff1}, {0x8, 0xd}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000400)=""/169, 0xa9}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x3}, 0xffffff7a}], 0x1, 0x0, 0x0) 30.863865033s ago: executing program 1 (id=992): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xfffffe99) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x474c, 0x4) 30.782162385s ago: executing program 1 (id=993): mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ntfs3\x00', 0x221000d, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) (async) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r2 = socket$kcm(0x2, 0x3, 0x106) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000000, 0x0, 0x2, 0x1, 0x0, 0x8}, 0x20) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x2, 0x5, 0x0, 0x5}, 0x20) (async) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x11, r6, 0xd0b05000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) (async) r9 = fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) fsmount(r9, 0x1, 0xff) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r10, 0x112, 0x9, &(0x7f0000002880), 0x1) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r11 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x141080) ioctl$VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x58595556, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) (async) syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x203}, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000480)={0x100082000, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff], 0x1}, 0x58) io_uring_register$IORING_REGISTER_NAPI(r8, 0x1b, &(0x7f0000000080)={0x1, 0xd}, 0x1) 30.740211716s ago: executing program 1 (id=996): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) syz_open_procfs(r2, &(0x7f0000000200)='net/udplite6\x00') chdir(&(0x7f00000003c0)='./bus\x00') mount$9p_virtio(0x0, &(0x7f0000000500)='./file1\x00', 0x0, 0x20, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x10}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20008800) 30.679725821s ago: executing program 1 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'batadv0\x00', &(0x7f0000000240)=@ethtool_stats}) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0xcc, r1, 0x8, 0x70bd28, 0x0, {0x34}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000440)={0xd4, r4, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xb8, 0x22, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x63}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fff}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x84098}, 0x840) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r6 = dup2(r5, r5) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000280)={0x0, 0x2, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef4a662dd836c7451f8e5"}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r4, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0xb}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x8010) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) 30.289197992s ago: executing program 1 (id=1003): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_io_uring_setup(0x723d, &(0x7f0000000580)={0x0, 0xd235, 0x400, 0x0, 0x28a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="35084d06e4f0ef9a433002a5e4ab9fae3b4b6dcebe2f4d3bbe3ad91f9d8e357f9b6f5ae5ffe996549b43f6feff63a400e656e127ee7c1299adec9c20a80b572daa0e3e90c10d787afdcb90099557dfce", 0x50}, {&(0x7f0000000300)="fc9f24e20f7256c74d1d11edf7e87aa0c4b8f704121d94d26c7620dc3ce11fca2e6e45f3149b0c0ac1eb61eef592f9e57fe4dbcb437ed670f3c6273ac209150757c55a0e6f8b9d4862e73371e144985001d4e6b0c97900e5bcd7577f76cf2d85336ac19d82011ecb8729c36ce62630c9fb6d9b1bfec34724b153c24ad3660166065c130cc830984ca6d377d5e86789", 0x8f}, {&(0x7f0000000480)="a4105b673bf8e61aa21883b92f95d32d6c25fbed133ab231e24f521aa2172311a8ec4952a11460cfce5ddb831e9f5a8426c26051beeec17a79d772229dfcbd1c3d1df76c68ff34288257f1fab44cd837604131bef3f97c5f1790a2d7d71e6375aa02079d46c6c2364891525a8bf0302848dc0c4d3867d436b0aa569c4a0df4a5f649f2849a7d85688c5df00a1f6f3d3f2d86cabf88f4cd", 0x97}], 0x3}, 0x10) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6}) (rerun: 32) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x100, &(0x7f0000000100)=0x9df5, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000600)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="b895caa5d3603cbbaf6d347a37075eb83fe66e2a47fc55740c3e882aa6d10f19703273b5efdf23a5ba36873f691efd5d39848bbd00f3f36a105e4db1f53a97baada552e7795ada1618a24984ba9d7a267001685a97b5a49d7189d97acb33da42215a161c31d1de400d63d5ff163d84a2e9b61eea1a5ec3ef7565c82ecab0f033b22aa5cb3b20cd13fd323ea9222ee2a86dce4795dd1787f5", @ANYRES64=0x0], 0x20) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r5, r6, 0x2f, 0x10, 0x4, @void, @value=r5}, 0x20) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x28, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r0, 0x80, &(0x7f0000000000)=@generic={0x21, "18b1149bc85bdff5944e0dc0e7ade755260fc4e289ee09fc0241beaabec99e53d4788c968c89a28a80682d3ffe62e294a13b49b7036a1089741987c8ddd909a9cc130b6be568e35481496e88fa8bf3c30faa4c26a15a71e99998137cfaf59dade716c695bb4e219d9d974a93ea07b7fcbad8347cc26fe732889d130cfed5"}, 0x0, 0x0, 0xab97f7306f2c0316}) (async) r7 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=@newtfilter={0x180c, 0x2c, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc}, {0x12, 0xffe0}, {0xb, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xa, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x3}}, @filter_kind_options=@f_bpf={{0x8}, {0x1774, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x9}, {0x4c, 0x5, [{0x7, 0x6, 0x1f, 0x9}, {0x9, 0x8, 0x6, 0x7fffffff}, {0xfffd, 0x8, 0x0, 0x8}, {0x1, 0x9, 0x4, 0x4}, {0x0, 0x8, 0x80, 0x8}, {0x4, 0x1, 0x2, 0x1ff}, {0xcde, 0x6, 0x8, 0x10000}, {0x9, 0x9, 0x4, 0x7}, {0x3ff, 0xdd, 0x80, 0x6}]}}, @TCA_BPF_ACT={0x16fc, 0x1, [@m_police={0x14e4, 0x15, 0x0, 0x0, {{0xb}, {0x1498, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x5, 0x4, 0x80000000, 0x2d8, 0x3ff, 0xcc21, 0xffff83bf, 0x7, 0x5b, 0x1000, 0x3, 0xff, 0x6, 0x80, 0xb, 0x6, 0xb, 0x7, 0x0, 0x63, 0x5, 0x400, 0x632d75f7, 0xffffffff, 0x3ff, 0xb, 0x1, 0x7, 0x7, 0x8, 0xff, 0x81, 0xe, 0xf, 0xfffffffa, 0x4, 0x7ff, 0x8, 0x8, 0x84e, 0x5, 0x7, 0x5, 0x7a, 0x7, 0x8, 0x4, 0x8001, 0x1, 0x9, 0x3, 0x7, 0x0, 0xffffffff, 0x1, 0xd91c, 0x7f, 0x7fff, 0xfff, 0xde6, 0x3, 0x1a, 0x5, 0x6, 0x1, 0x8, 0x1, 0x0, 0x523, 0x4, 0x0, 0x7537, 0x9ff7, 0x2, 0x200, 0xfffff001, 0xfffffe55, 0xf, 0xf7cc0000, 0x5, 0x2ba, 0x8, 0x4, 0x4, 0x2, 0x7, 0x65, 0x1, 0x4, 0x4, 0xfffffffa, 0x40, 0x43, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x1, 0x8, 0x2, 0x5, 0x2, 0x80000001, 0x8001, 0x0, 0x0, 0x3, 0x8, 0x6, 0x200, 0x2, 0x472, 0x7, 0x6, 0x5, 0x1, 0x3, 0x4, 0x3, 0x1, 0xa34, 0x4, 0x8, 0x36dc, 0x7, 0x3, 0xfffffffd, 0x9, 0x7, 0xbac2, 0x3, 0xfffffff9, 0x4, 0x7, 0x9, 0x1, 0x6, 0x1000, 0xfffffff7, 0x42, 0x7, 0x9, 0x7, 0xa7b, 0x7, 0x9, 0x6, 0x10000, 0x20, 0x5, 0x6, 0x1000, 0x6, 0x0, 0xff, 0x80000001, 0x7, 0x1, 0x81, 0x8000, 0x4, 0xa, 0x5, 0xd, 0x8001, 0x8, 0x56, 0x7fff, 0xb, 0x4b8a, 0x4, 0x0, 0x0, 0x80, 0x3, 0x800, 0x7, 0xb, 0x35, 0x2, 0x0, 0xffffffff, 0x7, 0x10, 0x100, 0x7, 0x2, 0x10001, 0x64034441, 0x2b2, 0x866, 0x101, 0x4, 0x8, 0x9, 0xfffffffa, 0x9, 0x3, 0x0, 0x4, 0xffffffc0, 0xa9, 0x7cd, 0xad, 0x53, 0x1, 0xcb9b, 0xaaa, 0xff, 0x9, 0x451, 0x1, 0x7, 0x0, 0x6, 0xbd, 0x3, 0x6018, 0x2, 0x4, 0x1, 0x5, 0x1, 0x7, 0x6, 0x1, 0x2, 0x37, 0x4, 0x6, 0x4, 0x8, 0x0, 0x93, 0x3, 0x1, 0x5, 0x0, 0xb, 0x3, 0x8001, 0x2, 0xfa, 0x9, 0x0, 0x5, 0x80000001, 0x3, 0x0, 0x7f, 0x9, 0x8, 0x5bbe, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7b}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0xae, 0x1, 0x5, {0x6, 0x0, 0x1, 0xd, 0x4, 0x4}, {0x9, 0x0, 0x1, 0x1, 0x400, 0xce1}, 0xfffffff7, 0x2, 0x2cd}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x5, 0x3, 0x4, 0x9, 0x0, 0xe, 0x100, 0x10000, 0xe08a, 0xbf7, 0x828d, 0x401, 0x8, 0x511c9d8c, 0xfffffff0, 0x4, 0x9, 0x1, 0x2, 0x8, 0x4c9, 0x8, 0x3, 0xc, 0xe0000000, 0x7, 0x1, 0x1, 0x6, 0x7, 0x3, 0x7, 0x1ff, 0x7ff, 0xe7c, 0x6, 0x2, 0x6d, 0x2, 0xa196, 0x7, 0xff, 0x0, 0x8, 0x5, 0x8, 0x5296, 0x1, 0x2, 0xf29, 0x0, 0x1, 0x80000000, 0x1, 0x4, 0xe, 0x6, 0xfffffffa, 0x8, 0x10001, 0x140, 0x16, 0x96, 0x5, 0x0, 0x1319d09a, 0x6, 0x200, 0x0, 0x3, 0x7d, 0xff, 0x4, 0x0, 0x5, 0xf, 0x401, 0xffffff3a, 0x4, 0x9, 0x3, 0x0, 0x2, 0x4, 0x1000, 0x9, 0x1, 0x592, 0x8, 0x7fff, 0x1, 0x7fff, 0x8, 0x9, 0xfffffff2, 0xfffffff6, 0x9, 0xea6, 0x3, 0xc2e, 0x8, 0x8, 0x38, 0xed, 0x8, 0x9, 0x9, 0x7f, 0x1000, 0x8, 0x4, 0x1, 0xd8, 0x83a, 0xc, 0x7fffffff, 0x6, 0x4acd305f, 0x5795ee5e, 0x9, 0x0, 0x1, 0x1, 0x4cc, 0x8, 0x6, 0x7, 0x8, 0xc4, 0x4, 0x7c45, 0x7, 0x88, 0x80000000, 0x1, 0xfffffffe, 0x7, 0x1, 0xc, 0x80000, 0x1, 0x3, 0x6, 0x8, 0x42, 0xb, 0x0, 0x57a, 0x0, 0x2, 0x10, 0x8, 0x1, 0x450b, 0x0, 0x0, 0x20000, 0x104, 0x3, 0x5, 0x80, 0x3, 0x8, 0x8, 0x4, 0xe8000000, 0x7, 0x8, 0x9, 0x0, 0x7ff3, 0x2, 0x87, 0x6, 0x4, 0x1, 0x5, 0x59c6e006, 0x9, 0x5, 0x1, 0x2, 0x7fe2, 0xbc, 0x2, 0x979, 0x0, 0x9, 0x7, 0xf67, 0x2, 0x9c000000, 0x7f, 0x3, 0xf56, 0x1, 0x9, 0x400, 0x6, 0x2, 0x10, 0x6, 0x3, 0x3, 0x6, 0x380000, 0x7f, 0x80000001, 0x0, 0x7fff, 0x3, 0x4, 0x3, 0x7, 0x1304, 0x8, 0x5, 0x0, 0x4, 0x1, 0x9, 0xa, 0x8001, 0x7, 0x4, 0xfffffffa, 0xa89, 0x6, 0x3, 0x4a4b, 0x9, 0x0, 0x81, 0x8, 0x1, 0x81e0, 0x0, 0x7, 0x5, 0x1, 0x8, 0x9f, 0x4, 0x0, 0x5, 0x0, 0xfffffff9, 0x8, 0x55, 0x1, 0x9, 0x9, 0x4d7, 0x1, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x5, 0xd9, 0x3, 0x2, 0x7, 0x9, 0x5e, 0x0, 0x0, 0x2, 0x1, 0x6, 0x3, 0x0, 0x1000, 0x0, 0xfffffffa, 0x0, 0x8, 0x1372, 0x9, 0x7, 0x4, 0x1000000, 0x82, 0x9, 0x18490000, 0x8001, 0x9, 0x4, 0xffff756f, 0x1a, 0x6, 0x5, 0x7, 0x1, 0x4, 0xd31, 0x6, 0xffff0001, 0x401, 0xb, 0x80000000, 0x7ff, 0x2, 0x2000000, 0x55, 0xa3a2, 0x6, 0x4, 0xa, 0x4, 0x3, 0x0, 0xe, 0x3, 0x5, 0xffff, 0x5, 0x7, 0x5, 0x3, 0x7, 0x0, 0x8, 0x4, 0x3, 0x7fffffff, 0x0, 0x5b, 0x7f, 0x7, 0x7fffffff, 0x81, 0x80, 0x165, 0x2, 0x800, 0x3ff, 0x7, 0x3, 0x1, 0x9, 0x1, 0x8, 0x8000ca, 0x5, 0xda2c, 0x3d4, 0x2, 0x0, 0x5, 0xffff, 0x8, 0x10, 0x1, 0x7, 0x4, 0x5, 0x7, 0x35, 0xc1c6, 0xe, 0x4b800000, 0x3, 0x9, 0x0, 0x5, 0x2, 0x3, 0x3, 0x3, 0x0, 0x6, 0x8, 0x1, 0x5f, 0x951a, 0x81, 0x1c37, 0x9, 0x8, 0x9, 0xc1, 0x2, 0x40, 0x0, 0x3, 0x5, 0x2, 0x100, 0x101, 0xff, 0x4, 0x7, 0xffffffff, 0x0, 0x5, 0x1, 0x81, 0xfa, 0xe1a, 0x200, 0xa, 0xd, 0x5220, 0xc, 0x5, 0x8, 0x8, 0x3, 0x1d, 0xfffffffa, 0x4, 0x3, 0xfff, 0x7ff, 0x7, 0x1000, 0x7, 0xbaf1, 0x8, 0xa, 0x4, 0xc3, 0x7fffffff, 0x6c, 0x2d73, 0xffff, 0x4, 0x5, 0x1, 0x6, 0x2, 0x2f, 0x94ed, 0xda40, 0xffffffd8, 0x3, 0x1c, 0x3, 0x4, 0xff, 0x10001, 0xffff3cdf, 0x4, 0x8, 0x8, 0x2, 0x8, 0x7fff, 0xfffffff9, 0x2, 0x5, 0x2, 0x8, 0x100, 0x9, 0x8, 0x1000, 0x1, 0x3, 0x400, 0x1, 0x8, 0x8, 0x7, 0x4405, 0xb42e069, 0x3, 0x5, 0x8000, 0x0, 0x5, 0x8, 0x80, 0x3, 0x5, 0x3, 0x400, 0xffffff80, 0x3ca3, 0x9, 0x81, 0x5, 0x1800000, 0xe50, 0x400, 0x1f, 0x2, 0x5, 0x3, 0x8649, 0x8, 0x5, 0x7, 0x756e, 0x7, 0x6, 0x1, 0x102, 0x7f, 0x5, 0x200, 0x7, 0x4, 0xfffffff8, 0x3, 0x80000000, 0x4, 0x7fffffff, 0xe6c, 0x3, 0x6, 0xc]}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x3dc, 0x2, 0x5, 0x7, 0x9, 0x4, 0x9, 0xffffffff, 0x401, 0x1, 0x7, 0x8, 0x10000, 0x4790d93a, 0x3, 0x60, 0x6, 0x3ff, 0x8, 0x6, 0x1, 0x5, 0x3, 0x7, 0x7, 0x3d0, 0xa, 0x0, 0x1, 0x5, 0x5, 0x5, 0xfffffff8, 0x8, 0x42a, 0x2, 0xffffcd3f, 0x6, 0x3ff, 0x80, 0x9, 0x8e4, 0x1, 0xfffffffe, 0x9, 0x7, 0x8, 0x401, 0xa, 0xebc8b1e, 0xa, 0x7f, 0x80, 0x8, 0x2, 0xe, 0x8, 0x6, 0x1, 0x7, 0x2, 0x5, 0x1cf, 0x1, 0x6, 0x0, 0x8000, 0x5, 0x9, 0x3, 0xfffffff5, 0x7, 0x0, 0x100, 0x1, 0x10, 0x5, 0x2, 0x3, 0x8, 0x8000, 0xaf89, 0x6, 0x7ff, 0x2, 0x8, 0x2, 0x3, 0x25, 0x8, 0x0, 0x8001, 0x5, 0x5, 0x47a, 0x0, 0x1, 0x60000, 0x6cc8, 0x8, 0x3, 0xc00000, 0xffffff08, 0x2b, 0x7fff, 0x4, 0x81, 0x5, 0x1, 0x7, 0x200, 0x7, 0xf, 0x7, 0xcc, 0x9edd, 0x7, 0x18a, 0x4, 0x200, 0x1, 0xfffffffb, 0xf, 0x80000000, 0x7f, 0x0, 0x5334a356, 0x3, 0x1, 0xef95, 0xb4, 0x1000, 0x5, 0x2, 0x9, 0x7fff, 0x73, 0x3, 0xbd32, 0x7, 0x9, 0x0, 0x101, 0x8, 0x81, 0x6cb3, 0x7, 0x2, 0x35, 0x400, 0x2, 0xc986, 0x8, 0x2231, 0x7, 0x3, 0x40000000, 0x8000000, 0x4, 0x4, 0xc319, 0x200, 0xfffffff9, 0x7, 0xa, 0xd, 0x0, 0x1, 0x0, 0x8001, 0x3, 0xfffff04c, 0x3, 0xf18ba35, 0x6, 0x800, 0x3, 0x6, 0xb, 0xf, 0x8, 0x5fc, 0x7, 0x8, 0x3, 0x1, 0x200, 0x8, 0x8, 0xffff, 0x1, 0xffff, 0x9, 0x6, 0xa, 0x2, 0x6, 0x8001, 0x4, 0xd, 0x7, 0x9, 0xab, 0x7f, 0x6, 0x1bdf, 0x0, 0x7f, 0xfff, 0x0, 0x1, 0x4, 0xfffffff9, 0x8001, 0x800, 0xa2, 0x8, 0x8, 0xa, 0xfff, 0x3, 0x84, 0x9, 0x2, 0x8, 0x2, 0x2, 0xc3, 0x2, 0x7, 0xfffffff7, 0x3, 0x8, 0xd, 0x800, 0x8, 0xfffffffb, 0x6, 0x5, 0xff, 0x9, 0x5, 0xffffffff, 0x0, 0x0, 0x200, 0x9, 0x40, 0x0, 0x8000, 0x9, 0x0, 0x0, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffefffffffc}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x97ad}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x101, 0x3, 0x6, 0x8001, 0x4, 0x100000, 0x6, 0x4, 0x5, 0xffffffff, 0x0, 0x2, 0xd8c, 0x200, 0x5, 0x0, 0x5, 0x95, 0x3, 0x396, 0xb5, 0x5, 0xefb, 0x6, 0x5, 0x9, 0x9, 0x5, 0x9, 0x81, 0x7, 0x3, 0x1f, 0x6e0a, 0x9, 0x1, 0x7f, 0x80000000, 0x7, 0x1000, 0x4, 0xba4, 0x9, 0x9, 0x7, 0x10, 0xe, 0x4, 0x0, 0xd14, 0x5, 0xff, 0x1f5, 0x3, 0xffffffff, 0xaf, 0x7, 0x8, 0x5, 0x9, 0x9, 0x1, 0x1, 0x200, 0x9c18, 0x2, 0x2, 0x8001, 0x6, 0x80000000, 0x2, 0xfffffc01, 0x2, 0x9, 0xffffffff, 0xfffffff7, 0xcee8, 0x6, 0x81, 0x1, 0x2, 0x5e, 0x3, 0x8, 0x6, 0x7, 0xffff, 0x1f, 0x101, 0xc4c9, 0x3, 0x9, 0x2, 0x6, 0x4, 0x8001, 0x3, 0x1, 0x3, 0x6, 0xff, 0x3, 0x3ff, 0x6, 0x4f10, 0x401, 0x0, 0x3, 0x2, 0xabe, 0x401, 0x5, 0xfffffff6, 0xa, 0x8001, 0x2, 0x6, 0x2a, 0x6, 0x7, 0x4, 0x10, 0x1000, 0x9, 0x0, 0x0, 0xfffeffff, 0x9, 0x6, 0x6, 0x5948, 0x600, 0x2d, 0xb, 0x1ff, 0xcfe, 0x9, 0x3, 0x0, 0x0, 0x94, 0xdf78, 0x854, 0x6, 0x0, 0xb, 0x5, 0x5, 0x9, 0x8f, 0x8, 0x238, 0x8c, 0x2, 0x1000, 0x3, 0x7, 0x7, 0x2, 0x5, 0xfffffffc, 0x3ff, 0xb, 0xa, 0x8001, 0x5, 0x1, 0xfffffffa, 0x5, 0x9, 0xfffeffff, 0x4, 0xb50, 0x32b, 0x10001, 0x1, 0x7, 0xe348, 0x9, 0x9, 0xd, 0x7f, 0xfe4, 0x4, 0x7, 0x9, 0x10, 0xe89, 0xf3, 0x0, 0x80000001, 0x5, 0x1, 0x200, 0x5, 0x8, 0x8, 0x10, 0x0, 0x1, 0xb, 0x7, 0x1, 0x80000000, 0x6, 0x9d, 0x4, 0x3, 0x7, 0x7f, 0x6, 0x1, 0x2, 0x9, 0x100, 0x0, 0x4, 0xfffffff4, 0x80000001, 0x411, 0xa, 0x8001, 0x6, 0x6, 0x2, 0x2, 0x7f, 0x6, 0x40000000, 0x9, 0x352, 0x3, 0x401, 0x1, 0x4, 0xfffffffb, 0xfffffffc, 0x200, 0x6, 0x8000, 0x18e, 0x0, 0x1, 0x8, 0x6, 0x7fffffff, 0x80, 0x0, 0x5, 0x6, 0x1ff, 0x3, 0x3, 0x4]}, @TCA_POLICE_RESULT={0x8}]]}, {0x21, 0x6, "81ecc443391fd8d693e34bb6fa01d6c780b0c63e96bbc273284f782629"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x12c, 0x13, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0xe9, 0x6, "770496d54bf7333d991d95d7cd4b9565f792d1cfa64c841270abeaa30c600c9bfe2db746e3d1895aad407332af5e22bbd2520c823cfd20a0c3a5e46681e205c7b537102933b08ce5377f818b414d9e1b52460723ee844834b13e63f9dd17c56950adeb24d5bd7a763a7053882b4b9bfa72304ba98ca9f16aaa0c91ddc617ea05b24971a692ff1795e2fce519ae0f0540ebffccccbb47f8d0f6feb78a8f78f62ba3009a20be86ae731db023a1365b9a072c2cbe7a6ed3668ce74f59a80eb590cb73eef2600e225243b8380848619cc82e326dccf8834cbd5e1fb1f6fac89e8af29f22b96829"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0xe8, 0xd, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x1, 0x0, 0x340}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x3}}]}, {0x96, 0x6, "92004a9fb0d9d21ec60ffd14448872d316e460391223daefdc58785609f0f9cddd3f03c5af0dd53445fda8fb511c608946cb376e9f3b7db239b07eb6f64a709ba7cc8eb9b4b5e6cb9a1a7b1f37ed74a396971607361b8127df69dd7ad64e81f35f0e8ffc6205ca8a943535415eb75ba4d0b9daaab37b4211719d0d924128f318e2e4870117dfaa3ee9418313cb248aeb1617"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xffffffff, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x2f}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x9}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xffffffff]}]}}]}, 0x180c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async, rerun: 64) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000440)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x00\x00\x00\x00\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f00000006c0)=ANY=[@ANYBLOB="2b696fa8c0c864f3babc8c4826a245d348df207bd3b04890aeb9f5a9428f8995d3536db2e945e4b21279e020c868ce322ba7aa402109fc19a93abd6d4387f9c14881767f33c3959510c384a30b4632ae5ba9265fa85383180c7c803c9861a193cbac3332"], 0x4) (async) connect$vsock_stream(r0, &(0x7f00000011c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 30.276170879s ago: executing program 35 (id=1003): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_io_uring_setup(0x723d, &(0x7f0000000580)={0x0, 0xd235, 0x400, 0x0, 0x28a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="35084d06e4f0ef9a433002a5e4ab9fae3b4b6dcebe2f4d3bbe3ad91f9d8e357f9b6f5ae5ffe996549b43f6feff63a400e656e127ee7c1299adec9c20a80b572daa0e3e90c10d787afdcb90099557dfce", 0x50}, {&(0x7f0000000300)="fc9f24e20f7256c74d1d11edf7e87aa0c4b8f704121d94d26c7620dc3ce11fca2e6e45f3149b0c0ac1eb61eef592f9e57fe4dbcb437ed670f3c6273ac209150757c55a0e6f8b9d4862e73371e144985001d4e6b0c97900e5bcd7577f76cf2d85336ac19d82011ecb8729c36ce62630c9fb6d9b1bfec34724b153c24ad3660166065c130cc830984ca6d377d5e86789", 0x8f}, {&(0x7f0000000480)="a4105b673bf8e61aa21883b92f95d32d6c25fbed133ab231e24f521aa2172311a8ec4952a11460cfce5ddb831e9f5a8426c26051beeec17a79d772229dfcbd1c3d1df76c68ff34288257f1fab44cd837604131bef3f97c5f1790a2d7d71e6375aa02079d46c6c2364891525a8bf0302848dc0c4d3867d436b0aa569c4a0df4a5f649f2849a7d85688c5df00a1f6f3d3f2d86cabf88f4cd", 0x97}], 0x3}, 0x10) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6}) (rerun: 32) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x100, &(0x7f0000000100)=0x9df5, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000600)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="b895caa5d3603cbbaf6d347a37075eb83fe66e2a47fc55740c3e882aa6d10f19703273b5efdf23a5ba36873f691efd5d39848bbd00f3f36a105e4db1f53a97baada552e7795ada1618a24984ba9d7a267001685a97b5a49d7189d97acb33da42215a161c31d1de400d63d5ff163d84a2e9b61eea1a5ec3ef7565c82ecab0f033b22aa5cb3b20cd13fd323ea9222ee2a86dce4795dd1787f5", @ANYRES64=0x0], 0x20) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r5, r6, 0x2f, 0x10, 0x4, @void, @value=r5}, 0x20) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x28, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r0, 0x80, &(0x7f0000000000)=@generic={0x21, "18b1149bc85bdff5944e0dc0e7ade755260fc4e289ee09fc0241beaabec99e53d4788c968c89a28a80682d3ffe62e294a13b49b7036a1089741987c8ddd909a9cc130b6be568e35481496e88fa8bf3c30faa4c26a15a71e99998137cfaf59dade716c695bb4e219d9d974a93ea07b7fcbad8347cc26fe732889d130cfed5"}, 0x0, 0x0, 0xab97f7306f2c0316}) (async) r7 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=@newtfilter={0x180c, 0x2c, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc}, {0x12, 0xffe0}, {0xb, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xa, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x3}}, @filter_kind_options=@f_bpf={{0x8}, {0x1774, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x9}, {0x4c, 0x5, [{0x7, 0x6, 0x1f, 0x9}, {0x9, 0x8, 0x6, 0x7fffffff}, {0xfffd, 0x8, 0x0, 0x8}, {0x1, 0x9, 0x4, 0x4}, {0x0, 0x8, 0x80, 0x8}, {0x4, 0x1, 0x2, 0x1ff}, {0xcde, 0x6, 0x8, 0x10000}, {0x9, 0x9, 0x4, 0x7}, {0x3ff, 0xdd, 0x80, 0x6}]}}, @TCA_BPF_ACT={0x16fc, 0x1, [@m_police={0x14e4, 0x15, 0x0, 0x0, {{0xb}, {0x1498, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x5, 0x4, 0x80000000, 0x2d8, 0x3ff, 0xcc21, 0xffff83bf, 0x7, 0x5b, 0x1000, 0x3, 0xff, 0x6, 0x80, 0xb, 0x6, 0xb, 0x7, 0x0, 0x63, 0x5, 0x400, 0x632d75f7, 0xffffffff, 0x3ff, 0xb, 0x1, 0x7, 0x7, 0x8, 0xff, 0x81, 0xe, 0xf, 0xfffffffa, 0x4, 0x7ff, 0x8, 0x8, 0x84e, 0x5, 0x7, 0x5, 0x7a, 0x7, 0x8, 0x4, 0x8001, 0x1, 0x9, 0x3, 0x7, 0x0, 0xffffffff, 0x1, 0xd91c, 0x7f, 0x7fff, 0xfff, 0xde6, 0x3, 0x1a, 0x5, 0x6, 0x1, 0x8, 0x1, 0x0, 0x523, 0x4, 0x0, 0x7537, 0x9ff7, 0x2, 0x200, 0xfffff001, 0xfffffe55, 0xf, 0xf7cc0000, 0x5, 0x2ba, 0x8, 0x4, 0x4, 0x2, 0x7, 0x65, 0x1, 0x4, 0x4, 0xfffffffa, 0x40, 0x43, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x1, 0x8, 0x2, 0x5, 0x2, 0x80000001, 0x8001, 0x0, 0x0, 0x3, 0x8, 0x6, 0x200, 0x2, 0x472, 0x7, 0x6, 0x5, 0x1, 0x3, 0x4, 0x3, 0x1, 0xa34, 0x4, 0x8, 0x36dc, 0x7, 0x3, 0xfffffffd, 0x9, 0x7, 0xbac2, 0x3, 0xfffffff9, 0x4, 0x7, 0x9, 0x1, 0x6, 0x1000, 0xfffffff7, 0x42, 0x7, 0x9, 0x7, 0xa7b, 0x7, 0x9, 0x6, 0x10000, 0x20, 0x5, 0x6, 0x1000, 0x6, 0x0, 0xff, 0x80000001, 0x7, 0x1, 0x81, 0x8000, 0x4, 0xa, 0x5, 0xd, 0x8001, 0x8, 0x56, 0x7fff, 0xb, 0x4b8a, 0x4, 0x0, 0x0, 0x80, 0x3, 0x800, 0x7, 0xb, 0x35, 0x2, 0x0, 0xffffffff, 0x7, 0x10, 0x100, 0x7, 0x2, 0x10001, 0x64034441, 0x2b2, 0x866, 0x101, 0x4, 0x8, 0x9, 0xfffffffa, 0x9, 0x3, 0x0, 0x4, 0xffffffc0, 0xa9, 0x7cd, 0xad, 0x53, 0x1, 0xcb9b, 0xaaa, 0xff, 0x9, 0x451, 0x1, 0x7, 0x0, 0x6, 0xbd, 0x3, 0x6018, 0x2, 0x4, 0x1, 0x5, 0x1, 0x7, 0x6, 0x1, 0x2, 0x37, 0x4, 0x6, 0x4, 0x8, 0x0, 0x93, 0x3, 0x1, 0x5, 0x0, 0xb, 0x3, 0x8001, 0x2, 0xfa, 0x9, 0x0, 0x5, 0x80000001, 0x3, 0x0, 0x7f, 0x9, 0x8, 0x5bbe, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7b}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0xae, 0x1, 0x5, {0x6, 0x0, 0x1, 0xd, 0x4, 0x4}, {0x9, 0x0, 0x1, 0x1, 0x400, 0xce1}, 0xfffffff7, 0x2, 0x2cd}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x5, 0x3, 0x4, 0x9, 0x0, 0xe, 0x100, 0x10000, 0xe08a, 0xbf7, 0x828d, 0x401, 0x8, 0x511c9d8c, 0xfffffff0, 0x4, 0x9, 0x1, 0x2, 0x8, 0x4c9, 0x8, 0x3, 0xc, 0xe0000000, 0x7, 0x1, 0x1, 0x6, 0x7, 0x3, 0x7, 0x1ff, 0x7ff, 0xe7c, 0x6, 0x2, 0x6d, 0x2, 0xa196, 0x7, 0xff, 0x0, 0x8, 0x5, 0x8, 0x5296, 0x1, 0x2, 0xf29, 0x0, 0x1, 0x80000000, 0x1, 0x4, 0xe, 0x6, 0xfffffffa, 0x8, 0x10001, 0x140, 0x16, 0x96, 0x5, 0x0, 0x1319d09a, 0x6, 0x200, 0x0, 0x3, 0x7d, 0xff, 0x4, 0x0, 0x5, 0xf, 0x401, 0xffffff3a, 0x4, 0x9, 0x3, 0x0, 0x2, 0x4, 0x1000, 0x9, 0x1, 0x592, 0x8, 0x7fff, 0x1, 0x7fff, 0x8, 0x9, 0xfffffff2, 0xfffffff6, 0x9, 0xea6, 0x3, 0xc2e, 0x8, 0x8, 0x38, 0xed, 0x8, 0x9, 0x9, 0x7f, 0x1000, 0x8, 0x4, 0x1, 0xd8, 0x83a, 0xc, 0x7fffffff, 0x6, 0x4acd305f, 0x5795ee5e, 0x9, 0x0, 0x1, 0x1, 0x4cc, 0x8, 0x6, 0x7, 0x8, 0xc4, 0x4, 0x7c45, 0x7, 0x88, 0x80000000, 0x1, 0xfffffffe, 0x7, 0x1, 0xc, 0x80000, 0x1, 0x3, 0x6, 0x8, 0x42, 0xb, 0x0, 0x57a, 0x0, 0x2, 0x10, 0x8, 0x1, 0x450b, 0x0, 0x0, 0x20000, 0x104, 0x3, 0x5, 0x80, 0x3, 0x8, 0x8, 0x4, 0xe8000000, 0x7, 0x8, 0x9, 0x0, 0x7ff3, 0x2, 0x87, 0x6, 0x4, 0x1, 0x5, 0x59c6e006, 0x9, 0x5, 0x1, 0x2, 0x7fe2, 0xbc, 0x2, 0x979, 0x0, 0x9, 0x7, 0xf67, 0x2, 0x9c000000, 0x7f, 0x3, 0xf56, 0x1, 0x9, 0x400, 0x6, 0x2, 0x10, 0x6, 0x3, 0x3, 0x6, 0x380000, 0x7f, 0x80000001, 0x0, 0x7fff, 0x3, 0x4, 0x3, 0x7, 0x1304, 0x8, 0x5, 0x0, 0x4, 0x1, 0x9, 0xa, 0x8001, 0x7, 0x4, 0xfffffffa, 0xa89, 0x6, 0x3, 0x4a4b, 0x9, 0x0, 0x81, 0x8, 0x1, 0x81e0, 0x0, 0x7, 0x5, 0x1, 0x8, 0x9f, 0x4, 0x0, 0x5, 0x0, 0xfffffff9, 0x8, 0x55, 0x1, 0x9, 0x9, 0x4d7, 0x1, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x5, 0xd9, 0x3, 0x2, 0x7, 0x9, 0x5e, 0x0, 0x0, 0x2, 0x1, 0x6, 0x3, 0x0, 0x1000, 0x0, 0xfffffffa, 0x0, 0x8, 0x1372, 0x9, 0x7, 0x4, 0x1000000, 0x82, 0x9, 0x18490000, 0x8001, 0x9, 0x4, 0xffff756f, 0x1a, 0x6, 0x5, 0x7, 0x1, 0x4, 0xd31, 0x6, 0xffff0001, 0x401, 0xb, 0x80000000, 0x7ff, 0x2, 0x2000000, 0x55, 0xa3a2, 0x6, 0x4, 0xa, 0x4, 0x3, 0x0, 0xe, 0x3, 0x5, 0xffff, 0x5, 0x7, 0x5, 0x3, 0x7, 0x0, 0x8, 0x4, 0x3, 0x7fffffff, 0x0, 0x5b, 0x7f, 0x7, 0x7fffffff, 0x81, 0x80, 0x165, 0x2, 0x800, 0x3ff, 0x7, 0x3, 0x1, 0x9, 0x1, 0x8, 0x8000ca, 0x5, 0xda2c, 0x3d4, 0x2, 0x0, 0x5, 0xffff, 0x8, 0x10, 0x1, 0x7, 0x4, 0x5, 0x7, 0x35, 0xc1c6, 0xe, 0x4b800000, 0x3, 0x9, 0x0, 0x5, 0x2, 0x3, 0x3, 0x3, 0x0, 0x6, 0x8, 0x1, 0x5f, 0x951a, 0x81, 0x1c37, 0x9, 0x8, 0x9, 0xc1, 0x2, 0x40, 0x0, 0x3, 0x5, 0x2, 0x100, 0x101, 0xff, 0x4, 0x7, 0xffffffff, 0x0, 0x5, 0x1, 0x81, 0xfa, 0xe1a, 0x200, 0xa, 0xd, 0x5220, 0xc, 0x5, 0x8, 0x8, 0x3, 0x1d, 0xfffffffa, 0x4, 0x3, 0xfff, 0x7ff, 0x7, 0x1000, 0x7, 0xbaf1, 0x8, 0xa, 0x4, 0xc3, 0x7fffffff, 0x6c, 0x2d73, 0xffff, 0x4, 0x5, 0x1, 0x6, 0x2, 0x2f, 0x94ed, 0xda40, 0xffffffd8, 0x3, 0x1c, 0x3, 0x4, 0xff, 0x10001, 0xffff3cdf, 0x4, 0x8, 0x8, 0x2, 0x8, 0x7fff, 0xfffffff9, 0x2, 0x5, 0x2, 0x8, 0x100, 0x9, 0x8, 0x1000, 0x1, 0x3, 0x400, 0x1, 0x8, 0x8, 0x7, 0x4405, 0xb42e069, 0x3, 0x5, 0x8000, 0x0, 0x5, 0x8, 0x80, 0x3, 0x5, 0x3, 0x400, 0xffffff80, 0x3ca3, 0x9, 0x81, 0x5, 0x1800000, 0xe50, 0x400, 0x1f, 0x2, 0x5, 0x3, 0x8649, 0x8, 0x5, 0x7, 0x756e, 0x7, 0x6, 0x1, 0x102, 0x7f, 0x5, 0x200, 0x7, 0x4, 0xfffffff8, 0x3, 0x80000000, 0x4, 0x7fffffff, 0xe6c, 0x3, 0x6, 0xc]}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x3dc, 0x2, 0x5, 0x7, 0x9, 0x4, 0x9, 0xffffffff, 0x401, 0x1, 0x7, 0x8, 0x10000, 0x4790d93a, 0x3, 0x60, 0x6, 0x3ff, 0x8, 0x6, 0x1, 0x5, 0x3, 0x7, 0x7, 0x3d0, 0xa, 0x0, 0x1, 0x5, 0x5, 0x5, 0xfffffff8, 0x8, 0x42a, 0x2, 0xffffcd3f, 0x6, 0x3ff, 0x80, 0x9, 0x8e4, 0x1, 0xfffffffe, 0x9, 0x7, 0x8, 0x401, 0xa, 0xebc8b1e, 0xa, 0x7f, 0x80, 0x8, 0x2, 0xe, 0x8, 0x6, 0x1, 0x7, 0x2, 0x5, 0x1cf, 0x1, 0x6, 0x0, 0x8000, 0x5, 0x9, 0x3, 0xfffffff5, 0x7, 0x0, 0x100, 0x1, 0x10, 0x5, 0x2, 0x3, 0x8, 0x8000, 0xaf89, 0x6, 0x7ff, 0x2, 0x8, 0x2, 0x3, 0x25, 0x8, 0x0, 0x8001, 0x5, 0x5, 0x47a, 0x0, 0x1, 0x60000, 0x6cc8, 0x8, 0x3, 0xc00000, 0xffffff08, 0x2b, 0x7fff, 0x4, 0x81, 0x5, 0x1, 0x7, 0x200, 0x7, 0xf, 0x7, 0xcc, 0x9edd, 0x7, 0x18a, 0x4, 0x200, 0x1, 0xfffffffb, 0xf, 0x80000000, 0x7f, 0x0, 0x5334a356, 0x3, 0x1, 0xef95, 0xb4, 0x1000, 0x5, 0x2, 0x9, 0x7fff, 0x73, 0x3, 0xbd32, 0x7, 0x9, 0x0, 0x101, 0x8, 0x81, 0x6cb3, 0x7, 0x2, 0x35, 0x400, 0x2, 0xc986, 0x8, 0x2231, 0x7, 0x3, 0x40000000, 0x8000000, 0x4, 0x4, 0xc319, 0x200, 0xfffffff9, 0x7, 0xa, 0xd, 0x0, 0x1, 0x0, 0x8001, 0x3, 0xfffff04c, 0x3, 0xf18ba35, 0x6, 0x800, 0x3, 0x6, 0xb, 0xf, 0x8, 0x5fc, 0x7, 0x8, 0x3, 0x1, 0x200, 0x8, 0x8, 0xffff, 0x1, 0xffff, 0x9, 0x6, 0xa, 0x2, 0x6, 0x8001, 0x4, 0xd, 0x7, 0x9, 0xab, 0x7f, 0x6, 0x1bdf, 0x0, 0x7f, 0xfff, 0x0, 0x1, 0x4, 0xfffffff9, 0x8001, 0x800, 0xa2, 0x8, 0x8, 0xa, 0xfff, 0x3, 0x84, 0x9, 0x2, 0x8, 0x2, 0x2, 0xc3, 0x2, 0x7, 0xfffffff7, 0x3, 0x8, 0xd, 0x800, 0x8, 0xfffffffb, 0x6, 0x5, 0xff, 0x9, 0x5, 0xffffffff, 0x0, 0x0, 0x200, 0x9, 0x40, 0x0, 0x8000, 0x9, 0x0, 0x0, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffefffffffc}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x97ad}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x101, 0x3, 0x6, 0x8001, 0x4, 0x100000, 0x6, 0x4, 0x5, 0xffffffff, 0x0, 0x2, 0xd8c, 0x200, 0x5, 0x0, 0x5, 0x95, 0x3, 0x396, 0xb5, 0x5, 0xefb, 0x6, 0x5, 0x9, 0x9, 0x5, 0x9, 0x81, 0x7, 0x3, 0x1f, 0x6e0a, 0x9, 0x1, 0x7f, 0x80000000, 0x7, 0x1000, 0x4, 0xba4, 0x9, 0x9, 0x7, 0x10, 0xe, 0x4, 0x0, 0xd14, 0x5, 0xff, 0x1f5, 0x3, 0xffffffff, 0xaf, 0x7, 0x8, 0x5, 0x9, 0x9, 0x1, 0x1, 0x200, 0x9c18, 0x2, 0x2, 0x8001, 0x6, 0x80000000, 0x2, 0xfffffc01, 0x2, 0x9, 0xffffffff, 0xfffffff7, 0xcee8, 0x6, 0x81, 0x1, 0x2, 0x5e, 0x3, 0x8, 0x6, 0x7, 0xffff, 0x1f, 0x101, 0xc4c9, 0x3, 0x9, 0x2, 0x6, 0x4, 0x8001, 0x3, 0x1, 0x3, 0x6, 0xff, 0x3, 0x3ff, 0x6, 0x4f10, 0x401, 0x0, 0x3, 0x2, 0xabe, 0x401, 0x5, 0xfffffff6, 0xa, 0x8001, 0x2, 0x6, 0x2a, 0x6, 0x7, 0x4, 0x10, 0x1000, 0x9, 0x0, 0x0, 0xfffeffff, 0x9, 0x6, 0x6, 0x5948, 0x600, 0x2d, 0xb, 0x1ff, 0xcfe, 0x9, 0x3, 0x0, 0x0, 0x94, 0xdf78, 0x854, 0x6, 0x0, 0xb, 0x5, 0x5, 0x9, 0x8f, 0x8, 0x238, 0x8c, 0x2, 0x1000, 0x3, 0x7, 0x7, 0x2, 0x5, 0xfffffffc, 0x3ff, 0xb, 0xa, 0x8001, 0x5, 0x1, 0xfffffffa, 0x5, 0x9, 0xfffeffff, 0x4, 0xb50, 0x32b, 0x10001, 0x1, 0x7, 0xe348, 0x9, 0x9, 0xd, 0x7f, 0xfe4, 0x4, 0x7, 0x9, 0x10, 0xe89, 0xf3, 0x0, 0x80000001, 0x5, 0x1, 0x200, 0x5, 0x8, 0x8, 0x10, 0x0, 0x1, 0xb, 0x7, 0x1, 0x80000000, 0x6, 0x9d, 0x4, 0x3, 0x7, 0x7f, 0x6, 0x1, 0x2, 0x9, 0x100, 0x0, 0x4, 0xfffffff4, 0x80000001, 0x411, 0xa, 0x8001, 0x6, 0x6, 0x2, 0x2, 0x7f, 0x6, 0x40000000, 0x9, 0x352, 0x3, 0x401, 0x1, 0x4, 0xfffffffb, 0xfffffffc, 0x200, 0x6, 0x8000, 0x18e, 0x0, 0x1, 0x8, 0x6, 0x7fffffff, 0x80, 0x0, 0x5, 0x6, 0x1ff, 0x3, 0x3, 0x4]}, @TCA_POLICE_RESULT={0x8}]]}, {0x21, 0x6, "81ecc443391fd8d693e34bb6fa01d6c780b0c63e96bbc273284f782629"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x12c, 0x13, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0xe9, 0x6, "770496d54bf7333d991d95d7cd4b9565f792d1cfa64c841270abeaa30c600c9bfe2db746e3d1895aad407332af5e22bbd2520c823cfd20a0c3a5e46681e205c7b537102933b08ce5377f818b414d9e1b52460723ee844834b13e63f9dd17c56950adeb24d5bd7a763a7053882b4b9bfa72304ba98ca9f16aaa0c91ddc617ea05b24971a692ff1795e2fce519ae0f0540ebffccccbb47f8d0f6feb78a8f78f62ba3009a20be86ae731db023a1365b9a072c2cbe7a6ed3668ce74f59a80eb590cb73eef2600e225243b8380848619cc82e326dccf8834cbd5e1fb1f6fac89e8af29f22b96829"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0xe8, 0xd, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x1, 0x0, 0x340}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x3}}]}, {0x96, 0x6, "92004a9fb0d9d21ec60ffd14448872d316e460391223daefdc58785609f0f9cddd3f03c5af0dd53445fda8fb511c608946cb376e9f3b7db239b07eb6f64a709ba7cc8eb9b4b5e6cb9a1a7b1f37ed74a396971607361b8127df69dd7ad64e81f35f0e8ffc6205ca8a943535415eb75ba4d0b9daaab37b4211719d0d924128f318e2e4870117dfaa3ee9418313cb248aeb1617"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xffffffff, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x2f}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x9}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xffffffff]}]}}]}, 0x180c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async, rerun: 64) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000440)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x00\x00\x00\x00\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f00000006c0)=ANY=[@ANYBLOB="2b696fa8c0c864f3babc8c4826a245d348df207bd3b04890aeb9f5a9428f8995d3536db2e945e4b21279e020c868ce322ba7aa402109fc19a93abd6d4387f9c14881767f33c3959510c384a30b4632ae5ba9265fa85383180c7c803c9861a193cbac3332"], 0x4) (async) connect$vsock_stream(r0, &(0x7f00000011c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 3.832895877s ago: executing program 3 (id=1409): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r2, &(0x7f00000000c0), 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x54, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000000)=""/172, 0xac) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r3) r7 = syz_usb_connect$uac3(0x5, 0x143, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x763, 0x2031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x131, 0x3, 0x1, 0x40, 0x0, 0x1, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x65, 0x9}, [@power_domain={0xe, 0x24, 0x10, 0x3, 0xb, 0x5, 0x2, "f4544c594b"}, @multiply_unit={0xb, 0x24, 0xd, 0x5, 0x1, 0x7fffffff}, @input_terminal={0x14, 0x24, 0x2, 0x1, 0x200, 0x3, 0xc1, 0x3, 0x0, 0x3, 0x101, 0xd}, @power_domain={0xe, 0x24, 0x10, 0x81, 0x0, 0x6, 0x40, "aed93373d8"}, @multiply_unit={0xb, 0x24, 0xd, 0x40, 0x3, 0x6, 0x8}, @feature_unit={0x15, 0x24, 0x7, 0x5, 0x1, [0x10, 0x0, 0xff, 0xd]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x5112, 0xc0, "7661280a8b7fa1e59f"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1ff, 0x9, 0x2, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x4, 0x16}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x1, 0xf, 0x1, 0xa}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x3, 0x1, 0xc, "e921b849c254"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf, 0x40, 0x8, 0x5e, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x54, 0x7, 0x9, {0xa, 0x25, 0x25, 0x7fffffff, 0x4, 0xff00}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x46, 0x6, 0xf9, "8d3b4e77c1"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x4}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x11, 0xb, "4a37c4bd3a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x4, 0x8, {0xa, 0x25, 0x25, 0x9, 0x6, 0xe1}}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xbd, 0x2, 0x0, 0x20, 0x6}, 0x21, &(0x7f0000000100)={0x5, 0xf, 0x21, 0x1, [@generic={0x1c, 0x10, 0xb, "5a45116a238b6f7a76a824b61329c8a922554deaec1d4e2cc1"}]}, 0x1, [{0xcc, &(0x7f0000000440)=@string={0xcc, 0x3, "861db8dc0363c4d94e31d8637502dc039b8f62c8205e6316f4f1925504174ecdff6513bdb85b01a17f8e1493a7630cd50690b54e664cab70baa6994f56684e4b37756d5f8f6443958ddc7bcd2591f6be41b8b084033cc5829b6a1d2c48b7b9ce69cb0597de33a71bc28188d82caa068903343cedd6bd8259fb4514af747c7df21ed11ffa0fdf9a8347f446b0aaef2744b279e4cbf27e7e35d8c6f6f61f79b673c6ba54cc5de97a58179284f503a969068673ae2482336450efa136f324d0d59cbc49e83c337835083ba4"}}]}) syz_usb_control_io$uac3(r7, &(0x7f0000000640)={0x14, &(0x7f0000000540)={0x40, 0x4, 0xe, {0xe, 0x7, "b4a4998efb125a4f5a10d779"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "86fa6ae7af00b33e3a4455f2556416b5675f17493e0a4a60d86a8d03ee6ae379f916bfccef61fea6dd4ebfbfa56e79c1d56d32eb1a5e31bae262b023bf9fc9eb5a5bcb27f1715b120ea83510992fb3715bb80a2e805f86a95026db8957e6cabb5a8c0bc87661b77d5d6103b185193e92e7297db2c8c699a6bb8588d7d69e82a4d81c207fe6a0583211081c94dfd55e66f2530e01c0c35f11c1724b5b2d2487f03cbf9d12241503"}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000680)={0x40, 0x15, 0x46, "37e1cc36b5b18634bb4e2c66a285120e103d33c80b7888d038a20470ce894f4105168e770a15785f1a1f269eb20b24137deb61f718e20302b1f4b4b75121141074bb4a1456ee"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000780)={0x20, 0x81, 0x3, "184abb"}, &(0x7f00000007c0)={0x20, 0x82, 0x2, "8966"}, &(0x7f0000000800)={0x20, 0x83, 0x1, 'i'}, &(0x7f0000000840)={0x20, 0x84, 0x4, "ca9a7027"}, &(0x7f0000000880)={0x20, 0x85, 0x3, "d0a279"}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.276227477s ago: executing program 3 (id=1442): quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000102, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x10, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r0, 0xd0d, 0x20}, &(0x7f00000000c0)=0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x891, 0x8, 0xfffffffe, 0x2, r0}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x67, 0x2, 0xa9, 0x8, 0x5, 0x4a, 0xd, 0x81, 0x5, 0x0, 0x0, 0x3, 0xc, 0x9}, 0xe) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x98c, 0x32}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4085}, 0x24000000) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x0, 0x104, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000480)={r0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}}, &(0x7f0000000540)=0x84) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000580)={0x0}) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r5, 0x0, r6, 0x401}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000680)=""/239) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f00000007c0)={0x0, 0x0, '\x00', @raw_data=[0x6, 0x10000, 0x8, 0x79, 0x4, 0xff, 0x984, 0x3, 0x9, 0x1, 0x6, 0x67a7, 0x1, 0x6, 0xfff, 0x9, 0x6, 0x9, 0x0, 0x9, 0xfffff000, 0x1000, 0xc888, 0xffff8000, 0xfffffffd, 0x5, 0x0, 0x101, 0x2, 0xfffffff6, 0x0, 0xff]}) bind$inet6(r6, &(0x7f0000000880)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffff6}, 0x1c) sendmmsg$alg(r2, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)="f7192f12ca5ca60ffab992e3f80529198c2c682cceacc6f834852a0ec59107131bcf93471cced595e3f378687a9395d4d38e67e3015d6d6c8050f7baf2ef5df93b1fcb5b58e8d44b25a083e8151633c3ab5a40c5517a0deb9c", 0x59}], 0x1, &(0x7f0000000980)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0xdf9f2cd56a482c42}], 0x30}], 0x1, 0x48045) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000bc0)={'netdevsim0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000c00)={@private, @multicast2, 0x0}, &(0x7f0000000c40)=0xc) sendmsg$inet6(r6, &(0x7f0000000ec0)={&(0x7f0000000b00)={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000b40)="9d1811224553fb08a5", 0x9}], 0x1, &(0x7f0000000c80)=[@rthdr={{0x58, 0x29, 0x39, {0x3c, 0x8, 0x0, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x25}, @mcast2, @private1, @remote]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x62, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @pad1]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x8, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x7, 0x4, [0x8, 0x7]}}, @jumbo={0xc2, 0x4, 0xd27}]}}}, @dstopts={{0x60, 0x29, 0x37, {0x3b, 0x8, '\x00', [@pad1, @ra={0x5, 0x2, 0x81}, @calipso={0x7, 0x28, {0x0, 0x8, 0x90, 0x7, [0x0, 0x5, 0x2, 0xf1f]}}, @hao={0xc9, 0x10, @private2}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0xb}, r8}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r9}}}, @flowinfo={{0x14, 0x29, 0xb, 0x64}}, @hopopts={{0x90, 0x29, 0x36, {0x2b, 0xf, '\x00', [@hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x84}, @calipso={0x7, 0x48, {0x2, 0x10, 0x2, 0x1000, [0x3cc, 0x7f, 0x0, 0x6, 0x8000000000000001, 0xc1, 0x7, 0x1]}}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0xf47}]}}}, @tclass={{0x14, 0x29, 0x43, 0xb927}}], 0x220}, 0x20004080) write$selinux_load(r6, &(0x7f0000000f00)={0xf97cff8c, 0x8, 'SE Linux', "8dd23955c124756447ede58aa71cc7328e312b6a0402ab5436c141b39298c059e95c9cd9a363d9499aa9ec767c11ea6e45e892b9c2eb880c56d768186dfbcdb50b4d7ab7369d7f32889263b13b0944161d4f7ef1a98be6365710337172cf63d08198a143c377b46c03b618cb5889e9a8fbc2ed126031ed6bcffcac2b19896b3a86d5e279a66b2f01cd46f43874a60955cb33e533dca5592719366eaf626720caa438251fcbabd7ca3eb658038febf39c8ed77385486cab6130323dcd33f5b6a3c49ae7b38e3ce22dddfdc8e8029888a67de199b820a1f4772ad01c9864f53caa65c5d7d9c7c80684b22dca1bdacee2"}, 0xff) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0) pipe2$9p(&(0x7f0000001000), 0x80800) syz_clone(0x6015000, &(0x7f0000001040)="cbb8b4cd051fc9f7872fa0b97010645a45d8673d736f5b8538a518441f560c3f8edcd9f62c89741fd5536505f66bec31", 0x30, &(0x7f0000001080), &(0x7f00000010c0), &(0x7f0000001100)="600834842f11a33714644eca5b5300daeb0e621a22005f3e135e5a6fe6fcf08fe456b2577291103c0e66347d19abc9a181a12dfc1647ac703fcca8b6aff4995124316e6ce6b1f48b7f60760ef5bddcbd817aca73751fe483b809c9c0d2eb9b7827957ee29dce018cca014d9902f38c9360057fadfbc564836cdd2782921f58aef19733df491920fa59ab2b996e19fdd888f94c7072d910d631a076eca12a06a409f138a2") openat$dlm_control(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) 2.274904674s ago: executing program 3 (id=1444): r0 = fsopen(&(0x7f0000000240)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0x6, [{0xd}, {0x3, 0x8000}, {0xa64a88ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x6, 0xff, 0x1, 0x1, 0x5}}, 0x56a}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000080)=0x14) r3 = geteuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@acquire={0x128, 0x17, 0x8, 0x70bd25, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x29}, 0x4d3, 0x33}, @in=@empty, {@in=@local, @in6=@empty, 0x4e23, 0x1, 0x4e23, 0x5, 0x2, 0x80, 0x80, 0x0, r2, r3}, {{@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4e20, 0x1, 0x4e22, 0x0, 0x2, 0x0, 0xa0, 0x2b, 0x0, r4}, {0x1, 0x8001, 0x4, 0x3ff, 0x7, 0x2076, 0x9, 0x2c47}, {0xc, 0x100, 0x2662678d, 0xc5}, 0x7057, 0x6e6bb5, 0x0, 0x0, 0x1}, 0x1, 0x10001, 0x9, 0x70bd2c}}, 0x128}, 0x1, 0x0, 0x0, 0x810}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000400007012bbd700001000000047c000008004280040007000c0001800600060080"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 2.209054905s ago: executing program 3 (id=1447): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000580)={0x8, 0x86e, 0x0, &(0x7f0000000340)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r2, 0xee01, r3) keyctl$setperm(0x5, r2, 0x30925) keyctl$KEYCTL_MOVE(0x3, r2, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r4 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x30, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000959c0204c6576f0d9f414e0a72c7e07f3ea0d8daf523773c6da163d39ffb8d9a139f05ac11943bcf61a2cd1eb4e2a72a4363be8d7f47651998e1acf7baefe1eeaaafc878b7e12281e06bdf7dea3d9d3dfdf08c6c05ea9587252bd40a96c5ea5864cbc15f547330b4308ca65d78f7294bcd715e85cf3266c518468e20d578b1087d60339f511edebc"], &(0x7f0000000280)='syzkaller\x00', 0xfa40, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 2.149985832s ago: executing program 3 (id=1451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000880)={&(0x7f0000000300)=@in6={0xa, 0x4e24, 0x8, @mcast2, 0x44db}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000340)="ba72ab78ace51e50501e8ebfe1a6c2fbc88d02e7b84c553f87640060183fab75fea1f78ed5da5bb220720961ac7d6163420c3cdaa3d15673470f0055d269ef5a912d1f10f26c2f53ca449ac9dda8005933993e5ab96d99665f3e0431311ad5579ae9568fdde136b4e23f88f1da559bfb5adbe03e2c8512398ff0ed6753688553dc2d", 0x82}, {&(0x7f0000000400)="b7a58a931b8b6e6cb20bae7bdfc69d91fc04dd8c7c967ca1a72d3df8e977dbcb35599bce864745ebdcec3d7635620b4cbb0f6500d4235cff028968a99fd0d3510a1e6228ab47a9bd41488f77adacd7eaaa0b23239505351fff6d24c810ddec00cefdd4a07b2b20b1f0caa77d1e1ff6a652a63775493b85f24e97dcb6d440e154a963f8ea102b052df2572cbb5d7385c8ea5a65e022d68ec8609f58a509f7a8eb810d08538b6453eb445fd60af26659c7a08e97a7f2c45035025466bb99", 0xbd}, {&(0x7f00000004c0)="f3dc349b81aeb68e7746fdf1be5083bb51e32a20106c065c984d5c16e643fbcf9bd2a0f2db372ba684498c93d0531d28562ffbf2893e435a4255e66430b49cb96973226ba51a362ee7b807b3236771a8be37566631655be0f43dd952ab7caee7ecb3a82a3b74758033", 0x69}, {&(0x7f0000000540)="0d1b75a5c3cfb44608723624ba138f6132a53abfe49c9f06c4a5f8251061adcad31c44be2e9c1e8b1791bc61c4de85bfe5148172d5e74ccc81192d9fbb651e154e77459d0449fe13178c159b41b3c7e9fdac21be17e84e5e6f88edcd5fb5bd2bbe9a636fa8c4930b8ce62a", 0x6b}, {&(0x7f00000005c0)="f071915a2814a4f010e8aad28ead4f3b5269c9e228bbb31c19a90fb060382c2a73dc4766c30a26678125c9bea22f64777398ecc4a0307ea128cee232ca3488fa016f9d36fd69daa13348aed04eac1f9315e919cefc4725db5a04f23b4f6b52fa482e8b5f28f88308506efceaeac0bba598f3a10a576d0fdcba316cfbeca01e424a35d3335addd712029b01fa4204e14e71739105351b805312e72e6ca68f568ac7cfc29df856dc77b2f3cffa4c8bbfb66e6b4170", 0xb4}, {&(0x7f0000000680)="1d2b90f42bf861ab633ddab8a2d9fb64b92f3a1785fd6e6d7259648582a57e77b273c963febad5cdf85d088c2a427af69f17855b5c78f2877f29fd4b09f8ddce7de82281cc88ef57c85e5cfc91eb6d8d0bec3e5235a46cc9442c9e1e6944d220c713a6eddff18d1b74046247b5e3f7b888bd95d430625002d3a792fc3e0d16b05eddcb604eb0f1c6402d48d9cd184993778b39f9e860bc8cb5b55ee322ffe8c33f82561f3d98ae4c78391ee1c1b97d552d2ee568452694cb29043a95e426c9861bb042324c20ed15226131c04e744b4a4478", 0xd2}, {&(0x7f0000000780)="8964e61b33088557efabc1023212070757da513d6457b68dd4d1ee2145ed1e5a132b", 0x22}, {&(0x7f00000007c0)="9822e0c54f86d76a3b3212558ee1a61a9e1fdd2a3a33f489d1aa2b5adf1a", 0x1e}], 0x8, 0x0, 0x0, 0x800}, 0x20000004) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x319002) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) sendmsg$nl_route(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x21380000}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="240000001900100027bd7000ffdbdf25021020060003fe030028000008000400", @ANYRES32=r5, @ANYBLOB="7eee03b2646b2301cf054aabe620f79180320516e05ca286c8dd7a6e"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x801) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getqdisc={0x44, 0x26, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0xb}, {0x8, 0xb}, {0x6, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044810}, 0x80) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x20, 0x80, 0x4, 0x0, 0x2, 0xff, 0x0, 0xa00}}, 0x1c}}, 0x0) 2.06921065s ago: executing program 3 (id=1452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4f", 0x2f}, {&(0x7f0000000680)="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", 0x13f}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d4", 0xdb}], 0x1}}], 0x2, 0x2090) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) sendto$inet(r1, &(0x7f00000002c0)="95fb301180ec5a63bf703b76dc7ff7dac847d1c8085083e6a08f23db252860988b3975edd0e886eea65a9104c7d404e78f808cb006ffdf58a82c0eca8b2f34b1229017f176045f2f53120eb8300b90b4cd9aac7ddbc2cfdb33808c3df5665201c3e047320e2ff41f010ed467d4ae4f4745728eeaeec6e056e50518b3aa91a6351538ba9496633ba699fbeb1c8c500f224c6ab63a356d1182464b186e9a78deedd14cc68dac97637f52bb7a92bed8859fa1ed", 0xb2, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "d8e1209df501e545", "6c138a15d663e1d5479f42dc00e26000c76dbad658c7465afd53468bdfa525af", "1ce005f3", "f67f9084dc03ef20"}, 0x38) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c00000401c2801400018006000600843b000006001200843b000004000280"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.068074802s ago: executing program 6 (id=1454): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f0005000000000000003e"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x840, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0xd) dup(r6) 2.009454607s ago: executing program 6 (id=1457): add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.110328598s ago: executing program 6 (id=1467): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x200802, 0x0) sendfile(r0, r1, 0x0, 0xa) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000140)={r4, 0x2, 0x2, 0x3}) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f0000000340)={0x1, "5e636fe8fd11a13dd77a9de85a00674300000000000000000000000000000080", 0x1, 0x100, 0x4, 0x5, 0x2, 0x0, 0x3, 0x9}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) close_range(r4, r6, 0x2) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f00000002c0)={0x29, 0x1}) creat(&(0x7f0000000180)='./file0\x00', 0xc0) mount$tmpfs(0x0, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000ec0), 0x2010008, &(0x7f0000001040)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000240)=0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e643000000000000000000000001400010076657468305f746f5f7465616d00"], 0xec}}, 0x28001) 1.109135598s ago: executing program 6 (id=1468): clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x8d, 0xfffffffffffffff9, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xfffffffffffffffe, 0xa, 0x9, 0x5, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x5, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000500)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000700)={{}, {0x77359400}}, &(0x7f0000000380)) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x8d, 0xfffffffffffffff9, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xfffffffffffffffe, 0xa, 0x9, 0x5, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x5, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) (async) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) timer_create(0x9, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000500)) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000700)={{}, {0x77359400}}, &(0x7f0000000380)) (async) 1.108907093s ago: executing program 7 (id=1469): setreuid(0xffffffffffffffff, 0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r1, 0x0) ftruncate(r1, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), &(0x7f0000000200)) 1.058782207s ago: executing program 6 (id=1470): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0xfc1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x103440) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={0x0, 0x0, 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}, 0x3}, 0x21) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e200e227f000001925aa80020007b00090080007f000006e809000000ff001ef03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, r4}) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e", 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3c) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r10 = accept4(r9, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000500)="50981a1f6d047db18cc91ee86ac4cfd7d07f078e2aaaa1eb956d2de729b2ecef010d49211ee022f211a069044ace6611443a36875edd0d27ad50c8c653d1fb2dfac7091bddeb0824db8841f5774babcc0cc9ec4beccbbd91a7ca72d0b60bdb9855239b5bbff1c7215bc682d6020238b79e56d9f50e5fd3c75bdaac15f068e5d41629b13f194340e6f014862516b96eda8a589306e95ad93e9b9a80f8c087555e549fbaee0096262bc0d8a993b2", 0xad}, {&(0x7f0000000600)="7164245da20fccdee39bb8f4f2055dfa97e2710832cd4a27793e79bc409cb5c38a8ad35c9ff44014744d4fab508d57d9fa7e1c831f7e576883c122358fec103da82522517d9243dfe9f77e8f69f4501e6070573756b0538bca622f5b51783625ac3ccea6782360267389f674cbf7e7c1d310bc9fb645bc7f20518e7ba5807ce4e54b1bd58f058215932892ed0a8a831b5441f58f6a2b63a2763923c51ae9b87c58417173a18b24e341ea0f0fc33f2cca12e0abfa556e7f8aceb8ee2a6759372832cb", 0xc2}, {&(0x7f0000002840)="7d5beb7cb055ec77e4d220fa5ec13bfa899e7a7ae12dfc7b282b2f9e05f1988910aa1035051316b2eed061f9a455b94ae62dc66c9189cb93eccae4c650e97d9f464a522334da2de14c70864a567105165fc44377be9fe44f45332510e09b3bfe0d05fdb132637d1c8be8b9f7d6bf14681584d27030b0341e7193ba18d29a166a91a8c67b83acddd9938a2c4c6d30b5a75f4749c5016804f1331777113c4c627f9a1b88fc71c0cf90069ca5fc5187549d589eee1450c70a1779524e1de760a750a45a798c645402019f257adbeaf6d0038d80cddd0d26cd0ddb7f115631355d5d13add385b4419609147360df781e3db0ad5fd37ad49316fc4a1a6ed5a4f75915f8fc9f18dd534938357bec33ff3a80db5ce75f364a176631b11a597ed76ce8e94a5264ce4cdd5bf64231470d8a0e15731251a08880b1df237bdb1c4dc462e7601458fd7d776c2121b78826a4b8180ad965c92054266d91cb38266695a9293860f10bda34e0a373fb79f6723e5421822c13932a146ba13d07741fefa351b0feb003957d92f8860f88be2b81bbaff9c6d7433a3c78a8ba714f3db8e7cf5c3a0f9943183b3bcb5e639cd3a420a9de8774dcbd13d8c99826845a1bd9f845f0929bc9eaa84a3fa2a8a0049695d66e9c3ec92a11c78f09797592aa27c277f86e2ed6bafb0b0f37d25e442e7e33b6670784c127bf430825feea664346e319d902d845b13aa4d49e71bb54ea0d07ba251b617779678677449959382e8451507b3981501404eed56ac0cd32bb72a6a9c3aa3b0e5f226e177eb70559b337b4a5e898aef2575e216163c7ad7cf20327d572bc44edb618038365d7af9454eccca63e3282d488345046d0aa13e4769d5820c456e524c2fe6b85bb61dc1e9c26a8957830edaa92d623c9302782532cd8d51994f80afae5ddca010e1cc41afb53a3f2d2a42c980d22965e7053d69bbebfc4023d4061506e5d8790fadbafaea8cff9b50045198682e1bbc50a2c16421043d4d0cf0505fbb14dbd197af0d6c6129750ada809b3a95bd3d84312b5574f2534540ee42923d5350144d1119fd64f7845f644f3b469045b43483f79e5ce7b6ddfecdf6b6056769e4f28b824657cd3ce3d5c24a185c2b11cd3e013dc999b5bd754ff2c3b720a85dd94d2cce2908edb0e3a83fddbf90898220cf6f4ccc04d0f6e2697931d07d55f9fb7319b36f7dea9c60c72fd7969155ae5b2b71c60b820e8cacfd8ffa578b25e3070948691e811449691f7d7f7313fce6f146339d298bcd261cd6db51f864660bce476ac49e107a6cf07f422ddf6df6a0f3edb48797b3ee5d1837947aaebaf05fdd742eb85dee4a1d3e5255aac6778c1427937bb709d4eaa289e41380922c74699160ccf30ac6a1db62f3278218003b5ff46cb4f1200005f843e190b5ca1d08aed950f51eccc27a78ddd1c236b1e38bd184e3d7f9c700273231c659f237a2945c16e1b11d8a06a289646d831d0fefc1f614799685bcc0680696313cac1e04fedc3e363e98d522c46829acbf79b6948c480e8a3099e40d5bc5941f1eb045fba2f5865141bf2b727915551407095f54d8699438bd00df24cc9b7cec79718dae18fc16c29fcb5baf04f6c1b20543927c8c6621f45fe465e1accb73c3bba82333f9ef1dd2ce2f1d8f1700a1572564dcd789dbfde46da73f75ef9aaf6dd66df22e3958212c1401f291092d19d2ab7792cbf383a4e1d139598c35b3f2c05eab0918b3bc0aefff31d4dbcebd1d033b968f6cd5a1cbddf3cf7b20096f58c48c6702b7ae992c948da6cd61afcb22730ebb0893addad83f380a4c268e66652e05963cc6fa71a9fde375b4c1faa421cd166e53d00ac267d33263deee37a6b6b16a736d5faad6d1e61135932931818ba10bcd4748aaac09b27759fe4a1517bd6a8b021bf3f7ec6c4bab4a875904d025086e4a06d631572a0a48d01c03294704131acd1ec6bebd5c2fcaf368ac51a0613f2681ddb8cfd63a27f06955115c8a36b485bc743aca55a34eb288ed53a28073b3a16b48acb62aae7d1f9a33ee75f97a1a9905d232d1855f17a7cd152a125061cf356d0f57cc8483a2e22f93f11db61aa9dd0302c8bf0a9ced5aefba6dd59ec3603fd1bf05ffa5024e8d28bda201eb83f865340af578a3e9369291efe58cf9ee9ae26bc509689276d12c255aabbeb802c6fdbd7608e38b4f06e795f89643bcb8cac8cc0dc8eb121525b4fd5aaf747498354db89ad839ac2334d64d3a70c99aa9ee338273a8af9f4396d73145991185632c56d5ea4ff7740d0ed1342c68b2f2f97fa14cf597c58cc04445724aae9b36a68efaa5fcab325848eb17d2d6ce9c9db487201aacd0ccc336e2b577c3c0b2e7d1adeb3496cc84fe1c68c0d58c19798626f63e4c510082c8efe3d8a696491946af8273f766eb924c7be03c4b0cbcf3cb1d7123e85aaa9c75ce0c1886e1e1b58f3cdb30c31b1843e347136e4ddea8e7ef682ffd6f7f8f2ed0fefcc1c0d1673949627f186305b8e51d87c07d9aa7d4a2a342b95d421b94d1668856ddd207cf803c67b508e49a0e6199ce9ae31eb653c8d88aae3e9089698c886d204041122e4a367d0775d1d4c174f602046789c9295c8187d3dbdd15607a057a26f4416d33e0126f3645464a2231dc23c13da492e554440871d76f69882acfa345192d6aaadf28110f05de13e0197f8ab3c9fa344552bd03bced4e75f76daa3b8b4ef6b10e65435f2f0a9d7a47b7aea9482848a0f5523e88ed6b228d41789eb083c2bf2f913126f0b1f84a3058fcff148b3e600f9b194e4f1ddc7adda842cc46c4c0585e360407ee284e32bf1967f8a5990f7123439216ce536d0e7beafe8e0b477cc35f2b232ea3fdec61aa49e4d22fb175bf1473e7ad0d13ea510fcbd3838aa75ab1891dde1ccddbcf3f74ed2a208e3013f2fc1a1ff1fbad22083c6692e53cb0ca771fd409e37257b1415938742975b80ffaaef7cd1da6bce934d7d47687448f3d152bdb04e089ed07d6c28e14533c0cb8d436fa2dcebd41a21a4fa2c4a8bd5ff6884051ad670af62f4d685d0379c69adb01b3ae6787f2e9cb13a70f022ea53fa11499b8b9faf251657826bf9390df01c879677aa91f3192a18e3629d6fb3580796de1b27ac55aefc3457274b575ad91c7ef27d2943a96920eede205e5cd3359fd891e9ad1bfcd49b3c9260ff09ba76e97a716eac3b89f1e32eb138bec9eeb5b10d341d62b63c4a99803db00e91ae6cc1cf8ecd8a15a14e24a3d722d12d4c5f8581bf83dba972f710b414ca2085f73c6e2676e7ce8eb9de1c419da1162e83ca6b705e4b1a94ccd2c604d207049ea08aafe991007b372036fc730d0880973163788d161d8413f9cbf1ffeedbce1fe57b219d4e9de7e47a9e73f137b93f4acaa19deb0a3b7269583b6364c18b14c8333906eacec192a38154996a8b6f4e5709a06dbed200de4e49f68bbafe52bf504230cc97a3de64a31cece3e8ae890b51db7c34335bd579d085576d8fba077f60acc63251c5345f67337324f3cdd9d3468cab6bf2299f70aa539ac7012ddfb856070fd4431ce7147e57caa8829c093aa3c16f65558b57c3e22d799abad32db2a85d703a3b1c89414b4512fdc254553af99aea97b3c9a2dff921c1d3c8a966f1c275ff46857b7017c09a50bfbd8e99f6e4f14341f309d6284c703dc247333420a08813c27ea4976d867a03a3aec281efe5521857e5db44326577fefd1617ab56a29249be69d5549854e4377102fbac1407ca5b26392e2b7fb3c136916a40095c482dcce0cdadab3a92232a5be62a2ab9689340e078e70f60cac9fc68affd13b1e5b38aa018ae4fd1b8b91789d83845ba339936021f54542c6c42ec6a501190cf3f11a60a77a3fdb165a59f79128ae6510a36ab2eb756e00ad0179668fb789e116faf395b862c0f18f0d8f04c01711e01a2aa01211edfa786c3a46e222bed96424793def7fccc36e9b6fb58917e1c719c650165071856443597f9414754e9a0ad94d2b7698a31f2e6896341afb1e807c2c4f715d7d76f298c1394358c511d8ea2b15bdbbdb262b611b13d536c737ff1fd0e563921f69b074ea9d01483e15fd0139e5114e8e6b2665ad4b49ba2d538e8d8a20217ca7decb0fe0b4bf4eb85cc1b320c4438819c21fdba3992dd782f0c5638df12993d3f18c7400764e92e2ded2fc85af34329717963478001c57076b77eaae3492b17b6363262ca83ab1678b407659fafbad350bd3b38a60ab5dea20a50da9ae0af9214b3166609a008033a9d9eaf85433c96fd79e8838b25b001f46ac7f51a101df82e870a5d61e664ab4a53316e44d37799c5fc434ba2b08756d1b4f9e71dc4c71252d146076e0e68e74c859cd2492b34b6cd4cb6ac690a1e34152ebce639403da9922aa29d3a232a43dd91a05ec9d4cc59f3be83a7e3de3cb8285a58316421c030490a25983f2bd80e3fa1329a5b7f90743d80dd5293bbcdd6d83699caad89e9c8b18992607b9587644c3b2aab4ea2489d46ee0470985b0bb1791ec300244f852b8b7349492a765425ab632df6c0f3d417e2d6864dba0a0898f1afdd141b724a2905b6abc9bf7ffedc88210e213c2c0795ec0bce864601f5ad1225c90e2ffad5f4027c3ceffadd9c201eab66980866c17c40c0eda88a34fcef2e65560643c524b57d0cd9b24d888e5fff071cada8a5b035a67e59c31779703de3900e64087ad596ed1929af8e8f1bd867618338f8c4cf3fb55083abad0e877a7233d7a608f55aec0dad5687c3ff731aadb33f2c95729bc4d6a14292762b6f2bb5fb934309cbf5ea389b44474c520067a6be9da0c44219bdfd7ff3db9397bd562bb13d979cc187a8cb82b6744cd50321bf78e32d9d64f273f9a4701bc4bd45394c54fdefa26479200c6f7a1704cde75ccf07c1755bff0d378d4184fb877ee3c8a59d613b4df914cbb3e9242f1dcf8ee9f7c2c27c662f5a31dc6c10807d5b21d31571fab12354f785829d09d9d23bed7a7a2e57d552687c7215ff377581d755cb2d74e346aba1a400950701f50d73632add5e2eb1f986ef952ee1545ab313f804177db1fff6d4bc666bd8e02447c290e8f2eaf6ad13c34e26542951d0ba436dbde2b83c1d18a857e3f2ccb78d4cb512c21710e25cea458b5865f631e2ad7400678475a95a3cb26bca4ce1ffa479dad6ba7fe66ad8168064bbe77be6e7f8d4a8d21c9fa5bb648c546b8f438662eafc7f09dbc78387c3d07854f4822e1f7e6b0a18507c5e1d6ddb0e859d9c42aa3fee0122caedb2c7c36ebe6ddf90175ef541860fb7273925961c305642b3dac4265f8c2269d737bdbbdd6e524b903cb8ebeba56720908c70054ff70cbb6ecd8c1604bf6e0f3f1c49536cf23d73860ea234dded67993d2e7b24d89407e55f4861ecd5fd002f5a6ba4397fb886d61b55bb00160c54daba734a2344b0f44cdaaa13d9b2ef8026269fee2cfe69a972395f27263c70a30dbbf926a8e9b750a390184bad56648b6948514484da2497a4e07441c148a540276e1725220efa09643ea97e6a3bd4ff6fa12252ffede81148a5a4161de918b94a8d4a7253eb1752d4102b747614ac10349fd89e7f33cc0abc12ef33707176f13cb36e8b7c1e", 0xf80}, {&(0x7f00000002c0)="fb4a738b8fff03179d36d97a7e768c605c5a276efb8604f121d8c3432483ec477b13316313b6ebd165904c8e245bcd4fda069923032292004d8efce529dab99fa5d682b52473829f561f11ac11a428eab9985d91", 0x54}, {&(0x7f0000000880)="b8e4d28ec970bdf146d717bed673a03be982338e021e1058d00776227b342db7671f5a0a2d75e9e5a7fbd4ecc62684a793ab69989c8836473cf7744072ef0bd03758c8c6cb740f2c8abc1b69715c98796adbec917f572e32a4f6977abd032183f498075de23e212c05e37d608df3d5ca7f4b7e08f974d4f12d6c3b6c90c44b9355f52cf1e5a88049a7ab8952d5232e812f6cf20679d54d51950da095fbacb3365e30f62093a40e3c", 0xa8}, {&(0x7f0000000780)="5c06f00294cc721081e366131c0fcd179066c58c4951ef284a51dfc59d67e247edf1b4fc93718f3d1d6f3bd71ab442cb6b6ebc9f4bb562848ec35bfd1a443267ca11db6125b298f33c1fc9ab4fc7e8d290", 0x51}, {&(0x7f0000000980)="65b426e7fb8932534948519e6381e5e369fc65a3128f6056c7d77c618f08eae1cd2944eee2ab50617c99c5c7f640757950d3ec8b33b136a5c8a541bcacab7a99019c662a3067ab866343906828fc89ff22fa46ada5e8f982d95f8864918a64e524c6ade8a8cc941b477597003541256b96d62452cee334ec633c5c85bf32cc6a392ba272cc19f9bd340fe510698d64490ee9abdb8a5be8344574ab87681bc20dc2a2e182248f17c60920ac", 0xab}, {&(0x7f0000000ec0)="6598c590eb73ec1ac1cce9664c5dbc3b6d9685d587ebdf52f29b7cad419f7bb403de35224456e9f506a3ba418e022d95925faf708865169a6ba6250d6275cd6a87f81062b11c2cf0440cf3fb94fa8244fb33299dea4c69eda426e3f7475b57155062b609f56046302a44bfc56e32841c66b772326d2394596778149d", 0x7c}, {&(0x7f0000000e00)}, {&(0x7f0000000c40)="8c87ae7dc3a1e41d808b729a7f992fcd10bf446bba2823fa0867f4ebbc9858852027a4c0a9681773961d1e44be4f2b9181e639856ced68ac4a29c8dd327abb9200876aae3fc55bcc6ff8f9a32a00b60448f8b57890578daddcddcad87ee7da5dd0df0f7fe978b92dfd2d2dbea58a81a037131eb4e1d00f7f29636d7dac7bc12420fb69d5e42df30502a17b31b431ddab03dde401f0885b6a53679a53a202cf3caf0c10cdbd6477ff6eec4bd31367da38", 0xb0}], 0xa, 0xfffffffd, 0x2000008) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) 1.058252689s ago: executing program 7 (id=1472): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab50400000000000000ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = io_uring_setup(0x4066, &(0x7f00000005c0)={0x0, 0xc4d9, 0x80, 0x2, 0x19f}) io_uring_enter(r2, 0x7fd1, 0xc125, 0x4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 1.00048497s ago: executing program 6 (id=1473): madvise(&(0x7f0000040000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_rdma(0x10, 0x3, 0x14) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r0 = getegid() mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20823, &(0x7f00000000c0)={[{@huge_always}, {@inode32}, {@grpquota}, {@gid={'gid', 0x3d, r0}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) mlock(&(0x7f00004ae000/0x1000)=nil, 0x1000) 989.467402ms ago: executing program 7 (id=1475): r0 = syz_usb_connect$midi(0xd9e8d3f67850d9cf, 0xb1, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1f38, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0xf, 0x60, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x8, [@midi_out_jack={0x11, 0x24, 0x3, 0x2, 0xd, 0x5, [{0x6, 0x40}, {0x2, 0x7}, {0xe, 0x91}, {0x52, 0x3}, {0xd3, 0x57}], 0x8}], [{{0x9, 0x5, 0xd, 0x10, 0x400, 0x8, 0x72, 0x4, {0x13, 0x25, 0x1, 0xf, "434e331b7ae9b877f3f5116ca4f8b9"}}}, {{0x9, 0x5, 0x9, 0xc, 0x200, 0x5, 0xf, 0xe, {0x7, 0x25, 0x1, 0x3, "3a6401"}}}, {{0x9, 0x5, 0x4, 0x8, 0x40, 0x7, 0x5, 0x22, {0x7, 0x25, 0x1, 0x3, "8fc1f4"}}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x1, 0xa, 0x80, {0xa, 0x25, 0x1, 0x6, "05c7d4638b83"}}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x6, 0xd1, 0x80, {0x11, 0x25, 0x1, 0xd, "efc30868915602746e79a51fdd"}}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x6, 0x0, {0xa, 0x25, 0x1, 0x6, "e593433d0a6d"}}}]}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x80, 0x1, 0x6, 0x48, 0xf3}, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x30, 0x6, 0x9, 0x3, 0x9}]}, 0x2, [{0x70, &(0x7f0000000300)=@string={0x70, 0x3, "93bbc49cb1334d22377ccdb04b503bad67688193018a3172ac7a6834e7a9addbd17d8cb8ba01dc7d80b49895bc33d03ae605da54604b77e46f8effea9d6d95f5a5191e7167e7faa0c59f07e019e3f9851d2d9ce36a6336075988c2326a2f60c4870c30b423c23a44d756d5a6ce76"}}, {0x7b, &(0x7f0000000380)=@string={0x7b, 0x3, "2f6ac5e762763e7fc19457b34ec8ef1c1d204edf29d726810f7a6829a9bcb78f3a8cf76a91bb4eeeead598fdfe75e7b870a92ca983c221ed7537e6c30aa8d540262e4d2880b14797b20b13d3b2bfc86008db8f48778381dd15bcfcc03bf8d19c3004d8646aa91ae39c59466c1f0b70b11e3905eb1bbea07009"}}]}) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, &(0x7f0000000440)={0x20, 0xf, 0x77, {0x77, 0xa, "6657814bb416906466c4fffef0101c7ea0bfbbe40e428720ce8075c1cbf8b94d41b3ec5c024f4a258b0757a5d72f483eff5e79264e0baad5ef51a8e20ee5078939596443ba9bc0a6eeb75c75b2dc330618574e6d980f30de0cdfb4e7becdd2cefc73341a10e0501b5a33fb0b3e0d5862deb3ff89a3"}}, &(0x7f00000004c0)={0x0, 0x3, 0x64, @string={0x64, 0x3, "74a8d979f8a30b9d76db4bbb2c1a5b044f5b35e9b16235ebf4dcc27b108341493067e7750f4985da8432ab4b895a656c02a632f005c2c9d5f09b1f68d160a1bac535b4907bffbb26962cce2f30f04a6baa26a79902ed688617487e06ff8814dbb211"}}, &(0x7f0000000540)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0xa, "962e66df"}, @local=@item_4={0x3, 0x2, 0x8, "fdd02d46"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0xf63}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000600)={0x0, 0x5, 0x56, "259e038ebec73a90296bf64619376085667f01001ecb066b31d11304571050a98225a0b46087f6d0432d2e0bec6626d9487da22cf83d98c32ec0fe5b83ee649406487c4dc0f003be9291873cea093235c0642b2e1630"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xaa}, &(0x7f0000000700)={0x20, 0x1, 0xc0, "7372f4020fb9857d155b812ce94c9d28416e352b7345847cb69f1b77914073dd5b1f871ff82b900dfa33e3f87ee10fd06fc88ff2430af7b1ce8eb5ed906dc58b68655a35228d5dfdccd38b949ae6921c0b5a5ff2a67586ae5b38f41752c1aa29e83cf0b53b317634669e54deb1ec01332001698500f4285021219d0327eab4cd026921b93556bd693da7fdd7cadf05fefcdf8152117d3e95526112ebb287bbd2e115a39a5d9c3926295f346d16870f9cdcf68ce9a7ee18b667645dcaeaaa1a01"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0xc}}) socket$kcm(0x10, 0x2, 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x7c, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x8, 0x50, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "4cb955"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x797f2ee0, 0x7, 0x1000, 0x4}, {0x6, 0x24, 0x1a, 0x3, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x9, 0xf}, @acm={0x4, 0x24, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x1, 0xc4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0xfd, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0xee, 0xe0}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x310, 0xe, 0x9, 0x10, 0x0, 0xf7}, 0x5, &(0x7f0000000940)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x804}}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x80000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x80054) 710.336498ms ago: executing program 5 (id=1478): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) socket$inet6(0x2d, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, {[@ssrr={0x89, 0x7, 0xce, [@broadcast]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f"], 0x3e) 510.076168ms ago: executing program 5 (id=1479): getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={r0, 0xad}, &(0x7f0000000100)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) 508.833196ms ago: executing program 5 (id=1480): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfffffffffffffff7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfffffffffffffff7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) (async) 419.989049ms ago: executing program 7 (id=1481): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$tun(r1, &(0x7f0000005480)=ANY=[@ANYBLOB="0000000900800001076d0600f7ffaaaaaaaaaabb00000000000086dd"], 0x12a5) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r2, 0x0, 0x20000000, 0x0) (async) wait4(r2, 0x0, 0x20000000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) r11 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000001c80)={0x0, &(0x7f0000001bc0)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$tun(r14, &(0x7f0000005480)=ANY=[@ANYBLOB="0000000900800001076d0600f7ffaaaaaaaaaabb00000000000086dd"], 0x12a5) (async) write$tun(r14, &(0x7f0000005480)=ANY=[@ANYBLOB="0000000900800001076d0600f7ffaaaaaaaaaabb00000000000086dd"], 0x12a5) read$FUSE(r13, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r15, 0x0, 0x20000000, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r12}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r10, 0xc01864b1, &(0x7f0000000100)={r16, 0x3, 0x2, 0x2, &(0x7f0000000040)=[{0x4, 0x0, 0x970, 0x6}, {0x1000, 0xffff, 0x798, 0x7}]}) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtfilter={0x938, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r18, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x904, 0x2, [@TCA_MATCHALL_ACT={0x900, 0x2, [@m_police={0x8fc, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x10000, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x5, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x80000000, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x4fb, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0xffffffff, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce63, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x2, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0xc, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x5, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa4, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x40003, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0xffffffff, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x800, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0xffffffff, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x62, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x1000007, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0xbe08, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x0, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x2, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x8a, 0x6, "597c93b2d2476aa20bf00ea8ae3b9dd37498088efec537d971250c2f333414769e36c8e9ca8eef831b5db6358a8c218c4be8916ae070ec53133deac990ed5f88489c57a8ef8698d1273dc113f12493a5c4cf124aa9610ac8d6ee51cddb186095852878f7fb69a3c1529a983448b515b1bb2526bcfd499f6c71f8d02198def1121a029713fc5e"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x938}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) (async) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 419.794538ms ago: executing program 5 (id=1482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x4010, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 252.409907ms ago: executing program 5 (id=1483): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000dfe918750490610e65c5ac70d5fa75020044000000001800000000950000db357ca84fa3c0fa560000000000c9c63fa03b09996f1374464a84"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r2, r1, 0x25, 0x8, @void}, 0x10) 250.093863ms ago: executing program 5 (id=1484): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000009895080008400000005c05000500020000000500010006"], 0x6c}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10) r4 = timerfd_create(0x8, 0x0) timerfd_settime(r4, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f00000002c0)='\xee\x82\xc8=\xd9\x95]\xa1\x93\xfe\xd3\x86\x18\xde\x0f|\x83\xa3\x1d\x06\x17\x7f3\aV*aLUW\x10\xa2-\x8c7\xe04tN+\xc5') chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0xa8240, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0xc0089364, &(0x7f0000000300)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000012d400000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 189.338063ms ago: executing program 7 (id=1485): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x6, 0x1, 0x4, 0x40, 0x1, {r1, r2/1000+10000}, {0x2, 0x8, 0x1, 0x4, 0x0, 0x9, "ee104af0"}, 0x4, 0x4, {0xffffffffffffffff}, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x4, 0x0) ioctl$COMEDI_RANGEINFO(r5, 0x80106408, &(0x7f0000000240)={0x2, &(0x7f0000000200)}) write$P9_RWSTAT(r4, &(0x7f0000000000)={0x30, 0x7f, 0x2}, 0x7) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup(r7, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_fd={0x233fcc06, 0x2, 0x4, 0x1000, 0x1, {0x0, 0xea60}, {0x4, 0xc, 0x7f, 0x10, 0x59, 0x4a, "00f092fc"}, 0x2, 0x4, {&(0x7f0000000180)=[{0x0, 0x200, {r3}, 0x8}, {0x2, 0x8, {r4}, 0xfffff000}]}, 0x4, 0x0, r7}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) clock_nanosleep(0x7, 0x0, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f005, 0x2}) 0s ago: executing program 7 (id=1486): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, &(0x7f00000008c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000740)="e31486a719b0180c391576a980d03e692e7dd150f7372b44149604115c2b4c81c6e868a22dbfaf46abd2cd3429cfa31389d4a1d4feaa727ca50986cf4c984ed671d427efd8e9e2ae7ce5eda296463b2ecf8304ba51094d4fae15cde3c85b0999f5f336c99a77771abd7c28729598fd59b49d013da4677275c6412f7a86ef7773a7e01d58b02d", &(0x7f0000000040)=@udp=r1}, 0x20) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) syz_emit_ethernet(0x66, &(0x7f0000001880)={@broadcast, @random, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x22, 0x58, 0x66, 0x0, 0xe0, 0x2f, 0x0, @local, @local}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0xc, 0x1, 0x80, 0x3, 0x1, 0x0, 0x3, 0x9}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x1, 0x3, 0x1, 0x0, 0x3, 0x4}, 0x2, {0x7, 0x1, 0x0, 0x5, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r0, &(0x7f0000000040), 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x7, 0x40, 0x80000, 0xe9, {{0x1a, 0x4, 0x3, 0x6, 0x68, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @rand_addr=0x64010100, {[@noop, @timestamp_prespec={0x44, 0x1c, 0x96, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe}, {@broadcast}, {@loopback, 0x2}]}, @generic={0x89, 0x7, "d766fe2485"}, @ssrr={0x89, 0x13, 0xc9, [@rand_addr=0x64010100, @remote, @multicast1, @local]}, @timestamp={0x44, 0x10, 0x4e, 0x0, 0x1, [0x8, 0x10, 0x5]}, @ssrr={0x89, 0xb, 0x11, [@local, @remote]}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) getsockopt$inet6_opts(r3, 0x29, 0xe, &(0x7f0000000640)=""/90, &(0x7f00000006c0)=0x5a) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)={0x38, r11, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x48040) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) read$FUSE(r12, &(0x7f0000000e40)={0x2020}, 0x2020) dup3(r12, r3, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000400)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x20, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd13}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0xd, 0x1, 0x7, 0xfffffffffffffff8, 0x1}, @exit, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @generic={0x2, 0x2, 0x0, 0x8001, 0xb06}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x6c, &(0x7f0000000200)=""/108, 0x41100, 0x6, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xb, 0x401, 0x8ac4}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000480)=[r7, r2, r2, r2], &(0x7f00000004c0)=[{0x5, 0x4, 0xa, 0x4}, {0x0, 0x4, 0x6, 0xa}, {0x1, 0x3, 0xd, 0x6}, {0x0, 0x1, 0x2, 0xc}, {0x4, 0x5, 0xb, 0x2}, {0x0, 0x4, 0x10, 0xd}, {0x3, 0x1, 0x1, 0xc}, {0x1, 0x5, 0xb, 0xa}, {0x2, 0x1, 0x2, 0x7}], 0x10, 0x9}, 0x94) close(0x3) kernel console output (not intermixed with test programs): overlayfs: failed to clone lowerpath [ 86.568390][ T7860] overlayfs: failed to clone lowerpath [ 86.571043][ T7860] overlayfs: failed to clone lowerpath [ 86.574921][ T7860] overlayfs: failed to clone lowerpath [ 86.577309][ T7860] overlayfs: failed to clone lowerpath [ 86.579995][ T7860] overlayfs: failed to clone lowerpath [ 86.582584][ T7860] overlayfs: failed to clone lowerpath [ 86.585073][ T7860] overlayfs: failed to clone lowerpath [ 86.587640][ T7860] overlayfs: failed to clone lowerpath [ 86.592698][ T7860] overlayfs: failed to clone lowerpath [ 86.595158][ T7860] overlayfs: failed to clone lowerpath [ 86.598207][ T7860] overlayfs: failed to clone lowerpath [ 86.601016][ T7860] overlayfs: failed to clone lowerpath [ 86.603375][ T7860] overlayfs: failed to clone lowerpath [ 86.605671][ T7869] netlink: 60 bytes leftover after parsing attributes in process `syz.2.507'. [ 86.605708][ T7860] overlayfs: failed to clone lowerpath [ 86.611426][ T7860] overlayfs: failed to clone lowerpath [ 86.684052][ T7879] syz.3.510 (7879): attempted to duplicate a private mapping with mremap. This is not supported. [ 86.712574][ T1467] cfg80211: failed to load regulatory.db [ 86.903825][ T7898] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 86.906813][ T7898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 86.915952][ T63] block nbd2: Receive control failed (result -32) [ 86.921041][ T7893] block nbd2: shutting down sockets [ 86.974814][ T7909] macsec1: entered promiscuous mode [ 86.976731][ T7909] macsec1: entered allmulticast mode [ 87.003610][ T5935] block nbd4: Receive control failed (result -32) [ 87.008222][ T7895] block nbd4: shutting down sockets [ 87.223462][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.518'. [ 87.227382][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.518'. [ 87.286582][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 87.286593][ T40] audit: type=1400 audit(1772981975.037:490): avc: denied { getopt } for pid=7950 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.287259][ T7950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.292802][ T40] audit: type=1400 audit(1772981975.047:491): avc: denied { append } for pid=7954 comm="syz.2.528" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.444661][ T40] audit: type=1400 audit(1772981975.197:492): avc: denied { listen } for pid=7958 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.737775][ T5935] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.818404][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.818425][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.897583][ T63] Bluetooth: hci4: command 0x0c1a tx timeout [ 88.368252][ T831] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 89.817747][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.899053][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.899071][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.977618][ T5935] Bluetooth: hci4: command 0x0c1a tx timeout [ 90.304570][ T7976] selinux_netlink_send: 57 callbacks suppressed [ 90.304582][ T7976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=7976 comm=syz.2.535 [ 90.304799][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.536'. [ 90.308136][ T40] audit: type=1400 audit(1772981978.057:493): avc: denied { create } for pid=7975 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.320590][ T40] audit: type=1400 audit(1772981978.077:494): avc: denied { read } for pid=7975 comm="syz.2.535" path="socket:[20710]" dev="sockfs" ino=20710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.335364][ T7976] macvtap1: entered promiscuous mode [ 90.337135][ T7976] macvtap1: entered allmulticast mode [ 90.339292][ T7976] dummy0: entered promiscuous mode [ 90.341343][ T7976] dummy0: entered allmulticast mode [ 90.344979][ T7976] team0: Device macvtap1 failed to register rx_handler [ 90.347751][ T7976] dummy0: left allmulticast mode [ 90.349536][ T7976] dummy0: left promiscuous mode [ 90.361544][ T7973] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7973 comm=syz.3.536 [ 90.456034][ T5935] block nbd1: Receive control failed (result -32) [ 90.459091][ T7972] block nbd1: shutting down sockets [ 90.467381][ T9] IPVS: starting estimator thread 0... [ 90.477318][ T7985] syzkaller1: entered promiscuous mode [ 90.480091][ T7985] syzkaller1: entered allmulticast mode [ 90.486434][ T7985] netlink: 'syz.2.539': attribute type 4 has an invalid length. [ 90.569841][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 90.572811][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 90.577410][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 90.577539][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 90.577618][ T7986] IPVS: using max 43 ests per chain, 103200 per kthread [ 91.369693][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 91.408159][ T7654] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 91.416118][ T40] audit: type=1400 audit(1772981979.167:495): avc: denied { module_request } for pid=8004 comm="syz.3.545" kmod="rtnl-link-bond_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 91.446610][ T8005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.545'. [ 91.566193][ T8017] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 91.977546][ T5935] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.987498][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.057527][ T5935] Bluetooth: hci4: command 0x0c1a tx timeout [ 92.120161][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 92.123317][ T8022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.552'. [ 92.127541][ T8022] syz.3.552 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.134023][ T40] audit: type=1400 audit(1772981979.887:496): avc: denied { accept } for pid=8021 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.201429][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.203900][ T8026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.206385][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.208998][ T8026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.214351][ T8026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.287121][ T8028] bond1: (slave bond_slave_1): Device is not our slave [ 92.289916][ T8028] bond1: option active_slave: invalid value (bond_slave_1) [ 92.294086][ T8028] bond1 (unregistering): Released all slaves [ 92.534640][ T8034] netlink: 'syz.3.556': attribute type 1 has an invalid length. [ 92.555284][ T8034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.565154][ T8034] bond1: (slave gretap1): making interface the new active one [ 92.568826][ T8034] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 92.577410][ T8034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=8034 comm=syz.3.556 [ 92.583240][ T8034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11990 sclass=netlink_route_socket pid=8034 comm=syz.3.556 [ 92.658066][ T40] audit: type=1400 audit(1772981980.417:497): avc: denied { mounton } for pid=8038 comm="syz.3.557" path="/212/file0" dev="tmpfs" ino=1161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 92.660386][ T8039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.557'. [ 92.700532][ T5935] Bluetooth: hci2: Malformed Event: 0x2f [ 92.710235][ T40] audit: type=1400 audit(1772981980.467:498): avc: denied { nlmsg_write } for pid=8041 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 92.764465][ T8046] xfrm1: entered promiscuous mode [ 92.766770][ T8046] xfrm1: entered allmulticast mode [ 92.937566][ T5935] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.940458][ T7995] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 93.398303][ T8060] netlink: 'syz.4.563': attribute type 4 has an invalid length. [ 93.653191][ T7995] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.656149][ T7995] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.659244][ T7995] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 93.727474][ T40] audit: type=1400 audit(1772981981.467:499): avc: denied { read } for pid=8063 comm="syz.4.565" path="socket:[19009]" dev="sockfs" ino=19009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.763296][ T8071] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 93.766801][ T8071] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 93.769664][ T8070] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 93.774087][ T8070] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 93.845326][ T40] audit: type=1400 audit(1772981981.597:500): avc: denied { map } for pid=8073 comm="syz.4.568" path="/dev/cuse" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 94.130151][ T8119] fusectl: Unknown parameter 'rdmaƒg¤æÌl‚ŠŠ„t¡4ã%-˜Y…RÌΰóY'[yPe F¯ùá]'\Y›D‚^ëêøŠw1X]¹ñCt]ª˜0Œw̶ éÐ_»:§<Ù[”ú0#~8ÍÕ¤@_n'ëT[ù [ 94.130151][ T8119] ÖR;É‚jØâj‹áÐ|' [ 94.154513][ T40] audit: type=1400 audit(1772981981.907:501): avc: denied { watch watch_reads } for pid=8118 comm="syz.1.581" path="/file1" dev="ramfs" ino=19049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 94.208144][ T8133] sctp: [Deprecated]: syz.4.584 (pid 8133) Use of int in maxseg socket option. [ 94.208144][ T8133] Use struct sctp_assoc_value instead [ 94.337027][ T8147] dummy0: entered allmulticast mode [ 94.340470][ T8151] overlayfs: failed to resolve './file1': -2 [ 94.502834][ T8158] xfrm0 speed is unknown, defaulting to 1000 [ 94.764287][ T40] audit: type=1400 audit(1772981982.517:502): avc: denied { setopt } for pid=8182 comm="syz.4.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.847691][ T8190] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 95.017729][ T5935] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.138952][ T8205] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 95.139242][ T40] audit: type=1400 audit(1772981982.887:503): avc: denied { setcurrent } for pid=8204 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 95.162883][ T8144] dummy0: left allmulticast mode [ 95.165462][ T40] audit: type=1401 audit(1772981982.887:504): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 95.172903][ T40] audit: type=1400 audit(1772981982.897:505): avc: denied { setopt } for pid=8204 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.232468][ T8216] bond0: (slave nr0): Error: Device can not be enslaved while up [ 95.242299][ T8211] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 95.255514][ T40] audit: type=1400 audit(1772981983.007:506): avc: denied { lock } for pid=8210 comm="syz.4.606" path="/dev/cec4" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.347383][ T8224] overlayfs: failed to clone upperpath [ 95.499780][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.502653][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.502769][ T7654] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 95.657565][ T7654] usb 7-1: Using ep0 maxpacket: 16 [ 95.661376][ T7654] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 95.665372][ T7654] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 95.667907][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.671484][ T7654] usb 7-1: config 0 interface 0 has no altsetting 0 [ 95.676495][ T7654] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 95.695520][ T7654] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.707504][ T7654] usb 7-1: Product: syz [ 95.709388][ T7654] usb 7-1: Manufacturer: syz [ 95.711449][ T7654] usb 7-1: SerialNumber: syz [ 95.725185][ T7654] usb 7-1: config 0 descriptor?? [ 95.732800][ T8266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8266 comm=syz.1.626 [ 95.737864][ T5935] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.741951][ T8266] __nla_validate_parse: 8 callbacks suppressed [ 95.741960][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'. [ 95.943337][ T7654] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input10 [ 96.196289][ T8305] xt_hashlimit: size too large, truncated to 1048576 [ 96.320051][ T6010] usb 7-1: USB disconnect, device number 4 [ 96.725938][ T8329] syzkaller0: entered promiscuous mode [ 96.727905][ T8329] syzkaller0: entered allmulticast mode [ 96.863360][ T8291] ceph: No mds server is up or the cluster is laggy [ 96.976649][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.644'. [ 97.072689][ T8345] sg_read: process 323 (syz.4.646) changed security contexts after opening file descriptor, this is not allowed. [ 97.268725][ T8363] IPVS: length: 18 != 8 [ 97.387519][ T7654] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 97.547512][ T7654] usb 9-1: Using ep0 maxpacket: 16 [ 97.550328][ T7654] usb 9-1: device descriptor read/all, error -61 [ 97.677517][ T7654] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 97.807532][ T7654] usb 9-1: device descriptor read/64, error -71 [ 97.858608][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 97.858626][ T40] audit: type=1400 audit(1772981985.617:514): avc: denied { write } for pid=8374 comm="syz.2.655" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 97.909834][ T40] audit: type=1400 audit(1772981985.667:515): avc: denied { setopt } for pid=8377 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 97.927553][ T7654] usb usb9-port1: attempt power cycle [ 97.960817][ T40] audit: type=1400 audit(1772981985.717:516): avc: denied { write } for pid=8377 comm="syz.2.656" path="socket:[21068]" dev="sockfs" ino=21068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 98.009579][ T8380] mkiss: ax0: crc mode is auto. [ 98.016670][ T40] audit: type=1400 audit(1772981985.767:517): avc: denied { name_bind } for pid=8377 comm="syz.2.656" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 98.130875][ T40] audit: type=1400 audit(1772981985.887:518): avc: denied { bind } for pid=8387 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.186676][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.193036][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.267500][ T7654] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 98.288200][ T7654] usb 9-1: device descriptor read/8, error -71 [ 98.417542][ T7184] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 98.537632][ T7654] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 98.557944][ T7654] usb 9-1: device descriptor read/8, error -71 [ 98.568789][ T7184] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 98.571898][ T7184] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.575527][ T7184] usb 6-1: config 0 has no interfaces? [ 98.577581][ T7184] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 98.580605][ T7184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.584689][ T7184] usb 6-1: config 0 descriptor?? [ 98.669121][ T7654] usb usb9-port1: unable to enumerate USB device [ 98.817078][ T8393] pim6reg: entered allmulticast mode [ 98.873132][ T40] audit: type=1400 audit(1772981986.627:519): avc: denied { map } for pid=8392 comm="syz.1.659" path="pipe:[22611]" dev="pipefs" ino=22611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 98.908395][ T8397] block nbd2: shutting down sockets [ 98.943594][ T40] audit: type=1400 audit(1772981986.697:520): avc: denied { write } for pid=8398 comm="syz.2.661" name="file0" dev="9p" ino=77070395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.950614][ T8399] netfs: Couldn't get user pages (rc=-14) [ 98.954035][ T40] audit: type=1800 audit(1772981986.697:521): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.661" name="file0" dev="9p" ino=77070395 res=0 errno=0 [ 99.149418][ T6010] usb 6-1: USB disconnect, device number 7 [ 99.456589][ T7241] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.573695][ T7241] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.630953][ T7241] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.694990][ T7241] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.792744][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.795947][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.799726][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.802999][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.805882][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.846530][ T8405] xfrm0 speed is unknown, defaulting to 1000 [ 99.882042][ T7241] bridge_slave_1: left allmulticast mode [ 99.884382][ T7241] bridge_slave_1: left promiscuous mode [ 99.886931][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.892008][ T7241] bridge_slave_0: left allmulticast mode [ 99.894360][ T7241] bridge_slave_0: left promiscuous mode [ 99.896803][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.254340][ T7241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.259462][ T7241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.264019][ T7241] bond0 (unregistering): Released all slaves [ 100.270842][ T7241] bond1 (unregistering): Released all slaves [ 100.295090][ T8418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.300380][ T8418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.303433][ T8418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.306440][ T8418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.407519][ T8405] chnl_net:caif_netlink_parms(): no params data found [ 100.452017][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.454595][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.459036][ T8405] bridge_slave_0: entered allmulticast mode [ 100.462294][ T8405] bridge_slave_0: entered promiscuous mode [ 100.465996][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.469303][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.472323][ T8405] bridge_slave_1: entered allmulticast mode [ 100.475927][ T8405] bridge_slave_1: entered promiscuous mode [ 100.494324][ T8405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.502527][ T8405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.535680][ T8405] team0: Port device team_slave_0 added [ 100.538832][ T8405] team0: Port device team_slave_1 added [ 100.551180][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.553924][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.562325][ T8405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.572778][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.575148][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.584007][ T8405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.600086][ T7241] hsr_slave_0: left promiscuous mode [ 100.602398][ T7241] hsr_slave_1: left promiscuous mode [ 100.604627][ T7241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.607190][ T7241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.611746][ T7241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.614972][ T7241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.625550][ T7241] veth1_macvtap: left promiscuous mode [ 100.629267][ T7241] veth0_macvtap: left promiscuous mode [ 100.631246][ T7241] veth1_vlan: left promiscuous mode [ 100.752138][ T8448] block nbd1: shutting down sockets [ 100.800807][ T7241] team0 (unregistering): Port device team_slave_1 removed [ 100.811200][ T7241] team0 (unregistering): Port device team_slave_0 removed [ 100.885262][ T8405] hsr_slave_0: entered promiscuous mode [ 100.887651][ T8405] hsr_slave_1: entered promiscuous mode [ 100.904916][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.670'. [ 100.931845][ T8457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8457 comm=syz.4.673 [ 100.938832][ T6010] IPVS: starting estimator thread 0... [ 100.945383][ T8457] netlink: 'syz.4.673': attribute type 4 has an invalid length. [ 100.951437][ T8460] netlink: 52 bytes leftover after parsing attributes in process `syz.1.674'. [ 101.027908][ T8458] IPVS: using max 26 ests per chain, 62400 per kthread [ 101.040533][ T8463] xfrm0 speed is unknown, defaulting to 1000 [ 101.069127][ T8468] loop7: detected capacity change from 0 to 16384 [ 101.120359][ T8405] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.144757][ T8405] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.154830][ T8405] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.168527][ T8405] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.189562][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.192089][ T8405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.194631][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.197082][ T8405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.224712][ T8405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.241870][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.250734][ T40] audit: type=1400 audit(1772981989.007:522): avc: denied { mounton } for pid=8491 comm="syz.4.680" path="/syzcgroup/unified/syz4" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 101.265532][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.278891][ T7241] IPVS: stop unused estimator thread 0... [ 101.278943][ T8405] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.302001][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.304359][ T7248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.317559][ T40] audit: type=1400 audit(1772981989.077:523): avc: denied { bpf } for pid=8501 comm="syz.3.683" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.331860][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.334933][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.343761][ T8510] netlink: 'syz.3.684': attribute type 1 has an invalid length. [ 101.432006][ T8519] netlink: 'syz.1.687': attribute type 11 has an invalid length. [ 101.434664][ T8519] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.687'. [ 101.469606][ T8518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.475849][ T8405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.484822][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 101.596324][ T8533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.689'. [ 101.610153][ T8405] veth0_vlan: entered promiscuous mode [ 101.619762][ T8405] veth1_vlan: entered promiscuous mode [ 101.644329][ T8405] veth0_macvtap: entered promiscuous mode [ 101.650729][ T8405] veth1_macvtap: entered promiscuous mode [ 101.671923][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.681545][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.687883][ T1147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.690814][ T1147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.694274][ T1147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.697192][ T1147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.739376][ T7256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.742767][ T7256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.756348][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.760562][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.817553][ T5935] Bluetooth: hci1: command tx timeout [ 102.086632][ T8569] SELinux: failed to load policy [ 102.275530][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 102.278803][ T8596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 102.349376][ T8606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.712'. [ 102.378682][ T8609] xt_cgroup: invalid path, errno=-2 [ 102.432122][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 102.435778][ T8596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 102.455690][ T8602] overlay: ./file0 is not a directory [ 102.459860][ T8602] openvswitch: netlink: IP tunnel dst address not specified [ 102.543852][ T8627] tipc: Failed to remove unknown binding: 66,1,1/0:173429417/173429419 [ 102.547640][ T8627] tipc: Failed to remove unknown binding: 66,1,1/0:173429417/173429419 [ 102.550851][ T8627] tipc: Failed to remove unknown binding: 66,1,1/0:173429417/173429419 [ 102.718111][ T8639] SELinux: failed to load policy [ 102.721092][ T8639] nbd: must specify at least one socket [ 102.750375][ T7242] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.819718][ T7242] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.884225][ T7242] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.919507][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 102.919518][ T40] audit: type=1400 audit(1772981990.677:538): avc: denied { ioctl } for pid=8645 comm="syz.1.726" path="socket:[23694]" dev="sockfs" ino=23694 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 102.927324][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.934732][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.940905][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.945015][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.949746][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.968291][ T7242] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.985339][ T8647] xfrm0 speed is unknown, defaulting to 1000 [ 103.071426][ T8647] chnl_net:caif_netlink_parms(): no params data found [ 103.151525][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.154117][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.156457][ T8647] bridge_slave_0: entered allmulticast mode [ 103.159553][ T8647] bridge_slave_0: entered promiscuous mode [ 103.162564][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.165184][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.167592][ T8647] bridge_slave_1: entered allmulticast mode [ 103.170341][ T8647] bridge_slave_1: entered promiscuous mode [ 103.214794][ T8647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.239864][ T8647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.282641][ T7242] bridge_slave_1: left allmulticast mode [ 103.289278][ T7242] bridge_slave_1: left promiscuous mode [ 103.291947][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.301983][ T7242] bridge_slave_0: left allmulticast mode [ 103.304476][ T7242] bridge_slave_0: left promiscuous mode [ 103.307016][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.582347][ T7242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.589691][ T7242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.594506][ T7242] bond0 (unregistering): Released all slaves [ 103.614487][ T8647] team0: Port device team_slave_0 added [ 103.623988][ T8647] team0: Port device team_slave_1 added [ 103.646505][ T8681] dns_resolver: Unsupported server list version (0) [ 103.656664][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.661964][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.672189][ T8647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.688881][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.691277][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.704598][ T8647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.770220][ T8647] hsr_slave_0: entered promiscuous mode [ 103.773504][ T8647] hsr_slave_1: entered promiscuous mode [ 103.776638][ T8647] debugfs: 'hsr0' already exists in 'hsr' [ 103.779460][ T8647] Cannot create hsr debugfs directory [ 103.897577][ T63] Bluetooth: hci1: command tx timeout [ 103.921053][ T7242] hsr_slave_0: left promiscuous mode [ 103.924031][ T7242] hsr_slave_1: left promiscuous mode [ 103.934167][ T7242] veth1_macvtap: left promiscuous mode [ 103.936523][ T7242] veth0_macvtap: left promiscuous mode [ 103.939090][ T7242] veth1_vlan: left promiscuous mode [ 103.941463][ T7242] veth0_vlan: left promiscuous mode [ 104.127582][ T7242] team0 (unregistering): Port device team_slave_1 removed [ 104.136106][ T7242] team0 (unregistering): Port device team_slave_0 removed [ 104.217838][ T8698] netlink: 'syz.3.735': attribute type 3 has an invalid length. [ 104.241225][ T8647] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 104.248976][ T8647] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 104.255952][ T8647] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 104.264693][ T8647] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 104.341431][ T8647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.356311][ T8647] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.363004][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.366024][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.380967][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.383886][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.498412][ T8717] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.505452][ T7242] IPVS: stop unused estimator thread 0... [ 104.531163][ T8647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.695480][ T8647] veth0_vlan: entered promiscuous mode [ 104.702232][ T8647] veth1_vlan: entered promiscuous mode [ 104.715301][ T8647] veth0_macvtap: entered promiscuous mode [ 104.719312][ T8647] veth1_macvtap: entered promiscuous mode [ 104.733751][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.743214][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.749836][ T7256] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.757235][ T7256] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.762709][ T7256] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.770272][ T7256] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.826947][ T182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.829890][ T182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.855559][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.859208][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.861314][ T40] audit: type=1400 audit(1772981992.617:539): avc: denied { bind } for pid=8742 comm="syz.5.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.870746][ T40] audit: type=1400 audit(1772981992.617:540): avc: denied { name_bind } for pid=8742 comm="syz.5.739" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 104.882011][ T40] audit: type=1400 audit(1772981992.617:541): avc: denied { node_bind } for pid=8742 comm="syz.5.739" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 104.979918][ T8697] 9pnet_fd: p9_fd_create_tcp (8697): problem connecting socket to 127.0.0.1 [ 105.017567][ T63] Bluetooth: hci3: command tx timeout [ 105.298785][ T40] audit: type=1400 audit(1772981993.057:542): avc: denied { lock } for pid=8762 comm="syz.5.745" path="socket:[23273]" dev="sockfs" ino=23273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 105.328131][ T39] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 105.500486][ T39] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.504014][ T39] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.508189][ T39] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.515728][ T39] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 105.519840][ T39] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.523300][ T39] usb 11-1: Product: syz [ 105.525179][ T39] usb 11-1: Manufacturer: syz [ 105.527244][ T39] usb 11-1: SerialNumber: syz [ 105.538306][ T39] hub 11-1:1.0: bad descriptor, ignoring hub [ 105.540920][ T39] hub 11-1:1.0: probe with driver hub failed with error -5 [ 105.667577][ T1026] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 105.737690][ T39] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 105.748216][ T5935] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 105.748417][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.808119][ T1026] usb 10-1: device descriptor read/64, error -71 [ 105.987659][ T63] Bluetooth: hci1: command tx timeout [ 106.047630][ T1026] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 106.178239][ T1026] usb 10-1: device descriptor read/64, error -71 [ 106.287900][ T1026] usb usb10-port1: attempt power cycle [ 106.495738][ T8790] __nla_validate_parse: 6 callbacks suppressed [ 106.495749][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 106.500873][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.754'. [ 106.627736][ T1026] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 106.637667][ T8759] usb 11-1: reset high-speed USB device number 2 using dummy_hcd [ 106.642913][ T8759] usb 11-1: device reset changed ep0 maxpacket size! [ 106.647471][ T8773] usb 11-1: USB disconnect, device number 2 [ 106.654917][ T1026] usb 10-1: device descriptor read/8, error -71 [ 106.657315][ T8773] usblp0: removed [ 106.680636][ T40] audit: type=1400 audit(1772981994.437:543): avc: denied { read } for pid=8799 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 106.788716][ T8773] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 106.887491][ T1026] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 106.907957][ T1026] usb 10-1: device descriptor read/8, error -71 [ 106.937623][ T8773] usb 11-1: Using ep0 maxpacket: 8 [ 106.940516][ T8773] usb 11-1: config 0 has no interfaces? [ 106.942339][ T8773] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.945303][ T8773] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.950764][ T8773] usb 11-1: config 0 descriptor?? [ 106.987582][ T7654] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 107.018272][ T1026] usb usb10-port1: unable to enumerate USB device [ 107.032811][ T40] audit: type=1326 audit(1772981994.787:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.3.761" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f057d39c799 code=0x0 [ 107.107898][ T63] Bluetooth: hci3: command tx timeout [ 107.148710][ T7654] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.151897][ T7654] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.155312][ T8759] netlink: 'syz.6.744': attribute type 63 has an invalid length. [ 107.156084][ T7654] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.159419][ T8759] netlink: 5 bytes leftover after parsing attributes in process `syz.6.744'. [ 107.162287][ T7654] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.165072][ T8759] gretap0: entered allmulticast mode [ 107.169717][ T8759] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 107.176463][ T8759] lo speed is unknown, defaulting to 1000 [ 107.178587][ T8759] lo speed is unknown, defaulting to 1000 [ 107.180968][ T8759] lo speed is unknown, defaulting to 1000 [ 107.193561][ T8759] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 107.208648][ T8759] lo speed is unknown, defaulting to 1000 [ 107.211209][ T8759] lo speed is unknown, defaulting to 1000 [ 107.214918][ T8759] lo speed is unknown, defaulting to 1000 [ 107.217539][ T8759] lo speed is unknown, defaulting to 1000 [ 107.222361][ T5979] usb 11-1: USB disconnect, device number 3 [ 107.380265][ T7654] usb 6-1: usb_control_msg returned -32 [ 107.382305][ T7654] usbtmc 6-1:16.0: can't read capabilities [ 107.747734][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 107.758276][ T8836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30266 sclass=netlink_route_socket pid=8836 comm=syz.6.767 [ 107.964702][ T8839] fuse: Unknown parameter 'fÞÆd' [ 108.057846][ T63] Bluetooth: hci1: command tx timeout [ 108.125611][ T63] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 108.155970][ T40] audit: type=1400 audit(1772981995.907:545): avc: denied { ioctl } for pid=8850 comm="syz.6.772" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.191899][ T8853] openvswitch: netlink: IP tunnel dst address not specified [ 108.285080][ T8859] netlink: 'syz.3.774': attribute type 21 has an invalid length. [ 108.288264][ T8859] netlink: 'syz.3.774': attribute type 6 has an invalid length. [ 108.289666][ T40] audit: type=1400 audit(1772981996.047:546): avc: denied { getopt } for pid=8857 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.291498][ T8859] netlink: 132 bytes leftover after parsing attributes in process `syz.3.774'. [ 108.445743][ T8871] afs: Unknown parameter 'dlock' [ 108.446288][ T8873] afs: Unknown parameter 'dlock' [ 108.764129][ T8902] overlayfs: failed to clone upperpath [ 108.770521][ T8902] overlayfs: failed to clone lowerpath [ 109.188810][ T63] Bluetooth: hci3: command tx timeout [ 109.296414][ T8931] XFS (nullb0): Invalid superblock magic number [ 109.335325][ T8931] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 109.414860][ T40] audit: type=1400 audit(1772981997.167:547): avc: denied { map } for pid=8943 comm="syz.6.793" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.463712][ T40] audit: type=1800 audit(1772981997.217:548): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.781" name="/" dev="fuse" ino=4 res=0 errno=0 [ 109.888787][ T831] usb 6-1: USB disconnect, device number 8 [ 110.023918][ T8972] tipc: Enabling of bearer rejected, failed to enable media [ 110.035370][ T8976] netlink: 'syz.1.802': attribute type 10 has an invalid length. [ 110.044978][ T8976] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 110.055525][ T8976] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 110.067530][ T8976] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 110.185378][ T8980] netlink: 44 bytes leftover after parsing attributes in process `syz.3.805'. [ 110.347961][ T8982] cgroup: fork rejected by pids controller in /syz3 [ 110.430075][ T40] audit: type=1400 audit(1772981998.187:549): avc: denied { append } for pid=9021 comm="syz.6.807" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.442060][ T9023] exfat: block size(16384) > page size(4096) not supported by filesystem [ 110.446958][ T9023] exFAT-fs (nullb0): invalid boot record signature [ 110.451687][ T9023] exFAT-fs (nullb0): failed to read boot sector [ 110.454462][ T9023] exFAT-fs (nullb0): failed to recognize exfat type [ 110.458875][ T9024] exFAT-fs (nullb0): invalid boot record signature [ 110.461926][ T9024] exFAT-fs (nullb0): failed to read boot sector [ 110.464917][ T9024] exFAT-fs (nullb0): failed to recognize exfat type [ 110.493893][ T9023] 9p: Could not find request transport: xen [ 110.496228][ T40] audit: type=1400 audit(1772981998.247:550): avc: denied { read } for pid=9021 comm="syz.6.807" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 110.505917][ T40] audit: type=1400 audit(1772981998.247:551): avc: denied { ioctl } for pid=9021 comm="syz.6.807" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 110.578858][ T9031] tmpfs: Unknown parameter '' [ 110.580751][ T9031] tmpfs: Unknown parameter '' [ 110.582564][ T9031] tmpfs: Unknown parameter '' [ 110.584444][ T9031] tmpfs: Unknown parameter '' [ 110.586249][ T9031] tmpfs: Unknown parameter '' [ 110.588500][ T9031] tmpfs: Unknown parameter '' [ 110.590397][ T9031] tmpfs: Unknown parameter ' ' [ 110.713945][ T9046] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 110.992841][ T40] audit: type=1400 audit(1772981998.747:552): avc: denied { setopt } for pid=9075 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.999916][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 111.003777][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.814'. [ 111.013431][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 111.017296][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.814'. [ 111.257554][ T63] Bluetooth: hci3: command tx timeout [ 111.359605][ T9090] Cannot find add_set index 1 as target [ 111.526604][ T40] audit: type=1326 audit(1772981999.277:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.3.820" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f057d39c799 code=0x0 [ 112.378503][ T9115] __nla_validate_parse: 62 callbacks suppressed [ 112.378516][ T9115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.821'. [ 112.404998][ T9118] netlink: 'syz.3.822': attribute type 39 has an invalid length. [ 112.409512][ T9118] veth0_macvtap: left promiscuous mode [ 112.761079][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.824'. [ 112.766188][ T40] audit: type=1804 audit(1772982000.517:554): pid=9123 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.824" name="bus" dev="ramfs" ino=25819 res=1 errno=0 [ 113.678919][ T9133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.767189][ T40] audit: type=1400 audit(1772982001.517:555): avc: denied { bind } for pid=9134 comm="syz.5.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 113.804196][ T9134] delete_channel: no stack [ 113.864633][ T40] audit: type=1400 audit(1772982001.617:556): avc: denied { watch } for pid=9139 comm="syz.6.829" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 114.180267][ T40] audit: type=1400 audit(1772982001.927:557): avc: denied { accept } for pid=9161 comm="syz.6.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 114.190943][ T9162] bpq0: entered allmulticast mode [ 114.199507][ T40] audit: type=1400 audit(1772982001.957:558): avc: denied { write } for pid=9159 comm="syz.5.832" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 114.339649][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 114.348023][ T9181] netlink: 'syz.5.839': attribute type 2 has an invalid length. [ 114.363694][ T9181] trusted_key: encrypted_key: master key parameter '©¼.ï›´˜óouõsÖÎýý*±÷7‰/¯%#‚à9¨H 6özzÉŠKåã¶o [ 114.363694][ T9181] Ø5\󉮹'Ç*Xþ¡•JaŽj÷íº]:Øî' is invalid [ 114.400393][ T40] audit: type=1400 audit(1772982002.157:559): avc: denied { checkpoint_restore } for pid=9177 comm="syz.6.838" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.435179][ T9164] batman_adv: batadv0: Adding interface: dummy0 [ 114.437204][ T9164] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.446247][ T9164] batman_adv: batadv0: Interface activated: dummy0 [ 114.451093][ T9178] netlink: 'syz.6.838': attribute type 8 has an invalid length. [ 114.453704][ T9178] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 114.469836][ T9164] batadv0: mtu less than device minimum [ 114.472179][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.476064][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.480022][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.483767][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.487626][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.491399][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.495252][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.497501][ T831] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 114.561219][ T9197] tmpfs: Bad value for 'mpol' [ 114.648993][ T831] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 114.651800][ T831] usb 6-1: config 0 has no interface number 0 [ 114.654080][ T831] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 114.667466][ T831] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 114.670946][ T831] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 114.688325][ T831] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 114.691261][ T831] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 114.693849][ T831] usb 6-1: Product: syz [ 114.695217][ T831] usb 6-1: SerialNumber: syz [ 114.702520][ T831] usb 6-1: config 0 descriptor?? [ 114.706403][ T831] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 114.709603][ T831] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input11 [ 114.711431][ T40] audit: type=1400 audit(1772982002.467:560): avc: denied { name_bind } for pid=9196 comm="syz.3.842" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 114.747519][ T59] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 114.898989][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.903070][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.907629][ T59] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.912157][ T59] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.912173][ T59] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.913759][ T59] usb 11-1: config 0 descriptor?? [ 114.958144][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.958306][ T1334] usb 6-1: USB disconnect, device number 9 [ 114.960527][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 114.969772][ T1334] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 115.303001][ T40] audit: type=1804 audit(1772982003.057:561): pid=9203 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.844" name="/newroot/32/file0/net_prio.prioidx" dev="9p" ino=77070441 res=1 errno=0 [ 115.340657][ T59] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 115.500772][ T9212] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 115.505094][ T40] audit: type=1400 audit(1772982003.257:562): avc: denied { write } for pid=9211 comm="syz.1.846" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.516049][ T40] audit: type=1400 audit(1772982003.267:563): avc: denied { read } for pid=9211 comm="syz.1.846" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 115.527720][ T40] audit: type=1400 audit(1772982003.267:564): avc: denied { open } for pid=9211 comm="syz.1.846" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 115.644232][ T9221] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 115.646931][ T9221] overlayfs: failed to set xattr on upper [ 115.649946][ T9221] overlayfs: ...falling back to redirect_dir=nofollow. [ 115.652030][ T9223] No control pipe specified [ 115.652344][ T9221] overlayfs: ...falling back to index=off. [ 115.656049][ T9221] overlayfs: ...falling back to uuid=null. [ 115.662764][ T9221] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 115.728575][ T9235] faux_driver vkms: [drm] Unknown color mode 1025; guessing buffer size. [ 115.731902][ T9235] random: crng reseeded on system resumption [ 115.779245][ T9243] ip6t_srh: unknown srh match flags 4015 [ 116.347012][ T9285] tmpfs: Bad value for 'mpol' [ 116.400622][ T9287] netlink: 36 bytes leftover after parsing attributes in process `syz.5.863'. [ 116.649732][ T9295] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 116.653272][ T9295] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 116.908397][ T78] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.911567][ T78] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.914506][ T78] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.917811][ T78] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.920809][ T78] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.923830][ T78] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.928295][ T78] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.931142][ T78] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.059305][ T9316] netlink: 112 bytes leftover after parsing attributes in process `syz.3.874'. [ 117.070723][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.873'. [ 117.074299][ T9313] bridge_slave_1: left allmulticast mode [ 117.076202][ T9313] bridge_slave_1: left promiscuous mode [ 117.078258][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.081826][ T9313] bridge_slave_0: left allmulticast mode [ 117.083590][ T9313] bridge_slave_0: left promiscuous mode [ 117.085480][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.200193][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.6.876'. [ 117.207827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.213609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.218809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.222138][ T1467] lo speed is unknown, defaulting to 1000 [ 117.224075][ T1467] syz2: Port: 1 Link DOWN [ 117.293979][ T9328] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 117.395557][ T831] usb 11-1: USB disconnect, device number 4 [ 117.465711][ T9341] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.470635][ T9341] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 117.473738][ T9341] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.476391][ T9341] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 117.626713][ T9350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.886'. [ 117.828096][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'. [ 117.911232][ T9374] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 117.970750][ T9385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.897'. [ 117.970975][ T9383] xfrm0 speed is unknown, defaulting to 1000 [ 117.973720][ T9387] netlink: 'syz.1.898': attribute type 64 has an invalid length. [ 117.976322][ T9383] lo speed is unknown, defaulting to 1000 [ 117.980667][ T9387] netlink: 'syz.1.898': attribute type 4 has an invalid length. [ 117.983299][ T9387] netlink: 152 bytes leftover after parsing attributes in process `syz.1.898'. [ 117.991116][ T9389] netlink: 'syz.1.898': attribute type 64 has an invalid length. [ 117.994129][ T9389] netlink: 'syz.1.898': attribute type 4 has an invalid length. [ 117.996710][ T9389] netlink: 152 bytes leftover after parsing attributes in process `syz.1.898'. [ 118.072024][ T9390] netlink: 40 bytes leftover after parsing attributes in process `syz.5.896'. [ 118.134801][ T9402] loop2: detected capacity change from 0 to 7 [ 118.140314][ T5926] loop2: [POWERTEC] p1 [ 118.142610][ T5926] loop2: p1 start 1798272613 is beyond EOD, truncated [ 118.149584][ T9402] loop2: [POWERTEC] p1 [ 118.151302][ T9402] loop2: p1 start 1798272613 is beyond EOD, truncated [ 118.214533][ T9404] batadv0: entered allmulticast mode [ 118.223200][ T9404] netlink: 'syz.5.903': attribute type 5 has an invalid length. [ 118.325954][ T9411] ptrace attach of "/syz-executor exec"[9412] was attempted by "/syz-executor exec"[9411] [ 118.333673][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.906'. [ 118.499485][ T9427] 9pnet_virtio: no channels available for device syz [ 118.559592][ T9429] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 118.563301][ T9429] overlayfs: maximum fs stacking depth exceeded [ 118.827665][ T9414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.844468][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 118.844479][ T40] audit: type=1400 audit(1772982006.597:582): avc: denied { unmount } for pid=8647 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 118.875491][ T9441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9441 comm=syz.6.911 [ 118.917940][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.6.915'. [ 118.930965][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.6.915'. [ 118.940628][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.6.915'. [ 118.942643][ T9456] Cannot find add_set index 4 as target [ 118.981366][ T9465] xt_hashlimit: size too large, truncated to 1048576 [ 119.007571][ T9468] hfsplus: unable to find HFS+ superblock [ 119.053068][ T9472] usb 1-1: USB disconnect, device number 2 [ 119.131875][ T9478] 9p: Bad value for 'version' [ 119.144574][ T9478] bond2: entered promiscuous mode [ 119.146509][ T9478] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.151631][ T40] audit: type=1400 audit(1772982006.907:583): avc: denied { write } for pid=9477 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 119.266833][ T9505] 9pnet_virtio: no channels available for device syz [ 119.273391][ T9505] net_ratelimit: 16 callbacks suppressed [ 119.273402][ T9505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.368771][ T40] audit: type=1400 audit(1772982007.127:584): avc: denied { map } for pid=9513 comm="syz.3.936" path="socket:[27969]" dev="sockfs" ino=27969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.451064][ T9517] binfmt_misc: register: failed to install interpreter file ./file1 [ 119.460307][ T9517] kAFS: unable to lookup cell 'syz0' [ 119.477559][ T24] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 119.521104][ T40] audit: type=1400 audit(1772982007.277:585): avc: denied { append } for pid=9540 comm="syz.6.943" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.568085][ T9541] program syz.6.943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.571127][ T9541] ata1.00: invalid command format 0 [ 119.614830][ T40] audit: type=1400 audit(1772982007.367:586): avc: denied { listen } for pid=9550 comm="syz.6.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.617806][ T24] usb 10-1: device descriptor read/64, error -71 [ 119.634285][ T9551] netlink: 'syz.6.946': attribute type 6 has an invalid length. [ 119.637072][ T9551] netlink: 'syz.6.946': attribute type 5 has an invalid length. [ 119.719318][ T9556] ucma_write: process 659 (syz.1.948) changed security contexts after opening file descriptor, this is not allowed. [ 119.752307][ T40] audit: type=1400 audit(1772982007.507:587): avc: denied { read } for pid=9557 comm="syz.6.949" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 119.767682][ T40] audit: type=1400 audit(1772982007.507:588): avc: denied { view } for pid=9557 comm="syz.6.949" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 119.781868][ T40] audit: type=1400 audit(1772982007.537:589): avc: denied { bind } for pid=9563 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.872399][ T9573] bond1: Unable to set up delay as MII monitoring is disabled [ 119.877210][ T9573] bond1 (unregistering): Released all slaves [ 119.891035][ T24] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 119.909473][ T9575] Bluetooth: MGMT ver 1.23 [ 120.018877][ T24] usb 10-1: device descriptor read/64, error -71 [ 120.060157][ T9582] xfrm1: entered promiscuous mode [ 120.061809][ T9582] xfrm1: entered allmulticast mode [ 120.092376][ T9584] netlink: 'syz.6.958': attribute type 1 has an invalid length. [ 120.104389][ T9584] bond1: entered promiscuous mode [ 120.106772][ T9584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.147672][ T24] usb usb10-port1: attempt power cycle [ 120.187067][ T9584] macvtap1: entered allmulticast mode [ 120.195254][ T9588] bond1: (slave bridge3): making interface the new active one [ 120.197945][ T9588] bridge3: entered promiscuous mode [ 120.200510][ T9588] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 120.302699][ T9600] xt_TCPMSS: Only works on TCP SYN packets [ 120.451830][ T9628] IPVS: set_ctl: invalid protocol: 47 172.30.1.2:20001 [ 120.485837][ T7242] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.490609][ T7242] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.494749][ T7242] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.498668][ T7242] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.498918][ T24] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 120.526377][ T9632] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 120.529521][ T24] usb 10-1: device descriptor read/8, error -71 [ 120.536567][ T9636] tmpfs: User quota block hardlimit too large. [ 120.588964][ T9643] netem: incorrect ge model size [ 120.591014][ T9643] netem: change failed [ 120.663337][ T40] audit: type=1400 audit(1772982008.417:590): avc: denied { setopt } for pid=9644 comm="syz.1.976" lport=50157 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 120.779327][ T24] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 120.798540][ T24] usb 10-1: device descriptor read/8, error -71 [ 120.907870][ T24] usb usb10-port1: unable to enumerate USB device [ 121.042398][ T40] audit: type=1400 audit(1772982008.797:591): avc: denied { unmount } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 121.087091][ T9657] syzkaller0: entered promiscuous mode [ 121.091268][ T9657] syzkaller0: entered allmulticast mode [ 122.147971][ T9681] syzkaller0: entered promiscuous mode [ 122.149834][ T9681] syzkaller0: entered allmulticast mode [ 122.153859][ T9682] tipc: Started in network mode [ 122.155522][ T9682] tipc: Node identity 66aa9fecef86, cluster identity 4711 [ 122.158711][ T9682] tipc: Enabled bearer , priority 0 [ 122.161123][ T9681] tipc: Enabling of bearer rejected, already enabled [ 122.166397][ T9682] netlink: 'syz.6.990': attribute type 13 has an invalid length. [ 122.171868][ T9680] tipc: Resetting bearer [ 122.186258][ T9680] tipc: Disabling bearer [ 122.234562][ T9689] /dev/net/tun: Can't lookup blockdev [ 122.284683][ T9695] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.321658][ T9706] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 122.326891][ T9705] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 122.330237][ T9705] overlayfs: failed to set xattr on upper [ 122.332108][ T9705] overlayfs: ...falling back to redirect_dir=nofollow. [ 122.334383][ T9705] overlayfs: ...falling back to index=off. [ 122.340875][ T9705] overlayfs: ...falling back to uuid=null. [ 122.342379][ T9708] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 122.347878][ T7654] IPVS: starting estimator thread 0... [ 122.437688][ T9709] IPVS: using max 43 ests per chain, 103200 per kthread [ 122.597634][ T7654] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 122.757591][ T7654] usb 11-1: Using ep0 maxpacket: 8 [ 122.761454][ T7654] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 122.764410][ T7654] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 122.768960][ T7654] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 122.773724][ T7654] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 122.778327][ T7654] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 122.782288][ T7654] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.792187][ T7654] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.796173][ T7654] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.849043][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.852785][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.856973][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.863952][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.868470][ T5935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.896377][ T9720] xfrm0 speed is unknown, defaulting to 1000 [ 122.900209][ T9720] lo speed is unknown, defaulting to 1000 [ 122.931663][ T9727] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 123.009737][ T9705] vivid-002: disconnect [ 123.021876][ T9720] chnl_net:caif_netlink_parms(): no params data found [ 123.028462][ T7654] usb 11-1: usb_control_msg returned -32 [ 123.030337][ T7654] usbtmc 11-1:16.0: can't read capabilities [ 123.079302][ T9740] overlayfs: failed to clone upperpath [ 123.082280][ T9739] overlayfs: failed to clone upperpath [ 123.144712][ T9720] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.148410][ T9720] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.151263][ T9720] bridge_slave_0: entered allmulticast mode [ 123.154800][ T9720] bridge_slave_0: entered promiscuous mode [ 123.159270][ T9720] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.161742][ T9720] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.164639][ T9720] bridge_slave_1: entered allmulticast mode [ 123.168258][ T9720] bridge_slave_1: entered promiscuous mode [ 123.212803][ T9720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.218967][ T9720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.241099][ T9720] team0: Port device team_slave_0 added [ 123.244688][ T9720] team0: Port device team_slave_1 added [ 123.252123][ T9759] __nla_validate_parse: 17 callbacks suppressed [ 123.252134][ T9759] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1014'. [ 123.259609][ T9720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.262020][ T9720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.270647][ T9720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.274916][ T9720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.277345][ T9720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.286081][ T9720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.314163][ T9720] hsr_slave_0: entered promiscuous mode [ 123.317790][ T9720] hsr_slave_1: entered promiscuous mode [ 123.320430][ T9720] debugfs: 'hsr0' already exists in 'hsr' [ 123.322887][ T9720] Cannot create hsr debugfs directory [ 123.403625][ T9764] usbtmc 11-1:16.0: stb usb_control_msg returned -32 [ 123.407973][ T9704] vivid-002: reconnect [ 123.412234][ T831] usb 11-1: USB disconnect, device number 5 [ 123.455194][ T9720] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 123.463716][ T9720] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 123.467973][ T9720] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 123.473361][ T9720] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 123.513543][ T9773] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 123.518631][ T9720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.521797][ T9773] siw: device registration error -23 [ 123.529433][ T9720] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.537002][ T7241] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.539522][ T7241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.546293][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.548600][ T7248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.653677][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 123.657635][ T9720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.665410][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 123.784767][ T9720] veth0_vlan: entered promiscuous mode [ 123.792269][ T9720] veth1_vlan: entered promiscuous mode [ 123.809479][ T9720] veth0_macvtap: entered promiscuous mode [ 123.815385][ T9720] veth1_macvtap: entered promiscuous mode [ 123.827916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.830085][ T9720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.838538][ T9720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.844094][ T7241] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.849165][ T7241] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.853169][ T7241] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.856995][ T7241] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.914435][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.916685][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.942842][ T7241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.946246][ T7241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.960761][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 123.960777][ T40] audit: type=1400 audit(1772982011.717:603): avc: denied { mounton } for pid=9720 comm="syz-executor" path="/syzkaller.z51WWy/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 123.963696][ T9796] futex_wake_op: syz.6.1019 tries to shift op by -1; fix this program [ 124.041676][ T9801] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1011'. [ 124.048152][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1011'. [ 124.230053][ T40] audit: type=1400 audit(1772982011.987:604): avc: denied { read } for pid=9810 comm="syz.7.1024" path="socket:[29355]" dev="sockfs" ino=29355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 124.282680][ T9766] overlayfs: statfs failed on './file0' [ 124.360279][ T40] audit: type=1400 audit(1772982012.117:605): avc: denied { write } for pid=9822 comm="syz.6.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 124.496739][ T9831] netlink: 'syz.3.1027': attribute type 1 has an invalid length. [ 124.500426][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 124.513500][ T9831] ipvlan2: entered allmulticast mode [ 124.518778][ T9831] batadv_slave_1: entered allmulticast mode [ 124.581255][ T9844] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 124.584066][ T9844] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 124.589501][ T9844] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 124.591831][ T40] audit: type=1400 audit(1772982012.337:606): avc: denied { firmware_load } for pid=9843 comm="syz.6.1030" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 124.629885][ T40] audit: type=1400 audit(1772982012.387:607): avc: denied { create } for pid=9843 comm="syz.6.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.636939][ T40] audit: type=1400 audit(1772982012.387:608): avc: denied { setopt } for pid=9843 comm="syz.6.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.702736][ T40] audit: type=1400 audit(1772982012.457:609): avc: denied { bind } for pid=9852 comm="syz.3.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.711128][ T40] audit: type=1400 audit(1772982012.457:610): avc: denied { accept } for pid=9852 comm="syz.3.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.754915][ T9858] 9pnet_virtio: no channels available for device syz [ 124.758926][ T40] audit: type=1400 audit(1772982012.517:611): avc: denied { write } for pid=9852 comm="syz.3.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.939725][ T5935] Bluetooth: hci0: command tx timeout [ 125.066629][ T9874] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1038'. [ 125.165725][ T40] audit: type=1400 audit(1772982012.917:612): avc: denied { remount } for pid=9885 comm="syz.5.1042" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 125.165808][ T9886] devtmpfs: Cannot change global quota limit on remount [ 125.197246][ T9889] 9pnet_virtio: no channels available for device syz [ 125.261300][ T9897] netlink: 'syz.7.1046': attribute type 2 has an invalid length. [ 125.268744][ T9897] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1046'. [ 125.320770][ T9904] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1044'. [ 125.324550][ T9908] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 125.371842][ T9891] tipc: Trying to set illegal importance in message [ 125.380730][ T9910] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1050'. [ 125.585894][ T1147] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.590309][ T1147] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.594884][ T1147] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.600176][ T1147] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.897669][ T9] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 125.993529][ T9938] sysfs: cannot create duplicate filename '/class/ieee80211/4Ï€!FõïVl‘uc'f`å”Þ†’;œ1µx%ñ†‹M¹Fœ-ôÁõîI' [ 125.998291][ T9938] CPU: 2 UID: 0 PID: 9938 Comm: syz.6.1057 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.998314][ T9938] Tainted: [L]=SOFTLOCKUP [ 125.998321][ T9938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.998331][ T9938] Call Trace: [ 125.998338][ T9938] [ 125.998344][ T9938] dump_stack_lvl+0x100/0x190 [ 125.998388][ T9938] sysfs_warn_dup.cold+0x1c/0x28 [ 125.998411][ T9938] sysfs_do_create_link_sd+0x113/0x140 [ 125.998443][ T9938] sysfs_create_link+0x61/0xc0 [ 125.998470][ T9938] device_add+0x675/0x1950 [ 125.998501][ T9938] ? __pfx_device_add+0x10/0x10 [ 125.998524][ T9938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.998551][ T9938] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 125.998580][ T9938] wiphy_register+0x1e5b/0x2d30 [ 125.998598][ T9938] ? __rtnl_unlock+0xb9/0xf0 [ 125.998618][ T9938] ? netdev_run_todo+0x800/0x12c0 [ 125.998644][ T9938] ? __pfx_wiphy_register+0x10/0x10 [ 125.998666][ T9938] ? __asan_memset+0x23/0x50 [ 125.998684][ T9938] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 125.998715][ T9938] ieee80211_register_hw+0x2cfd/0x4140 [ 125.998750][ T9938] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 125.998771][ T9938] ? __pfx___debug_object_init+0x10/0x10 [ 125.998793][ T9938] ? find_held_lock+0x2b/0x80 [ 125.998816][ T9938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.998841][ T9938] ? __hrtimer_setup+0x178/0x280 [ 125.998862][ T9938] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 125.998895][ T9938] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 125.998920][ T9938] ? __asan_memcpy+0x3c/0x60 [ 125.998946][ T9938] hwsim_new_radio_nl+0xc1f/0x1340 [ 125.998964][ T9938] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 125.998993][ T9938] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 125.999016][ T9938] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 125.999043][ T9938] genl_family_rcv_msg_doit+0x214/0x300 [ 125.999072][ T9938] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 125.999103][ T9938] ? bpf_lsm_capable+0x9/0x10 [ 125.999119][ T9938] ? security_capable+0x80/0x260 [ 125.999145][ T9938] ? ns_capable+0xd2/0xf0 [ 125.999168][ T9938] genl_rcv_msg+0x560/0x800 [ 125.999193][ T9938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 125.999219][ T9938] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 125.999242][ T9938] ? __lock_acquire+0x4a5/0x2630 [ 125.999274][ T9938] netlink_rcv_skb+0x159/0x420 [ 125.999297][ T9938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 125.999322][ T9938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.999354][ T9938] ? netlink_deliver_tap+0x1ae/0xcc0 [ 125.999373][ T9938] genl_rcv+0x28/0x40 [ 125.999386][ T9938] netlink_unicast+0x5aa/0x870 [ 125.999402][ T9938] ? __pfx_netlink_unicast+0x10/0x10 [ 125.999420][ T9938] netlink_sendmsg+0x8b0/0xda0 [ 125.999442][ T9938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.999456][ T9938] ? __pfx___might_fault+0x10/0x10 [ 125.999478][ T9938] ____sys_sendmsg+0x9e1/0xb70 [ 125.999492][ T9938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.999508][ T9938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.999526][ T9938] ? __pfx_futex_wake_mark+0x10/0x10 [ 125.999543][ T9938] ___sys_sendmsg+0x190/0x1e0 [ 125.999561][ T9938] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.999594][ T9938] __sys_sendmsg+0x170/0x220 [ 125.999606][ T9938] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.999617][ T9938] ? __x64_sys_futex+0x34f/0x4d0 [ 125.999635][ T9938] do_syscall_64+0x106/0xf80 [ 125.999648][ T9938] ? clear_bhb_loop+0x40/0x90 [ 125.999661][ T9938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.999672][ T9938] RIP: 0033:0x7fc30899c799 [ 125.999683][ T9938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.999693][ T9938] RSP: 002b:00007fc30978e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.999705][ T9938] RAX: ffffffffffffffda RBX: 00007fc308c15fa0 RCX: 00007fc30899c799 [ 125.999713][ T9938] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 125.999720][ T9938] RBP: 00007fc308a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 125.999726][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.999733][ T9938] R13: 00007fc308c16038 R14: 00007fc308c15fa0 R15: 00007ffcad1cf858 [ 125.999748][ T9938] [ 126.119069][ T9] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 126.152435][ T9962] netlink: 'syz.3.1063': attribute type 1 has an invalid length. [ 126.157083][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 126.173309][ T9962] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.179585][ T9] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.188134][ T9962] batman_adv: batadv0: Interface deactivated: dummy0 [ 126.188839][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 126.191832][ T9962] batman_adv: batadv0: Removing interface: dummy0 [ 126.195352][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 126.203057][ T9] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 126.205629][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 126.210162][ T9] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.210697][ T9962] bond3: (slave dummy0): making interface the new active one [ 126.214752][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 126.221966][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 126.229602][ T9962] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 126.233176][ T9] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 126.236148][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 126.237642][ T9962] netlink: 'syz.3.1063': attribute type 10 has an invalid length. [ 126.240724][ T9] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.243865][ T9962] dummy0: entered promiscuous mode [ 126.248298][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 126.248321][ T9] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 126.250925][ T9] usb 10-1: string descriptor 0 read error: -22 [ 126.263150][ T9] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 126.266531][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.267529][ T9962] bond3: (slave dummy0): Releasing active interface [ 126.277198][ T9] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 126.382751][ T9975] overlayfs: failed to resolve './file1': -2 [ 126.481549][ T9981] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 126.485900][ T9983] input: syz1 as /devices/virtual/input/input12 [ 126.536380][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.879346][ T9] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 127.028743][ T9] usb 11-1: config 0 has an invalid interface number: 8 but max is 0 [ 127.031462][ T9] usb 11-1: config 0 has no interface number 0 [ 127.033441][ T9] usb 11-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 127.037065][ T9] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 127.041873][ T9] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 127.044172][ T24] usb 10-1: USB disconnect, device number 10 [ 127.047209][ T9] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 127.057685][ T9] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 127.061304][ T9] usb 11-1: Product: syz [ 127.063293][ T9] usb 11-1: SerialNumber: syz [ 127.073798][ T9] usb 11-1: config 0 descriptor?? [ 127.078676][ T9] cm109 11-1:0.8: invalid payload size 0, expected 4 [ 127.083216][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input13 [ 127.181187][T10076] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 127.204667][T10076] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 127.210222][T10076] overlayfs: failed to look up (tracing) for ino (-66) [ 127.383399][T10083] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 127.394163][T10086] devtmpfs: Unknown parameter 'usrqߺÏ §Á~P×¾/øíota_inode_hardlimit' [ 128.272109][T10097] __nla_validate_parse: 6 callbacks suppressed [ 128.272125][T10097] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1089'. [ 128.364015][T10104] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1092'. [ 128.586804][T10123] syzkaller0: entered promiscuous mode [ 128.588885][T10123] syzkaller0: entered allmulticast mode [ 128.617695][ T5935] Bluetooth: hci0: command tx timeout [ 128.724788][T10125] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 129.590095][ C0] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 129.590486][ T1467] usb 11-1: USB disconnect, device number 6 [ 129.592365][ C0] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 129.613395][ T1467] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 129.699132][T10133] 9pnet_virtio: no channels available for device syz [ 129.802069][T10145] x_tables: duplicate underflow at hook 3 [ 129.803079][T10146] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=10146 comm=syz.5.1105 [ 129.961708][ T40] kauditd_printk_skb: 636 callbacks suppressed [ 129.961723][ T40] audit: type=1400 audit(1772982017.717:1249): avc: denied { append } for pid=10166 comm="syz.5.1110" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.978218][T10168] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1110'. [ 129.982938][ T40] audit: type=1400 audit(1772982017.737:1250): avc: denied { execute } for pid=10166 comm="syz.5.1110" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 130.070523][ T40] audit: type=1400 audit(1772982017.827:1251): avc: denied { getopt } for pid=10172 comm="syz.5.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 130.089538][ T1467] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 130.204358][T10183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1116'. [ 130.232430][T10183] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.237869][T10183] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 130.259972][ T1467] usb 11-1: config 0 has an invalid interface number: 50 but max is 0 [ 130.263639][ T1467] usb 11-1: config 0 has no interface number 0 [ 130.266323][ T1467] usb 11-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.273623][ T1467] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 130.293492][T10185] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 130.316767][ T1467] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.320863][ T1467] usb 11-1: Product: syz [ 130.322765][ T1467] usb 11-1: Manufacturer: syz [ 130.324851][ T1467] usb 11-1: SerialNumber: syz [ 130.338629][ T1467] usb 11-1: config 0 descriptor?? [ 130.352285][ T1467] yurex 11-1:0.50: USB YUREX device now attached to Yurex #0 [ 130.598416][T10192] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1103'. [ 130.687507][ T831] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 130.697521][ T5935] Bluetooth: hci0: command tx timeout [ 130.837905][ T831] usb 10-1: Using ep0 maxpacket: 32 [ 130.841874][ T831] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 130.846195][ T831] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 130.852520][ T831] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.857268][ T831] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 130.866787][ T831] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 130.871367][ T831] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.874881][ T831] usb 10-1: Product: syz [ 130.876758][ T831] usb 10-1: Manufacturer: syz [ 130.879884][ T831] usb 10-1: SerialNumber: syz [ 130.891591][ C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 130.899832][ T831] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input14 [ 131.060176][ T40] audit: type=1400 audit(1772982018.817:1252): avc: denied { ioctl } for pid=10195 comm="syz.7.1120" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 131.107821][ T831] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 131.107849][T10199] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1121'. [ 131.111382][ T831] (id 0x00) [ 131.177914][ T831] rc_core: IR keymap rc-imon-pad not found [ 131.181948][ T831] Registered IR keymap rc-empty [ 131.183692][ T831] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 131.189438][ T831] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 131.321258][T10205] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1122'. [ 131.397539][T10208] Bluetooth: MGMT ver 1.23 [ 131.496886][ T40] audit: type=1400 audit(1772982019.247:1253): avc: denied { setattr } for pid=10214 comm="syz.7.1126" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.352034][T10219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10219 comm=syz.3.1127 [ 132.393150][T10223] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1128'. [ 132.398875][T10223] xt_socket: unknown flags 0xd0 [ 132.400811][T10222] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1128'. [ 132.401780][ T40] audit: type=1400 audit(1772982020.157:1254): avc: denied { getopt } for pid=10221 comm="syz.7.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.404753][T10222] xt_socket: unknown flags 0xd0 [ 132.415223][ T40] audit: type=1400 audit(1772982020.167:1255): avc: denied { write } for pid=10221 comm="syz.7.1128" name="tcp6" dev="proc" ino=4026533899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 132.579210][T10241] 9pnet_virtio: no channels available for device syz [ 132.581661][T10242] 9pnet_virtio: no channels available for device syz [ 132.617967][ C3] usb 11-1: yurex_control_callback - control failed: -2 [ 132.622879][ T50] usb 11-1: USB disconnect, device number 7 [ 132.628524][ T50] yurex 11-1:0.50: USB YUREX #0 now disconnected [ 132.633935][ T831] imon:send_packet: packet tx failed (-71) [ 132.647559][ T831] imon 10-1:155.0: remote input dev register failed [ 132.649997][ T831] imon 10-1:155.0: imon_init_intf0: rc device setup failed [ 132.661033][ T831] imon 10-1:155.0: unable to initialize intf0, err 0 [ 132.663275][ T831] imon:imon_probe: failed to initialize context! [ 132.665441][ T831] imon 10-1:155.0: unable to register, err -19 [ 132.669923][ T831] usb 10-1: USB disconnect, device number 11 [ 133.197513][T10275] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10275 comm=syz.3.1142 [ 133.198084][T10276] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10276 comm=syz.3.1142 [ 133.222824][T10278] fuse: Bad value for 'rootmode' [ 133.234666][T10278] loop8: detected capacity change from 0 to 128 [ 133.239335][T10278] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1143'. [ 133.249158][ T40] audit: type=1400 audit(1772982021.007:1256): avc: denied { associate } for pid=10277 comm="syz.6.1143" name="0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 133.263715][T10280] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 133.324124][ T40] audit: type=1400 audit(1772982021.077:1257): avc: denied { name_bind } for pid=10286 comm="syz.6.1146" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 133.391567][T10292] xfrm0 speed is unknown, defaulting to 1000 [ 133.394242][T10292] lo speed is unknown, defaulting to 1000 [ 133.394897][T10294] xt_bpf: check failed: parse error [ 133.466015][T10298] tmpfs: Cannot enable quota on remount [ 133.510965][T10292] IPVS: You probably need to specify IP address on multicast interface. [ 133.514781][T10292] IPVS: Error connecting to the multicast addr [ 133.697240][T10313] netlink: 12 bytes leftover after parsing attributes in process `'. [ 133.761225][ T40] audit: type=1400 audit(1772982021.517:1258): avc: denied { cmd } for pid=10315 comm="syz.5.1155" path="socket:[32258]" dev="sockfs" ino=32258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 133.871149][T10330] support for cryptoloop has been removed. Use dm-crypt instead. [ 133.874392][T10331] support for cryptoloop has been removed. Use dm-crypt instead. [ 133.927964][ T50] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 133.989405][T10342] hfs: can't find a HFS filesystem on dev sr0 [ 134.038647][T10344] xfrm0 speed is unknown, defaulting to 1000 [ 134.042366][T10344] lo speed is unknown, defaulting to 1000 [ 134.089105][ T50] usb 12-1: config 0 has an invalid interface number: 8 but max is 0 [ 134.092424][ T50] usb 12-1: config 0 has no interface number 0 [ 134.094931][ T50] usb 12-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 134.100060][ T50] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 134.116398][ T50] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.121645][ T50] usb 12-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 134.124774][ T50] usb 12-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 134.127667][ T50] usb 12-1: Product: syz [ 134.129180][ T50] usb 12-1: SerialNumber: syz [ 134.132141][ T50] usb 12-1: config 0 descriptor?? [ 134.164411][ T50] cm109 12-1:0.8: invalid payload size 0, expected 4 [ 134.178627][ T831] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 134.180559][T10348] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1165'. [ 134.204892][ T50] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.8/input/input16 [ 134.339090][ T831] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.343611][ T831] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.351559][ T831] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.362723][ T831] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 134.366895][ T831] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.370599][ T831] usb 10-1: Product: syz [ 134.372549][ T831] usb 10-1: Manufacturer: syz [ 134.374768][ T831] usb 10-1: SerialNumber: syz [ 134.379189][T10361] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 134.379189][T10361] The task syz.3.1168 (10361) triggered the difference, watch for misbehavior. [ 134.389044][ T831] hub 10-1:1.0: bad descriptor, ignoring hub [ 134.391730][ T831] hub 10-1:1.0: probe with driver hub failed with error -5 [ 134.455115][T10363] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 134.591956][ T831] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 134.888053][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1169'. [ 134.901205][T10366] bond2: Invalid ad_actor_system MAC address. [ 134.903189][T10366] bond2: option ad_actor_system: invalid value (255) [ 134.906097][T10366] bond2 (unregistering): Released all slaves [ 135.214431][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 135.214443][ T40] audit: type=1400 audit(1772982022.967:1263): avc: denied { accept } for pid=10373 comm="syz.3.1172" lport=33438 faddr=::ffff:172.30.0.4 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.477650][T10340] usb 10-1: reset high-speed USB device number 12 using dummy_hcd [ 135.921258][T10376] bond4: Removing last arp target with arp_interval on [ 135.938960][ T831] usb 10-1: USB disconnect, device number 12 [ 135.943730][ T831] usblp0: removed [ 135.948343][T10376] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 136.003737][ T40] audit: type=1400 audit(1772982023.757:1264): avc: denied { read } for pid=10375 comm="syz.3.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.174937][ T40] audit: type=1400 audit(1772982023.927:1265): avc: denied { sys_admin } for pid=10379 comm="syz.6.1174" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 136.189547][T10380] xfrm0 speed is unknown, defaulting to 1000 [ 136.192589][T10380] lo speed is unknown, defaulting to 1000 [ 136.192710][T10381] xfrm0 speed is unknown, defaulting to 1000 [ 136.201769][T10381] lo speed is unknown, defaulting to 1000 [ 136.482848][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1175'. [ 136.506008][T10385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.637664][ C1] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 136.637862][ T34] usb 12-1: USB disconnect, device number 2 [ 136.640350][ C1] cm109 12-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 136.666155][ T34] cm109 12-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 136.677496][ T40] audit: type=1400 audit(1772982024.427:1266): avc: denied { ioctl } for pid=10395 comm="syz.7.1179" path="socket:[31294]" dev="sockfs" ino=31294 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 137.304053][T10404] netlink: 'syz.6.1181': attribute type 6 has an invalid length. [ 137.313052][ T40] audit: type=1400 audit(1772982025.064:1267): avc: denied { ioctl } for pid=10403 comm="syz.6.1181" path="socket:[32335]" dev="sockfs" ino=32335 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 137.548398][T10423] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 137.634901][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1189'. [ 137.638356][T10430] netlink: 'syz.5.1189': attribute type 30 has an invalid length. [ 137.646757][T10035] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.648465][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1189'. [ 137.649747][T10035] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.653121][T10430] netlink: 'syz.5.1189': attribute type 30 has an invalid length. [ 137.655777][T10035] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.655797][T10035] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.681275][T10433] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 137.795156][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1192'. [ 137.903146][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.107980][T10453] CUSE: unknown device info "" [ 138.109630][T10453] CUSE: zero length info key specified [ 138.183823][T10460] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 138.387088][T10470] overlayfs: missing 'lowerdir' [ 138.427482][ T24] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 138.529269][T10479] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1204'. [ 138.567781][ T24] usb 12-1: device descriptor read/64, error -71 [ 138.721066][T10489] sit1: entered allmulticast mode [ 138.763229][ T40] audit: type=1400 audit(1772982026.514:1268): avc: denied { create } for pid=10490 comm="syz.6.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.770898][ T40] audit: type=1400 audit(1772982026.514:1269): avc: denied { write } for pid=10490 comm="syz.6.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.771436][T10491] io-wq is not configured for unbound workers [ 138.817581][ T24] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 138.829734][T10491] netlink: 'syz.6.1208': attribute type 12 has an invalid length. [ 138.832656][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1208'. [ 138.836461][T10491] netlink: 'syz.6.1208': attribute type 12 has an invalid length. [ 138.839351][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1208'. [ 138.862534][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1209'. [ 138.865467][T10494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1209'. [ 138.957544][ T24] usb 12-1: device descriptor read/64, error -71 [ 138.961894][T10497] bond2: entered promiscuous mode [ 138.964541][T10497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.982732][ T40] audit: type=1326 audit(1772982026.734:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10505 comm="syz.5.1212" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f743ef9c799 code=0x0 [ 139.006321][ T40] audit: type=1400 audit(1772982026.754:1271): avc: denied { getopt } for pid=10507 comm="syz.6.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 139.067925][ T24] usb usb12-port1: attempt power cycle [ 139.417534][ T24] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 139.440245][ T24] usb 12-1: device descriptor read/8, error -71 [ 139.554077][ T40] audit: type=1400 audit(1772982027.304:1272): avc: denied { create } for pid=10531 comm="syz.6.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.586132][T10536] program syz.6.1221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.650405][T10541] netlink: 'syz.6.1223': attribute type 15 has an invalid length. [ 139.654214][T10541] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1223'. [ 139.688016][ T24] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 139.708284][ T24] usb 12-1: device descriptor read/8, error -71 [ 139.817678][ T24] usb usb12-port1: unable to enumerate USB device [ 140.000207][T10565] netlink: 'syz.5.1230': attribute type 5 has an invalid length. [ 140.005534][T10563] xfrm0 speed is unknown, defaulting to 1000 [ 140.008425][T10563] lo speed is unknown, defaulting to 1000 [ 140.042609][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1232'. [ 140.633272][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 140.633288][ T40] audit: type=1800 audit(1772982028.384:1276): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1239" name="file0" dev="tmpfs" ino=2091 res=0 errno=0 [ 140.729857][T10592] 9pnet_virtio: no channels available for device syz [ 140.776334][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'. [ 140.782298][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1242'. [ 140.793452][T10035] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.793573][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'. [ 140.796351][T10035] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.802116][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1242'. [ 140.803179][T10035] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.810686][T10035] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.914971][ T40] audit: type=1400 audit(1772982028.664:1277): avc: denied { setopt } for pid=10598 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.013167][ T40] audit: type=1804 audit(1772982028.764:1278): pid=10607 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1244" name="/newroot/138/file1" dev="tmpfs" ino=755 res=1 errno=0 [ 141.277668][T10616] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 141.395646][T10618] geneve2: entered promiscuous mode [ 141.408023][T10618] 9pnet_virtio: no channels available for device /dev/nullb0 [ 141.717345][ T40] audit: type=1400 audit(1772982029.464:1279): avc: denied { setopt } for pid=10632 comm="syz.7.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.807528][ T40] audit: type=1400 audit(1772982029.554:1280): avc: denied { shutdown } for pid=10639 comm="syz.5.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.285035][T10656] can0: slcan on ttynull. [ 142.338106][T10660] 9p: Bad value for 'dfltuid' [ 142.339685][T10660] 9p: Bad value for 'dfltuid' [ 142.397627][T10655] can0 (unregistered): slcan off ttynull. [ 142.480812][ T40] audit: type=1400 audit(1772982030.234:1281): avc: denied { getopt } for pid=10670 comm="syz.7.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 142.490747][T10672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19728 sclass=netlink_route_socket pid=10672 comm=syz.7.1258 [ 142.622018][ T40] audit: type=1400 audit(1772982030.374:1282): avc: denied { create } for pid=10684 comm="syz.5.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 142.681096][ T40] audit: type=1400 audit(1772982030.434:1283): avc: denied { bind } for pid=10684 comm="syz.5.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 142.801298][T10698] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 142.929532][T10701] __vm_enough_memory: pid: 10701, comm: syz.5.1266, bytes: 4503599627366400 not enough memory for the allocation [ 142.935661][T10705] gre1: entered promiscuous mode [ 142.940805][T10705] gre1: entered allmulticast mode [ 142.970252][T10705] team0: Port device team_slave_1 removed [ 143.157013][T10722] random: crng reseeded on system resumption [ 143.163166][T10722] Hibernate inconsistent memory map detected! [ 143.166153][T10722] PM: hibernation: Image mismatch: architecture specific data [ 143.356639][T10733] program syz.7.1273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.356658][T10732] program syz.7.1273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.359715][T10733] ata1.00: non-matching transfer count (0/2304) [ 143.367464][ T40] audit: type=1400 audit(1772982031.104:1284): avc: denied { setopt } for pid=10721 comm="syz.7.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.373176][ T40] audit: type=1400 audit(1772982031.104:1285): avc: denied { bind } for pid=10721 comm="syz.7.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.470867][T10737] netlink: 'syz.7.1277': attribute type 1 has an invalid length. [ 143.830477][T10745] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 143.833369][T10745] SELinux: failed to load policy [ 143.962704][T10751] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 144.149130][T10755] __nla_validate_parse: 11 callbacks suppressed [ 144.149144][T10755] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1282'. [ 144.331785][T10768] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1287'. [ 144.485854][T10784] hfs: unable to load iocharset "io#harset" [ 144.495945][ T24] IPVS: starting estimator thread 0... [ 144.617515][T10788] IPVS: using max 44 ests per chain, 105600 per kthread [ 144.727460][ T50] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 144.844354][T10798] 9pnet_virtio: no channels available for device syz [ 144.883172][ T50] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 144.886564][ T50] usb 10-1: config 0 has no interface number 0 [ 144.889855][ T50] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 144.895103][ T50] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 144.901552][ T50] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 144.907803][ T50] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 144.911749][ T50] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 144.915271][ T50] usb 10-1: Product: syz [ 144.917150][ T50] usb 10-1: SerialNumber: syz [ 144.921840][ T50] usb 10-1: config 0 descriptor?? [ 144.932192][ T50] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 144.943134][ T50] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.8/input/input18 [ 145.003495][T10806] /dev/sg0: Can't lookup blockdev [ 145.042578][T10809] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20000 [ 145.070970][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1299'. [ 145.090556][T10816] batadv_slave_1: entered promiscuous mode [ 145.102691][T10815] batadv_slave_1: left promiscuous mode [ 145.203867][T10817] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 145.210125][T10817] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 145.229123][T10817] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 145.253410][T10817] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 145.280042][T10817] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 145.288426][T10827] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 145.379766][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.383067][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.386308][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.389031][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.391683][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.394830][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.397232][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.400644][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.403373][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.406552][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.409201][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.412217][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.415583][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.418505][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.421196][T10832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 145.463118][T10841] overlayfs: failed to clone upperpath [ 145.510103][T10839] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 145.521753][T10839] sp0: Synchronizing with TNC [ 145.703258][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 146.630598][T10927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1325'. [ 146.635655][T10929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1325'. [ 146.638642][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 146.638650][ T40] audit: type=1400 audit(1772982034.394:1290): avc: denied { write } for pid=10922 comm="syz.6.1323" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 146.639219][T10923] 0x000000000007-0x000000020007 : "" [ 146.640652][ T40] audit: type=1400 audit(1772982034.394:1291): avc: denied { open } for pid=10922 comm="syz.6.1323" path="/150/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 146.640680][ T40] audit: type=1400 audit(1772982034.394:1292): avc: denied { ioctl } for pid=10922 comm="syz.6.1323" path="/150/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 146.672959][T10923] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1fff9 [ 146.684992][T10923] ftl_cs: FTL header corrupt! [ 146.801904][T10943] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1330'. [ 146.809299][T10943] tipc: Failed to remove unknown binding: 66,0,0/0:961254152/961254153 [ 146.812631][T10943] tipc: Failed to remove unknown binding: 66,0,0/0:961254152/961254153 [ 146.852557][ T40] audit: type=1400 audit(1772982034.604:1293): avc: denied { setopt } for pid=10940 comm="syz.3.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 146.863654][T10948] Bluetooth: MGMT ver 1.23 [ 146.869761][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1331'. [ 146.873440][T10949] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1331'. [ 146.877753][ T40] audit: type=1400 audit(1772982034.634:1294): avc: denied { execute } for pid=10951 comm="syz.7.1332" path="/dev/tty4" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 147.457746][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 147.458814][ T34] usb 10-1: USB disconnect, device number 13 [ 147.460083][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 147.470901][ T34] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 147.501859][T11003] netlink: 'syz.5.1345': attribute type 3 has an invalid length. [ 147.504408][T11003] netlink: 308 bytes leftover after parsing attributes in process `syz.5.1345'. [ 147.685725][ T40] audit: type=1400 audit(1772982035.434:1295): avc: denied { name_bind } for pid=11019 comm="syz.6.1352" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 147.736948][T11022] nbd: socks must be embedded in a SOCK_ITEM attr [ 147.744345][ T8311] block nbd64: NBD_DISCONNECT [ 147.758212][T11026] block nbd6: NBD_DISCONNECT [ 147.761826][T11020] block nbd6: Disconnected due to user request. [ 147.765867][T11020] block nbd6: shutting down sockets [ 147.810446][T11031] exFAT-fs (nullb0): invalid boot record signature [ 147.812596][T11031] exFAT-fs (nullb0): failed to read boot sector [ 147.814622][T11031] exFAT-fs (nullb0): failed to recognize exfat type [ 147.864214][ T5926] udevd[5926]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 147.868691][T11036] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 147.887424][T11036] CIFS mount error: No usable UNC path provided in device string! [ 147.887424][T11036] [ 147.891804][T11036] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 147.896021][T11042] trusted_key: syz.5.1358 sent an empty control message without MSG_MORE. [ 147.957501][T11057] bond0: entered promiscuous mode [ 147.959433][T11057] bond_slave_0: entered promiscuous mode [ 147.961415][T11057] bond_slave_1: entered promiscuous mode [ 147.964240][T11057] batadv0: entered promiscuous mode [ 147.970814][T11057] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 147.986067][ T40] audit: type=1400 audit(1772982035.734:1296): avc: denied { getopt } for pid=11061 comm="syz.6.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.039080][ T50] usb 12-1: new full-speed USB device number 7 using dummy_hcd [ 148.093215][T11085] netlink: 'syz.3.1370': attribute type 6 has an invalid length. [ 148.096160][T11085] netlink: 'syz.3.1370': attribute type 6 has an invalid length. [ 148.191885][ T50] usb 12-1: config 0 has an invalid interface number: 8 but max is 0 [ 148.202177][ T50] usb 12-1: config 0 has no interface number 0 [ 148.205265][ T50] usb 12-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 148.210854][ T50] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.215600][ T50] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 148.225501][ T50] usb 12-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 148.229881][ T50] usb 12-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 148.233437][ T50] usb 12-1: Product: syz [ 148.235278][ T50] usb 12-1: SerialNumber: syz [ 148.242679][ T50] usb 12-1: config 0 descriptor?? [ 148.246021][ T50] cm109 12-1:0.8: invalid payload size 0, expected 4 [ 148.249768][ T50] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.8/input/input19 [ 148.290698][ T40] audit: type=1400 audit(1772982036.044:1297): avc: denied { append } for pid=11102 comm="syz.5.1377" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 148.371782][T11111] nft_compat: unsupported protocol 0 [ 148.413958][ T63] Bluetooth: hci2: unexpected event for opcode 0x0406 [ 148.417164][ T63] Bluetooth: hci2: unexpected event for opcode 0x0406 [ 148.522773][T11122] tipc: Started in network mode [ 148.524497][T11122] tipc: Node identity fe80000000000000000000000000001f, cluster identity 4711 [ 148.528662][T11122] tipc: Enabling of bearer rejected, failed to enable media [ 148.625309][T11139] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 148.840889][T11152] Cannot find del_set index 4 as target [ 148.891741][ T40] audit: type=1400 audit(1772982036.644:1298): avc: denied { append } for pid=11154 comm="syz.5.1394" name="pfkey" dev="proc" ino=4026533440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 148.892119][T11155] Context (ID=0x1) not attached to queue pair (handle=0x2:0x54) [ 148.908862][ T40] audit: type=1400 audit(1772982036.664:1299): avc: denied { map } for pid=11154 comm="syz.5.1394" path="/proc/526/net/pfkey" dev="proc" ino=4026533440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 148.938035][ T5935] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 149.224156][T11203] __nla_validate_parse: 8 callbacks suppressed [ 149.224171][T11203] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1411'. [ 149.264012][T11210] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 149.304256][T11213] xfrm0 speed is unknown, defaulting to 1000 [ 149.306916][T11213] lo speed is unknown, defaulting to 1000 [ 149.513284][T11229] bond5: (slave bond_slave_1): Device is not our slave [ 149.515637][T11229] bond5: option active_slave: invalid value (bond_slave_1) [ 149.520681][T11229] bond5 (unregistering): Released all slaves [ 149.683719][ T831] hid-generic 0005:046D:5508.0003: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 149.720616][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1424'. [ 149.723494][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1424'. [ 149.774983][T11250] 9pnet_virtio: no channels available for device syz [ 149.850549][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1428'. [ 150.699157][T11291] tmpfs: Unknown parameter 'usrquota_block_hardlimat' [ 150.744811][ C1] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 150.744931][ T7654] usb 12-1: USB disconnect, device number 7 [ 150.747067][ C1] cm109 12-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 150.769838][ T7654] cm109 12-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 150.868653][T11309] fuse: Bad value for 'rootmode' [ 150.891050][T11309] overlay: ./file0 is not a directory [ 150.998203][T11327] max out of range [ 151.010205][T11327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11327 comm=syz.7.1455 [ 151.048203][T11335] delete_channel: no stack [ 151.116544][T11352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.117330][T11353] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 151.228353][T11355] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 89f1, magic 89 != 6b] [ 151.418412][T11365] kvm: kvm [11364]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x0 [ 152.564650][T11405] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 152.689001][T11411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11411 comm=syz.5.1482 [ 152.693570][T11411] netlink: 'syz.5.1482': attribute type 1 has an invalid length. [ 152.719278][T11416] syzkaller0: entered promiscuous mode [ 152.721109][T11416] syzkaller0: entered allmulticast mode [ 152.735708][T11411] bond5: (slave bridge3): making interface the new active one [ 152.739165][T11411] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 152.913921][T11423] cgroup: fork rejected by pids controller in /syz7 [ 153.114041][T11240] ================================================================== [ 153.116484][T11240] BUG: KASAN: use-after-free in __mutex_lock+0x1861/0x1b90 [ 153.118747][T11240] Read of size 8 at addr ffff8880384380a8 by task khidpd_046d5508/11240 [ 153.121799][T11240] [ 153.123195][T11240] CPU: 0 UID: 0 PID: 11240 Comm: khidpd_046d5508 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.123220][T11240] Tainted: [L]=SOFTLOCKUP [ 153.123225][T11240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.123235][T11240] Call Trace: [ 153.123241][T11240] [ 153.123247][T11240] dump_stack_lvl+0x100/0x190 [ 153.123275][T11240] print_report+0x156/0x4c9 [ 153.123297][T11240] ? __virt_addr_valid+0x81/0x620 [ 153.123320][T11240] ? __phys_addr+0xe8/0x180 [ 153.123342][T11240] ? __mutex_lock+0x1861/0x1b90 [ 153.123360][T11240] kasan_report+0xdf/0x1e0 [ 153.123375][T11240] ? __mutex_lock+0x1861/0x1b90 [ 153.123396][T11240] __mutex_lock+0x1861/0x1b90 [ 153.123413][T11240] ? __pfx_debug_object_deactivate+0x10/0x10 [ 153.123434][T11240] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 153.123451][T11240] ? l2cap_unregister_user+0x71/0x240 [ 153.123472][T11240] ? _raw_spin_lock_irqsave+0x52/0x60 [ 153.123498][T11240] ? __pfx___mutex_lock+0x10/0x10 [ 153.123513][T11240] ? __try_to_del_timer_sync+0x107/0x160 [ 153.123536][T11240] ? rcu_is_watching+0x12/0xc0 [ 153.123554][T11240] ? lockdep_hardirqs_on+0x78/0x100 [ 153.123573][T11240] ? __try_to_del_timer_sync+0x107/0x160 [ 153.123594][T11240] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 153.123618][T11240] ? l2cap_unregister_user+0x71/0x240 [ 153.123636][T11240] l2cap_unregister_user+0x71/0x240 [ 153.123655][T11240] hidp_session_thread+0x459/0x680 [ 153.123680][T11240] ? __pfx_hidp_session_thread+0x10/0x10 [ 153.123705][T11240] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 153.123729][T11240] ? rcu_is_watching+0x12/0xc0 [ 153.123747][T11240] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 153.123771][T11240] ? __kthread_parkme+0x18c/0x230 [ 153.123800][T11240] ? kthread+0x13a/0x450 [ 153.123813][T11240] ? __pfx_hidp_session_thread+0x10/0x10 [ 153.123836][T11240] kthread+0x370/0x450 [ 153.123849][T11240] ? __pfx_kthread+0x10/0x10 [ 153.123865][T11240] ret_from_fork+0x754/0xd80 [ 153.123881][T11240] ? __pfx_ret_from_fork+0x10/0x10 [ 153.123898][T11240] ? __switch_to+0x7b4/0x1120 [ 153.123917][T11240] ? __pfx_kthread+0x10/0x10 [ 153.123931][T11240] ret_from_fork_asm+0x1a/0x30 [ 153.123955][T11240] [ 153.123961][T11240] [ 153.194493][T11240] The buggy address belongs to the physical page: [ 153.196548][T11240] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38438 [ 153.199341][T11240] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 153.201598][T11240] raw: 00fff00000000000 ffff88806a741000 ffff88806a741000 0000000000000000 [ 153.204302][T11240] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 153.207019][T11240] page dumped because: kasan: bad access detected [ 153.207827][ T40] kauditd_printk_skb: 7 callbacks suppressed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 153.207839][ T40] audit: type=1400 audit(1772982040.914:1307): avc: denied { write } for pid=5872 comm="syz-executor" path="pipe:[4005]" dev="pipefs" ino=4005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 153.208988][T11240] page_owner tracks the page as freed [ 153.208993][T11240] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 9720, tgid 9720 (syz-executor), ts 122844106719, free_ts 153113961422 [ 153.209012][T11240] post_alloc_hook+0x153/0x170 [ 153.209027][T11240] get_page_from_freelist+0x111d/0x3140 [ 153.228046][T11240] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 153.229908][T11240] alloc_pages_mpol+0x1fb/0x550 [ 153.231407][T11240] ___kmalloc_large_node+0x104/0x150 [ 153.233042][T11240] __kmalloc_large_node_noprof+0x1c/0x70 [ 153.234748][T11240] __kmalloc_noprof+0x5be/0x850 [ 153.236253][T11240] hci_alloc_dev_priv+0x1d/0x28a0 [ 153.237846][T11240] __vhci_create_device+0xf0/0x880 [ 153.239501][T11240] vhci_write+0x2c4/0x490 [ 153.240918][T11240] vfs_write+0x6ac/0x1070 [ 153.242309][T11240] ksys_write+0x12a/0x250 [ 153.243675][T11240] do_syscall_64+0x106/0xf80 [ 153.245153][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.247069][T11240] page last free pid 9720 tgid 9720 stack trace: [ 153.249066][T11240] __free_frozen_pages+0x7e1/0x10d0 [ 153.250736][T11240] hci_release_dev+0x4ef/0x630 [ 153.252257][T11240] bt_host_release+0x6a/0xb0 [ 153.253710][T11240] device_release+0xa4/0x240 [ 153.255154][T11240] kobject_put+0x1f7/0x640 [ 153.256549][T11240] put_device+0x1f/0x30 [ 153.257854][T11240] vhci_release+0x185/0x230 [ 153.259253][T11240] __fput+0x3ff/0xb40 [ 153.260496][T11240] task_work_run+0x150/0x240 [ 153.261928][T11240] do_exit+0x8b8/0x2b60 [ 153.263196][T11240] do_group_exit+0xd5/0x2a0 [ 153.264604][T11240] __x64_sys_exit_group+0x3e/0x50 [ 153.266185][T11240] x64_sys_call+0x102c/0x1530 [ 153.267686][T11240] do_syscall_64+0x106/0xf80 [ 153.269108][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.270935][T11240] [ 153.271711][T11240] Memory state around the buggy address: [ 153.273462][T11240] ffff888038437f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.275942][T11240] ffff888038438000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 153.278381][T11240] >ffff888038438080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 153.280806][T11240] ^ [ 153.282453][T11240] ffff888038438100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 153.284939][T11240] ffff888038438180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 153.287443][T11240] ================================================================== [ 153.290234][T11240] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.292468][T11240] CPU: 0 UID: 0 PID: 11240 Comm: khidpd_046d5508 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.296101][T11240] Tainted: [L]=SOFTLOCKUP [ 153.297487][T11240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.300635][T11240] Call Trace: [ 153.301691][T11240] [ 153.302617][T11240] dump_stack_lvl+0x100/0x190 [ 153.304087][T11240] vpanic+0x552/0x970 [ 153.305346][T11240] ? __pfx_vpanic+0x10/0x10 [ 153.306782][T11240] ? mark_held_locks+0x40/0x70 [ 153.308232][T11240] ? __mutex_lock+0x1861/0x1b90 [ 153.309706][T11240] panic+0xd1/0xe0 [ 153.310872][T11240] ? __pfx_panic+0x10/0x10 [ 153.312253][T11240] ? check_panic_on_warn+0x1f/0x90 [ 153.313825][T11240] check_panic_on_warn.cold+0x19/0x34 [ 153.315461][T11240] end_report.part.0+0x3a/0x90 [ 153.316956][T11240] kasan_report.cold+0xe/0x18 [ 153.318418][T11240] ? __mutex_lock+0x1861/0x1b90 [ 153.319976][T11240] __mutex_lock+0x1861/0x1b90 [ 153.321395][T11240] ? __pfx_debug_object_deactivate+0x10/0x10 [ 153.323270][T11240] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 153.324956][T11240] ? l2cap_unregister_user+0x71/0x240 [ 153.326598][T11240] ? _raw_spin_lock_irqsave+0x52/0x60 [ 153.328284][T11240] ? __pfx___mutex_lock+0x10/0x10 [ 153.329851][T11240] ? __try_to_del_timer_sync+0x107/0x160 [ 153.331599][T11240] ? rcu_is_watching+0x12/0xc0 [ 153.333139][T11240] ? lockdep_hardirqs_on+0x78/0x100 [ 153.334778][T11240] ? __try_to_del_timer_sync+0x107/0x160 [ 153.336501][T11240] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 153.338346][T11240] ? l2cap_unregister_user+0x71/0x240 [ 153.340028][T11240] l2cap_unregister_user+0x71/0x240 [ 153.341674][T11240] hidp_session_thread+0x459/0x680 [ 153.343300][T11240] ? __pfx_hidp_session_thread+0x10/0x10 [ 153.345235][T11240] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 153.347204][T11240] ? rcu_is_watching+0x12/0xc0 [ 153.348732][T11240] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 153.350694][T11240] ? __kthread_parkme+0x18c/0x230 [ 153.352311][T11240] ? kthread+0x13a/0x450 [ 153.353645][T11240] ? __pfx_hidp_session_thread+0x10/0x10 [ 153.355408][T11240] kthread+0x370/0x450 [ 153.356685][T11240] ? __pfx_kthread+0x10/0x10 [ 153.358153][T11240] ret_from_fork+0x754/0xd80 [ 153.359606][T11240] ? __pfx_ret_from_fork+0x10/0x10 [ 153.361187][T11240] ? __switch_to+0x7b4/0x1120 [ 153.362661][T11240] ? __pfx_kthread+0x10/0x10 [ 153.364085][T11240] ret_from_fork_asm+0x1a/0x30 [ 153.365614][T11240] [ 153.367251][T11240] Kernel Offset: disabled [ 153.368595][T11240] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:00:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85798f15 RDI=ffffffff9b49ea40 RBP=ffffffff9b49ea00 RSP=ffffc9000489f588 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000064616552 R12=0000000000000000 R13=0000000000000035 R14=0000000000000010 R15=ffffffff85798eb0 RIP=ffffffff85798f3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6347000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f743d1f5ff8 CR3=000000003f299000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000005 DR2=000000007fffdffd DR3=0000800000000005 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c615f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc26bc7236 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc26bc7236 00007ffc26bc723c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f057d4331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f057d4331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f057d433360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f057d4331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000201 RBX=000000000000000b RCX=ffffffff84ff2be8 RDX=000000000000000b RSI=ffffffff84ff2bf2 RDI=ffff88802a374980 RBP=ffffc900033a72f8 RSP=ffffc900033a7098 R8 =0000000000000001 R9 =0000000000000007 R10=000000000000000b R11=0000000000000000 R12=00000000000000ff R13=ffffc900033a7150 R14=ffff88811416d824 R15=000000000000028c RIP=ffffffff8208ba6f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5a90f85300 ffffffff 00c00000 GS =0000 ffff8880d6447000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055889b898000 CR3=000000002ca2f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000005d6 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2f30656c69662f 2e01ffffffffffff ffffdd085e80030e 0000017600000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8010000810000180 04060277b4002344 23436964696d2f64 6e732f7665642f01 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff db08018003000400 4080800800000401 c7100008004ade00 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73666f7475612f76 65642f01ffffffff ffffffffe7080003 5f80045e80040401 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73fc0030656c6966 2f2e01ffffffffff ffffffef085f8003 0030656c69662f2e ZMM24=c355cc0dc355cc0d c355cc0dc355cc0d c355cc0dc355cc0d c355cc0dc355cc0d c355cc0dc355cc0d c355cc0dc355cc0d c355cc0dc355cc0d c355cc0dc355cc0d ZMM25=a64f6916a64f6916 a64f6916a64f6916 a64f6916a64f6916 a64f6916a64f6916 a64f6916a64f6916 a64f6916a64f6916 a64f6916a64f6916 a64f6916a64f6916 ZMM26=770f932c770f932c 770f932c770f932c 770f932c770f932c 770f932c770f932c 770f932c770f932c 770f932c770f932c 770f932c770f932c 770f932c770f932c ZMM27=1f75277e1f75277e 1f75277e1f75277e 1f75277e1f75277e 1f75277e1f75277e 1f75277e1f75277e 1f75277e1f75277e 1f75277e1f75277e 1f75277e1f75277e ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=690a0000690a0000 690a0000690a0000 690a0000690a0000 690a0000690a0000 690a0000690a0000 690a0000690a0000 690a0000690a0000 690a0000690a0000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=ffff8880648bf9c8 RCX=ffffffff825a2dd7 RDX=ffffc9010f000000 RSI=ffffc9010ef39000 RDI=ffff88802b8ac980 RBP=0000000000000000 RSP=ffffc90003f5f930 R8 =0000000000000006 R9 =ffffc9010ef39000 R10=ffffc9010f000000 R11=0000000000000000 R12=ffffc9010f000000 R13=ffffffff82347790 R14=0000000000000001 R15=ffffc9010ef39000 RIP=ffffffff8208b38a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc30978e6c0 ffffffff 00c00000 GS =0000 ffff8880d6547000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2ba7d1 CR3=000000005a8d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000fefcf802 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f75706372 65705f6567617375 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcad1cfd46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcad1cfd46 00007ffcad1cfd4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc308a331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc308a331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc308a33360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc308a331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a73c340 RCX=ffffffff81fc78be RDX=ffff88801ea80000 RSI=ffffffff81fc7898 RDI=ffff88801ea80000 RBP=ffffc90000157cd8 RSP=ffffc90000157b78 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a633ca0 R12=1ffff9200002af78 R13=ffffed100d4e7869 R14=0000000000000003 R15=0000000000000001 RIP=ffffffff8b92bbe0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6647000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557087a9d8 CR3=0000000033e0e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000000000020 Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562b710bd8f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562b710c8ec0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46fc9f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373255802780483 7373255d61238459 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 06175b30701cf308 7373737611c463b1 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 333030302e383035 353a443634303a35 3030302f3030323a 306963682f306963 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000560039336c00 333030302e383035 353a443634303a35 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c4339 312c3739312c3938 312c3838312c3538 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562b700bd750 0000000000000041 00004e2b530b4510 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000005130b104c 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000